$ rpki-client -vvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json) Hash identifier: dd0LeLahJNO1QdGJ9NiYnsw5OaW3BQIaFo+OAHHaIrE= Subject key identifier: 54:F7:EE:49:81:13:3B:7F:64:B7:70:3C:37:7F:F2:CE:DA:86:B7:B4 Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Certificate serial: 154C3329917354787CABD5C3BD6EB31BD6799239 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:23:55 +0000 Manifest this update: Tue 16 Jun 2026 20:18:55 +0000 Manifest next update: Wed 17 Jun 2026 23:14:55 +0000 Files and hashes: 1: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=) 2: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: YCTSDbgJ6aOGXcKFkn0CsaBHrtHIibDaYvE+9Tau4NU=) 3: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=) 4: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=) 5: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4c:33:29:91:73:54:78:7c:ab:d5:c3:bd:6e:b3:1b:d6:79:92:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Validity Not Before: Jun 16 20:18:55 2026 GMT Not After : Jun 17 23:14:55 2026 GMT Subject: CN=54F7EE4981133B7F64B7703C377FF2CEDA86B7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:07:19:18:7c:cb:63:5e:06:68:2f:8e:60: 48:ad:f9:df:db:be:65:a1:54:3a:6e:27:dc:d9:f5: 46:d7:a5:19:e0:82:cf:cc:7e:5e:5a:3e:5a:44:1f: de:43:01:9f:59:13:97:55:5a:ac:5a:df:b7:59:b6: 64:8c:51:b1:79:a4:3b:52:ed:4b:a0:07:dd:6c:0c: 10:b2:17:bd:b1:13:e7:91:11:13:20:76:06:90:4f: 47:0c:15:db:94:af:c5:8b:43:09:f8:e9:3c:e8:0a: 41:e4:83:40:ea:88:8f:d0:1b:8c:e9:fb:45:3e:98: df:3f:9f:6e:18:08:9b:de:d4:ff:b8:f7:7a:03:0d: 90:9e:55:34:2b:e3:ef:fb:be:5e:51:4a:f2:16:b2: f4:ab:12:6a:16:34:64:30:24:84:40:02:e6:6d:1f: 9c:d6:03:19:8e:3d:a4:60:fc:e4:b6:c1:01:98:b3: 4c:ad:7f:40:26:62:d7:81:2d:8d:b8:9a:c1:b8:7c: 9b:42:16:e7:c2:36:b3:e5:36:3e:cd:8e:84:22:f7: b4:23:90:ad:dc:fe:4b:f2:dc:8d:4d:4f:65:c0:6d: c4:5c:36:8d:ab:6b:c9:b3:86:03:e3:df:5a:f0:29: c0:8a:e2:92:49:95:3e:35:79:61:2c:b2:91:00:74: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:EE:49:81:13:3B:7F:64:B7:70:3C:37:7F:F2:CE:DA:86:B7:B4 X509v3 Authority Key Identifier: keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6e:e4:2b:98:ef:aa:7b:19:10:32:6a:00:9a:26:e8:05:cb: 89:22:92:fc:46:a4:80:f3:ab:6c:35:d0:87:87:49:c4:6b:2a: 87:e7:c5:c5:68:f0:0c:61:79:86:38:ca:3b:55:34:e1:b1:cb: 8e:8f:9a:3a:fb:67:5f:72:8b:50:3b:06:de:51:a8:16:d0:fa: a2:36:2c:3f:93:fa:72:54:fc:4b:43:b8:43:70:4e:c4:d9:29: 54:c8:d5:05:69:fc:ec:04:00:c3:03:f0:c8:c6:d5:29:16:a6: 13:30:a2:ee:f9:95:e7:59:e5:1c:c4:54:ec:60:55:5c:92:7f: 51:2a:3f:15:13:3d:52:e8:df:0c:10:e3:62:c5:b8:7a:c3:0a: 79:7f:18:1c:ef:bf:31:e1:03:54:fb:ec:ab:8b:9a:dc:df:99: bf:d6:e0:ff:8d:e4:7a:b7:88:ad:ad:f5:3b:fd:ca:a3:62:cb: 18:48:56:56:43:55:85:7f:84:ea:e0:de:3c:6c:2f:7a:9f:7d: 38:31:34:5e:7a:81:00:08:f2:53:10:e7:b7:72:20:2e:36:ee: 4d:59:d4:be:65:f9:d9:bc:35:ef:a4:2d:ab:73:36:9e:a0:d8: e9:37:8b:f1:0a:fc:c7:4e:d1:c7:0a:df:a4:39:bf:04:34:f1: 36:a0:c9:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUwzKZFzVHh8q9XDvW6zG9Z5kjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4 QjRFRTc1MDAeFw0yNjA2MTYyMDE4NTVaFw0yNjA2MTcyMzE0NTVaMDMxMTAvBgNV BAMTKDU0RjdFRTQ5ODExMzNCN0Y2NEI3NzAzQzM3N0ZGMkNFREE4NkI3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekwcZGHzLY14GaC+OYEit+d/b vmWhVDpuJ9zZ9UbXpRnggs/Mfl5aPlpEH95DAZ9ZE5dVWqxa37dZtmSMUbF5pDtS 7UugB91sDBCyF72xE+eRERMgdgaQT0cMFduUr8WLQwn46TzoCkHkg0DqiI/QG4zp +0U+mN8/n24YCJve1P+493oDDZCeVTQr4+/7vl5RSvIWsvSrEmoWNGQwJIRAAuZt H5zWAxmOPaRg/OS2wQGYs0ytf0AmYteBLY24msG4fJtCFufCNrPlNj7NjoQi97Qj kK3c/kvy3I1NT2XAbcRcNo2ra8mzhgPj31rwKcCK4pJJlT41eWEsspEAdGN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVPfuSYETO39kt3A8N3/yztqGt7QwHwYDVR0j BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVG N0I4QjRFRTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlu5CuY76p7GRAyagCaJugFy4kikvxGpIDz q2w10IeHScRrKofnxcVo8AxheYY4yjtVNOGxy46Pmjr7Z19yi1A7Bt5RqBbQ+qI2 LD+T+nJU/EtDuENwTsTZKVTI1QVp/OwEAMMD8MjG1SkWphMwou75ledZ5RzEVOxg VVySf1EqPxUTPVLo3wwQ42LFuHrDCnl/GBzvvzHhA1T77KuLmtzfmb/W4P+N5Hq3 iK2t9Tv9yqNiyxhIVlZDVYV/hOrg3jxsL3qffTgxNF56gQAI8lMQ57dyIC427k1Z 1L5l+dm8Ne+kLatzNp6g2Ok3i/EK/MdO0ccK36Q5vwQ08TagyRU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:20 2026 by rpki-client