$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: SwEGHR+/0h3z7DMnbB02vIdh7ufRMGVr7WQmJ0Heivo= Subject key identifier: 43:50:42:B1:7F:31:3D:65:76:2D:8F:D8:B4:24:F7:1A:9F:B5:E2:18 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 6AD5805FF7B6F2DCD2911C1BACE9974D2C8C2C67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:51:52 +0000 Manifest this update: Tue 16 Jun 2026 22:46:52 +0000 Manifest next update: Wed 17 Jun 2026 23:43:52 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: x07gPazcGeRf/7N9UjoQxVSwRl6fTELFyona/ZYGyHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d5:80:5f:f7:b6:f2:dc:d2:91:1c:1b:ac:e9:97:4d:2c:8c:2c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: Jun 16 22:46:52 2026 GMT Not After : Jun 17 23:43:52 2026 GMT Subject: CN=435042B17F313D65762D8FD8B424F71A9FB5E218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e5:23:2c:59:3e:f7:52:81:07:0a:db:05:44: 6d:a1:da:0d:d3:96:71:9c:1b:ea:00:82:e9:69:c8: 1c:b2:c4:60:6d:20:89:bd:a6:16:9b:e0:9b:12:d7: 28:10:a5:99:49:e5:0e:de:e1:f7:52:fd:12:1e:fa: ce:89:5a:7b:22:90:fa:9c:d5:ef:fc:76:98:b5:50: 98:85:a3:ba:fd:cb:5e:90:7b:e6:e3:8e:07:da:dc: 0f:01:f3:0f:7e:3d:36:dc:47:76:03:67:8f:03:9c: 4d:a3:c3:ad:1c:7e:a5:15:77:af:9a:15:98:f3:bc: a9:a9:ac:46:0e:63:b2:7b:c5:27:40:e6:34:a8:79: a6:51:56:41:87:ea:e2:e6:a4:e0:18:ef:74:c4:f7: 18:cc:3d:c8:d1:a3:a2:99:dd:9a:88:84:c7:c6:7b: ac:aa:dd:59:ae:4e:ca:39:52:cb:03:cc:7a:87:c7: a2:2c:64:80:91:87:2f:dd:cc:41:64:e0:67:c9:29: 54:9e:66:f6:c5:08:71:ef:19:2c:00:3b:b3:5b:8b: 98:67:81:34:74:4b:78:9c:6e:ab:4e:ae:de:99:a9: fe:c3:db:ed:71:35:0e:da:42:ba:70:06:16:dc:c1: 5a:b4:42:73:8a:da:0e:19:ad:ea:0d:fd:a7:64:41: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:50:42:B1:7F:31:3D:65:76:2D:8F:D8:B4:24:F7:1A:9F:B5:E2:18 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:d9:4a:11:36:83:2b:05:b8:06:7e:89:b4:ab:e3:c2:42: c5:1e:f6:18:28:0a:d3:2b:8e:0c:5a:81:6c:c8:78:81:3d:30: 9f:86:f7:93:be:35:25:db:37:7c:b6:ec:3c:2c:11:29:32:8b: d7:fa:ba:70:66:bb:e7:b7:40:fd:ea:57:05:35:37:df:7e:e4: 49:dd:21:f0:ad:a1:88:6e:6d:6a:15:ed:9c:77:dc:fc:bd:4a: 61:f3:a1:6a:af:c2:f4:8f:83:40:3b:45:ac:ba:22:0b:7a:dd: d7:67:fb:c1:8e:43:5c:1e:a0:37:16:37:7a:d6:af:78:b2:e2: 10:b3:45:12:52:98:e0:8c:89:55:6c:99:20:a7:e0:70:4d:5e: 56:ff:3b:28:b7:68:04:22:ab:03:0b:f2:7f:7c:ef:4c:6d:65: 19:92:60:21:2a:df:4e:d6:a5:3d:fa:5d:f4:31:fc:94:69:be: c2:d9:ac:b5:97:2c:80:e5:13:f3:ce:72:6e:1a:a1:c8:00:47: be:00:fa:d9:fc:4b:96:6d:75:00:5d:d2:c7:c0:97:d6:f2:de: 34:cb:54:01:3e:d1:74:cc:e2:54:b5:e3:8a:69:8e:91:e7:95: 2b:b7:1c:d8:ec:36:13:58:e1:95:c2:fb:7c:cc:5a:c8:a1:52: 65:ad:c2:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatWAX/e28tzSkRwbrOmXTSyMLGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA2MTYyMjQ2NTJaFw0yNjA2MTcyMzQzNTJaMDMxMTAvBgNV BAMTKDQzNTA0MkIxN0YzMTNENjU3NjJEOEZEOEI0MjRGNzFBOUZCNUUyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5SMsWT73UoEHCtsFRG2h2g3T lnGcG+oAgulpyByyxGBtIIm9phab4JsS1ygQpZlJ5Q7e4fdS/RIe+s6JWnsikPqc 1e/8dpi1UJiFo7r9y16Qe+bjjgfa3A8B8w9+PTbcR3YDZ48DnE2jw60cfqUVd6+a FZjzvKmprEYOY7J7xSdA5jSoeaZRVkGH6uLmpOAY73TE9xjMPcjRo6KZ3ZqIhMfG e6yq3VmuTso5UssDzHqHx6IsZICRhy/dzEFk4GfJKVSeZvbFCHHvGSwAO7Nbi5hn gTR0S3icbqtOrt6Zqf7D2+1xNQ7aQrpwBhbcwVq0QnOK2g4ZreoN/adkQYVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ1BCsX8xPWV2LY/YtCT3Gp+14hgwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbX2UoRNoMrBbgGfom0q+PCQsUe9hgoCtMr jgxagWzIeIE9MJ+G95O+NSXbN3y27DwsESkyi9f6unBmu+e3QP3qVwU1N99+5End IfCtoYhubWoV7Zx33Py9SmHzoWqvwvSPg0A7Ray6Igt63ddn+8GOQ1weoDcWN3rW r3iy4hCzRRJSmOCMiVVsmSCn4HBNXlb/Oyi3aAQiqwML8n9870xtZRmSYCEq307W pT36XfQx/JRpvsLZrLWXLIDlE/POcm4aocgAR74A+tn8S5ZtdQBd0sfAl9by3jTL VAE+0XTM4lS144ppjpHnlSu3HNjsNhNY4ZXC+3zMWsihUmWtwsQ= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:43 2026 by rpki-client