$ rpki-client -vvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: 4Ox59lzuMftzABXVzaUnZbrlZYHX5UEv+iDKngMWIw8= Subject key identifier: 52:94:B0:D9:BB:FC:64:1B:71:99:EA:4E:37:78:A4:D5:B9:C1:D5:EB Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 59A8F88EF631C231DC9AE0427216968146E78329 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:27 +0000 Manifest this update: Fri 24 Jul 2026 03:18:27 +0000 Manifest next update: Sat 25 Jul 2026 04:59:27 +0000 Files and hashes: 1: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: qWAdAX5Ei8GnPKBtn8tFHHIAxHd0V7KD4RoRbamQ89U=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a8:f8:8e:f6:31:c2:31:dc:9a:e0:42:72:16:96:81:46:e7:83:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Jul 24 03:18:27 2026 GMT Not After : Jul 25 04:59:27 2026 GMT Subject: CN=5294B0D9BBFC641B7199EA4E3778A4D5B9C1D5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:05:31:f8:98:41:01:7b:89:0c:41:0d:4d: ea:63:df:aa:39:eb:c2:38:65:47:ad:d3:41:ea:1c: 77:5f:26:a5:cf:5b:6c:ff:1f:43:35:97:31:a6:2e: 7d:46:88:9d:04:11:61:31:4d:03:43:35:2c:2a:57: c2:80:d2:64:f2:bc:f3:3a:a0:12:a2:9f:d1:bf:71: d4:4d:88:cf:48:54:29:a2:17:dc:af:5d:e3:2c:f6: a2:09:9f:d9:82:f3:a3:8f:a0:65:8a:30:1f:5c:60: e4:35:26:ab:ec:da:51:74:5f:dd:2f:68:10:a9:e9: f5:a1:54:5d:6a:66:b3:9d:67:59:37:84:b5:a4:e1: 35:4c:4d:50:81:27:20:d7:bc:84:a0:d0:a3:30:6b: 3a:ca:1c:4d:b8:ba:0f:99:a6:37:62:50:97:f1:0d: da:af:37:6a:41:c0:16:60:07:b8:6c:81:d4:a7:2b: 8f:f7:c1:76:01:de:20:de:b6:65:1c:6b:36:84:00: 92:47:5d:1a:55:33:aa:00:4a:d8:46:c2:64:fb:3b: 24:fe:86:11:8b:c7:92:a6:8d:cf:9e:26:01:07:c4: f4:c0:1d:9d:9f:ce:e2:91:bf:45:1d:e5:0f:9b:ea: e8:6d:20:bb:7f:c9:74:7f:b4:fe:07:db:02:4b:e8: b9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:B0:D9:BB:FC:64:1B:71:99:EA:4E:37:78:A4:D5:B9:C1:D5:EB X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6d:f3:42:a0:33:0f:25:9c:e2:83:3e:94:9b:25:6c:0f:ef: fe:2d:50:90:65:97:c4:85:24:a8:e2:e8:21:af:fb:0c:81:e4: 8b:b8:48:05:26:ba:5a:5a:14:80:a9:2b:67:16:07:61:2a:e5: 43:cb:25:20:a3:5a:9d:c9:20:81:90:57:ef:5b:6e:e4:f9:8e: 83:88:18:e2:35:f2:c9:c7:74:f8:2e:da:c6:f2:a4:a1:f1:69: 83:c6:98:41:67:d3:c2:c4:c7:a7:97:bb:b2:17:c4:82:cd:a3: 72:69:22:ce:d5:40:ea:8b:72:28:2d:05:84:e1:7e:ff:52:ec: d1:ae:2e:3d:a3:ac:d9:46:82:1a:06:4e:1d:ce:cf:54:53:80: 9b:bb:c7:f2:ed:e2:a2:66:21:ff:b8:c6:99:17:0a:64:a7:17: 2b:ec:c7:b1:37:91:c8:55:c2:24:e5:bc:96:c7:78:70:21:7d: 23:ad:12:da:31:60:a0:0b:32:c6:8a:95:49:17:0c:ea:38:40: 96:a3:81:8a:6a:f7:f0:4b:e9:c8:31:5d:f7:c2:1d:f2:a2:5c: 5b:14:dc:d2:1f:4c:32:ce:60:87:58:eb:0e:59:07:fe:e0:52: de:6f:eb:ca:d8:07:e3:53:9f:69:ef:26:e3:ce:e9:21:99:68: d1:a6:82:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaj4jvYxwjHcmuBCchaWgUbngykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA3MjQwMzE4MjdaFw0yNjA3MjUwNDU5MjdaMDMxMTAvBgNV BAMTKDUyOTRCMEQ5QkJGQzY0MUI3MTk5RUE0RTM3NzhBNEQ1QjlDMUQ1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawwUx+JhBAXuJDEENTepj36o5 68I4ZUet00HqHHdfJqXPW2z/H0M1lzGmLn1GiJ0EEWExTQNDNSwqV8KA0mTyvPM6 oBKin9G/cdRNiM9IVCmiF9yvXeMs9qIJn9mC86OPoGWKMB9cYOQ1Jqvs2lF0X90v aBCp6fWhVF1qZrOdZ1k3hLWk4TVMTVCBJyDXvISg0KMwazrKHE24ug+ZpjdiUJfx DdqvN2pBwBZgB7hsgdSnK4/3wXYB3iDetmUcazaEAJJHXRpVM6oASthGwmT7OyT+ hhGLx5Kmjc+eJgEHxPTAHZ2fzuKRv0Ud5Q+b6uhtILt/yXR/tP4H2wJL6LmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpSw2bv8ZBtxmepON3ik1bnB1eswHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdt80KgMw8lnOKDPpSbJWwP7/4tUJBll8SF JKji6CGv+wyB5Iu4SAUmulpaFICpK2cWB2Eq5UPLJSCjWp3JIIGQV+9bbuT5joOI GOI18snHdPgu2sbypKHxaYPGmEFn08LEx6eXu7IXxILNo3JpIs7VQOqLcigtBYTh fv9S7NGuLj2jrNlGghoGTh3Oz1RTgJu7x/Lt4qJmIf+4xpkXCmSnFyvsx7E3kchV wiTlvJbHeHAhfSOtEtoxYKALMsaKlUkXDOo4QJajgYpq9/BL6cgxXffCHfKiXFsU 3NIfTDLOYIdY6w5ZB/7gUt5v68rYB+NTn2nvJuPO6SGZaNGmglQ= -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:51 2026 by rpki-client