$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: OcA1H4mrpWoWYjl8UUaUX2D+EgOhyiBYVuuNhe4Wo1g= Subject key identifier: 40:2C:E2:9E:E5:2F:83:AB:84:60:59:92:8D:20:BA:56:FC:4A:53:A1 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 4567B9EE522FBCC59B654BE2B235929FD1453231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:40:51 +0000 Manifest this update: Mon 21 Sep 2026 19:35:51 +0000 Manifest next update: Tue 22 Sep 2026 22:09:51 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: 9m4dztqzCxv6xWH34Op6Mt2kBPSH4bvNaWLGpTLSaw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:67:b9:ee:52:2f:bc:c5:9b:65:4b:e2:b2:35:92:9f:d1:45:32:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: Sep 21 19:35:51 2026 GMT Not After : Sep 22 22:09:51 2026 GMT Subject: CN=402CE29EE52F83AB846059928D20BA56FC4A53A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:6f:e1:d2:88:37:68:58:8b:c0:4b:ca:66: 98:e0:fa:eb:42:03:3c:6b:c4:3a:ac:79:d4:bd:6c: f1:c4:5d:62:1f:1f:d4:70:d0:6b:cb:72:46:7a:cd: 0b:94:8b:3f:5a:2f:05:6c:dc:47:03:9a:5b:82:d4: c2:ba:d4:85:bb:8d:4e:85:16:40:c8:42:53:84:9e: 28:b5:4c:81:14:52:43:7f:2d:9d:15:86:a4:f5:07: 47:19:b2:e6:7a:b0:2f:fa:68:64:87:df:f3:93:b3: 49:eb:9f:f5:82:67:2b:f4:56:8d:60:5c:ff:e2:24: e5:d8:37:b5:6f:b8:fe:76:dc:95:22:25:bb:5a:e6: 95:50:c4:82:4d:6b:a4:92:9a:d2:52:d9:42:91:e7: 12:60:c7:8f:aa:bc:66:90:db:c1:f3:11:cb:54:02: c2:b4:5a:97:b0:ff:e9:43:dc:59:fe:cf:65:96:96: 5c:18:3b:68:c3:1b:29:5f:db:fa:da:00:81:52:39: b7:ba:dc:5e:66:4a:76:a4:d2:c2:ad:24:88:e2:c5: 67:65:f2:46:f7:bd:22:62:70:5a:09:7a:7a:14:b3: 5e:96:fc:26:01:40:5f:4f:fe:13:e0:f3:2e:ca:66: 8b:b6:1b:ec:49:81:66:7c:64:41:41:81:96:1f:e9: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2C:E2:9E:E5:2F:83:AB:84:60:59:92:8D:20:BA:56:FC:4A:53:A1 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ff:b6:cd:79:e6:ee:dc:aa:99:96:3b:a0:5c:ff:4d:ae:59: 70:84:31:e4:b1:20:6f:c4:02:3e:00:a1:9b:f6:80:9c:be:1e: 73:d7:24:ba:ec:71:6b:5a:e8:1f:46:47:b2:33:d3:6b:9d:bd: f8:00:7c:ff:18:de:ed:80:bb:7a:b8:59:82:78:ef:0d:fc:37: b3:09:69:e0:04:7b:59:77:54:32:85:15:43:b6:36:88:1f:3d: 16:79:93:6b:e7:7c:47:22:b6:87:e9:d4:79:c4:07:8a:b5:a6: 3a:ae:64:79:70:2e:e2:09:c4:e4:78:68:a5:05:93:10:64:c4: eb:4f:13:00:58:55:74:26:4e:4c:0b:ce:02:cb:b0:6e:f9:75: 28:74:18:cb:3b:a7:53:59:27:23:42:fe:f1:81:19:cf:1c:df: 5d:eb:24:93:7e:d2:a2:3c:85:d0:20:4c:37:74:8c:d2:a5:e5: 92:57:3c:25:d6:22:65:ce:6d:a7:d1:ff:7f:89:d5:cd:98:42: b2:be:42:85:b5:b8:f5:7a:4e:2d:7f:79:2f:4b:41:7a:bf:bf: e6:14:30:e9:28:6e:82:61:9b:c4:a9:1a:e5:1c:80:34:70:cb: 6d:86:ff:20:e9:56:52:1d:65:86:eb:e5:00:57:4b:8a:f9:7f: 57:48:d3:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWe57lIvvMWbZUvisjWSn9FFMjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA5MjExOTM1NTFaFw0yNjA5MjIyMjA5NTFaMDMxMTAvBgNV BAMTKDQwMkNFMjlFRTUyRjgzQUI4NDYwNTk5MjhEMjBCQTU2RkM0QTUzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCca2/h0og3aFiLwEvKZpjg+utC AzxrxDqsedS9bPHEXWIfH9Rw0GvLckZ6zQuUiz9aLwVs3EcDmluC1MK61IW7jU6F FkDIQlOEnii1TIEUUkN/LZ0VhqT1B0cZsuZ6sC/6aGSH3/OTs0nrn/WCZyv0Vo1g XP/iJOXYN7VvuP523JUiJbta5pVQxIJNa6SSmtJS2UKR5xJgx4+qvGaQ28HzEctU AsK0Wpew/+lD3Fn+z2WWllwYO2jDGylf2/raAIFSObe63F5mSnak0sKtJIjixWdl 8kb3vSJicFoJenoUs16W/CYBQF9P/hPg8y7KZou2G+xJgWZ8ZEFBgZYf6TO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQCzinuUvg6uEYFmSjSC6VvxKU6EwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE//ts155u7cqpmWO6Bc/02uWXCEMeSxIG/E Aj4AoZv2gJy+HnPXJLrscWta6B9GR7Iz02udvfgAfP8Y3u2Au3q4WYJ47w38N7MJ aeAEe1l3VDKFFUO2NogfPRZ5k2vnfEcitofp1HnEB4q1pjquZHlwLuIJxOR4aKUF kxBkxOtPEwBYVXQmTkwLzgLLsG75dSh0GMs7p1NZJyNC/vGBGc8c313rJJN+0qI8 hdAgTDd0jNKl5ZJXPCXWImXObafR/3+J1c2YQrK+QoW1uPV6Ti1/eS9LQXq/v+YU MOkoboJhm8SpGuUcgDRwy22G/yDpVlIdZYbr5QBXS4r5f1dI00E= -----END CERTIFICATE-----Generated at Mon Sep 21 22:18:03 2026 by rpki-client