$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: od7Ov5DqEiv1RY4OSA//dL9YjVQNLh/UHv5ARJwEOMY= Subject key identifier: C8:67:F2:1E:38:5F:6F:28:D2:7C:3C:0F:39:95:CA:62:9D:8F:12:4D Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 08938DAFE2622F590EDB284C91367E3FFD48CE1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:23:37 +0000 Manifest this update: Tue 12 May 2026 18:18:37 +0000 Manifest next update: Wed 13 May 2026 21:11:37 +0000 Files and hashes: 1: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: Pez93gpIFI7Eu9RFD9C00a6CyqKIhR0DjJXv5JCPuBg=) 2: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 3: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:93:8d:af:e2:62:2f:59:0e:db:28:4c:91:36:7e:3f:fd:48:ce:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: May 12 18:18:37 2026 GMT Not After : May 13 21:11:37 2026 GMT Subject: CN=C867F21E385F6F28D27C3C0F3995CA629D8F124D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:87:50:27:02:f8:45:e6:d2:4f:6b:5a:44: 61:9d:89:fb:c4:fe:7c:73:41:58:6a:55:0f:88:56: c0:88:c4:c0:aa:05:e1:74:b1:84:48:91:e1:ca:43: 8e:cc:d0:51:89:5b:30:2a:f0:b0:8e:50:21:b8:e0: c6:31:0a:22:4c:1c:71:6e:a9:5c:04:a6:ea:df:c7: 3e:95:b1:2c:14:96:21:82:cc:8f:75:5f:e6:20:ba: 44:f9:eb:39:50:8c:bf:43:a0:ec:73:f3:21:db:5f: 88:53:c1:1a:aa:0c:98:ac:9e:38:e1:a0:d5:ef:23: dd:34:50:7c:c2:d4:fa:ad:f5:2c:a6:b3:1a:c5:f5: d4:06:05:66:d2:6f:a1:59:09:cc:27:84:8e:73:6e: da:20:b6:92:69:bc:26:0a:ca:9e:26:08:9a:c2:fa: e8:31:02:86:34:29:6e:9e:a0:6b:3c:9c:50:3f:3c: fc:3e:d6:5d:a5:55:81:1e:32:37:69:a0:a2:93:08: 6b:ff:8e:e8:4a:34:08:40:40:05:93:a2:f8:d9:52: 60:9f:cc:5f:32:5d:4a:f5:0f:63:06:ef:56:0d:b5: 58:a3:36:17:cc:8b:e6:f2:8e:1f:ea:c3:11:8f:4d: 20:d6:38:2f:20:5a:68:01:24:95:0f:44:ca:01:02: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:67:F2:1E:38:5F:6F:28:D2:7C:3C:0F:39:95:CA:62:9D:8F:12:4D X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:fb:a9:b3:35:fb:ba:c0:5e:bb:ad:a3:cc:88:1c:a0:3e:56: 74:c4:76:71:69:90:45:08:7c:44:79:30:2a:58:c0:39:8f:1b: be:ee:69:98:15:2c:2e:35:a1:0d:82:18:ff:7c:83:d1:83:2e: 1c:26:9a:8a:24:74:00:97:a5:c1:fc:92:92:c4:bc:ea:9b:d3: bb:0e:cf:bd:c9:14:45:d7:b0:10:bb:95:27:5d:fe:9f:0e:49: f5:e9:59:9c:2d:2e:ad:3d:94:de:f0:99:71:8e:83:42:e7:59: bc:56:6f:6c:40:2c:5d:86:1f:55:c6:09:51:07:2c:39:e0:1e: da:ad:75:c9:b2:e4:7e:0a:44:8b:40:77:98:e4:6b:ad:09:1c: 27:a3:05:cc:5f:f4:a3:b1:23:02:85:b6:21:57:64:96:76:ee: 16:bf:b6:25:38:44:93:ad:46:8e:4a:0a:f0:7e:50:af:ae:b0: b8:24:82:79:61:d1:a2:ef:f8:da:00:63:58:cb:eb:cf:8a:5c: 91:77:c5:32:67:45:d8:a4:0e:31:07:43:2a:c8:0c:91:cd:e3: 7d:0a:a6:04:82:25:df:ee:6a:90:18:4a:56:76:a7:c2:7f:3b: 63:09:41:fd:31:e1:f3:20:fb:22:c9:72:df:94:d8:98:e6:a0: 12:9c:79:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJONr+JiL1kO2yhMkTZ+P/1IzhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA1MTIxODE4MzdaFw0yNjA1MTMyMTExMzdaMDMxMTAvBgNV BAMTKEM4NjdGMjFFMzg1RjZGMjhEMjdDM0MwRjM5OTVDQTYyOUQ4RjEyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCid4dQJwL4RebST2taRGGdifvE /nxzQVhqVQ+IVsCIxMCqBeF0sYRIkeHKQ47M0FGJWzAq8LCOUCG44MYxCiJMHHFu qVwEpurfxz6VsSwUliGCzI91X+YgukT56zlQjL9DoOxz8yHbX4hTwRqqDJisnjjh oNXvI900UHzC1Pqt9SymsxrF9dQGBWbSb6FZCcwnhI5zbtogtpJpvCYKyp4mCJrC +ugxAoY0KW6eoGs8nFA/PPw+1l2lVYEeMjdpoKKTCGv/juhKNAhAQAWTovjZUmCf zF8yXUr1D2MG71YNtVijNhfMi+byjh/qwxGPTSDWOC8gWmgBJJUPRMoBAjeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGfyHjhfbyjSfDwPOZXKYp2PEk0wHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX7qbM1+7rAXruto8yIHKA+VnTEdnFpkEUI fER5MCpYwDmPG77uaZgVLC41oQ2CGP98g9GDLhwmmookdACXpcH8kpLEvOqb07sO z73JFEXXsBC7lSdd/p8OSfXpWZwtLq09lN7wmXGOg0LnWbxWb2xALF2GH1XGCVEH LDngHtqtdcmy5H4KRItAd5jka60JHCejBcxf9KOxIwKFtiFXZJZ27ha/tiU4RJOt Ro5KCvB+UK+usLgkgnlh0aLv+NoAY1jL68+KXJF3xTJnRdikDjEHQyrIDJHN430K pgSCJd/uapAYSlZ2p8J/O2MJQf0x4fMg+yLJct+U2JjmoBKcef8= -----END CERTIFICATE-----Generated at Tue May 12 22:13:13 2026 by rpki-client