$ rpki-client -vvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: dXATEGBE6EHGarnLBrFeA+W9SjEy9SUXfqDP1xddM5Q= Subject key identifier: AA:F7:CB:12:D9:95:C4:4B:3C:18:90:D7:26:4C:86:09:39:E6:03:C9 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 739B808E3CAC1A1AA7D21C97D5DFE112F0FB2E16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:08:54 +0000 Manifest this update: Tue 28 Jul 2026 14:03:54 +0000 Manifest next update: Wed 29 Jul 2026 14:14:54 +0000 Files and hashes: 1: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: CQ5IPVmIHkKouJkepOiio8MNe/KHzw+Bkh/+sqzdGXw=) 2: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 3: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9b:80:8e:3c:ac:1a:1a:a7:d2:1c:97:d5:df:e1:12:f0:fb:2e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Jul 28 14:03:54 2026 GMT Not After : Jul 29 14:14:54 2026 GMT Subject: CN=AAF7CB12D995C44B3C1890D7264C860939E603C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:ec:68:07:f9:9c:b8:a4:11:eb:db:b4:b8: 79:b6:21:18:0e:8d:7b:b3:7e:7d:0e:d1:9b:6b:f9: 4e:a6:51:44:fd:d6:9a:62:5a:3b:e8:47:67:d4:b2: fb:cb:9f:3f:11:db:1c:de:9f:d7:9a:36:5a:3c:86: 65:6f:30:2d:bc:8f:2d:52:8c:74:96:b1:9a:b3:4a: c8:0c:d2:ca:2e:8b:2a:92:f1:31:6c:e5:97:65:76: 4a:c5:99:f3:f7:ec:b2:2b:e4:9d:75:06:d7:d7:67: 64:35:a5:f0:26:e5:97:bd:ae:87:ac:a4:eb:49:53: 68:bf:cc:c6:4c:2a:22:52:5a:cd:a4:c8:8c:fe:19: d2:e7:1a:17:3c:1f:a6:e3:51:07:93:a8:07:33:8b: 3d:e4:c5:92:4d:b2:33:ac:0b:ef:00:30:3a:6b:38: 79:a2:9c:2b:92:2f:7f:dc:ed:01:40:e4:7d:cd:2c: a9:79:0f:1b:6f:5a:46:00:82:81:7c:2b:54:a5:bc: 88:02:00:f5:3c:69:7e:ff:73:55:bd:85:90:24:6e: 96:6f:39:28:f8:0b:af:74:b9:ca:a1:5f:60:54:55: 4f:0b:30:41:b4:e9:cd:95:53:69:cb:97:dd:0b:80: a9:27:09:e9:eb:94:cc:e1:e1:5b:ad:f1:21:f7:00: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F7:CB:12:D9:95:C4:4B:3C:18:90:D7:26:4C:86:09:39:E6:03:C9 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:82:8a:bc:4d:78:c5:19:39:e5:d3:93:89:7b:cd:8f:38:da: 32:e0:c0:ad:c3:67:d3:0d:c9:9d:e2:01:50:f5:e3:6f:4a:43: f1:11:58:be:20:be:e9:bd:79:69:48:ab:27:c1:8d:f7:df:40: 00:44:57:ec:c2:be:87:73:59:2e:2f:52:ce:c0:4c:8a:57:47: 99:22:52:96:5f:5e:7b:fc:3a:0f:9a:0a:ca:2e:92:6a:69:2d: aa:e1:76:27:29:9f:a7:92:05:04:5f:72:73:f8:42:b6:bc:d6: 90:53:7d:3f:54:21:39:86:0a:6e:f1:a3:30:5f:50:41:be:a8: 53:5f:5d:c4:0f:c8:22:0c:7e:d4:54:b2:8d:90:90:6d:3e:53: 6e:42:2e:1a:9d:2c:14:be:e9:b6:4c:37:aa:ec:8a:98:40:f6: 41:30:ac:8c:4b:0f:86:38:39:6a:f5:81:f7:8d:aa:bf:16:4f: ee:5b:02:39:d4:53:b2:9c:44:b5:c1:d7:22:b1:25:1a:51:3e: fb:04:d4:17:1f:84:19:e5:8b:e3:fc:70:a2:e3:66:00:e9:ec: 92:c0:53:a3:28:cb:c0:1f:b5:53:1a:a6:9c:f7:06:c4:c3:76: 03:89:bb:2c:c9:e5:22:c5:a4:eb:f0:78:fe:87:3a:dd:ae:58: 46:18:90:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5uAjjysGhqn0hyX1d/hEvD7LhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA3MjgxNDAzNTRaFw0yNjA3MjkxNDE0NTRaMDMxMTAvBgNV BAMTKEFBRjdDQjEyRDk5NUM0NEIzQzE4OTBENzI2NEM4NjA5MzlFNjAzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZOxoB/mcuKQR69u0uHm2IRgO jXuzfn0O0Ztr+U6mUUT91ppiWjvoR2fUsvvLnz8R2xzen9eaNlo8hmVvMC28jy1S jHSWsZqzSsgM0souiyqS8TFs5ZdldkrFmfP37LIr5J11BtfXZ2Q1pfAm5Ze9roes pOtJU2i/zMZMKiJSWs2kyIz+GdLnGhc8H6bjUQeTqAcziz3kxZJNsjOsC+8AMDpr OHminCuSL3/c7QFA5H3NLKl5DxtvWkYAgoF8K1SlvIgCAPU8aX7/c1W9hZAkbpZv OSj4C690ucqhX2BUVU8LMEG06c2VU2nLl90LgKknCenrlMzh4Vut8SH3ALNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvfLEtmVxEs8GJDXJkyGCTnmA8kwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmCirxNeMUZOeXTk4l7zY842jLgwK3DZ9MN yZ3iAVD1429KQ/ERWL4gvum9eWlIqyfBjfffQABEV+zCvodzWS4vUs7ATIpXR5ki UpZfXnv8Og+aCsoukmppLarhdicpn6eSBQRfcnP4Qra81pBTfT9UITmGCm7xozBf UEG+qFNfXcQPyCIMftRUso2QkG0+U25CLhqdLBS+6bZMN6rsiphA9kEwrIxLD4Y4 OWr1gfeNqr8WT+5bAjnUU7KcRLXB1yKxJRpRPvsE1BcfhBnli+P8cKLjZgDp7JLA U6Moy8AftVMappz3BsTDdgOJuyzJ5SLFpOvweP6HOt2uWEYYkCo= -----END CERTIFICATE-----Generated at Wed Jul 29 02:58:57 2026 by rpki-client