$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft File: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft (raw, json) Hash identifier: lgfPjdxj8UAdxMPjHzXFT3xst1ZInATUYgd47uXxxQA= Subject key identifier: 85:D3:AD:01:16:3C:42:9A:57:8E:BB:4D:11:A8:00:1D:DD:FA:A5:23 Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 3D0DA815A6D5BC6784145E4D12589537B573CD00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:03:31 +0000 Manifest this update: Wed 23 Sep 2026 13:58:31 +0000 Manifest next update: Thu 24 Sep 2026 14:23:31 +0000 Files and hashes: 1: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM=) 2: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl (hash: ihY4aGTESgibBXM0eGBR9C8WjKRD0ppMJNGLifPVrKw=) 3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: 6KPoXiqtvd9nuyAco4ru4jZgNuQNFI930Qn7LAylJPg=) 4: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0d:a8:15:a6:d5:bc:67:84:14:5e:4d:12:58:95:37:b5:73:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: Sep 23 13:58:31 2026 GMT Not After : Sep 24 14:23:31 2026 GMT Subject: CN=85D3AD01163C429A578EBB4D11A8001DDDFAA523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:51:7a:fe:6b:98:0c:bb:3b:7d:43:45:81: 40:52:d9:92:56:d3:92:fd:9d:32:19:83:0b:e4:4a: 79:1d:d1:ca:b4:41:db:f7:ba:85:4f:41:7c:b4:cd: d4:94:6a:4d:24:81:f0:27:25:cf:82:10:1b:53:2d: b3:f9:84:20:cb:4b:01:30:92:5d:f3:00:01:72:d5: e8:50:e4:df:19:53:8d:50:b1:3b:94:30:56:89:24: 3c:df:47:2d:3c:20:69:8e:47:3d:08:bc:3e:5d:00: 81:11:4d:61:d9:06:9b:88:78:b7:80:0b:5f:3f:53: 62:f8:1a:90:d5:68:7b:88:a0:5f:b3:88:2f:f2:f7: bc:71:a6:9c:ac:4c:c7:e7:09:5c:b7:c7:ea:01:50: df:ae:7a:e3:55:be:ca:04:38:48:95:7e:dc:bc:6d: b6:f7:01:05:ae:bd:97:b4:32:b7:6b:f8:f4:ce:00: 31:18:f6:6c:e3:c9:03:94:5b:11:a3:e9:17:bd:82: c0:7b:db:15:0f:ce:13:ea:d6:6a:23:87:39:c9:e4: 97:17:1e:a7:51:c4:6f:8d:de:7b:c7:2f:c7:ed:84: 5e:63:8f:9f:b9:37:3c:0f:4f:51:01:71:2d:d3:16: 08:16:70:4a:b6:54:6d:fd:1f:db:73:c7:33:4b:46: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:AD:01:16:3C:42:9A:57:8E:BB:4D:11:A8:00:1D:DD:FA:A5:23 X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:83:a3:49:97:d1:16:cd:62:8d:40:62:24:36:12:13:5c:7a: bb:e4:46:06:10:b5:30:80:79:07:dd:3b:a0:c2:92:8f:dc:ad: 8f:80:01:00:ac:9c:94:b1:92:54:f6:87:d5:8e:7f:1f:b4:46: 35:f7:fa:cd:30:bd:b6:2a:26:dc:ec:11:90:88:66:88:ae:d6: cb:5c:98:8f:ff:0b:bd:8a:c6:6e:f7:2c:58:2a:ac:01:b0:45: 66:66:a5:f2:e1:31:24:ae:93:e7:8c:15:74:b4:5d:db:5b:80: d1:53:a8:61:10:d9:6d:65:56:0e:d5:ee:b3:e5:bc:38:7d:6f: 27:7f:06:6a:0c:bd:b5:03:be:c6:a6:0b:ea:53:b7:08:43:e3: b4:3b:f3:bf:cf:58:45:fe:29:dd:79:04:60:73:38:38:f4:6f: 05:87:a0:97:68:16:01:2f:ae:13:fa:a4:e1:33:a2:d6:14:10: 3c:ae:ca:f3:a1:62:e1:75:77:7e:f8:fa:ac:09:a4:f0:fc:b1: 12:be:61:10:20:15:28:86:89:15:6f:22:0d:20:7b:9b:57:b1: 3e:9c:ae:50:fa:c8:60:dc:33:52:00:78:58:e1:94:b4:cb:b7: 32:bd:b2:b4:a2:6f:fa:64:85:bd:fc:48:b5:54:fe:01:76:a0: a4:02:7d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQ2oFabVvGeEFF5NEliVN7VzzQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA5MjMxMzU4MzFaFw0yNjA5MjQxNDIzMzFaMDMxMTAvBgNV BAMTKDg1RDNBRDAxMTYzQzQyOUE1NzhFQkI0RDExQTgwMDFERERGQUE1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxB1F6/muYDLs7fUNFgUBS2ZJW 05L9nTIZgwvkSnkd0cq0Qdv3uoVPQXy0zdSUak0kgfAnJc+CEBtTLbP5hCDLSwEw kl3zAAFy1ehQ5N8ZU41QsTuUMFaJJDzfRy08IGmORz0IvD5dAIERTWHZBpuIeLeA C18/U2L4GpDVaHuIoF+ziC/y97xxppysTMfnCVy3x+oBUN+ueuNVvsoEOEiVfty8 bbb3AQWuvZe0Mrdr+PTOADEY9mzjyQOUWxGj6Re9gsB72xUPzhPq1mojhznJ5JcX HqdRxG+N3nvHL8fthF5jj5+5NzwPT1EBcS3TFggWcEq2VG39H9tzxzNLRmqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdOtARY8QppXjrtNEagAHd36pSMwHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQz MTQyQkRGM0M2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6Do0mX0RbNYo1AYiQ2EhNcervkRgYQtTCA eQfdO6DCko/crY+AAQCsnJSxklT2h9WOfx+0RjX3+s0wvbYqJtzsEZCIZoiu1stc mI//C72Kxm73LFgqrAGwRWZmpfLhMSSuk+eMFXS0XdtbgNFTqGEQ2W1lVg7V7rPl vDh9byd/BmoMvbUDvsamC+pTtwhD47Q787/PWEX+Kd15BGBzODj0bwWHoJdoFgEv rhP6pOEzotYUEDyuyvOhYuF1d374+qwJpPD8sRK+YRAgFSiGiRVvIg0ge5tXsT6c rlD6yGDcM1IAeFjhlLTLtzK9srSib/pkhb38SLVU/gF2oKQCfXw= -----END CERTIFICATE-----Generated at Thu Sep 24 07:03:11 2026 by rpki-client