$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: yMg1YTGJ+a83tmVl8oLs1ahNJCnOgvvRzKgshcfaGQw= Subject key identifier: DA:3F:05:66:B1:5A:9B:75:68:12:CF:D0:5D:C0:07:21:8F:18:AD:7E Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 70931F69267DAC9B310A61048984AEE2B2F3334B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:00:24 +0000 Manifest this update: Sun 20 Sep 2026 18:55:24 +0000 Manifest next update: Mon 21 Sep 2026 20:37:24 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) 2: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: kJjzvmXfvs6hsgOyeGDvGn7bWZIQ1SeY87srXcL6cUI=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:93:1f:69:26:7d:ac:9b:31:0a:61:04:89:84:ae:e2:b2:f3:33:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Sep 20 18:55:24 2026 GMT Not After : Sep 21 20:37:24 2026 GMT Subject: CN=DA3F0566B15A9B756812CFD05DC007218F18AD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b4:07:34:f2:20:de:0b:1e:aa:a0:32:6f:ed: 29:d0:40:46:0b:4b:6f:f0:f6:97:d7:25:85:64:44: 14:a6:71:39:d0:76:26:1d:bb:0b:11:13:b1:3f:41: 51:43:9e:49:d3:60:f2:68:d7:84:92:fd:08:e1:97: 49:da:03:1d:ed:cb:9b:c3:9f:12:8b:d6:2b:7c:5f: 2f:6f:b9:ef:69:28:be:19:e1:77:2f:af:2e:fe:56: f4:f7:5d:40:90:1d:8d:53:02:d1:1e:d5:89:2b:52: ba:2c:eb:2d:48:c4:56:77:6a:fa:78:b5:1b:3c:fb: 96:de:dd:94:1f:e4:b7:3a:f6:ec:d7:13:24:5e:c1: cc:91:af:82:b2:d2:1c:f4:bf:c6:7d:1a:d3:77:67: 63:41:2d:49:dd:58:67:96:b2:b6:3c:b6:43:64:93: 9f:61:2f:be:37:e7:07:59:5b:55:86:d4:79:90:1d: 28:5c:a0:46:74:6d:78:00:5a:8c:c8:82:d9:a2:f5: ce:2c:c6:25:0a:8a:c8:85:33:c7:6b:6c:a8:bc:08: bd:c4:6e:0b:b8:46:e8:f0:8a:2f:b2:82:53:1c:7d: 27:f1:0f:dd:5d:1d:72:9f:53:c5:a3:c4:93:cc:04: 2f:b9:9c:28:e1:b0:f4:1e:be:20:ef:b8:09:9f:6f: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:05:66:B1:5A:9B:75:68:12:CF:D0:5D:C0:07:21:8F:18:AD:7E X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:16:50:26:6e:ca:99:46:e4:98:49:a8:07:c7:80:f5:3d:7d: c5:e6:5a:94:b1:09:44:8f:7f:73:dd:d8:0b:3f:bf:0c:15:28: 13:bf:87:1c:e3:ba:62:3b:d2:3b:bf:58:20:f5:0f:69:33:d3: d7:92:e2:a1:49:d8:9f:f0:c7:26:ea:80:3a:75:8a:31:ce:7e: b3:34:bf:e9:4c:3e:9c:b0:57:ce:23:5d:f7:b0:59:7c:8e:2f: 1c:1d:89:17:a5:ae:7d:a5:56:56:b0:e1:b6:62:b6:ea:85:12: 55:a7:a0:fe:aa:10:1d:f8:21:aa:e8:8c:d4:28:1f:c1:07:fa: a4:d1:58:f1:38:a3:af:f1:a5:ff:04:d8:9d:e9:68:d9:28:bd: 86:3d:29:1f:6e:03:b6:7a:54:6f:9c:aa:46:2d:c5:72:9c:77: 5c:b9:78:b9:6b:4c:42:96:b0:06:fe:c4:69:e3:d0:c1:5d:e3: f9:c7:b8:05:f3:c4:ae:8f:c2:02:e0:08:b8:a5:12:1a:f7:51: e9:b9:da:55:f8:f2:18:d7:d9:65:99:e4:e1:51:0d:c1:e1:7f: c7:0f:05:b7:18:50:d1:87:fd:28:49:17:5b:57:96:c1:dc:de: 5b:d4:9a:3b:31:d8:bb:be:f6:fc:c1:b9:1c:5f:d5:f2:7b:51: ad:0b:d5:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJMfaSZ9rJsxCmEEiYSu4rLzM0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjA5MjAxODU1MjRaFw0yNjA5MjEyMDM3MjRaMDMxMTAvBgNV BAMTKERBM0YwNTY2QjE1QTlCNzU2ODEyQ0ZEMDVEQzAwNzIxOEYxOEFEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtAc08iDeCx6qoDJv7SnQQEYL S2/w9pfXJYVkRBSmcTnQdiYduwsRE7E/QVFDnknTYPJo14SS/Qjhl0naAx3ty5vD nxKL1it8Xy9vue9pKL4Z4Xcvry7+VvT3XUCQHY1TAtEe1YkrUros6y1IxFZ3avp4 tRs8+5be3ZQf5Lc69uzXEyRewcyRr4Ky0hz0v8Z9GtN3Z2NBLUndWGeWsrY8tkNk k59hL7435wdZW1WG1HmQHShcoEZ0bXgAWozIgtmi9c4sxiUKisiFM8drbKi8CL3E bgu4Rujwii+yglMcfSfxD91dHXKfU8WjxJPMBC+5nCjhsPQeviDvuAmfbwa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2j8FZrFam3VoEs/QXcAHIY8YrX4wHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwWUCZuyplG5JhJqAfHgPU9fcXmWpSxCUSP f3Pd2As/vwwVKBO/hxzjumI70ju/WCD1D2kz09eS4qFJ2J/wxybqgDp1ijHOfrM0 v+lMPpywV84jXfewWXyOLxwdiRelrn2lVlaw4bZituqFElWnoP6qEB34IarojNQo H8EH+qTRWPE4o6/xpf8E2J3paNkovYY9KR9uA7Z6VG+cqkYtxXKcd1y5eLlrTEKW sAb+xGnj0MFd4/nHuAXzxK6PwgLgCLilEhr3Uem52lX48hjX2WWZ5OFRDcHhf8cP BbcYUNGH/ShJF1tXlsHc3lvUmjsx2Lu+9vzBuRxf1fJ7Ua0L1Tk= -----END CERTIFICATE-----Generated at Mon Sep 21 03:17:54 2026 by rpki-client