$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: Xo5vJj98wzjI+Z9M5e9gUCgBo+V9EG/NL7oFx9QkCcw= Subject key identifier: 70:BC:03:E5:2E:3B:27:EC:B1:07:D4:C3:81:73:3F:84:D0:69:7C:7C Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 53E3E19E51C5570C09497387923DDABBAEBED7EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:51:15 +0000 Manifest this update: Wed 17 Jun 2026 02:46:15 +0000 Manifest next update: Thu 18 Jun 2026 06:35:15 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: DMia9QGF22bRFggPhGJ8ygXqN2bfUxWtNA3ykGBOF/c=) 2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e3:e1:9e:51:c5:57:0c:09:49:73:87:92:3d:da:bb:ae:be:d7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Jun 17 02:46:15 2026 GMT Not After : Jun 18 06:35:15 2026 GMT Subject: CN=70BC03E52E3B27ECB107D4C381733F84D0697C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:79:07:26:05:d7:de:75:e5:d0:f6:f1:b8: 76:29:25:70:d9:88:e2:6f:22:77:f3:70:98:a4:65: ea:41:40:2d:8c:4d:9a:6f:04:4a:7f:e3:ea:92:02: 6b:ae:b0:c3:e1:75:5c:26:69:7d:a6:07:9a:5f:f4: ae:75:71:44:53:80:a6:bf:44:ae:28:73:a8:6a:62: 3d:dc:0a:7d:21:9e:0d:22:68:2d:0c:e4:98:f8:df: ca:04:02:d8:3d:a2:8d:eb:6e:ae:3e:7d:81:9c:2a: d2:84:68:af:c1:ff:0f:f9:73:76:1b:ab:c5:1f:1f: 0c:54:33:85:b8:a1:1d:b3:42:d2:b8:3c:0c:be:21: 16:24:40:c7:0b:3b:03:db:03:13:a4:af:8f:b4:0c: 09:0a:2a:3e:e0:a0:9b:02:98:a4:3c:6f:69:49:9e: 3f:31:56:86:98:a2:f1:b2:be:ec:d3:6c:34:0f:23: 6b:e4:a9:94:47:db:35:59:0e:c2:f3:d0:32:aa:b6: c5:34:91:0e:ba:f1:1b:c2:91:be:82:dc:eb:8d:ba: 52:ab:09:16:36:92:a5:90:e7:42:13:23:18:6b:f1: ad:aa:a4:a7:70:2c:50:89:f3:38:18:4b:4f:c8:c4: dd:16:fa:6d:1d:ec:00:b1:c2:43:87:9b:b5:c6:e7: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BC:03:E5:2E:3B:27:EC:B1:07:D4:C3:81:73:3F:84:D0:69:7C:7C X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:46:91:7d:4b:21:59:1b:b1:6d:43:9f:3b:f4:45:22:33:cb: 93:70:e6:d5:41:ee:3e:0f:9b:6f:4a:bd:6c:28:86:42:87:5f: 5f:a4:36:58:89:3e:ee:47:dc:dc:0f:30:f2:5a:e1:99:54:75: d6:89:eb:49:11:84:f8:81:92:91:3f:d8:5a:48:07:e4:f2:39: b0:89:c2:28:2d:61:07:2b:8b:94:a1:f6:0e:8b:2f:c6:24:58: ff:0d:7b:20:c1:7e:e6:1d:f4:10:3d:af:48:72:0a:f1:67:e9: 5a:96:f0:63:0e:54:fc:d1:e3:46:6e:5f:d1:88:32:05:61:ea: 81:a0:63:fc:4d:88:24:6d:94:2d:3f:25:cc:a6:7b:49:76:e0: 8c:6c:7b:7f:73:a5:95:c2:2f:f4:27:36:6c:42:91:1f:9d:57: 24:54:0a:9f:76:b7:24:75:fd:31:b2:45:1d:79:9a:06:bc:02: d3:e7:ae:00:6e:c6:60:be:69:fd:e4:78:91:33:69:30:ac:a9: f6:35:90:76:3e:c7:d9:59:e0:62:6e:61:aa:28:98:55:b5:d8: 28:1f:fc:76:15:14:eb:41:1c:2b:68:96:07:28:92:81:0d:65: eb:1d:29:33:7b:1c:59:93:f7:e7:f9:71:c3:c4:65:93:8d:15: 2b:ad:7f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+PhnlHFVwwJSXOHkj3au66+1+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjA2MTcwMjQ2MTVaFw0yNjA2MTgwNjM1MTVaMDMxMTAvBgNV BAMTKDcwQkMwM0U1MkUzQjI3RUNCMTA3RDRDMzgxNzMzRjg0RDA2OTdDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gHkHJgXX3nXl0PbxuHYpJXDZ iOJvInfzcJikZepBQC2MTZpvBEp/4+qSAmuusMPhdVwmaX2mB5pf9K51cURTgKa/ RK4oc6hqYj3cCn0hng0iaC0M5Jj438oEAtg9oo3rbq4+fYGcKtKEaK/B/w/5c3Yb q8UfHwxUM4W4oR2zQtK4PAy+IRYkQMcLOwPbAxOkr4+0DAkKKj7goJsCmKQ8b2lJ nj8xVoaYovGyvuzTbDQPI2vkqZRH2zVZDsLz0DKqtsU0kQ668RvCkb6C3OuNulKr CRY2kqWQ50ITIxhr8a2qpKdwLFCJ8zgYS0/IxN0W+m0d7ACxwkOHm7XG5/0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLwD5S47J+yxB9TDgXM/hNBpfHwwHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClGkX1LIVkbsW1Dnzv0RSIzy5Nw5tVB7j4P m29KvWwohkKHX1+kNliJPu5H3NwPMPJa4ZlUddaJ60kRhPiBkpE/2FpIB+TyObCJ wigtYQcri5Sh9g6LL8YkWP8NeyDBfuYd9BA9r0hyCvFn6VqW8GMOVPzR40ZuX9GI MgVh6oGgY/xNiCRtlC0/Jcyme0l24Ixse39zpZXCL/QnNmxCkR+dVyRUCp92tyR1 /TGyRR15mga8AtPnrgBuxmC+af3keJEzaTCsqfY1kHY+x9lZ4GJuYaoomFW12Cgf /HYVFOtBHCtolgcokoENZesdKTN7HFmT9+f5ccPEZZONFSutf5w= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:27 2026 by rpki-client