$ rpki-client -vvf rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft File: BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft (raw, json) Hash identifier: TKQeSPlMYyuy5kJdl1RN7Ga2/nnzv9AuQ1yP0tOaros= Subject key identifier: 97:A9:9C:50:1D:93:04:D6:B5:B2:0C:EC:82:C9:5D:C3:24:FE:04:64 Authority key identifier: BA:79:42:F7:10:A9:6D:2E:58:44:CB:59:FF:50:B4:A1:B5:7D:EE:75 Certificate issuer: /CN=BA7942F710A96D2E5844CB59FF50B4A1B57DEE75 Certificate serial: 4729FBB1CAB844503BF0809CC2A5FF3BC8AC4A26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:54:21 +0000 Manifest this update: Thu 23 Jul 2026 15:49:21 +0000 Manifest next update: Fri 24 Jul 2026 18:31:21 +0000 Files and hashes: 1: BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl (hash: M4k+f6wdvSHY86BYyj6eqpM7XO5ip99YGveuJnMJ4dk=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: gB2XAgMbpkCp6GRXXto6VwaneP5fQ+ewIgMqwQ77ASc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:29:fb:b1:ca:b8:44:50:3b:f0:80:9c:c2:a5:ff:3b:c8:ac:4a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7942F710A96D2E5844CB59FF50B4A1B57DEE75 Validity Not Before: Jul 23 15:49:21 2026 GMT Not After : Jul 24 18:31:21 2026 GMT Subject: CN=97A99C501D9304D6B5B20CEC82C95DC324FE0464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:39:ff:ef:d1:b8:6c:d8:03:5b:4e:7a:c5: 04:f6:8d:01:16:45:1a:ee:f5:e7:cf:b2:6a:a7:03: e7:b7:b1:50:e4:5e:e0:ad:37:8e:c4:fe:c3:17:27: ba:61:14:c6:e7:2d:08:cb:9d:51:4d:a3:93:cb:c4: 28:45:30:1f:ab:9f:b9:4c:32:5c:84:af:09:a1:1a: c1:ed:07:55:92:6c:14:3f:8d:cc:37:74:14:68:1c: a1:07:b0:40:93:f9:c3:c5:f6:66:a5:85:b6:26:0f: 4e:ee:9d:52:3a:15:c3:eb:de:48:4c:d2:01:e0:2e: ee:42:00:76:54:b3:32:1b:48:e6:d1:69:d0:c2:97: 25:69:65:12:a7:6e:b9:e9:f6:7c:ff:75:5d:8a:e9: 0f:80:0b:02:cc:46:0f:01:9d:61:86:14:c3:fc:17: c4:53:25:75:7c:c7:55:15:21:d5:1f:7d:06:16:fe: 3d:e4:09:b4:a1:6d:75:e7:a4:b3:54:99:6e:55:93: 12:fa:ba:3a:37:ee:6d:d5:ce:7f:b7:34:52:53:9c: 83:85:ec:f6:ae:6c:3a:92:91:5f:81:b6:f4:b2:bd: c8:3d:b9:ea:25:71:7f:a6:e3:52:62:f6:73:83:7b: d5:f7:78:dd:2c:f0:d2:ee:7c:56:83:4b:ab:55:d2: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A9:9C:50:1D:93:04:D6:B5:B2:0C:EC:82:C9:5D:C3:24:FE:04:64 X509v3 Authority Key Identifier: keyid:BA:79:42:F7:10:A9:6D:2E:58:44:CB:59:FF:50:B4:A1:B5:7D:EE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7b:e8:16:80:73:9c:a4:fe:d4:ee:87:ef:6e:cf:d9:b6:f7: 3f:bb:81:1d:05:b7:8d:0a:39:ee:3b:a8:0d:1e:bb:b9:63:bf: 52:00:9d:c4:52:4d:72:b1:22:93:6e:e7:aa:17:ac:66:a2:b0: 71:bd:90:d7:82:e8:41:ff:ee:38:64:6a:83:ee:77:6e:60:32: 04:b9:ec:2c:d3:ed:c1:c3:40:98:05:48:0f:a5:57:5b:b4:09: 22:23:be:fa:d0:50:7a:e5:82:c7:73:d7:4d:29:9d:2b:88:ea: 3d:3e:ef:45:ae:db:89:6f:7f:4a:ba:10:b1:98:f4:8c:44:0b: 0e:e6:49:dc:97:d7:51:3b:75:0b:27:45:82:94:8a:6b:0d:2e: 5f:7e:38:d3:bd:ed:95:b7:ad:94:21:57:64:24:01:10:b5:6a: 5c:0e:f9:13:62:5d:81:03:9e:e9:ed:36:bc:42:57:a3:84:dd: 9c:79:79:2c:83:1c:7f:14:e8:e7:00:23:5a:26:b4:f4:72:f1: 93:c4:39:63:ec:7d:cc:9f:0f:52:5a:70:2b:47:0a:b2:cf:13: 99:0c:d1:03:1c:95:05:06:69:23:43:ee:3a:33:48:51:59:10: 9c:c6:43:4a:0b:92:fe:d3:56:71:7d:d0:71:9a:a5:c0:b5:10: 7b:9e:5e:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyn7scq4RFA78ICcwqX/O8isSiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3OTQyRjcxMEE5NkQyRTU4NDRDQjU5RkY1MEI0QTFC NTdERUU3NTAeFw0yNjA3MjMxNTQ5MjFaFw0yNjA3MjQxODMxMjFaMDMxMTAvBgNV BAMTKDk3QTk5QzUwMUQ5MzA0RDZCNUIyMENFQzgyQzk1REMzMjRGRTA0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUjn/79G4bNgDW056xQT2jQEW RRru9efPsmqnA+e3sVDkXuCtN47E/sMXJ7phFMbnLQjLnVFNo5PLxChFMB+rn7lM MlyErwmhGsHtB1WSbBQ/jcw3dBRoHKEHsECT+cPF9malhbYmD07unVI6FcPr3khM 0gHgLu5CAHZUszIbSObRadDClyVpZRKnbrnp9nz/dV2K6Q+ACwLMRg8BnWGGFMP8 F8RTJXV8x1UVIdUffQYW/j3kCbShbXXnpLNUmW5VkxL6ujo37m3Vzn+3NFJTnIOF 7PaubDqSkV+BtvSyvcg9ueolcX+m41Ji9nODe9X3eN0s8NLufFaDS6tV0sShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl6mcUB2TBNa1sgzsgsldwyT+BGQwHwYDVR0j BBgwFoAUunlC9xCpbS5YRMtZ/1C0obV97nUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFjYmM5MjctZjRlMi00MTUzLWI2NmItY2UxZWMwMmQ3NDEwLzAvQkE3OTQyRjcx MEE5NkQyRTU4NDRDQjU5RkY1MEI0QTFCNTdERUU3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTc5NDJGNzEwQTk2RDJFNTg0NENCNTlGRjUwQjRBMUI1N0RF RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvQkE3OTQyRjcxMEE5NkQyRTU4NDRDQjU5RkY1MEI0 QTFCNTdERUU3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh76BaAc5yk/tTuh+9uz9m29z+7gR0Ft40K Oe47qA0eu7ljv1IAncRSTXKxIpNu56oXrGaisHG9kNeC6EH/7jhkaoPud25gMgS5 7CzT7cHDQJgFSA+lV1u0CSIjvvrQUHrlgsdz100pnSuI6j0+70Wu24lvf0q6ELGY 9IxECw7mSdyX11E7dQsnRYKUimsNLl9+ONO97ZW3rZQhV2QkARC1alwO+RNiXYED nuntNrxCV6OE3Zx5eSyDHH8U6OcAI1omtPRy8ZPEOWPsfcyfD1JacCtHCrLPE5kM 0QMclQUGaSND7jozSFFZEJzGQ0oLkv7TVnF90HGapcC1EHueXnM= -----END CERTIFICATE-----Generated at Fri Jul 24 03:15:01 2026 by rpki-client