$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: pM2iRsSQE1P7X5R0oiP3kb3IuQwdORhLGDxbFJFhek0= Subject key identifier: 4B:6C:76:AC:69:7B:4A:D9:51:76:D7:5B:E9:DA:93:0B:7E:0A:31:88 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 2CBEECCF1D7E238214939065913C766EE080356A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 02:13:49 +0000 Manifest this update: Wed 29 Jul 2026 02:08:49 +0000 Manifest next update: Thu 30 Jul 2026 05:54:49 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 2: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) 3: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) 4: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: LnS9amBSTLSuwC5wBHpqlYk9ND3vB9l9ogiVyhV9LIE=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:ec:cf:1d:7e:23:82:14:93:90:65:91:3c:76:6e:e0:80:35:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: Jul 29 02:08:49 2026 GMT Not After : Jul 30 05:54:49 2026 GMT Subject: CN=4B6C76AC697B4AD95176D75BE9DA930B7E0A3188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:5a:30:c6:95:6d:90:b9:7f:2d:41:76:e2: 36:71:7c:27:e5:93:37:0b:ea:8f:6f:ec:18:28:67: b3:0a:e0:30:75:d2:19:23:5a:a1:ac:c5:b1:c5:c0: 7c:47:e0:d9:21:44:93:40:40:67:85:90:a3:ad:2c: 78:c7:e0:f5:16:2f:f0:ab:4d:eb:a7:73:11:6e:a8: 0d:72:a8:c3:7f:a8:e8:7c:06:a3:04:00:88:f7:b8: bb:0e:78:35:d0:37:4b:1c:de:1d:03:c6:6f:8b:8b: 46:89:0d:b3:6b:80:4b:a3:a7:0f:be:d7:a2:0b:96: 0b:4b:a9:05:99:ed:50:b5:98:db:c7:c5:21:46:00: 6b:92:bc:81:56:32:4b:f1:c8:2d:ed:a0:25:72:56: 6d:1b:9a:10:b2:57:6d:6a:03:ee:4f:fa:b6:71:5f: 8a:b9:24:11:52:50:cc:29:1d:3e:47:cb:52:38:8d: 61:a4:21:f2:e5:71:2e:7a:2b:a2:5e:66:5d:e4:d1: d5:58:a9:6c:04:39:61:cf:63:20:b6:ef:55:b8:b3: 7b:fd:6b:80:79:f6:ad:2a:7f:78:66:cc:ac:5e:6a: f3:7f:6a:2b:65:20:e6:0e:dd:1c:89:76:79:ac:5d: 90:d9:6e:bf:df:56:70:66:f6:c2:61:98:82:ac:e8: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:76:AC:69:7B:4A:D9:51:76:D7:5B:E9:DA:93:0B:7E:0A:31:88 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:49:30:63:dd:17:cc:0b:74:ca:0b:c6:55:6e:f6:c0:54:6b: 30:44:5b:a9:92:56:c4:8e:ec:71:84:d8:d5:d6:2c:ab:53:b6: c1:72:f5:2e:79:ee:eb:5b:72:55:ff:0b:82:b3:67:48:6d:4f: 0b:26:90:eb:49:b0:85:c6:c5:dc:c6:c1:68:5a:5b:0e:13:ee: 56:ce:b5:da:b9:c8:b0:6e:1b:eb:37:bb:86:35:95:d5:14:0a: ff:80:9e:1f:4c:4e:93:fc:0a:bc:7d:1f:1a:08:b4:26:8f:a5: b2:6f:ac:28:b1:43:23:44:eb:89:41:3f:62:2f:bf:06:6a:14: 8f:04:19:89:88:47:b6:f5:49:4f:07:ee:a8:2d:15:21:86:6c: a3:e5:9c:fe:65:0f:3d:3f:ae:b6:28:4e:e0:02:b2:80:bd:39: 00:f3:23:a3:b3:4a:f4:fc:92:2d:d1:7c:03:70:e5:f9:0b:75: 6f:29:90:ba:97:fb:d9:9d:15:77:4b:1a:cb:03:e5:b5:ad:60: 5b:18:be:c2:8c:87:32:bf:34:b7:7f:09:ba:0f:dc:69:fa:32: c7:0f:9f:70:60:85:1c:72:c4:60:09:c5:6e:0e:20:e4:58:b6: 87:9e:c9:a8:75:95:a8:44:4a:ce:a8:e8:3d:4e:7b:3d:02:e7: a9:6a:c8:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULL7szx1+I4IUk5BlkTx2buCANWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA3MjkwMjA4NDlaFw0yNjA3MzAwNTU0NDlaMDMxMTAvBgNV BAMTKDRCNkM3NkFDNjk3QjRBRDk1MTc2RDc1QkU5REE5MzBCN0UwQTMxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHN1owxpVtkLl/LUF24jZxfCfl kzcL6o9v7BgoZ7MK4DB10hkjWqGsxbHFwHxH4NkhRJNAQGeFkKOtLHjH4PUWL/Cr TeuncxFuqA1yqMN/qOh8BqMEAIj3uLsOeDXQN0sc3h0Dxm+Li0aJDbNrgEujpw++ 16ILlgtLqQWZ7VC1mNvHxSFGAGuSvIFWMkvxyC3toCVyVm0bmhCyV21qA+5P+rZx X4q5JBFSUMwpHT5Hy1I4jWGkIfLlcS56K6JeZl3k0dVYqWwEOWHPYyC271W4s3v9 a4B59q0qf3hmzKxeavN/aitlIOYO3RyJdnmsXZDZbr/fVnBm9sJhmIKs6KZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2x2rGl7StlRdtdb6dqTC34KMYgwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5JMGPdF8wLdMoLxlVu9sBUazBEW6mSVsSO 7HGE2NXWLKtTtsFy9S557utbclX/C4KzZ0htTwsmkOtJsIXGxdzGwWhaWw4T7lbO tdq5yLBuG+s3u4Y1ldUUCv+Anh9MTpP8Crx9HxoItCaPpbJvrCixQyNE64lBP2Iv vwZqFI8EGYmIR7b1SU8H7qgtFSGGbKPlnP5lDz0/rrYoTuACsoC9OQDzI6OzSvT8 ki3RfANw5fkLdW8pkLqX+9mdFXdLGssD5bWtYFsYvsKMhzK/NLd/CboP3Gn6MscP n3BghRxyxGAJxW4OIORYtoeeyah1lahESs6o6D1Oez0C56lqyIs= -----END CERTIFICATE-----Generated at Wed Jul 29 17:30:13 2026 by rpki-client