$ rpki-client -vvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: QZu7ymDg7VKNMnHJOd1q7u3O4DfIRl0nSYV3lYiyucg= Subject key identifier: D7:99:C1:CF:03:8D:10:E0:94:91:E2:93:EB:A3:E3:E7:F2:1F:06:19 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 7EAC30BCC68413BBAADE3C94A6E0882D9ED8D7EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 17:36:41 +0000 Manifest this update: Fri 12 Jun 2026 17:31:41 +0000 Manifest next update: Sat 13 Jun 2026 21:11:41 +0000 Files and hashes: 1: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) 2: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: 8gdUQJzzlcW83Tv42co5M/ppEi1VeswCZlgz0tkn3wo=) 3: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) 4: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ac:30:bc:c6:84:13:bb:aa:de:3c:94:a6:e0:88:2d:9e:d8:d7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Jun 12 17:31:41 2026 GMT Not After : Jun 13 21:11:41 2026 GMT Subject: CN=D799C1CF038D10E09491E293EBA3E3E7F21F0619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:53:56:11:f6:52:be:a1:6f:04:0a:4b:9b: 90:ea:d5:9b:44:56:74:9e:72:e0:12:c2:55:74:7d: ab:de:ec:7f:c0:39:28:93:d6:c4:cb:2c:86:ca:77: a6:0c:f2:48:f3:31:cd:c5:9d:2b:12:54:c0:b5:0f: 91:b0:d2:df:74:7e:4a:6d:34:78:02:8b:e3:42:6b: 60:e2:aa:76:54:53:8e:4e:31:bb:56:10:40:4d:c1: 4f:32:24:d7:e6:15:60:67:5b:ec:69:8a:47:1b:2a: 15:84:04:7e:db:4d:75:a2:57:29:41:36:ac:df:fe: e4:bd:08:cd:1c:1a:6e:c2:61:25:dc:18:83:9d:fc: 0a:b8:92:df:50:91:2e:9b:2e:bb:06:46:73:a9:d3: 7d:2c:10:76:93:85:50:a7:99:bf:40:08:7f:10:51: 32:d3:de:03:b5:bf:3f:b0:eb:b7:72:bf:bd:33:ad: 7c:c6:82:71:35:62:77:cf:79:0f:39:88:22:e8:f6: f7:bc:d9:bc:9d:c4:4b:63:1b:d4:9c:23:b1:fa:c3: 13:0e:ea:97:64:6e:ca:c7:91:bf:c5:7d:0d:31:5c: 9e:56:ee:24:a4:67:04:39:e5:a0:86:5b:73:7b:62: 3e:80:a2:67:25:d9:a2:09:3b:5e:7e:8e:92:97:5f: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:C1:CF:03:8D:10:E0:94:91:E2:93:EB:A3:E3:E7:F2:1F:06:19 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:92:a1:ee:bb:06:be:8e:76:43:30:99:3a:27:3e:f6:ce:1b: f7:6a:7f:aa:56:83:c7:2f:8d:ce:ba:5b:00:e9:4a:bc:a7:8c: 6f:6d:f8:fc:00:f5:1b:76:26:4a:c1:95:de:db:2f:73:7f:ab: 34:81:be:6e:73:c4:16:dc:77:65:a0:4d:57:5c:62:04:ac:d3: 8e:b2:e4:0e:d7:20:47:56:61:be:3b:5c:1b:00:d2:7f:3e:36: 0a:11:99:87:05:40:50:04:1a:27:01:0c:1d:72:c9:69:ab:2f: 04:5b:cf:79:8f:99:ab:58:94:06:1b:e5:bd:f1:3d:60:4c:80: c7:8e:8c:95:71:11:19:05:52:2f:be:fa:00:2f:3d:b3:7d:38: 79:2e:72:03:18:ca:d3:5c:15:49:8d:2f:c1:3d:2a:a0:23:9d: be:90:19:48:3a:86:ba:ef:61:64:64:84:03:02:dc:c9:d6:71: 47:31:f9:f8:19:13:0d:1e:a1:0e:fe:eb:2c:2a:88:72:05:e0: f4:74:d2:9b:85:76:7a:f3:ac:08:c0:b1:77:56:20:1e:61:9d: 2c:ac:e0:e7:59:f2:4d:12:d2:8e:4c:3e:b3:41:28:54:20:25: cf:c2:d3:af:de:fc:49:3b:26:e6:6f:c9:57:55:9c:47:93:fd: 21:71:2c:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqwwvMaEE7uq3jyUpuCILZ7Y1+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA2MTIxNzMxNDFaFw0yNjA2MTMyMTExNDFaMDMxMTAvBgNV BAMTKEQ3OTlDMUNGMDM4RDEwRTA5NDkxRTI5M0VCQTNFM0U3RjIxRjA2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp41NWEfZSvqFvBApLm5Dq1ZtE VnSecuASwlV0fave7H/AOSiT1sTLLIbKd6YM8kjzMc3FnSsSVMC1D5Gw0t90fkpt NHgCi+NCa2DiqnZUU45OMbtWEEBNwU8yJNfmFWBnW+xpikcbKhWEBH7bTXWiVylB Nqzf/uS9CM0cGm7CYSXcGIOd/Aq4kt9QkS6bLrsGRnOp030sEHaThVCnmb9ACH8Q UTLT3gO1vz+w67dyv70zrXzGgnE1YnfPeQ85iCLo9ve82bydxEtjG9ScI7H6wxMO 6pdkbsrHkb/FfQ0xXJ5W7iSkZwQ55aCGW3N7Yj6Aomcl2aIJO15+jpKXX6QTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15nBzwONEOCUkeKT66Pj5/IfBhkwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaSoe67Br6OdkMwmTonPvbOG/dqf6pWg8cv jc66WwDpSrynjG9t+PwA9Rt2JkrBld7bL3N/qzSBvm5zxBbcd2WgTVdcYgSs046y 5A7XIEdWYb47XBsA0n8+NgoRmYcFQFAEGicBDB1yyWmrLwRbz3mPmatYlAYb5b3x PWBMgMeOjJVxERkFUi+++gAvPbN9OHkucgMYytNcFUmNL8E9KqAjnb6QGUg6hrrv YWRkhAMC3MnWcUcx+fgZEw0eoQ7+6ywqiHIF4PR00puFdnrzrAjAsXdWIB5hnSys 4OdZ8k0S0o5MPrNBKFQgJc/C06/e/Ek7JuZvyVdVnEeT/SFxLAo= -----END CERTIFICATE-----Generated at Sat Jun 13 13:11:26 2026 by rpki-client