$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json) Hash identifier: d6zNhc3c2qt33+7/oIro5NKEtdIpcLVXigOP5lis9PE= Subject key identifier: 3D:66:41:E5:60:CD:A9:2C:FB:DA:55:D5:8D:09:FB:79:4C:53:0B:89 Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Certificate serial: 61443638AA750B9F4050DA3698DD6387F6D4C343 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:57:39 +0000 Manifest this update: Tue 22 Sep 2026 04:52:39 +0000 Manifest next update: Wed 23 Sep 2026 05:54:39 +0000 Files and hashes: 1: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=) 2: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: G1ZjTG+FwZHlUAmhNYhE4gMAxtNnWWJy6WfnzhzjxPI=) 3: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=) 4: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=) 5: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:36:38:aa:75:0b:9f:40:50:da:36:98:dd:63:87:f6:d4:c3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Validity Not Before: Sep 22 04:52:39 2026 GMT Not After : Sep 23 05:54:39 2026 GMT Subject: CN=3D6641E560CDA92CFBDA55D58D09FB794C530B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:de:ad:d4:23:43:01:36:99:04:29:6f:2c: 1f:ca:b8:c2:f1:30:a8:4f:c6:85:41:6e:66:5e:c3: e8:00:ce:8f:df:4f:73:e2:9b:1b:e2:7d:e5:2e:17: 75:e9:77:8c:c9:3c:8d:6a:5e:2f:a4:1b:7d:c9:b0: 64:4f:2b:c9:7e:4e:7b:78:40:28:93:ba:a3:2f:8a: c8:c0:8d:cd:9d:90:95:ff:7a:12:3c:e3:cc:04:7c: da:db:9a:6d:17:a4:d0:c8:dc:5d:b1:12:b8:bb:13: 73:0f:49:58:66:8d:ac:4b:87:0e:bf:b7:3e:27:dc: 56:70:73:50:11:90:bf:2b:61:96:38:98:e1:5a:03: b1:74:3b:21:6c:17:55:1c:59:5c:cb:60:70:b3:69: d0:b3:f5:a2:9c:cd:d4:9c:78:e5:7a:ab:82:8b:c7: af:4b:42:95:87:08:a3:e0:df:c3:98:ba:07:ab:38: 55:70:c7:72:3e:56:79:c9:e9:d0:47:84:98:08:a4: 21:e8:d3:cb:3c:21:5b:80:a7:48:16:32:96:7f:fa: 71:6b:86:33:7c:02:09:79:62:18:fe:2b:36:10:a7: 41:a9:18:c0:3b:ec:be:41:35:ea:83:cc:37:61:8e: 6a:5e:ae:5e:0a:01:72:70:68:45:0d:63:8d:e3:1c: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:41:E5:60:CD:A9:2C:FB:DA:55:D5:8D:09:FB:79:4C:53:0B:89 X509v3 Authority Key Identifier: keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b6:77:a4:22:f0:2c:d4:d7:ca:73:7c:01:32:63:c6:c9:1f: 83:24:f2:4f:95:cd:66:9b:1b:fb:20:f0:e4:04:a4:90:3a:46: c9:67:e2:9f:fb:43:9d:ae:16:9f:bf:1a:a7:da:d2:24:ec:5b: 60:fe:18:55:71:a4:50:ef:e6:a2:83:34:50:15:97:3f:b9:ce: 44:f2:7a:87:f9:1b:e6:c6:68:26:5d:11:45:d1:e8:fa:65:03: 30:3d:a0:d1:9e:74:44:0e:35:9c:a3:e0:50:bd:c9:ee:6c:98: 0d:2e:40:54:b3:61:f2:7d:c6:27:56:11:df:cb:9e:3a:11:7d: 17:52:42:db:87:f1:42:0a:28:e3:2e:14:56:61:7d:d0:46:cb: 8b:67:01:39:31:9a:66:f3:c4:c9:65:75:37:07:6d:02:6c:c8: ed:57:4c:d0:29:be:59:96:06:75:ca:23:a1:91:22:fa:5b:e3: 79:07:05:b2:85:78:d3:6a:c7:ac:bb:87:43:34:7c:8e:11:f7: 08:e4:5d:20:a1:62:a9:a9:b4:a4:01:78:8b:56:ca:9d:43:08: 1f:4a:39:51:b6:46:c1:67:23:55:84:98:ee:25:e6:fc:3a:f2: b1:ea:f4:d5:25:f8:e5:7c:4a:b8:03:82:46:cd:57:db:99:97: 9b:fb:a0:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUQ2OKp1C59AUNo2mN1jh/bUw0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4 QjRFRTc1MDAeFw0yNjA5MjIwNDUyMzlaFw0yNjA5MjMwNTU0MzlaMDMxMTAvBgNV BAMTKDNENjY0MUU1NjBDREE5MkNGQkRBNTVENThEMDlGQjc5NEM1MzBCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ud6t1CNDATaZBClvLB/KuMLx MKhPxoVBbmZew+gAzo/fT3PimxvifeUuF3Xpd4zJPI1qXi+kG33JsGRPK8l+Tnt4 QCiTuqMvisjAjc2dkJX/ehI848wEfNrbmm0XpNDI3F2xEri7E3MPSVhmjaxLhw6/ tz4n3FZwc1ARkL8rYZY4mOFaA7F0OyFsF1UcWVzLYHCzadCz9aKczdSceOV6q4KL x69LQpWHCKPg38OYugerOFVwx3I+VnnJ6dBHhJgIpCHo08s8IVuAp0gWMpZ/+nFr hjN8Agl5Yhj+KzYQp0GpGMA77L5BNeqDzDdhjmperl4KAXJwaEUNY43jHPjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWZB5WDNqSz72lXVjQn7eUxTC4kwHwYDVR0j BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVG N0I4QjRFRTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB22d6Qi8CzU18pzfAEyY8bJH4Mk8k+VzWab G/sg8OQEpJA6Rsln4p/7Q52uFp+/Gqfa0iTsW2D+GFVxpFDv5qKDNFAVlz+5zkTy eof5G+bGaCZdEUXR6PplAzA9oNGedEQONZyj4FC9ye5smA0uQFSzYfJ9xidWEd/L njoRfRdSQtuH8UIKKOMuFFZhfdBGy4tnATkxmmbzxMlldTcHbQJsyO1XTNApvlmW BnXKI6GRIvpb43kHBbKFeNNqx6y7h0M0fI4R9wjkXSChYqmptKQBeItWyp1DCB9K OVG2RsFnI1WEmO4l5vw68rHq9NUl+OV8SrgDgkbNV9uZl5v7oFY= -----END CERTIFICATE-----Generated at Tue Sep 22 12:15:47 2026 by rpki-client