$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: WDCXWeriP5sBVxlPlPrb/I5osNtSZMMvhhkgxdhoMi4= Subject key identifier: 4C:B4:E9:4C:91:CF:6E:12:B4:7C:D5:B8:12:95:17:DD:03:02:3E:89 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 7CE87D6D7FD3661C4649F68469A1A96819BA7BBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:46:13 +0000 Manifest this update: Sun 20 Sep 2026 23:41:13 +0000 Manifest next update: Tue 22 Sep 2026 03:44:13 +0000 Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) 2: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: 4bHZaqcOVNRrbnxeXs0RqIPcsdB7cOTXWUNIsGnsoak=) 3: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 4: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e8:7d:6d:7f:d3:66:1c:46:49:f6:84:69:a1:a9:68:19:ba:7b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: Sep 20 23:41:13 2026 GMT Not After : Sep 22 03:44:13 2026 GMT Subject: CN=4CB4E94C91CF6E12B47CD5B8129517DD03023E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:1a:c9:41:0a:3c:19:8f:67:c2:94:d4:83: bd:00:1a:84:46:ff:22:13:54:bc:49:38:37:69:5a: 86:19:70:2b:c5:9d:51:b2:6b:97:e2:f7:80:de:5b: 35:e7:6c:4a:fe:9d:cc:d6:a1:3f:f8:94:90:c4:28: fe:29:43:50:69:23:88:f8:07:1c:4f:a0:69:14:b1: cc:52:39:db:6c:de:c4:77:cf:41:77:37:b8:12:15: c1:bb:a4:44:4a:38:d8:b8:75:fe:c9:09:0b:e0:64: e4:84:4c:3a:12:5a:60:19:d2:d5:fa:93:2d:be:b1: 34:5a:72:4c:d5:c5:af:b1:0f:f5:30:ff:6a:f4:3a: 06:1a:1d:68:71:82:fa:ce:71:41:7c:48:63:7e:c8: a8:1f:2b:bb:08:c0:68:fd:95:5c:06:01:64:5f:d5: 56:96:f8:f2:01:4d:62:6d:ed:61:b1:06:88:b4:a3: 1e:a4:19:51:ab:12:9c:e1:02:e2:b1:30:8f:a2:61: a3:dc:d8:77:dd:b3:7a:a3:05:be:a6:b5:b0:07:2e: 99:d6:20:a8:7a:77:ae:6b:d7:ec:b1:be:79:19:6f: 0b:3e:22:7e:6d:be:de:74:78:e9:73:d5:00:b3:f1: 23:27:7b:7d:45:1d:89:c0:41:49:8e:ff:60:34:8a: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:E9:4C:91:CF:6E:12:B4:7C:D5:B8:12:95:17:DD:03:02:3E:89 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ef:1f:d6:56:be:4e:fe:4e:b3:11:4c:16:f4:0e:60:fc:50: cd:72:fe:2a:1c:75:e3:c5:b3:7b:6c:0b:34:cd:17:40:ff:e1: e3:5f:4b:93:d2:eb:ba:ad:44:d2:a5:10:7e:71:d6:f6:21:e5: be:6a:37:35:c1:2d:cf:22:07:b8:62:02:e8:b0:36:49:80:93: 40:78:82:28:b3:5c:47:22:ac:f9:2e:ec:86:a0:dd:ba:49:4b: 37:d9:1a:1b:4e:5b:ce:c3:35:dd:88:6e:f5:8b:e6:15:27:00: fb:86:17:9e:78:65:74:71:3d:8e:99:35:a1:06:86:ee:31:c9: 86:36:15:d4:ce:8a:25:9f:d1:78:5d:d7:e3:ef:39:23:1c:ad: c4:4a:0c:5a:4b:f7:f6:62:22:2d:da:77:eb:9b:a7:ae:4b:ea: 57:bb:56:d4:10:3a:e3:5f:de:3f:80:73:41:46:53:88:1e:37: f0:19:16:0c:92:12:80:64:27:2a:4c:89:57:ec:2b:4e:1e:a6: 9a:30:2b:6d:2a:87:f8:92:d9:55:d0:83:d6:2b:c4:05:f8:2e: e9:09:cc:5e:af:dc:33:88:5a:55:8b:17:35:b9:b6:f6:08:1e: a3:90:95:9b:dd:e4:de:9b:17:fb:60:b9:00:48:72:4c:50:cd: d6:62:94:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOh9bX/TZhxGSfaEaaGpaBm6e78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA5MjAyMzQxMTNaFw0yNjA5MjIwMzQ0MTNaMDMxMTAvBgNV BAMTKDRDQjRFOTRDOTFDRjZFMTJCNDdDRDVCODEyOTUxN0REMDMwMjNFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCIxrJQQo8GY9nwpTUg70AGoRG /yITVLxJODdpWoYZcCvFnVGya5fi94DeWzXnbEr+nczWoT/4lJDEKP4pQ1BpI4j4 BxxPoGkUscxSOdts3sR3z0F3N7gSFcG7pERKONi4df7JCQvgZOSETDoSWmAZ0tX6 ky2+sTRackzVxa+xD/Uw/2r0OgYaHWhxgvrOcUF8SGN+yKgfK7sIwGj9lVwGAWRf 1VaW+PIBTWJt7WGxBoi0ox6kGVGrEpzhAuKxMI+iYaPc2Hfds3qjBb6mtbAHLpnW IKh6d65r1+yxvnkZbws+In5tvt50eOlz1QCz8SMne31FHYnAQUmO/2A0ikEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLTpTJHPbhK0fNW4EpUX3QMCPokwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjvH9ZWvk7+TrMRTBb0DmD8UM1y/iocdePF s3tsCzTNF0D/4eNfS5PS67qtRNKlEH5x1vYh5b5qNzXBLc8iB7hiAuiwNkmAk0B4 giizXEcirPku7Iag3bpJSzfZGhtOW87DNd2IbvWL5hUnAPuGF554ZXRxPY6ZNaEG hu4xyYY2FdTOiiWf0Xhd1+PvOSMcrcRKDFpL9/ZiIi3ad+ubp65L6le7VtQQOuNf 3j+Ac0FGU4geN/AZFgySEoBkJypMiVfsK04eppowK20qh/iS2VXQg9YrxAX4LukJ zF6v3DOIWlWLFzW5tvYIHqOQlZvd5N6bF/tguQBIckxQzdZilMo= -----END CERTIFICATE-----Generated at Mon Sep 21 13:56:10 2026 by rpki-client