$ rpki-client -vvvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: lzPXmofDD+6weszymNNloc2hTtmGmz+zVETPJYMqyQ0= Subject key identifier: 80:00:96:DE:37:C8:2D:75:AD:DC:24:CE:13:AB:DC:6F:7D:C1:0F:B6 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 21ED1F35CDF96C42F3617622BE52168334D04460 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:29:23 +0000 Manifest this update: Mon 21 Sep 2026 18:24:23 +0000 Manifest next update: Tue 22 Sep 2026 18:31:23 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) 2: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 3: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: sLdJm6Tsq5wVESC0YS46BJAA1/elWNZceHJc9ug/4u0=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ed:1f:35:cd:f9:6c:42:f3:61:76:22:be:52:16:83:34:d0:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Sep 21 18:24:23 2026 GMT Not After : Sep 22 18:31:23 2026 GMT Subject: CN=800096DE37C82D75ADDC24CE13ABDC6F7DC10FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:96:7b:86:60:e0:46:1f:85:d0:62:3b:e1: a4:b0:e5:af:a9:09:3a:d1:ef:03:a0:e1:66:0b:2d: e4:c8:c5:3c:21:71:5a:2d:ac:7c:40:b7:c2:89:c7: 15:e6:f6:37:f4:91:f5:ca:df:a1:10:a6:08:f1:3f: e3:d4:7b:e2:95:de:28:f9:6f:1b:83:a6:79:a4:4c: b1:5d:68:db:80:f3:08:35:76:ae:f8:fc:d4:af:f0: a7:64:9a:99:94:3b:fe:99:12:64:46:74:e7:b3:29: 58:63:4f:e8:02:ad:48:23:d7:b3:86:07:3e:22:f5: 96:20:b2:cc:a6:9c:25:69:1f:41:41:77:9c:0a:e8: 72:b8:fd:bb:6a:4e:c9:7d:91:8a:5c:63:ee:fe:ba: df:ed:29:e9:3e:aa:3a:24:ad:b6:d1:82:61:a3:ba: 5c:35:9b:14:d9:1e:3c:76:e9:f3:a5:b8:1e:4c:2c: ce:a6:e8:ba:b5:d5:8e:bf:8c:08:6c:41:57:e1:73: 41:ba:96:dc:60:b4:4e:ac:2f:d9:e3:68:f2:58:06: 62:15:87:65:35:de:f0:f9:3d:a8:48:15:b0:48:8f: 40:b2:48:45:55:8b:e7:36:6c:cb:94:8b:8a:a0:d8: 7d:c7:a5:13:b7:67:8b:e4:88:2d:2f:8b:28:27:ed: 67:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:00:96:DE:37:C8:2D:75:AD:DC:24:CE:13:AB:DC:6F:7D:C1:0F:B6 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fb:77:c1:2d:ca:de:0e:c9:57:b6:c6:b6:24:b6:97:69:4d: 90:f7:be:b3:0e:98:cc:84:eb:44:a3:a9:90:0e:5d:94:98:a9: 0d:8d:85:46:86:0f:9b:67:d7:e1:cf:97:bb:7d:03:98:a5:b4: 89:4f:4d:c9:05:67:c2:7b:bc:b9:2c:2f:8c:52:43:4a:94:5b: fb:97:97:c0:6a:8f:31:8c:46:2e:e9:68:27:27:d7:b9:9b:48: f1:74:c3:f5:07:1f:07:ed:3c:7f:41:66:2d:b7:2e:a8:2b:1c: e6:55:28:03:af:0c:4b:53:e8:b3:d3:af:c2:a3:de:fb:6e:a9: db:2a:4d:4f:70:8b:3d:47:4f:29:ec:91:dd:71:87:2b:03:a9: a9:87:d6:8a:11:92:88:a9:91:68:78:ab:69:29:09:e9:b4:9d: 05:ac:2d:81:f4:ff:25:a9:81:68:b7:00:6a:9a:9e:46:9f:7f: f2:96:82:df:f1:de:1a:98:38:4a:0f:44:6c:27:9f:98:4a:72: 92:00:37:f9:3b:d1:21:70:2d:ae:f7:26:12:9e:b0:58:e7:77: 04:58:07:03:ae:5a:d5:2a:00:c8:59:d0:7a:04:82:e4:6e:79: 94:e5:5e:9e:03:85:17:bc:22:d8:6f:79:3d:1b:04:55:75:3e: ea:cb:2c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIe0fNc35bELzYXYivlIWgzTQRGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA5MjExODI0MjNaFw0yNjA5MjIxODMxMjNaMDMxMTAvBgNV BAMTKDgwMDA5NkRFMzdDODJENzVBRERDMjRDRTEzQUJEQzZGN0RDMTBGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDix5Z7hmDgRh+F0GI74aSw5a+p CTrR7wOg4WYLLeTIxTwhcVotrHxAt8KJxxXm9jf0kfXK36EQpgjxP+PUe+KV3ij5 bxuDpnmkTLFdaNuA8wg1dq74/NSv8KdkmpmUO/6ZEmRGdOezKVhjT+gCrUgj17OG Bz4i9ZYgssymnCVpH0FBd5wK6HK4/btqTsl9kYpcY+7+ut/tKek+qjokrbbRgmGj ulw1mxTZHjx26fOluB5MLM6m6Lq11Y6/jAhsQVfhc0G6ltxgtE6sL9njaPJYBmIV h2U13vD5PahIFbBIj0CySEVVi+c2bMuUi4qg2H3HpRO3Z4vkiC0viygn7WeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgACW3jfILXWt3CTOE6vcb33BD7YwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH7d8Etyt4OyVe2xrYktpdpTZD3vrMOmMyE 60SjqZAOXZSYqQ2NhUaGD5tn1+HPl7t9A5iltIlPTckFZ8J7vLksL4xSQ0qUW/uX l8BqjzGMRi7paCcn17mbSPF0w/UHHwftPH9BZi23LqgrHOZVKAOvDEtT6LPTr8Kj 3vtuqdsqTU9wiz1HTynskd1xhysDqamH1ooRkoipkWh4q2kpCem0nQWsLYH0/yWp gWi3AGqankaff/KWgt/x3hqYOEoPRGwnn5hKcpIAN/k70SFwLa73JhKesFjndwRY BwOuWtUqAMhZ0HoEguRueZTlXp4DhRe8IthveT0bBFV1PurLLEA= -----END CERTIFICATE-----Generated at Tue Sep 22 01:26:46 2026 by rpki-client