$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft File: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft (raw, json) Hash identifier: /ZNsZvN8ZpPvj9N//6cc4nc7bYPAMufkxlKGBVGmzp0= Subject key identifier: 5F:5E:C8:9A:12:FC:8E:41:8D:5A:9E:93:00:16:65:0A:77:2C:84:1A Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 1447213B81721C4E12D52E694DF93FD620FA9D1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:06:00 +0000 Manifest this update: Thu 23 Jul 2026 09:01:00 +0000 Manifest next update: Fri 24 Jul 2026 12:46:00 +0000 Files and hashes: 1: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc=) 2: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: 6KPoXiqtvd9nuyAco4ru4jZgNuQNFI930Qn7LAylJPg=) 3: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM=) 4: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl (hash: PIAbXfolbisAHziK2RxUSMkOE6hi9kFjrfREc/3iTPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:47:21:3b:81:72:1c:4e:12:d5:2e:69:4d:f9:3f:d6:20:fa:9d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: Jul 23 09:01:00 2026 GMT Not After : Jul 24 12:46:00 2026 GMT Subject: CN=5F5EC89A12FC8E418D5A9E930016650A772C841A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:72:4a:89:1e:58:ae:52:23:b5:00:aa:b2: 5b:79:8b:c9:24:3e:34:63:d6:74:42:1f:66:7c:53: de:13:97:b0:a3:e5:13:33:9d:d3:57:59:af:7f:2b: 17:1f:6a:a8:08:9b:e5:50:3a:b4:c1:fd:bd:19:81: 52:ff:4d:ee:a6:6c:c8:a3:69:92:b9:80:09:da:b9: 75:ed:b1:31:26:ad:06:51:8f:d1:d0:77:cf:d5:08: bd:5a:27:88:6b:c1:89:62:d5:ba:b4:d2:9e:24:5a: a0:97:49:bd:88:f8:2c:e8:a6:22:8b:7d:4e:ab:a6: 5f:5c:10:da:33:73:93:1b:7b:5a:af:1c:90:e7:d5: 61:ca:cf:4b:f0:2b:3b:06:88:94:b9:43:14:de:1f: bc:7f:de:3b:56:30:1b:2e:8a:6e:2f:06:a3:12:0b: bc:53:4e:b5:eb:5e:0d:a8:75:40:de:10:12:86:9d: a6:52:d1:8e:1b:e3:7f:dc:d4:6f:62:1e:0b:0a:18: 89:da:7e:41:22:42:a3:48:0e:e0:11:23:18:fd:6a: 3e:d8:29:91:94:09:94:10:83:1f:b6:45:a6:dc:0f: fd:34:d1:a5:68:17:27:14:7b:37:67:fd:88:f5:bc: 70:36:16:10:3d:9f:83:1f:0a:88:8c:b7:24:92:8f: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:C8:9A:12:FC:8E:41:8D:5A:9E:93:00:16:65:0A:77:2C:84:1A X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f5:d5:c5:a1:c4:80:35:27:b5:62:9e:8d:30:c1:ba:f0:88: b2:36:a7:b1:27:76:81:ff:61:93:a1:70:bb:45:8f:f7:da:83: bc:e0:3f:3c:6d:72:0f:39:29:38:1a:b4:c2:1f:2c:c9:b9:63: 2b:19:f9:34:9d:e0:24:7f:12:ea:dc:9c:47:81:4d:88:29:cd: 79:71:ba:34:bb:bf:8e:17:7e:f3:ba:74:99:6f:e1:8c:73:00: f5:08:a1:34:92:22:3f:c9:38:60:9f:74:48:a5:ff:98:97:96: 87:3a:29:64:8f:66:0c:b3:9b:a4:ec:89:26:45:0c:6d:e6:c8: b8:7f:56:60:14:84:45:32:b6:6f:c9:bf:09:61:bd:f9:4a:b0: 56:c3:17:b5:39:74:95:9c:ef:ca:4d:22:ab:27:44:20:b4:27: 9d:23:d3:ab:32:d1:77:d8:cb:27:f2:b8:06:da:db:05:2d:be: df:3d:1b:fa:e3:2f:cf:de:1f:fa:35:09:17:85:87:d1:e1:7c: 6e:85:f7:6e:4c:ef:60:9b:f9:3f:38:0f:5b:45:a3:b2:7a:10: ac:04:98:4d:31:ed:8f:ef:f2:00:0c:95:8e:fa:a4:7b:66:9a: 19:5c:9e:3c:e1:05:9b:50:04:48:0d:2e:bd:2a:93:37:16:5f: 0f:26:30:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEchO4FyHE4S1S5pTfk/1iD6nRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA3MjMwOTAxMDBaFw0yNjA3MjQxMjQ2MDBaMDMxMTAvBgNV BAMTKDVGNUVDODlBMTJGQzhFNDE4RDVBOUU5MzAwMTY2NTBBNzcyQzg0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglHJKiR5YrlIjtQCqslt5i8kk PjRj1nRCH2Z8U94Tl7Cj5RMzndNXWa9/KxcfaqgIm+VQOrTB/b0ZgVL/Te6mbMij aZK5gAnauXXtsTEmrQZRj9HQd8/VCL1aJ4hrwYli1bq00p4kWqCXSb2I+CzopiKL fU6rpl9cENozc5Mbe1qvHJDn1WHKz0vwKzsGiJS5QxTeH7x/3jtWMBsuim4vBqMS C7xTTrXrXg2odUDeEBKGnaZS0Y4b43/c1G9iHgsKGInafkEiQqNIDuARIxj9aj7Y KZGUCZQQgx+2RabcD/000aVoFycUezdn/Yj1vHA2FhA9n4MfCoiMtySSjxlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX17ImhL8jkGNWp6TABZlCncshBowHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQz MTQyQkRGM0M2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj11cWhxIA1J7Vino0wwbrwiLI2p7EndoH/ YZOhcLtFj/fag7zgPzxtcg85KTgatMIfLMm5YysZ+TSd4CR/EurcnEeBTYgpzXlx ujS7v44XfvO6dJlv4YxzAPUIoTSSIj/JOGCfdEil/5iXloc6KWSPZgyzm6TsiSZF DG3myLh/VmAUhEUytm/JvwlhvflKsFbDF7U5dJWc78pNIqsnRCC0J50j06sy0XfY yyfyuAba2wUtvt89G/rjL8/eH/o1CReFh9HhfG6F925M72Cb+T84D1tFo7J6EKwE mE0x7Y/v8gAMlY76pHtmmhlcnjzhBZtQBEgNLr0qkzcWXw8mMH0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:04 2026 by rpki-client