$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: cOOHot91Iib0HJnukvjFDSoOUcWQ4qHhAEDApoEn6os= Subject key identifier: 28:0E:C9:97:2E:56:0C:2D:D8:24:62:C3:1F:5C:8E:1F:9D:5E:3A:BD Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 7D88A767E9C2D75A2026560AF2F9052D8B6DADED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:44:16 +0000 Manifest this update: Tue 16 Jun 2026 20:39:16 +0000 Manifest next update: Thu 18 Jun 2026 00:23:16 +0000 Files and hashes: 1: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: sMvdDiPnKfdiCx2mkM7piKan5KfuAueigieCIW4ZuJE=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:88:a7:67:e9:c2:d7:5a:20:26:56:0a:f2:f9:05:2d:8b:6d:ad:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Jun 16 20:39:16 2026 GMT Not After : Jun 18 00:23:16 2026 GMT Subject: CN=280EC9972E560C2DD82462C31F5C8E1F9D5E3ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:f5:5a:65:fa:f7:26:6b:eb:e7:f6:c0:56: 82:d8:ce:f3:22:39:19:f3:3f:4a:d7:dc:37:7e:ef: ad:22:0d:f3:c9:98:e4:57:cf:6c:4a:53:a9:ac:68: 3d:39:d2:f0:0e:35:4e:bc:97:29:ee:48:9b:1f:a3: 33:39:bb:0d:4a:bd:ee:51:5a:3e:7c:cd:18:2f:de: 20:3b:44:63:19:02:45:7a:98:f0:2a:6f:92:5d:d2: dc:27:81:c6:26:65:fd:0f:1c:8e:56:97:94:b7:58: 0f:f9:79:66:05:5d:d7:3a:4b:99:dc:a7:34:39:75: f6:d7:49:14:01:b2:49:be:38:58:df:b7:05:11:ef: 8e:28:1a:11:7a:f1:a5:f3:6a:7a:1f:70:90:7c:08: b5:76:5b:62:93:cf:50:2a:d8:b1:50:97:97:aa:4b: 78:9d:82:59:a6:d1:dd:18:6b:57:7e:e9:5a:eb:e3: 3d:32:b7:44:dd:be:3f:bf:87:d9:29:20:61:c1:4a: 9c:06:9d:89:cb:3b:92:03:57:05:f4:1c:ca:c4:d5: 01:26:9a:4d:e3:28:95:b6:c1:12:65:bb:54:6a:a5: ac:c9:69:d3:1d:70:92:be:98:29:b7:38:88:ce:21: b5:20:9e:d8:54:dc:72:a4:1a:db:12:f1:16:08:c0: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:C9:97:2E:56:0C:2D:D8:24:62:C3:1F:5C:8E:1F:9D:5E:3A:BD X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d7:29:14:c3:2e:4d:33:45:16:71:e8:68:86:d3:a0:e0:40: 41:93:5c:1a:7c:74:6c:65:ab:0f:27:8d:b2:5e:33:1a:3f:3c: 68:72:2d:e9:dc:1c:1b:94:35:d7:32:c8:56:aa:af:3e:f5:6a: 4a:f9:d9:48:e7:75:fa:e2:d0:48:19:23:76:9f:44:33:c3:f9: 74:04:5c:d8:b9:35:c8:1b:e9:1b:63:39:80:09:a2:5e:b4:13: 59:cb:e0:18:3d:d4:8e:33:8e:f4:48:16:b1:e0:d6:4c:1a:40: 95:d1:86:9b:19:b4:a1:23:11:f0:45:fe:74:e0:71:10:b5:05: 73:a2:ef:65:53:38:08:96:c4:ee:be:62:cb:90:cc:e4:31:37: f6:4e:0b:a2:6b:e2:a1:9d:56:e6:24:c9:ae:17:39:b2:fb:5e: 38:8d:19:fd:3a:49:d0:c0:2e:64:81:7d:52:4c:1d:23:db:ae: fa:7a:7d:c7:2d:f4:95:9e:03:0c:59:ac:0d:64:69:8b:5a:ad: 00:15:8e:4b:09:10:a0:29:3b:b9:ce:fe:2e:c4:34:41:bf:fa: 4b:4b:82:65:d9:bb:99:65:70:56:19:0a:02:48:86:77:cd:55: da:24:d9:bd:4b:37:06:80:0d:6d:08:8b:55:d3:26:79:f2:f7: ba:cf:7b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYinZ+nC11ogJlYK8vkFLYttre0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA2MTYyMDM5MTZaFw0yNjA2MTgwMDIzMTZaMDMxMTAvBgNV BAMTKDI4MEVDOTk3MkU1NjBDMkREODI0NjJDMzFGNUM4RTFGOUQ1RTNBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHvVaZfr3Jmvr5/bAVoLYzvMi ORnzP0rX3Dd+760iDfPJmORXz2xKU6msaD050vAONU68lynuSJsfozM5uw1Kve5R Wj58zRgv3iA7RGMZAkV6mPAqb5Jd0twngcYmZf0PHI5Wl5S3WA/5eWYFXdc6S5nc pzQ5dfbXSRQBskm+OFjftwUR744oGhF68aXzanofcJB8CLV2W2KTz1Aq2LFQl5eq S3idglmm0d0Ya1d+6Vrr4z0yt0Tdvj+/h9kpIGHBSpwGnYnLO5IDVwX0HMrE1QEm mk3jKJW2wRJlu1RqpazJadMdcJK+mCm3OIjOIbUgnthU3HKkGtsS8RYIwFNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKA7Jly5WDC3YJGLDH1yOH51eOr0wHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7XKRTDLk0zRRZx6GiG06DgQEGTXBp8dGxl qw8njbJeMxo/PGhyLencHBuUNdcyyFaqrz71akr52Ujndfri0EgZI3afRDPD+XQE XNi5Ncgb6RtjOYAJol60E1nL4Bg91I4zjvRIFrHg1kwaQJXRhpsZtKEjEfBF/nTg cRC1BXOi72VTOAiWxO6+YsuQzOQxN/ZOC6Jr4qGdVuYkya4XObL7XjiNGf06SdDA LmSBfVJMHSPbrvp6fcct9JWeAwxZrA1kaYtarQAVjksJEKApO7nO/i7ENEG/+ktL gmXZu5llcFYZCgJIhnfNVdok2b1LNwaADW0Ii1XTJnny97rPe0c= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:55 2026 by rpki-client