$ rpki-client -vvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: CUTuNMwHNlkzWtBsXw4BRb2wLReU4Ohtzm/mGiQ0mp4= Subject key identifier: 97:D3:B8:0E:B0:37:42:24:2D:46:6B:E3:97:BA:78:9B:5D:00:91:64 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 46E4C4B897205214544A9B26F80C8A6CA128D68A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:08:04 +0000 Manifest this update: Thu 23 Jul 2026 23:03:04 +0000 Manifest next update: Sat 25 Jul 2026 01:39:04 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) 2: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: KyIbsDB2ztFXOyogAAgJXkzKqanfN1D0GB9PwrotyfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e4:c4:b8:97:20:52:14:54:4a:9b:26:f8:0c:8a:6c:a1:28:d6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Jul 23 23:03:04 2026 GMT Not After : Jul 25 01:39:04 2026 GMT Subject: CN=97D3B80EB03742242D466BE397BA789B5D009164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:08:7d:cb:55:ca:81:97:f5:37:5e:64:a0: b9:f7:57:5d:a8:71:c7:48:76:91:58:7c:59:d3:6d: 53:22:74:be:68:ca:65:85:a5:eb:d1:32:70:0b:37: 25:4f:95:4b:0b:15:e7:cb:f9:6a:08:fe:2e:1b:d0: 60:7b:14:e7:7c:aa:0e:02:86:06:8c:11:8f:f0:bd: 2f:7b:cf:84:25:d1:e5:a6:ca:a3:51:a0:73:6d:58: ea:68:94:7f:4a:ec:43:d1:bb:86:a4:1c:92:00:34: f4:6d:1f:67:f2:c2:d4:0c:28:74:74:73:a0:64:72: 54:09:fc:b6:72:68:80:c6:28:79:3d:c6:24:9e:7c: e4:ae:b8:b2:b1:14:bd:3b:59:63:0c:2e:1e:83:ce: d7:3a:2c:66:61:c9:d4:a4:a7:c4:c3:f6:01:28:97: 0f:8b:fb:ff:d8:98:5d:71:22:9a:18:e6:d3:69:55: f0:f3:12:89:3e:2c:c3:13:c4:3b:15:ff:f4:61:7a: 10:4e:9a:f0:ae:8b:62:d0:b5:54:65:bb:a8:d6:a9: fc:50:11:b3:2b:5b:30:94:85:9f:e4:1e:9e:84:73: 69:33:f3:13:52:b0:6b:18:cc:f2:7e:a8:4f:4c:a2: 01:d1:2a:d6:2f:b3:0d:89:b2:f0:8d:3f:2f:3e:10: 99:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:B8:0E:B0:37:42:24:2D:46:6B:E3:97:BA:78:9B:5D:00:91:64 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:77:55:d3:dd:25:b3:fb:39:c9:09:61:18:8b:18:dc:e8:33: 6d:c3:cb:7b:0e:9b:45:d5:6e:f2:dd:20:79:fd:06:90:80:d8: 62:33:e3:64:89:6b:8e:f9:7f:11:fa:e9:9d:1c:06:39:e6:36: 26:66:de:f8:1c:92:e0:c4:07:94:86:a4:18:7b:29:2c:c0:75: 8d:94:38:44:3c:2b:56:c9:0a:41:56:1e:a2:eb:cc:5b:f2:b6: 1e:d3:af:7c:b3:cd:1f:17:1a:2f:79:88:a6:e6:df:68:71:4a: bb:3a:c5:6b:eb:5f:eb:ed:23:2d:d3:1e:e3:b3:dd:ad:86:f0: fb:34:e2:c5:fc:8a:ea:1a:33:7b:43:c2:c6:c6:9a:0c:d8:63: 18:f3:09:c2:05:26:07:47:72:e1:93:4a:b6:42:06:f1:fa:8a: 7e:6a:10:8a:79:9c:d4:ba:b4:61:e4:88:35:94:c8:dc:57:6d: 31:cc:5c:21:e1:62:1a:30:34:f9:fa:97:78:a0:a2:70:b4:fb: d1:ef:ef:e4:52:8c:41:ba:aa:c5:a8:5b:88:82:1b:47:4a:94: 3b:73:b2:68:3b:56:c5:a8:2c:ab:6f:8e:9e:6b:97:6f:a1:be: ae:89:52:d3:77:81:92:95:0d:6a:8b:2d:7d:a2:2c:fa:7b:0f: 6c:a3:d9:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURuTEuJcgUhRUSpsm+AyKbKEo1oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA3MjMyMzAzMDRaFw0yNjA3MjUwMTM5MDRaMDMxMTAvBgNV BAMTKDk3RDNCODBFQjAzNzQyMjQyRDQ2NkJFMzk3QkE3ODlCNUQwMDkxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ewh9y1XKgZf1N15koLn3V12o ccdIdpFYfFnTbVMidL5oymWFpevRMnALNyVPlUsLFefL+WoI/i4b0GB7FOd8qg4C hgaMEY/wvS97z4Ql0eWmyqNRoHNtWOpolH9K7EPRu4akHJIANPRtH2fywtQMKHR0 c6BkclQJ/LZyaIDGKHk9xiSefOSuuLKxFL07WWMMLh6Dztc6LGZhydSkp8TD9gEo lw+L+//YmF1xIpoY5tNpVfDzEok+LMMTxDsV//RhehBOmvCui2LQtVRlu6jWqfxQ EbMrWzCUhZ/kHp6Ec2kz8xNSsGsYzPJ+qE9MogHRKtYvsw2JsvCNPy8+EJlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl9O4DrA3QiQtRmvjl7p4m10AkWQwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt3VdPdJbP7OckJYRiLGNzoM23Dy3sOm0XV bvLdIHn9BpCA2GIz42SJa475fxH66Z0cBjnmNiZm3vgckuDEB5SGpBh7KSzAdY2U OEQ8K1bJCkFWHqLrzFvyth7Tr3yzzR8XGi95iKbm32hxSrs6xWvrX+vtIy3THuOz 3a2G8Ps04sX8iuoaM3tDwsbGmgzYYxjzCcIFJgdHcuGTSrZCBvH6in5qEIp5nNS6 tGHkiDWUyNxXbTHMXCHhYhowNPn6l3igonC0+9Hv7+RSjEG6qsWoW4iCG0dKlDtz smg7VsWoLKtvjp5rl2+hvq6JUtN3gZKVDWqLLX2iLPp7D2yj2Us= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:50 2026 by rpki-client