$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: REwj+FEnIRXEMFqnnmk4zR/KDa9InenVlduAyHPeVWI= Subject key identifier: 72:B1:F7:FD:37:DE:FE:0F:34:6D:3F:39:E5:7B:E2:97:A9:34:AC:7E Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 312534736E2EA8A860DB5ADB0C822A49376387EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: BD Signing time: Sun 20 Sep 2026 08:37:47 +0000 Manifest this update: Sun 20 Sep 2026 08:32:47 +0000 Manifest next update: Mon 21 Sep 2026 11:13:47 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) 2: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: 67AF5SdlRwXVKCTOSw+zTiuWP3okdWy5W5zXOBNtHKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:34:73:6e:2e:a8:a8:60:db:5a:db:0c:82:2a:49:37:63:87:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Sep 20 08:32:47 2026 GMT Not After : Sep 21 11:13:47 2026 GMT Subject: CN=72B1F7FD37DEFE0F346D3F39E57BE297A934AC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:22:53:de:73:e0:47:14:8d:08:3d:c4:17: 53:1c:95:5d:60:45:e1:76:c3:18:f6:b4:6c:9f:00: 8a:eb:dd:d9:0b:1b:df:ee:38:c9:9c:fc:4f:90:a3: d1:5a:94:5a:cc:b5:01:ad:5e:f7:52:d0:c8:51:27: 93:82:ba:69:73:c4:1b:ab:1f:61:49:56:ef:48:c8: 90:64:7b:5a:e3:8e:60:7f:85:69:50:87:0b:3f:8b: 1c:01:18:d4:ce:36:b7:71:e6:3e:5d:25:41:c1:c6: 16:d3:d3:a3:69:49:c5:7f:d2:42:f2:05:52:86:c2: 7c:e3:9d:ce:d8:7f:53:fc:00:2e:fd:fb:5f:8d:39: 77:87:7f:65:9f:1c:dd:65:2c:8e:a4:2f:b7:85:30: a8:95:77:97:9d:fe:9d:04:e6:0b:bd:af:04:ec:c1: d6:e8:55:47:51:84:a6:f3:34:2f:7a:cf:c9:f2:a6: a6:7e:a1:6e:8f:77:0e:aa:5b:f1:5a:ff:52:2c:a2: d4:75:88:0b:10:ad:a0:23:9e:ab:3c:fd:40:23:10: 72:e7:c0:34:d4:2a:86:3e:35:47:8c:e4:37:01:e6: 12:8f:0d:ad:aa:4a:44:d2:57:8e:6b:7c:69:a5:9e: 19:88:85:9f:cc:eb:84:63:e3:b8:76:00:de:cb:72: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:F7:FD:37:DE:FE:0F:34:6D:3F:39:E5:7B:E2:97:A9:34:AC:7E X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:33:48:98:c7:0a:25:6c:fc:ab:64:1f:fa:03:90:d1:3d:f4: 20:ce:a0:c7:72:e3:0c:90:c7:18:f3:80:94:28:cf:01:fc:66: e0:43:6d:04:4d:ae:c7:9a:55:71:45:2b:02:38:00:c0:02:f4: 2c:b3:99:fc:79:64:dd:08:fc:49:22:41:93:66:ec:de:eb:3a: b9:aa:2c:83:07:43:e1:0f:f7:25:d3:6a:a5:13:6d:3e:5a:1e: 73:87:e0:ab:7c:3c:8d:77:71:7f:da:ce:58:3f:b3:8b:ac:3d: 46:12:24:e0:b5:3d:22:44:64:a9:14:66:b5:b0:b2:59:61:46: 66:60:e3:0d:5e:5a:1b:92:2b:bd:38:69:cd:98:39:25:79:50: 19:43:33:6b:3c:3f:94:26:b7:d7:5e:83:96:28:8f:5e:94:3b: fd:61:eb:a7:d5:6c:29:90:09:28:89:25:35:d9:f3:a1:d5:ba: 5d:81:21:f2:0b:44:3f:11:0c:e4:68:b3:e1:4b:34:f7:37:a5: 23:88:45:e8:a0:c0:97:b2:6e:47:3f:08:b9:ef:20:91:8c:ad: 0a:62:53:28:d7:87:6d:47:e0:15:35:1a:bf:46:5e:21:9f:78: 29:6b:0c:b0:1d:36:aa:d5:36:65:62:ec:03:19:3d:d2:ed:20: 9c:f0:ac:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSU0c24uqKhg21rbDIIqSTdjh+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA5MjAwODMyNDdaFw0yNjA5MjExMTEzNDdaMDMxMTAvBgNV BAMTKDcyQjFGN0ZEMzdERUZFMEYzNDZEM0YzOUU1N0JFMjk3QTkzNEFDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OiJT3nPgRxSNCD3EF1MclV1g ReF2wxj2tGyfAIrr3dkLG9/uOMmc/E+Qo9FalFrMtQGtXvdS0MhRJ5OCumlzxBur H2FJVu9IyJBke1rjjmB/hWlQhws/ixwBGNTONrdx5j5dJUHBxhbT06NpScV/0kLy BVKGwnzjnc7Yf1P8AC79+1+NOXeHf2WfHN1lLI6kL7eFMKiVd5ed/p0E5gu9rwTs wdboVUdRhKbzNC96z8nypqZ+oW6Pdw6qW/Fa/1IsotR1iAsQraAjnqs8/UAjEHLn wDTUKoY+NUeM5DcB5hKPDa2qSkTSV45rfGmlnhmIhZ/M64Rj47h2AN7LcmDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcrH3/Tfe/g80bT855Xvil6k0rH4wHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYzSJjHCiVs/KtkH/oDkNE99CDOoMdy4wyQ xxjzgJQozwH8ZuBDbQRNrseaVXFFKwI4AMAC9Cyzmfx5ZN0I/EkiQZNm7N7rOrmq LIMHQ+EP9yXTaqUTbT5aHnOH4Kt8PI13cX/azlg/s4usPUYSJOC1PSJEZKkUZrWw sllhRmZg4w1eWhuSK704ac2YOSV5UBlDM2s8P5Qmt9deg5Yoj16UO/1h66fVbCmQ CSiJJTXZ86HVul2BIfILRD8RDORos+FLNPc3pSOIReigwJeybkc/CLnvIJGMrQpi UyjXh21H4BU1Gr9GXiGfeClrDLAdNqrVNmVi7AMZPdLtIJzwrIE= -----END CERTIFICATE-----Generated at Mon Sep 21 01:39:18 2026 by rpki-client