$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: HO+iqgUttD9yewqQvxy1ZxDTpWzNldLo+KaZclzcrHc= Subject key identifier: 1C:82:CA:7B:55:BA:D0:CD:F2:E5:67:B9:81:44:20:85:86:62:AE:FA Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 3A2985898B8473FEC4C859E8645325BD9DFF3DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:20:54 +0000 Manifest this update: Thu 24 Sep 2026 08:15:54 +0000 Manifest next update: Fri 25 Sep 2026 09:24:54 +0000 Files and hashes: 1: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: qAQyaaQE9SCiEVvr15ZepnTxjGWZv8OO6W0Vu4jXM6g=) 2: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 3: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:29:85:89:8b:84:73:fe:c4:c8:59:e8:64:53:25:bd:9d:ff:3d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Sep 24 08:15:54 2026 GMT Not After : Sep 25 09:24:54 2026 GMT Subject: CN=1C82CA7B55BAD0CDF2E567B9814420858662AEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:3f:b1:39:25:8c:71:b6:6a:dd:d1:ef:ca: 81:bb:20:1f:c2:78:c3:2f:8d:3a:ff:49:8f:8b:e3: 67:ff:69:d2:75:83:b1:34:fd:fc:08:87:10:3c:29: 13:57:06:86:26:f8:5e:f8:bc:ba:8e:6c:5f:86:1f: b0:b4:df:1a:24:b7:90:67:41:05:f5:88:44:54:23: 15:34:10:dd:09:77:cb:08:e8:56:f4:cc:ea:2e:a9: e2:67:c5:e2:34:49:d8:d5:ed:a3:1e:8c:1f:3f:04: 0b:40:ce:42:a2:83:09:8b:21:69:16:51:ed:b9:53: 06:cf:9a:de:2d:b0:3c:2d:5a:20:49:22:9a:6a:a3: 9b:95:3e:16:e7:ec:10:3c:06:bf:33:79:f6:2d:aa: 5e:16:db:6a:75:46:bf:d8:06:dc:23:31:c3:8f:ca: d9:73:11:cf:54:6f:86:b7:1b:6c:59:26:66:28:b8: 8a:9a:12:ac:8e:08:0a:ee:9c:a4:65:7b:30:b4:e6: b8:d1:b0:e6:0c:04:5d:84:4b:0f:5c:9a:d9:20:e5: e8:2c:7b:a8:41:a3:a9:82:2d:39:e8:0d:1f:44:7b: f6:05:54:9a:49:5b:af:a3:12:4e:66:ad:13:68:14: 40:4f:0a:f0:0c:b0:0f:7c:00:c8:c0:99:16:db:31: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:CA:7B:55:BA:D0:CD:F2:E5:67:B9:81:44:20:85:86:62:AE:FA X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:07:d2:05:25:df:27:7d:c3:5f:7a:1d:3f:89:80:b3:15:b9: 3f:1c:a4:2a:a0:4b:a2:70:84:97:b3:a3:77:95:0c:af:7e:d0: 13:ca:98:0d:82:aa:ba:48:ed:b5:cb:a9:e4:e5:1d:0b:f3:84: 16:2b:81:3c:9c:0f:d3:d9:de:f2:f3:3d:ec:f6:44:7e:d6:41: 08:59:b9:2f:e0:33:ff:c5:58:32:d4:89:0f:63:a5:96:13:44: 88:0c:8d:c0:aa:72:8c:ab:98:3e:99:5c:88:bb:0e:a0:66:86: a1:ae:a9:87:92:4b:87:e9:41:03:95:b7:e4:c5:07:54:c7:2c: 3c:00:f4:18:52:76:71:1a:47:1c:14:73:b4:aa:66:a8:ea:a3: 44:57:35:f3:dd:21:26:66:1d:c7:ef:f0:fd:4a:8a:39:6a:f3: 59:3a:58:69:27:6f:cc:15:79:02:f4:77:36:70:5b:c7:35:ea: ba:d2:bc:40:c0:4f:13:60:5a:4c:25:c5:5a:83:35:5b:82:2f: a7:4a:c3:45:e4:48:74:1a:c1:fe:ea:e5:77:ac:66:d1:7e:dd: ec:47:38:76:67:66:ce:cb:03:67:4a:57:38:83:e7:a5:fa:1b: 8e:c9:9e:d7:f2:7a:37:0c:c1:07:6f:cc:75:81:5e:0f:4b:38: ee:39:0a:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOimFiYuEc/7EyFnoZFMlvZ3/PdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA5MjQwODE1NTRaFw0yNjA5MjUwOTI0NTRaMDMxMTAvBgNV BAMTKDFDODJDQTdCNTVCQUQwQ0RGMkU1NjdCOTgxNDQyMDg1ODY2MkFFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGj+xOSWMcbZq3dHvyoG7IB/C eMMvjTr/SY+L42f/adJ1g7E0/fwIhxA8KRNXBoYm+F74vLqObF+GH7C03xokt5Bn QQX1iERUIxU0EN0Jd8sI6Fb0zOouqeJnxeI0SdjV7aMejB8/BAtAzkKigwmLIWkW Ue25UwbPmt4tsDwtWiBJIppqo5uVPhbn7BA8Br8zefYtql4W22p1Rr/YBtwjMcOP ytlzEc9Ub4a3G2xZJmYouIqaEqyOCArunKRlezC05rjRsOYMBF2ESw9cmtkg5egs e6hBo6mCLTnoDR9Ee/YFVJpJW6+jEk5mrRNoFEBPCvAMsA98AMjAmRbbMaLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHILKe1W60M3y5We5gUQghYZirvowHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEH0gUl3yd9w196HT+JgLMVuT8cpCqgS6Jw hJezo3eVDK9+0BPKmA2CqrpI7bXLqeTlHQvzhBYrgTycD9PZ3vLzPez2RH7WQQhZ uS/gM//FWDLUiQ9jpZYTRIgMjcCqcoyrmD6ZXIi7DqBmhqGuqYeSS4fpQQOVt+TF B1THLDwA9BhSdnEaRxwUc7SqZqjqo0RXNfPdISZmHcfv8P1Kijlq81k6WGknb8wV eQL0dzZwW8c16rrSvEDATxNgWkwlxVqDNVuCL6dKw0XkSHQawf7q5XesZtF+3exH OHZnZs7LA2dKVziD56X6G47JntfyejcMwQdvzHWBXg9LOO45CiQ= -----END CERTIFICATE-----Generated at Fri Sep 25 02:35:26 2026 by rpki-client