$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: 8T9TGQuurpECqT+wq2/39Y7xp7MeE6Qdm2otGzss04I= Subject key identifier: FA:DA:AF:F8:FF:E8:EF:2A:2D:BC:B5:97:DB:8D:D7:4F:BD:C1:19:92 Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 34A3CFF894069A1E90564F41E8F2D1B49C7F1EA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:26:52 +0000 Manifest this update: Fri 25 Sep 2026 01:21:52 +0000 Manifest next update: Sat 26 Sep 2026 02:38:52 +0000 Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 2: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: 65niJXEnIXTSRRCJeFmxm+ljot1s3A9kMiTXUcF0DkQ=) 3: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) 4: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a3:cf:f8:94:06:9a:1e:90:56:4f:41:e8:f2:d1:b4:9c:7f:1e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Sep 25 01:21:52 2026 GMT Not After : Sep 26 02:38:52 2026 GMT Subject: CN=FADAAFF8FFE8EF2A2DBCB597DB8DD74FBDC11992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:b6:6b:52:9a:f7:ff:9d:9b:56:de:b6:e6: b2:ac:d7:44:fd:a2:45:b7:b2:77:38:c1:9f:94:71: 14:a4:ab:96:54:e0:79:7a:d2:a1:f5:2a:56:7e:5d: 09:b4:b5:e2:05:ed:a2:79:08:61:40:3b:a4:fc:0e: d2:87:eb:ba:89:ea:5c:d2:2b:5f:d5:36:e6:87:33: 12:76:b7:3f:0d:ab:26:d8:72:b0:77:24:28:2f:fc: f5:c7:72:15:79:00:bc:21:9c:93:0b:ce:20:bc:e7: c2:4b:b5:ca:fc:16:3c:04:ae:39:02:68:86:4a:ac: ad:aa:c6:28:11:f4:7a:ca:20:89:74:2c:45:5f:97: d5:25:eb:c6:f8:7f:d7:95:7d:a1:61:38:f1:87:10: f8:52:47:dd:93:be:06:ac:db:d3:07:19:23:e6:18: 70:56:78:d0:7c:d2:d6:10:4a:5d:c6:71:be:f5:a9: ec:8e:5f:b1:5a:ca:d0:44:b6:6d:3b:fc:11:cc:5c: 40:d6:b9:a4:81:eb:7f:bd:e4:d4:da:c1:53:80:b0: 20:30:8d:11:8a:67:d5:ec:1a:d3:5d:83:8d:0c:d9: 2b:b6:74:67:28:53:ef:9a:fe:3b:be:60:52:3c:25: d6:38:92:51:52:ae:8c:59:6a:10:b5:9c:32:0f:19: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:AF:F8:FF:E8:EF:2A:2D:BC:B5:97:DB:8D:D7:4F:BD:C1:19:92 X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:91:f7:7b:a6:25:4c:ae:ee:23:fe:e0:d9:86:9d:cc:10:5c: d8:3b:87:8c:4f:b4:e5:f7:1a:17:57:81:2c:6e:71:f1:94:ca: 0b:d0:a5:5a:e8:18:6e:3b:8a:d7:10:97:4a:48:43:07:f7:c3: e0:62:f8:a7:ac:44:26:21:8e:af:5c:3e:73:9e:a5:f8:01:a6: 27:35:db:27:a1:f0:5b:31:c1:18:c2:37:39:56:e3:ef:38:a7: f3:86:de:38:3e:d3:ae:cf:94:b2:1b:08:77:9e:76:b6:57:25: f8:78:34:3b:61:62:e6:a8:e0:ac:b4:66:05:2d:a9:53:0c:0e: dd:9c:85:02:6c:53:fa:9f:03:b5:d3:02:93:34:b9:6f:bf:99: 06:8c:11:81:7e:41:da:1a:09:4d:cc:4d:1a:ef:de:c4:ae:59: 62:22:03:64:1d:ae:16:45:33:fe:c8:b4:38:93:6c:92:24:8c: c2:4e:bc:6a:b8:0b:58:cd:4a:f1:61:1f:c0:4d:f7:32:1b:4e: 57:41:f0:f4:28:42:9e:61:20:33:c6:62:6d:00:60:2c:c0:78: 15:35:f6:d9:d4:29:9b:d2:0a:00:8d:de:9d:04:b1:fd:b4:bc: 1c:b4:e2:97:81:16:8d:e5:5e:3f:52:ff:39:24:d6:4f:3a:e7: b9:81:a7:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKPP+JQGmh6QVk9B6PLRtJx/HqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA5MjUwMTIxNTJaFw0yNjA5MjYwMjM4NTJaMDMxMTAvBgNV BAMTKEZBREFBRkY4RkZFOEVGMkEyREJDQjU5N0RCOERENzRGQkRDMTE5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5frZrUpr3/52bVt625rKs10T9 okW3snc4wZ+UcRSkq5ZU4Hl60qH1KlZ+XQm0teIF7aJ5CGFAO6T8DtKH67qJ6lzS K1/VNuaHMxJ2tz8NqybYcrB3JCgv/PXHchV5ALwhnJMLziC858JLtcr8FjwErjkC aIZKrK2qxigR9HrKIIl0LEVfl9Ul68b4f9eVfaFhOPGHEPhSR92Tvgas29MHGSPm GHBWeNB80tYQSl3Gcb71qeyOX7FaytBEtm07/BHMXEDWuaSB63+95NTawVOAsCAw jRGKZ9XsGtNdg40M2Su2dGcoU++a/ju+YFI8JdY4klFSroxZahC1nDIPGQurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+tqv+P/o7yotvLWX243XT73BGZIwHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOR93umJUyu7iP+4NmGncwQXNg7h4xPtOX3 GhdXgSxucfGUygvQpVroGG47itcQl0pIQwf3w+Bi+KesRCYhjq9cPnOepfgBpic1 2yeh8FsxwRjCNzlW4+84p/OG3jg+067PlLIbCHeedrZXJfh4NDthYuao4Ky0ZgUt qVMMDt2chQJsU/qfA7XTApM0uW+/mQaMEYF+QdoaCU3MTRrv3sSuWWIiA2QdrhZF M/7ItDiTbJIkjMJOvGq4C1jNSvFhH8BN9zIbTldB8PQoQp5hIDPGYm0AYCzAeBU1 9tnUKZvSCgCN3p0Esf20vBy04peBFo3lXj9S/zkk1k8657mBp2M= -----END CERTIFICATE-----Generated at Fri Sep 25 15:34:37 2026 by rpki-client