$ rpki-client -vvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: IyVm0hccE+Dg5lEZ5mhvfK7gg7cfcHdO2k9baxbWKdw= Subject key identifier: D1:39:79:CA:ED:A0:6E:18:7A:E7:B1:9A:1B:DC:56:C0:CE:9B:FE:48 Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 453D335BEC74DF878D16EA7043F1FE7EDFB2A492 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: 0F Signing time: Tue 12 May 2026 11:47:26 +0000 Manifest this update: Tue 12 May 2026 11:42:26 +0000 Manifest next update: Wed 13 May 2026 13:05:26 +0000 Files and hashes: 1: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: Z5MA3xTb5yQh6dvwrAt7J5C2qygngB6+Pw1Xm5RaaRI=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3d:33:5b:ec:74:df:87:8d:16:ea:70:43:f1:fe:7e:df:b2:a4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: May 12 11:42:26 2026 GMT Not After : May 13 13:05:26 2026 GMT Subject: CN=D13979CAEDA06E187AE7B19A1BDC56C0CE9BFE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:22:e0:35:2a:c1:4f:22:8a:c9:5d:fa:78: 2a:f5:41:ed:0a:11:9c:c4:df:0f:bd:b4:42:05:9f: 77:97:4c:f5:aa:f2:26:3c:5a:70:58:00:c0:c7:d4: cc:c9:a5:5c:4c:f9:27:c4:27:6b:b1:65:50:39:4a: f1:14:49:da:73:ab:dd:72:ff:47:47:f8:b6:29:0e: a8:ae:f1:97:0f:66:0c:f8:3a:89:ae:82:94:87:79: 78:ad:d7:8a:41:7c:d2:2d:ed:01:4e:82:79:c6:00: cc:7a:3e:92:d7:c1:7d:9c:8e:34:86:3c:93:63:af: b6:56:5f:f2:0c:bd:e2:90:f3:35:59:86:e3:53:e5: e3:77:df:c6:f1:5b:12:29:e5:e6:ca:8e:10:fd:8f: c9:2a:e5:90:ea:dd:d5:0c:7e:39:66:c8:6b:f6:83: c5:5d:bd:10:de:6b:67:b2:bd:d6:28:60:65:b0:28: 19:16:8d:90:ac:29:d9:0c:bc:e0:b9:26:1f:0f:e2: 87:33:5b:62:f7:00:22:3f:6c:ef:dd:8a:4e:55:cf: 93:79:30:ab:b4:9e:72:59:7c:a1:cc:f6:60:f0:e7: ef:97:1f:58:98:07:9d:76:71:83:c7:b1:ab:9f:84: a6:62:64:3f:69:40:5d:01:87:35:21:d9:a7:02:7c: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:39:79:CA:ED:A0:6E:18:7A:E7:B1:9A:1B:DC:56:C0:CE:9B:FE:48 X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bb:4a:90:e7:47:fc:2c:7d:4a:0c:ec:8e:1d:db:6e:6e:ea: ed:aa:3f:8e:18:30:e5:7d:84:81:60:02:4b:cd:67:31:69:40: 6f:34:a7:1b:9c:93:2a:6d:b5:01:80:a2:d8:37:a7:41:ce:1a: 4b:7c:dc:52:74:50:7b:32:98:68:22:f2:16:61:ee:9a:13:cd: 34:70:c6:49:c3:c9:fc:b3:22:e1:ac:7c:11:4a:dc:f4:10:ca: 51:59:f5:29:ae:48:86:71:71:b7:55:54:a1:47:56:f7:a7:ae: b9:a5:a3:29:3a:16:5a:b1:bf:a0:f1:16:83:72:9f:4c:61:d6: 9e:2a:85:f0:9d:be:68:6b:3b:6b:a1:8d:4d:13:55:18:c8:8f: bf:e4:e6:14:7c:39:0b:f0:f4:db:54:da:a4:0f:2b:31:78:0d: fc:18:0f:06:c0:27:7c:2e:3d:6c:7c:91:d9:d7:37:c5:2a:59: 2d:85:c0:53:16:e9:53:a2:0f:18:a8:61:13:78:68:cc:8f:9c: 59:c0:03:f6:ed:72:cd:1f:2c:95:45:d7:7c:1b:4d:f8:fe:09: 83:7e:af:3a:21:c7:71:6f:12:50:6d:16:0d:eb:5b:ba:f2:80: 15:7d:33:3a:79:d9:51:79:67:9d:93:53:18:e5:69:79:ef:de: e9:41:44:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURT0zW+x034eNFupwQ/H+ft+ypJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA1MTIxMTQyMjZaFw0yNjA1MTMxMzA1MjZaMDMxMTAvBgNV BAMTKEQxMzk3OUNBRURBMDZFMTg3QUU3QjE5QTFCREM1NkMwQ0U5QkZFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NCLgNSrBTyKKyV36eCr1Qe0K EZzE3w+9tEIFn3eXTPWq8iY8WnBYAMDH1MzJpVxM+SfEJ2uxZVA5SvEUSdpzq91y /0dH+LYpDqiu8ZcPZgz4OomugpSHeXit14pBfNIt7QFOgnnGAMx6PpLXwX2cjjSG PJNjr7ZWX/IMveKQ8zVZhuNT5eN338bxWxIp5ebKjhD9j8kq5ZDq3dUMfjlmyGv2 g8VdvRDea2eyvdYoYGWwKBkWjZCsKdkMvOC5Jh8P4oczW2L3ACI/bO/dik5Vz5N5 MKu0nnJZfKHM9mDw5++XH1iYB512cYPHsaufhKZiZD9pQF0BhzUh2acCfCVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Tl5yu2gbhh657GaG9xWwM6b/kgwHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALy7SpDnR/wsfUoM7I4d225u6u2qP44YMOV9 hIFgAkvNZzFpQG80pxuckypttQGAotg3p0HOGkt83FJ0UHsymGgi8hZh7poTzTRw xknDyfyzIuGsfBFK3PQQylFZ9SmuSIZxcbdVVKFHVvenrrmloyk6Flqxv6DxFoNy n0xh1p4qhfCdvmhrO2uhjU0TVRjIj7/k5hR8OQvw9NtU2qQPKzF4DfwYDwbAJ3wu PWx8kdnXN8UqWS2FwFMW6VOiDxioYRN4aMyPnFnAA/btcs0fLJVF13wbTfj+CYN+ rzohx3FvElBtFg3rW7rygBV9Mzp52VF5Z52TUxjlaXnv3ulBRMA= -----END CERTIFICATE-----Generated at Wed May 13 01:41:13 2026 by rpki-client