$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft File: 00BA333E1070BAC4039454B475BAA9D7802B83D6.mft (raw, json) Hash identifier: 1iuqNA/4OiHYpjvjQK6GYXSSc7OJLF2EJtUrU3WuZZk= Subject key identifier: 60:DF:C8:63:B8:DE:B6:99:76:53:85:46:D6:3D:CC:37:79:25:4E:7A Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Certificate serial: 5B7EE0CE05E52393BE3FACD4CDD8CEAC53CF69E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:22:18 +0000 Manifest this update: Tue 16 Jun 2026 23:17:18 +0000 Manifest next update: Thu 18 Jun 2026 00:48:18 +0000 Files and hashes: 1: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: IhRU7xqMF7ymzp1jTbklUO54eBcVkN56coUh2E855Uc=) 2: 00BA333E1070BAC4039454B475BAA9D7802B83D6.crl (hash: jUIbZCm/ZiIZq27z2uVg1dlvW1jH1oMkIP6GHlK7+KY=) 3: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: u58hGkofFGWAycHfS2yt+5KkCwu1d003TmCn4MuzF24=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: TkJj4PfQ/aDGlDkDNfKuq4Lop3tC8gbIR74WO1bqwO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7e:e0:ce:05:e5:23:93:be:3f:ac:d4:cd:d8:ce:ac:53:cf:69:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Validity Not Before: Jun 16 23:17:18 2026 GMT Not After : Jun 18 00:48:18 2026 GMT Subject: CN=60DFC863B8DEB69976538546D63DCC3779254E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:c9:cf:e3:a2:5c:c1:e2:04:06:cc:36:46: 37:d1:14:c8:ed:d5:f4:e6:01:f2:4a:e9:54:1f:97: 38:b5:4f:0e:53:11:31:b0:d3:cc:56:c1:28:df:25: ea:74:54:9a:30:73:a9:78:38:cd:38:09:9d:41:e0: 7a:31:e9:34:4e:47:94:0d:00:2b:d5:ba:70:be:95: f8:e7:66:d4:3a:d2:c9:6f:32:bd:df:84:b2:c6:4d: d9:8c:b1:5c:1b:21:82:3c:fd:5e:71:b9:5c:3f:90: 56:84:41:5f:ca:c3:40:57:ca:c3:0b:ab:17:89:06: 0e:4e:75:9d:10:c8:3b:76:3b:25:0a:13:2d:f8:0d: 45:31:6d:93:f4:02:f7:af:ea:84:72:ef:39:db:c5: 0a:9d:68:68:73:61:4c:80:01:b8:14:83:18:56:03: a2:14:7b:a7:7a:94:6d:e3:53:ea:74:af:6e:64:f5: fb:02:2d:c3:71:06:ac:20:a2:60:06:d9:62:63:a3: 13:c3:3f:6a:dc:2d:84:1c:02:51:ec:3f:3a:8d:53: a6:b1:c6:34:9c:c4:77:ca:2d:e8:8b:12:b5:0c:06: ee:47:21:56:71:04:09:ec:51:e6:d7:38:15:2c:cf: c7:b3:81:a4:dd:42:72:17:ce:0c:ba:44:98:75:9a: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DF:C8:63:B8:DE:B6:99:76:53:85:46:D6:3D:CC:37:79:25:4E:7A X509v3 Authority Key Identifier: keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:21:6e:e5:17:9b:42:2c:d0:3f:a1:c3:86:d7:14:bc:dc:a3: 34:e2:d7:38:dc:00:8c:13:67:09:18:9b:1b:50:58:dd:a8:cf: 8b:0a:a7:61:1c:2c:c4:a0:37:a9:22:eb:15:3e:50:d7:37:f3: 9a:7d:33:c1:41:f3:9f:c9:03:29:8b:c1:d8:a7:1c:68:01:e1: 22:11:9c:40:01:31:e3:02:bd:c8:41:ba:2d:d1:d8:ef:1e:bd: 73:cf:15:6b:5d:4e:1a:17:1e:d0:07:0b:d6:3d:4b:2d:60:c5: d1:a8:45:6f:47:7d:da:cb:34:5a:be:92:6f:47:ae:19:e8:b8: 66:42:62:61:15:96:73:51:74:79:f3:65:5e:35:17:16:4a:aa: 38:95:34:41:4b:d7:95:0f:42:e2:da:fd:47:9d:47:a3:c4:78: da:38:3f:89:25:3d:22:e2:43:24:b0:0d:2e:86:51:b5:65:07: 8a:35:85:09:21:b1:23:6f:96:1f:09:46:a9:ad:92:e2:ab:4e: d7:5f:26:45:fd:94:d1:5a:aa:2e:85:b2:bb:af:78:4e:30:11: 69:a7:73:f8:e3:7c:2e:c5:42:69:81:4e:3a:52:3f:fa:e2:09: 53:60:47:59:2b:e0:53:1f:8f:7d:8d:af:e8:25:f8:9a:2d:0a: 97:1c:32:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW37gzgXlI5O+P6zUzdjOrFPPaecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4 MDJCODNENjAeFw0yNjA2MTYyMzE3MThaFw0yNjA2MTgwMDQ4MThaMDMxMTAvBgNV BAMTKDYwREZDODYzQjhERUI2OTk3NjUzODU0NkQ2M0RDQzM3NzkyNTRFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwscnP46JcweIEBsw2RjfRFMjt 1fTmAfJK6VQflzi1Tw5TETGw08xWwSjfJep0VJowc6l4OM04CZ1B4Hox6TROR5QN ACvVunC+lfjnZtQ60slvMr3fhLLGTdmMsVwbIYI8/V5xuVw/kFaEQV/Kw0BXysML qxeJBg5OdZ0QyDt2OyUKEy34DUUxbZP0Avev6oRy7znbxQqdaGhzYUyAAbgUgxhW A6IUe6d6lG3jU+p0r25k9fsCLcNxBqwgomAG2WJjoxPDP2rcLYQcAlHsPzqNU6ax xjScxHfKLeiLErUMBu5HIVZxBAnsUebXOBUsz8ezgaTdQnIXzgy6RJh1mhKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYN/IY7jetpl2U4VG1j3MN3klTnowHwYDVR0j BBgwFoAUALozPhBwusQDlFS0dbqp14Arg9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBkYjBkZWMtZjQ5YS00ZTdjLTg1NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0Ux MDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4MDJCODNENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMEJBMzMzRTEwNzBCQUM0MDM5NDU0QjQ3NUJBQTlENzgwMkI4 M0Q2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5 RDc4MDJCODNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUhbuUXm0Is0D+hw4bXFLzcozTi1zjcAIwT ZwkYmxtQWN2oz4sKp2EcLMSgN6ki6xU+UNc385p9M8FB85/JAymLwdinHGgB4SIR nEABMeMCvchBui3R2O8evXPPFWtdThoXHtAHC9Y9Sy1gxdGoRW9HfdrLNFq+km9H rhnouGZCYmEVlnNRdHnzZV41FxZKqjiVNEFL15UPQuLa/UedR6PEeNo4P4klPSLi QySwDS6GUbVlB4o1hQkhsSNvlh8JRqmtkuKrTtdfJkX9lNFaqi6FsruveE4wEWmn c/jjfC7FQmmBTjpSP/riCVNgR1kr4FMfj32Nr+gl+JotCpccMuI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:16 2026 by rpki-client