$ rpki-client -vvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: 8GGCG9j8Y7xNE4wzmM7spo6KEenTckyDdKBVjfSYK+s= Subject key identifier: D9:04:65:BD:BE:E4:2A:5C:D2:36:7F:16:47:A7:12:C5:F5:4B:DB:25 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 7CC809CF54E7D3E70A6B5A77164A089E9C5518D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:00:06 +0000 Manifest this update: Tue 12 May 2026 04:55:06 +0000 Manifest next update: Wed 13 May 2026 06:05:06 +0000 Files and hashes: 1: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: jwOpE83PN00dMr7AChproJS1u920NDXtuK6ejX8G074=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c8:09:cf:54:e7:d3:e7:0a:6b:5a:77:16:4a:08:9e:9c:55:18:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: May 12 04:55:06 2026 GMT Not After : May 13 06:05:06 2026 GMT Subject: CN=D90465BDBEE42A5CD2367F1647A712C5F54BDB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:ea:d7:ac:ca:64:d5:81:cb:14:db:49:46: 32:98:1b:bc:91:92:0d:a2:a7:cb:f6:bd:26:60:5b: a7:4d:44:86:d5:81:0c:d7:b5:c1:c5:6b:a8:de:65: bf:31:fb:31:6d:8f:a6:36:1a:f8:2d:9f:63:3b:e4: 71:8d:60:de:95:2b:95:b8:3a:ea:6b:94:ca:93:58: 85:ed:71:8d:d4:15:ef:5d:43:9a:5b:ce:73:56:72: f9:59:e8:8b:33:ff:8c:76:94:95:50:a5:28:2e:f1: 87:eb:c1:15:11:ce:62:27:08:f5:13:07:27:e5:7d: 9e:20:dd:fa:93:d5:a5:4e:39:99:9c:e7:eb:84:ad: f6:b2:d3:a4:ad:09:a2:20:d7:b9:75:f1:4c:c2:d5: 17:46:ee:f3:90:06:72:99:95:7e:4e:d9:71:25:37: e4:65:02:0b:f5:1e:cb:e4:72:49:6b:9b:99:28:35: fe:a0:83:f0:8d:78:e5:ca:3a:3c:e3:a7:ff:34:ee: cf:3c:60:3d:5a:46:67:db:47:48:db:31:51:94:49: 59:00:d8:5c:17:c5:f0:a8:48:7e:1b:ec:5e:ea:f6: aa:f4:f0:21:42:3b:1a:ca:b5:2c:80:54:e9:5d:d3: 64:bf:44:89:20:b5:ee:1f:62:70:0f:95:9f:4a:55: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:04:65:BD:BE:E4:2A:5C:D2:36:7F:16:47:A7:12:C5:F5:4B:DB:25 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:23:f6:71:72:73:40:f9:ed:fc:de:19:f0:88:d0:ee:05:65: 9d:da:a8:5b:6e:25:34:5e:1a:e0:c7:d1:aa:51:ff:77:ee:9d: ac:63:4e:c9:2f:71:ef:6b:d5:ea:81:4b:31:68:00:db:f3:0e: 65:e7:f3:c2:5b:2d:6b:19:ad:4d:f3:03:bb:35:f7:e5:11:0f: 4f:81:a5:9d:27:d4:3f:69:4c:06:33:c6:2c:2f:4f:4d:1d:05: f1:75:d8:68:18:c5:ad:5e:93:d3:7a:55:95:c3:62:be:10:53: 7b:f9:f1:1e:5e:40:b1:1b:04:b3:27:bf:01:c5:19:20:5e:dd: 64:bd:46:43:3c:83:14:28:14:d8:7d:b1:38:fa:d7:a1:07:f3: 67:48:cc:c3:2b:ca:9e:70:79:dd:ce:6b:ef:4a:0b:31:cf:c5: 19:c3:a0:25:5d:96:33:e0:fd:3f:1e:88:31:f6:bb:ea:b3:9b: 44:ad:c9:ef:d0:ae:a8:19:81:1d:5d:e9:dc:92:20:0a:62:8a: d0:06:cb:68:8a:59:a6:b1:2f:2f:6f:3c:ba:aa:59:4a:1b:e4: bb:a4:df:9a:4e:33:fb:3f:a4:82:0d:d5:0c:e2:0a:e2:45:3f: fd:94:b8:35:dc:33:2e:1e:4c:10:d4:14:97:b9:44:22:37:fa: f2:94:8f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMgJz1Tn0+cKa1p3FkoInpxVGNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA1MTIwNDU1MDZaFw0yNjA1MTMwNjA1MDZaMDMxMTAvBgNV BAMTKEQ5MDQ2NUJEQkVFNDJBNUNEMjM2N0YxNjQ3QTcxMkM1RjU0QkRCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUerXrMpk1YHLFNtJRjKYG7yR kg2ip8v2vSZgW6dNRIbVgQzXtcHFa6jeZb8x+zFtj6Y2Gvgtn2M75HGNYN6VK5W4 OuprlMqTWIXtcY3UFe9dQ5pbznNWcvlZ6Isz/4x2lJVQpSgu8YfrwRURzmInCPUT ByflfZ4g3fqT1aVOOZmc5+uErfay06StCaIg17l18UzC1RdG7vOQBnKZlX5O2XEl N+RlAgv1Hsvkcklrm5koNf6gg/CNeOXKOjzjp/807s88YD1aRmfbR0jbMVGUSVkA 2FwXxfCoSH4b7F7q9qr08CFCOxrKtSyAVOld02S/RIkgte4fYnAPlZ9KVTetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QRlvb7kKlzSNn8WR6cSxfVL2yUwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAj9nFyc0D57fzeGfCI0O4FZZ3aqFtuJTRe GuDH0apR/3funaxjTskvce9r1eqBSzFoANvzDmXn88JbLWsZrU3zA7s19+URD0+B pZ0n1D9pTAYzxiwvT00dBfF12GgYxa1ek9N6VZXDYr4QU3v58R5eQLEbBLMnvwHF GSBe3WS9RkM8gxQoFNh9sTj616EH82dIzMMryp5wed3Oa+9KCzHPxRnDoCVdljPg /T8eiDH2u+qzm0Stye/QrqgZgR1d6dySIApiitAGy2iKWaaxLy9vPLqqWUob5Luk 35pOM/s/pIIN1QziCuJFP/2UuDXcMy4eTBDUFJe5RCI3+vKUj2Y= -----END CERTIFICATE-----Generated at Tue May 12 22:47:16 2026 by rpki-client