$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: WYPLi7VhzOKM0hfMI5lfmyrokLvDnI5rcKyXxmibohE= Subject key identifier: 7B:31:29:92:DA:8E:EB:6D:92:E2:0A:83:A2:F4:F7:B8:09:98:50:4A Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 591579DCB92224B9C202AB0E19F852E12574FC8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 02:49:14 +0000 Manifest this update: Thu 24 Sep 2026 02:44:14 +0000 Manifest next update: Fri 25 Sep 2026 06:46:14 +0000 Files and hashes: 1: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: I+4bNnbhXk4Zoi0flGiGSb2kTfY+bR3DE7dVk4e3Hfo=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:15:79:dc:b9:22:24:b9:c2:02:ab:0e:19:f8:52:e1:25:74:fc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Sep 24 02:44:14 2026 GMT Not After : Sep 25 06:46:14 2026 GMT Subject: CN=7B312992DA8EEB6D92E20A83A2F4F7B80998504A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:60:8c:86:30:e4:04:09:8a:8c:5c:af:b1: 42:54:69:be:94:3c:fc:f8:da:3a:8d:dd:a5:0b:ae: 0f:6e:5e:d0:e5:b0:e6:19:af:9d:0e:88:14:6d:52: 90:54:1d:f4:a6:62:8a:35:21:e9:6c:cc:0b:6d:91: d6:0c:0b:19:92:3c:34:10:55:26:e6:9c:15:0d:25: 15:17:0a:78:8e:63:d9:3c:f0:1f:b6:6d:4d:7a:2e: bf:8b:ef:10:d2:a4:8d:8c:10:b4:d9:2c:67:72:9a: f3:2c:73:90:b1:34:76:3a:e7:47:90:30:75:fb:79: b7:c3:c6:34:0f:0e:cc:1f:94:bc:18:ad:5e:ee:a5: 10:5d:69:93:43:af:73:e6:36:ce:bb:21:6b:bd:b1: 5e:c8:6d:66:4c:8f:4c:2a:da:b3:b8:b7:b4:05:69: b2:b7:93:99:f8:ab:e9:5e:70:25:ce:ef:d6:1d:67: 37:54:06:fe:72:ea:4d:fb:3e:6f:f8:b8:42:5e:5f: d3:cb:26:6d:08:5c:75:b8:c7:43:96:66:40:5d:36: ba:6c:23:89:c7:3f:b5:62:be:ad:fb:fe:c8:7b:42: a1:4f:7b:25:40:bf:e4:5f:5f:ae:1f:63:a7:4a:d7: b0:49:b2:e5:a1:87:b1:10:92:59:a0:c2:3e:27:23: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:29:92:DA:8E:EB:6D:92:E2:0A:83:A2:F4:F7:B8:09:98:50:4A X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:72:2d:ae:cc:7b:ae:e6:89:12:d7:c8:07:1a:e2:e2:42:24: 88:3b:eb:60:b0:0a:63:8b:40:c4:a5:23:d9:41:1e:dc:00:af: 90:d5:19:0c:71:33:28:31:32:73:1b:34:e1:07:1d:1a:79:f2: e9:a3:2f:0f:c3:58:3b:af:8f:11:4a:65:13:e9:d7:7d:41:42: 19:1e:07:13:94:87:ba:d7:6b:2e:76:1e:e4:de:b8:ec:4a:8e: b9:00:02:b3:d8:ee:db:04:ad:9b:ea:81:94:57:39:fc:a8:be: 50:7a:86:3d:27:16:f0:97:a5:a9:9e:a2:d7:f4:33:00:5f:14: e2:9a:55:a1:fc:fb:1b:78:f0:09:27:90:38:d9:88:8d:8e:7e: 41:d1:a6:dd:29:cf:71:2a:2c:70:de:ea:d9:f6:28:ae:d5:c7: 0a:7e:06:9a:09:4d:81:fc:3f:a0:4c:1f:2b:1f:7e:ca:fd:01: 56:ac:0a:5b:d3:bd:f6:c4:04:34:95:23:46:fb:a6:90:24:00: 3e:e3:70:1f:80:a6:46:f9:c3:8f:8a:c9:b9:cc:f1:32:eb:fd: b3:2f:1f:f1:80:3e:e2:75:09:37:3b:6f:6a:74:ce:7a:ed:c9: fb:7b:1c:93:4f:25:46:f1:75:af:fe:01:ca:8f:3b:19:21:86: 44:0b:62:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRV53LkiJLnCAqsOGfhS4SV0/I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA5MjQwMjQ0MTRaFw0yNjA5MjUwNjQ2MTRaMDMxMTAvBgNV BAMTKDdCMzEyOTkyREE4RUVCNkQ5MkUyMEE4M0EyRjRGN0I4MDk5ODUwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi2CMhjDkBAmKjFyvsUJUab6U PPz42jqN3aULrg9uXtDlsOYZr50OiBRtUpBUHfSmYoo1IelszAttkdYMCxmSPDQQ VSbmnBUNJRUXCniOY9k88B+2bU16Lr+L7xDSpI2MELTZLGdymvMsc5CxNHY650eQ MHX7ebfDxjQPDswflLwYrV7upRBdaZNDr3PmNs67IWu9sV7IbWZMj0wq2rO4t7QF abK3k5n4q+lecCXO79YdZzdUBv5y6k37Pm/4uEJeX9PLJm0IXHW4x0OWZkBdNrps I4nHP7Vivq37/sh7QqFPeyVAv+RfX64fY6dK17BJsuWhh7EQklmgwj4nI4tBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUezEpktqO622S4gqDovT3uAmYUEowHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKByLa7Me67miRLXyAca4uJCJIg762CwCmOL QMSlI9lBHtwAr5DVGQxxMygxMnMbNOEHHRp58umjLw/DWDuvjxFKZRPp131BQhke BxOUh7rXay52HuTeuOxKjrkAArPY7tsErZvqgZRXOfyovlB6hj0nFvCXpameotf0 MwBfFOKaVaH8+xt48AknkDjZiI2OfkHRpt0pz3EqLHDe6tn2KK7Vxwp+BpoJTYH8 P6BMHysffsr9AVasClvTvfbEBDSVI0b7ppAkAD7jcB+Apkb5w4+KybnM8TLr/bMv H/GAPuJ1CTc7b2p0znrtyft7HJNPJUbxda/+AcqPOxkhhkQLYiU= -----END CERTIFICATE-----Generated at Thu Sep 24 14:12:40 2026 by rpki-client