$ rpki-client -vvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: Wm9XjpwOswfA2eltLOiwyURVk7a3//k46ghU4kYv1/o= Subject key identifier: D6:C3:CB:D5:DF:08:B8:61:28:1F:7D:3A:F8:B9:B8:44:28:ED:8C:A5 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 3B1B7E687CCDEB5409337751422B4F2EB590A7B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:12:20 +0000 Manifest this update: Tue 16 Jun 2026 19:07:20 +0000 Manifest next update: Wed 17 Jun 2026 19:42:20 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) 2: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: 9H8TwOIL/KmWkGzcJ5CNTXWg/RRRrVOGux25UfOhkj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1b:7e:68:7c:cd:eb:54:09:33:77:51:42:2b:4f:2e:b5:90:a7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Jun 16 19:07:20 2026 GMT Not After : Jun 17 19:42:20 2026 GMT Subject: CN=D6C3CBD5DF08B861281F7D3AF8B9B84428ED8CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:da:18:ec:f6:1d:63:de:14:7f:f4:7b:22: 7b:b8:a3:26:ca:67:31:16:c7:45:29:d6:2b:a5:49: 34:cb:9a:39:df:15:ed:bd:69:66:12:f5:a2:57:94: bc:36:fc:43:c4:04:0f:24:da:89:c5:56:fc:e9:65: 18:4a:e2:8f:cd:92:ac:19:97:0d:87:e7:bc:9f:a3: 2e:8b:5e:50:c2:29:bf:11:82:68:50:a5:85:5a:f4: 99:51:ac:57:f0:a9:65:bb:03:79:f8:06:27:bc:99: 9e:d6:f8:51:10:89:8b:41:8a:a5:f8:c8:40:3a:c7: fc:71:b0:60:db:16:50:63:41:36:3e:68:8d:6d:05: 47:99:ef:74:e4:3e:8d:96:7d:0c:a5:55:d8:ba:97: ea:bc:3a:6c:96:a6:c8:a1:45:61:a1:33:1f:d8:79: 0b:06:90:1f:8f:a5:3a:a7:e4:16:1e:12:e6:c0:11: 1a:00:54:a2:ac:ad:6e:8c:50:1a:6a:c5:73:32:1c: 2a:c2:61:2c:88:ae:d2:4d:b4:3f:45:16:39:7b:5a: b7:f6:0e:90:71:c4:55:d7:34:a4:65:3d:dd:93:92: 75:9a:78:df:aa:60:08:b8:50:84:de:4b:ef:b1:46: dc:3d:b3:b6:c0:cf:bb:b0:13:6f:f3:1e:10:8a:00: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:CB:D5:DF:08:B8:61:28:1F:7D:3A:F8:B9:B8:44:28:ED:8C:A5 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f3:d1:6e:5e:51:ae:7b:4b:ec:46:f3:d1:86:73:b6:ba:53: 08:fa:9a:cb:18:06:88:ab:7d:e3:90:8c:22:05:fc:49:11:68: 42:93:b4:77:39:87:03:8e:59:a3:ca:a1:77:01:a8:71:ba:70: 4d:e3:b1:67:c7:29:10:c5:13:f1:84:08:fa:8f:ae:40:ab:78: 07:17:2d:b7:25:43:9f:d9:b4:d8:8f:4e:f5:c2:78:6d:d6:7a: 4e:9d:0e:1c:d2:db:23:ce:f1:56:8c:e4:7f:33:9e:0f:19:e0: 38:5b:a9:72:81:52:e3:65:3f:cd:cd:22:bb:67:0b:89:10:36: 4b:4a:00:64:cc:7f:59:86:ec:f3:bc:85:b9:c8:1b:30:9e:45: f7:ad:67:07:1d:a9:2a:0d:b9:b9:b7:00:05:d2:84:9d:61:90: 22:0c:6f:cc:42:ca:fb:c0:2a:8a:b7:6a:0a:9d:1e:3d:8f:03: ff:9b:64:2d:46:bf:42:fc:a4:86:24:f7:25:92:60:9d:ab:8b: c7:59:76:17:2b:b0:14:8e:df:37:c0:f6:76:bc:1c:df:30:fd: 92:ec:8e:a2:74:e9:77:db:55:96:52:b7:0e:ba:aa:d0:90:27: f5:1e:e6:1c:67:5d:a9:46:4f:ff:e0:d4:07:31:8b:66:78:4c: 15:b9:7f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxt+aHzN61QJM3dRQitPLrWQp7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA2MTYxOTA3MjBaFw0yNjA2MTcxOTQyMjBaMDMxMTAvBgNV BAMTKEQ2QzNDQkQ1REYwOEI4NjEyODFGN0QzQUY4QjlCODQ0MjhFRDhDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUdoY7PYdY94Uf/R7Inu4oybK ZzEWx0Up1iulSTTLmjnfFe29aWYS9aJXlLw2/EPEBA8k2onFVvzpZRhK4o/NkqwZ lw2H57yfoy6LXlDCKb8RgmhQpYVa9JlRrFfwqWW7A3n4Bie8mZ7W+FEQiYtBiqX4 yEA6x/xxsGDbFlBjQTY+aI1tBUeZ73TkPo2WfQylVdi6l+q8OmyWpsihRWGhMx/Y eQsGkB+PpTqn5BYeEubAERoAVKKsrW6MUBpqxXMyHCrCYSyIrtJNtD9FFjl7Wrf2 DpBxxFXXNKRlPd2TknWaeN+qYAi4UITeS++xRtw9s7bAz7uwE2/zHhCKAG+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sPL1d8IuGEoH306+Lm4RCjtjKUwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDz0W5eUa57S+xG89GGc7a6Uwj6mssYBoir feOQjCIF/EkRaEKTtHc5hwOOWaPKoXcBqHG6cE3jsWfHKRDFE/GECPqPrkCreAcX LbclQ5/ZtNiPTvXCeG3Wek6dDhzS2yPO8VaM5H8zng8Z4DhbqXKBUuNlP83NIrtn C4kQNktKAGTMf1mG7PO8hbnIGzCeRfetZwcdqSoNubm3AAXShJ1hkCIMb8xCyvvA Koq3agqdHj2PA/+bZC1Gv0L8pIYk9yWSYJ2ri8dZdhcrsBSO3zfA9na8HN8w/ZLs jqJ06XfbVZZStw66qtCQJ/Ue5hxnXalGT//g1Acxi2Z4TBW5f5I= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:14 2026 by rpki-client