$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft File: BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft (raw, json) Hash identifier: 5IxkapxDtAAPV3UdHRqAhyNaAyoY09OVOVs7E7S/fzY= Subject key identifier: C1:23:69:37:07:52:17:00:2F:EC:3B:68:E4:6D:50:1C:D5:04:A5:5A Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 Certificate issuer: /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Certificate serial: 0B5EAEEC2B2428C4071B12988A98D41AA369561A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:18:14 +0000 Manifest this update: Mon 21 Sep 2026 05:13:14 +0000 Manifest next update: Tue 22 Sep 2026 08:29:14 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=) 2: BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl (hash: /gFN1wDRnSdj6Kals+cz8jCGk0DjPcpDnR1NcxXSmNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5e:ae:ec:2b:24:28:c4:07:1b:12:98:8a:98:d4:1a:a3:69:56:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Validity Not Before: Sep 21 05:13:14 2026 GMT Not After : Sep 22 08:29:14 2026 GMT Subject: CN=C1236937075217002FEC3B68E46D501CD504A55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:23:3d:71:8f:53:72:cc:a8:66:ae:cd:b9: f2:a4:cc:70:78:62:4f:2a:7c:2e:1f:ed:c7:82:c8: 13:0b:c8:94:e9:52:3d:24:29:88:1e:3b:bf:79:e3: 11:c8:9e:f1:7c:8d:30:b5:0f:7b:44:c2:24:9c:09: e6:49:0a:25:e8:5e:59:21:1e:e9:54:98:38:ba:b3: 4f:c9:33:7d:86:7a:2a:f6:c7:e3:ca:ef:44:f0:48: 4c:1c:fc:cf:b6:8a:ce:af:a6:89:77:4b:02:cd:b3: 9e:ef:94:ed:95:09:ca:53:31:02:9b:e6:6d:6b:00: cb:03:d6:c0:e1:4f:56:46:96:b6:7e:5c:fe:79:31: 74:4f:e8:0a:bb:3d:7e:6c:14:dd:a6:ba:07:b4:5f: f8:72:71:c4:32:a7:df:ad:df:97:86:45:e6:a6:bf: a4:42:aa:91:40:df:c3:6c:93:8a:2e:58:cb:f2:b0: b4:ba:77:d0:51:73:22:05:f3:dd:ec:8a:0a:ad:21: 47:0f:cf:83:52:b2:35:36:bf:87:ae:5a:08:33:21: 55:b4:c7:d7:36:dd:c5:df:3e:ec:3f:6e:eb:c0:16: bd:19:26:a9:75:cb:a6:3a:f2:e5:b7:36:e2:e5:ab: eb:d8:d0:ba:8f:1a:66:5a:d5:80:6b:96:5f:9c:69: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:23:69:37:07:52:17:00:2F:EC:3B:68:E4:6D:50:1C:D5:04:A5:5A X509v3 Authority Key Identifier: keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:83:40:bf:a6:df:1a:63:e5:2f:23:f6:6d:77:59:0e:c8:5d: cc:57:db:4e:fd:fe:84:e3:3b:55:44:f5:53:48:ba:94:5a:32: 3d:da:b8:c3:03:d3:e5:08:c1:1e:54:ed:6f:f0:49:62:b5:41: 56:f2:1d:70:8e:8e:f8:f3:f7:87:04:6a:35:3d:a0:8b:80:42: 6e:ea:c0:bc:6e:0c:cb:72:51:f7:0b:04:71:29:a9:1b:56:c3: e1:64:4e:97:9b:5a:7d:cb:37:23:85:a9:9a:a5:3f:b1:0b:e7: 87:8c:cf:6a:d6:64:cb:fa:37:8f:f1:a4:da:e0:a2:33:f8:34: b7:76:c7:ae:d7:20:1f:c1:5b:01:18:73:96:49:15:25:16:db: 2c:dd:7d:f1:e8:95:2b:8d:02:07:18:a2:e7:17:ac:e0:64:f8: 87:c5:c2:3f:de:e0:34:dd:6a:bd:30:25:e2:63:60:85:f1:73: 70:53:39:ea:9d:68:ee:4c:f8:31:a8:41:ea:9f:9a:2f:e7:be: 18:f5:1f:7a:ff:72:d4:5a:e5:65:c0:88:b9:9e:8e:b5:c8:79: 62:e4:2a:a2:3b:b2:64:a7:a2:8c:fd:0e:d1:98:55:63:9f:0c: a5:33:cb:c2:02:2a:37:85:39:45:e6:47:fb:58:62:98:5e:23: 7b:b6:db:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC16u7CskKMQHGxKYipjUGqNpVhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5 MjQ0ODBEMTAeFw0yNjA5MjEwNTEzMTRaFw0yNjA5MjIwODI5MTRaMDMxMTAvBgNV BAMTKEMxMjM2OTM3MDc1MjE3MDAyRkVDM0I2OEU0NkQ1MDFDRDUwNEE1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgiM9cY9TcsyoZq7NufKkzHB4 Yk8qfC4f7ceCyBMLyJTpUj0kKYgeO7954xHInvF8jTC1D3tEwiScCeZJCiXoXlkh HulUmDi6s0/JM32Geir2x+PK70TwSEwc/M+2is6vpol3SwLNs57vlO2VCcpTMQKb 5m1rAMsD1sDhT1ZGlrZ+XP55MXRP6Aq7PX5sFN2muge0X/hyccQyp9+t35eGReam v6RCqpFA38Nsk4ouWMvysLS6d9BRcyIF893sigqtIUcPz4NSsjU2v4euWggzIVW0 x9c23cXfPuw/buvAFr0ZJql1y6Y68uW3NuLlq+vY0LqPGmZa1YBrll+caRJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSNpNwdSFwAv7Dto5G1QHNUEpVowHwYDVR0j BBgwFoAUug49SPtWJiyG35c//HyYdJJEgNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjViODQ1OWEtZTM1MS00YzhkLWJjMjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhG QjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5MjQ0ODBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTBFM0Q0OEZCNTYyNjJDODZERjk3M0ZGQzdDOTg3NDkyNDQ4 MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4 NzQ5MjQ0ODBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWDQL+m3xpj5S8j9m13WQ7IXcxX2079/oTj O1VE9VNIupRaMj3auMMD0+UIwR5U7W/wSWK1QVbyHXCOjvjz94cEajU9oIuAQm7q wLxuDMtyUfcLBHEpqRtWw+FkTpebWn3LNyOFqZqlP7EL54eMz2rWZMv6N4/xpNrg ojP4NLd2x67XIB/BWwEYc5ZJFSUW2yzdffHolSuNAgcYoucXrOBk+IfFwj/e4DTd ar0wJeJjYIXxc3BTOeqdaO5M+DGoQeqfmi/nvhj1H3r/ctRa5WXAiLmejrXIeWLk KqI7smSnooz9DtGYVWOfDKUzy8ICKjeFOUXmR/tYYpheI3u2278= -----END CERTIFICATE-----Generated at Mon Sep 21 09:28:28 2026 by rpki-client