
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json)
Hash identifier: whdbA8CVOqSYnWu/8NmGe1G6WGwXTA5R0lb9/H8Gjq4=
Subject key identifier: 2E:3C:30:40:1B:9B:1E:D8:69:9A:A6:D4:DB:AB:CD:8C:C4:84:4D:30
Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6
Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6
Certificate serial: 3DB9D712143C50574F029BD6E98A674480D2D712
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:32:37 +0000
Manifest this update: Thu 23 Jul 2026 18:27:37 +0000
Manifest next update: Fri 24 Jul 2026 21:12:37 +0000
Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=)
2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=)
3: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: BofQKr2Dp5u2MA1cEmXuiF3TWwBWfGsYdsqkvptU4sc=)
4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl
rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b9:d7:12:14:3c:50:57:4f:02:9b:d6:e9:8a:67:44:80:d2:d7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6
Validity
Not Before: Jul 23 18:27:37 2026 GMT
Not After : Jul 24 21:12:37 2026 GMT
Subject: CN=2E3C30401B9B1ED8699AA6D4DBABCD8CC4844D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:2d:5e:28:89:65:23:c6:75:98:f0:01:b9:
2e:3f:09:ef:51:c1:c8:2f:14:d6:eb:c8:01:c6:00:
e3:54:a8:35:22:eb:f1:ac:61:fd:6c:7e:a2:8c:7e:
da:8e:65:db:7e:05:ed:2c:5d:2d:db:3b:61:8d:38:
ab:70:79:6b:7f:ff:c0:70:04:0a:2c:11:81:a9:a8:
09:ae:ee:64:77:79:9a:fc:7f:90:6a:f3:60:81:de:
a8:16:f9:ce:b0:76:ec:32:2e:20:3a:b5:ae:df:42:
22:1c:12:2d:df:6d:a0:e8:4c:7e:e7:ea:ac:07:11:
2e:c5:c0:3f:f8:df:27:e8:bf:c8:0a:65:e7:87:c3:
fe:3a:6b:b0:92:3a:85:83:b9:a1:fb:8b:b1:2b:d2:
9a:9c:c5:e1:ba:44:cb:58:8e:e9:e0:35:45:c3:dd:
48:1d:52:5b:93:81:cd:30:cc:41:70:c8:37:b2:f9:
8e:66:f2:65:82:99:e9:ab:f1:45:c5:ec:8e:89:0d:
87:c1:35:2d:48:a0:48:7d:71:f8:e3:ca:bc:b5:17:
e1:74:34:ac:77:ae:38:7a:23:00:50:f8:81:f1:55:
d2:12:21:21:28:76:76:f0:e8:a1:8b:e2:f5:f3:ab:
56:c5:e8:d4:ab:2f:3a:7d:36:9e:e5:93:e3:92:1d:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3C:30:40:1B:9B:1E:D8:69:9A:A6:D4:DB:AB:CD:8C:C4:84:4D:30
X509v3 Authority Key Identifier:
keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:91:22:12:cb:87:08:a6:7a:92:88:47:04:10:54:19:b0:02:
39:af:34:9d:42:65:51:e8:80:b3:b2:3a:4e:b3:b8:68:dc:5f:
f5:ee:f6:40:c5:0d:e4:6a:f6:ff:55:52:3e:b6:5e:62:93:8b:
07:ab:02:30:b1:32:38:f2:01:6d:85:98:62:45:b3:8d:8e:64:
83:0a:2e:f5:3d:3e:04:73:43:c1:5e:d5:8d:ab:5b:7e:37:f9:
cd:c6:50:a5:c1:49:d6:37:0f:fd:08:1d:78:de:fd:16:e7:39:
81:a4:b5:ec:4b:20:60:6d:d3:da:d7:03:f5:0f:09:e8:a2:29:
af:93:3a:82:1f:4c:0e:2b:a5:62:4e:a0:9a:2a:e8:d6:3e:b4:
2c:2d:30:5d:ed:78:9f:4b:d3:8d:64:38:60:3b:c9:e9:92:c9:
bb:7a:b4:2f:7a:8a:cd:ca:53:fa:83:a2:f9:40:4a:35:1e:ff:
73:65:89:74:7f:14:49:83:28:cc:1e:6b:77:2f:a0:6f:ec:74:
94:47:9a:72:9c:26:07:32:1e:00:b7:c5:b3:c9:dc:88:ee:ac:
82:24:2f:c6:b7:e4:5b:4f:82:58:b9:de:0e:ea:87:c9:c9:90:
4e:12:14:0b:f9:10:1c:b0:bf:67:59:ed:86:98:36:c3:d1:22:
49:5e:00:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:15 2026 by rpki-client