$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: MsNN8GlbEpaGUBLEFlkNbJTR+0S7Agc9Yn2OKws6kC4= Subject key identifier: DB:EF:46:26:2D:D4:A4:74:BB:7B:A5:E8:4D:27:2F:9E:7F:B9:22:E0 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 0FABDE811183BD331CECC31B8DE6555F3983F468 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:49:02 +0000 Manifest this update: Thu 24 Sep 2026 10:44:02 +0000 Manifest next update: Fri 25 Sep 2026 13:51:02 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) 2: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: zJSoYivyJ5NooRxPq8K5Ep72YALzZkfzh8LLkRVl4wA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ab:de:81:11:83:bd:33:1c:ec:c3:1b:8d:e6:55:5f:39:83:f4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Sep 24 10:44:02 2026 GMT Not After : Sep 25 13:51:02 2026 GMT Subject: CN=DBEF46262DD4A474BB7BA5E84D272F9E7FB922E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:78:d3:34:4d:f0:ea:cf:61:88:0d:bd:d7: ce:80:87:4d:75:a6:62:48:40:47:33:cd:30:48:e1: 99:fb:af:c4:1a:d6:52:e4:3a:2e:c7:3d:fc:4c:3b: ce:55:88:71:3f:47:50:ba:76:f6:48:56:73:46:34: 85:3a:97:54:6b:c3:95:f0:b2:eb:15:9b:34:53:a7: 47:f8:8d:46:f8:0e:2d:f2:d0:57:b0:c0:6d:1e:88: a1:3f:d2:91:74:a6:b1:6f:7e:4f:55:d5:58:0a:04: c0:bb:d0:d3:54:af:51:68:15:fd:d5:48:32:47:15: 96:96:a8:0e:93:b9:17:29:0d:b1:b7:80:4b:6a:93: b4:a3:8b:64:71:ad:cf:fe:18:aa:bc:41:80:7b:3d: f1:ae:51:98:c9:d7:00:3f:a2:f4:3f:0f:9d:bc:fc: bc:e8:ef:3e:67:0e:06:8a:70:d4:a2:09:0f:c5:00: d8:79:e5:dc:7c:8e:f9:c9:4f:aa:62:18:f7:5b:dc: e7:38:79:3b:d9:1f:4d:b7:66:2c:9d:93:7a:e4:38: 75:e3:f0:4b:32:1a:fb:2f:23:da:9b:3d:86:d7:b4: 66:18:08:1a:4b:10:92:ef:50:36:06:d6:fb:a1:bd: 8e:02:82:a2:75:00:78:a2:cf:81:bc:a8:9e:21:c4: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EF:46:26:2D:D4:A4:74:BB:7B:A5:E8:4D:27:2F:9E:7F:B9:22:E0 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:77:22:7e:fb:17:14:e7:5f:51:5c:8d:bc:3c:27:78:88:ea: fa:88:4b:5e:f0:fa:95:bb:6f:5b:f6:64:7d:44:9a:62:8b:63: 8e:5a:bb:ef:28:a0:4f:e2:94:8f:d6:45:31:d3:02:af:69:89: 48:c2:29:db:a3:ff:ac:f6:66:a6:ca:62:e5:d5:36:07:cb:bc: 0f:47:9c:d6:a8:95:ca:84:ff:de:66:4b:c9:f1:c8:f5:46:d3: 8e:7e:cd:a7:f3:b7:14:67:c4:6f:af:27:0b:24:c9:43:64:af: 28:3a:e0:1a:46:dd:83:ac:8f:9b:32:5d:9b:56:11:1b:e5:99: 2f:69:5f:2d:74:6b:6e:63:c5:d8:54:bf:3d:34:3f:78:2e:98: d6:fc:5b:06:b5:18:85:64:31:d8:da:48:25:71:55:e5:24:63: 09:81:c1:8a:4e:ae:c2:dd:4a:cd:f5:24:f9:53:a2:7c:8d:f6: 65:41:5d:85:c0:0c:bf:c7:3c:d7:15:cb:d7:7a:df:2d:9b:68: 2b:04:5f:49:b7:23:83:3c:cf:cf:9d:94:8c:f5:a1:90:19:0c: 30:29:3a:28:75:fe:b4:8e:cd:de:1a:78:09:d4:02:15:e2:62: 40:1a:bb:e0:e5:09:71:ea:f7:be:0b:f2:30:15:2f:f2:48:e7: 45:47:6b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6vegRGDvTMc7MMbjeZVXzmD9GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA5MjQxMDQ0MDJaFw0yNjA5MjUxMzUxMDJaMDMxMTAvBgNV BAMTKERCRUY0NjI2MkRENEE0NzRCQjdCQTVFODREMjcyRjlFN0ZCOTIyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO7njTNE3w6s9hiA29186Ah011 pmJIQEczzTBI4Zn7r8Qa1lLkOi7HPfxMO85ViHE/R1C6dvZIVnNGNIU6l1Rrw5Xw susVmzRTp0f4jUb4Di3y0FewwG0eiKE/0pF0prFvfk9V1VgKBMC70NNUr1FoFf3V SDJHFZaWqA6TuRcpDbG3gEtqk7Sji2Rxrc/+GKq8QYB7PfGuUZjJ1wA/ovQ/D528 /Lzo7z5nDgaKcNSiCQ/FANh55dx8jvnJT6piGPdb3Oc4eTvZH023Ziydk3rkOHXj 8EsyGvsvI9qbPYbXtGYYCBpLEJLvUDYG1vuhvY4CgqJ1AHiiz4G8qJ4hxP3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+9GJi3UpHS7e6XoTScvnn+5IuAwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp3In77FxTnX1Fcjbw8J3iI6vqIS17w+pW7 b1v2ZH1EmmKLY45au+8ooE/ilI/WRTHTAq9piUjCKduj/6z2ZqbKYuXVNgfLvA9H nNaolcqE/95mS8nxyPVG045+zafztxRnxG+vJwskyUNkryg64BpG3YOsj5syXZtW ERvlmS9pXy10a25jxdhUvz00P3gumNb8Wwa1GIVkMdjaSCVxVeUkYwmBwYpOrsLd Ss31JPlTonyN9mVBXYXADL/HPNcVy9d63y2baCsEX0m3I4M8z8+dlIz1oZAZDDAp Oih1/rSOzd4aeAnUAhXiYkAau+DlCXHq974L8jAVL/JI50VHa7Y= -----END CERTIFICATE-----Generated at Thu Sep 24 19:03:23 2026 by rpki-client