$ rpki-client -vvf rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft File: BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft (raw, json) Hash identifier: ThR3zgZjqRcaCx57dqRQkLkfZBUDPCcT4BrH084WFR8= Subject key identifier: 3B:27:5B:6B:F1:C3:B5:38:2B:8F:03:99:B5:B3:6B:6E:9C:23:83:2C Authority key identifier: BA:79:42:F7:10:A9:6D:2E:58:44:CB:59:FF:50:B4:A1:B5:7D:EE:75 Certificate issuer: /CN=BA7942F710A96D2E5844CB59FF50B4A1B57DEE75 Certificate serial: 3A63DB1FE62E9F06B56411A4503EFC04783C1916 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:41:04 +0000 Manifest this update: Tue 12 May 2026 22:36:04 +0000 Manifest next update: Thu 14 May 2026 00:46:04 +0000 Files and hashes: 1: BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl (hash: 4k4tpIxFqf3CVHCXYFLc3f2BWbvROJPFnbHoziNkyGM=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: gB2XAgMbpkCp6GRXXto6VwaneP5fQ+ewIgMqwQ77ASc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:63:db:1f:e6:2e:9f:06:b5:64:11:a4:50:3e:fc:04:78:3c:19:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7942F710A96D2E5844CB59FF50B4A1B57DEE75 Validity Not Before: May 12 22:36:04 2026 GMT Not After : May 14 00:46:04 2026 GMT Subject: CN=3B275B6BF1C3B5382B8F0399B5B36B6E9C23832C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:8c:3c:55:d9:73:c2:21:cc:67:dd:7e:8d: f3:2f:a2:0e:9f:2d:68:3c:00:89:17:08:a9:32:16: e9:a1:e6:e0:a9:cd:76:70:c4:9a:27:8b:ac:c0:2a: 2b:bf:c0:39:d7:63:3c:6a:be:0e:09:9b:2a:8f:c6: ea:af:e9:07:a3:14:ea:30:08:4b:b7:aa:c0:6e:60: 5e:22:4a:a4:4b:ce:8c:ae:7c:cf:3f:2e:ad:9c:b8: 7d:c2:41:bc:35:b8:98:ed:0f:1e:d6:d1:54:09:b6: ce:db:e3:44:a6:ca:d8:30:ca:13:1c:f9:b6:f1:82: c5:34:b3:8b:e5:f9:a9:15:6f:c9:63:e6:4c:31:4e: f7:5a:9d:7e:e2:d0:89:08:a4:ea:4a:3c:ff:e5:23: 2c:81:be:e8:bf:44:3f:f5:fb:8c:1d:b8:92:f1:f5: 2e:b4:97:14:37:0a:ee:c4:0f:c2:d9:38:e3:dd:3e: 8a:e6:f8:55:60:62:69:04:61:73:79:7a:4b:88:be: 3e:af:91:2c:7a:f6:65:2f:b6:0d:a3:95:20:1c:a0: e9:1b:14:94:22:d3:88:76:3b:7d:82:62:e9:08:a7: 70:f4:e5:a9:4c:a6:3d:5a:2c:5a:82:24:a7:ca:f1: 8e:34:44:a2:cf:c2:7f:3e:cf:37:1b:26:9c:8c:3e: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:5B:6B:F1:C3:B5:38:2B:8F:03:99:B5:B3:6B:6E:9C:23:83:2C X509v3 Authority Key Identifier: keyid:BA:79:42:F7:10:A9:6D:2E:58:44:CB:59:FF:50:B4:A1:B5:7D:EE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9b:6a:c4:8e:83:be:46:53:13:b8:9e:4b:16:dc:9d:30:fd: ca:c2:ba:2d:a2:fe:46:90:20:20:d2:7a:9e:f3:1c:81:38:04: 1b:d2:57:35:80:ef:03:69:0a:ac:0d:9e:f9:9d:3e:e8:67:82: 14:65:f4:42:e6:99:1c:b9:4d:cc:95:2c:04:38:c5:cc:70:28: ba:04:68:b7:6b:e7:8d:ea:70:25:a9:75:e1:1e:b4:38:6a:38: 3c:27:90:fb:fb:dd:07:93:67:59:32:bf:8e:8b:d5:10:ce:45: 0b:4c:bc:c2:b0:d9:fa:4f:a1:e6:db:f8:74:53:04:14:56:d7: 40:bd:21:a3:27:93:98:d5:d8:cf:cb:4c:ad:4f:c3:9c:9e:09: cf:d9:06:11:55:2f:7c:34:7e:f0:b7:4d:5d:71:46:62:be:54: 6a:2d:8b:e5:2a:38:cd:41:65:af:90:81:77:e4:82:3b:f1:40: 59:a2:71:f5:5a:78:a6:30:92:be:29:e8:08:f0:61:3a:e4:3c: e2:63:e5:9d:db:1b:66:de:8c:21:85:fd:12:e0:8b:ad:65:9a: 1a:0a:99:61:96:f6:34:d8:c8:2f:e7:e9:60:73:9d:10:f5:59: 91:69:b6:70:57:87:8e:2a:0f:1c:28:18:aa:8c:32:7e:85:72: fa:4e:73:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmPbH+Yunwa1ZBGkUD78BHg8GRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3OTQyRjcxMEE5NkQyRTU4NDRDQjU5RkY1MEI0QTFC NTdERUU3NTAeFw0yNjA1MTIyMjM2MDRaFw0yNjA1MTQwMDQ2MDRaMDMxMTAvBgNV BAMTKDNCMjc1QjZCRjFDM0I1MzgyQjhGMDM5OUI1QjM2QjZFOUMyMzgzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHvIw8VdlzwiHMZ91+jfMvog6f LWg8AIkXCKkyFumh5uCpzXZwxJoni6zAKiu/wDnXYzxqvg4JmyqPxuqv6QejFOow CEu3qsBuYF4iSqRLzoyufM8/Lq2cuH3CQbw1uJjtDx7W0VQJts7b40SmytgwyhMc +bbxgsU0s4vl+akVb8lj5kwxTvdanX7i0IkIpOpKPP/lIyyBvui/RD/1+4wduJLx 9S60lxQ3Cu7ED8LZOOPdPorm+FVgYmkEYXN5ekuIvj6vkSx69mUvtg2jlSAcoOkb FJQi04h2O32CYukIp3D05alMpj1aLFqCJKfK8Y40RKLPwn8+zzcbJpyMPijfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOydba/HDtTgrjwOZtbNrbpwjgywwHwYDVR0j BBgwFoAUunlC9xCpbS5YRMtZ/1C0obV97nUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFjYmM5MjctZjRlMi00MTUzLWI2NmItY2UxZWMwMmQ3NDEwLzAvQkE3OTQyRjcx MEE5NkQyRTU4NDRDQjU5RkY1MEI0QTFCNTdERUU3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTc5NDJGNzEwQTk2RDJFNTg0NENCNTlGRjUwQjRBMUI1N0RF RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvQkE3OTQyRjcxMEE5NkQyRTU4NDRDQjU5RkY1MEI0 QTFCNTdERUU3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqbasSOg75GUxO4nksW3J0w/crCui2i/kaQ ICDSep7zHIE4BBvSVzWA7wNpCqwNnvmdPuhnghRl9ELmmRy5TcyVLAQ4xcxwKLoE aLdr543qcCWpdeEetDhqODwnkPv73QeTZ1kyv46L1RDORQtMvMKw2fpPoebb+HRT BBRW10C9IaMnk5jV2M/LTK1Pw5yeCc/ZBhFVL3w0fvC3TV1xRmK+VGoti+UqOM1B Za+QgXfkgjvxQFmicfVaeKYwkr4p6AjwYTrkPOJj5Z3bG2bejCGF/RLgi61lmhoK mWGW9jTYyC/n6WBznRD1WZFptnBXh44qDxwoGKqMMn6FcvpOcwE= -----END CERTIFICATE-----Generated at Wed May 13 04:26:50 2026 by rpki-client