$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json) Hash identifier: JFlIEzCK2BxAO+CA+N4/GC7Vjsgzal+pru8chBP73qo= Subject key identifier: 42:16:C7:23:AF:82:F0:81:1A:E7:9D:AC:C3:63:7F:CE:DD:CF:73:32 Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Certificate serial: 45F3822E23D9B8639CF3669465350943B3DE7394 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:35:05 +0000 Manifest this update: Thu 24 Sep 2026 07:30:05 +0000 Manifest next update: Fri 25 Sep 2026 09:32:05 +0000 Files and hashes: 1: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: 0Oso290nXi/dJPaBRYj6GINGKJIE+CGqMP/ujx54+rk=) 2: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=) 3: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=) 4: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=) 5: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f3:82:2e:23:d9:b8:63:9c:f3:66:94:65:35:09:43:b3:de:73:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Validity Not Before: Sep 24 07:30:05 2026 GMT Not After : Sep 25 09:32:05 2026 GMT Subject: CN=4216C723AF82F0811AE79DACC3637FCEDDCF7332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:89:be:ba:0b:93:d4:e2:05:69:8e:32:33: 89:71:1d:df:8d:09:54:06:e0:c9:1b:16:75:ae:33: ef:6f:7d:85:eb:87:b1:77:99:e6:30:18:b7:19:c5: 59:fd:50:2b:18:d2:db:e0:07:34:8d:1e:90:d0:e5: db:15:8d:3b:8d:58:7b:2c:60:08:a1:c0:a8:51:3f: d1:0d:a7:a8:da:2b:63:89:6e:e5:94:b9:5f:18:e9: 71:3b:de:39:18:a1:07:33:b6:db:1b:1a:3f:f3:b7: 27:6e:50:3c:7d:c1:d4:68:d2:20:fb:c5:14:30:66: e5:69:77:b4:63:71:57:3b:8c:5e:b5:6f:66:f6:8a: d7:76:1c:7c:7a:c6:bf:ec:72:8c:84:63:3c:7f:18: 87:76:04:6e:d9:41:70:51:cb:c7:28:49:c3:0b:fa: 7e:6b:d9:7c:ce:82:fb:02:f3:96:cc:39:26:7b:a2: 16:91:0d:06:ec:d5:04:a6:10:f4:b3:e5:2f:a7:c1: 5a:ce:3a:d0:6f:fc:d3:4a:8b:38:84:c7:66:b5:11: cf:89:39:d7:32:0a:c3:ca:d8:23:e5:1a:7a:7d:83: 2e:b0:65:3c:9b:1b:d5:88:99:7d:9a:5c:84:a4:02: 7c:85:ad:23:91:9e:4c:8d:d0:41:6c:41:bc:24:34: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:16:C7:23:AF:82:F0:81:1A:E7:9D:AC:C3:63:7F:CE:DD:CF:73:32 X509v3 Authority Key Identifier: keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d2:80:02:c4:00:e6:0b:05:8f:d2:ae:94:cf:7d:e2:0f:22: 9a:03:1d:d5:a6:39:7b:e3:95:08:52:7f:19:5c:76:a9:d8:f5: 63:93:05:ad:ea:bc:11:89:63:9e:f6:8a:94:7d:d1:b9:58:5b: 01:42:9a:3c:67:46:e1:ec:7c:71:bf:a0:dd:d8:d6:c7:92:49: 31:9d:51:eb:f1:71:1e:b6:62:a7:37:95:a3:b1:cf:8e:4a:8e: 59:a9:db:ae:4b:ae:a7:23:83:5b:72:b6:5d:fc:2c:e0:a0:bb: 96:52:14:ac:19:07:a2:71:f7:09:6f:d9:b7:d7:18:4a:e1:11: 74:9e:aa:b3:c1:03:67:74:dd:f8:91:df:e8:ba:58:d5:c4:41: 7a:2c:ea:b6:c8:a7:32:01:51:a3:6a:2b:88:0d:36:da:76:eb: 3d:9d:9b:1a:46:a4:48:05:67:49:41:34:f4:20:68:a0:44:bf: 90:a2:1f:7d:93:11:dc:f1:71:95:2a:62:3d:83:78:67:2f:3d: d4:b4:8e:6e:c6:b7:ba:e7:1b:8a:7c:8b:79:30:d5:64:90:19: 62:fa:b2:da:24:a1:29:53:59:9b:45:c3:4b:50:d9:40:d9:fa: ae:10:b4:b8:4a:eb:2a:19:52:40:18:b9:08:06:82:62:01:e0: 91:86:98:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfOCLiPZuGOc82aUZTUJQ7Pec5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4 QjRFRTc1MDAeFw0yNjA5MjQwNzMwMDVaFw0yNjA5MjUwOTMyMDVaMDMxMTAvBgNV BAMTKDQyMTZDNzIzQUY4MkYwODExQUU3OURBQ0MzNjM3RkNFRERDRjczMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhK4m+uguT1OIFaY4yM4lxHd+N CVQG4MkbFnWuM+9vfYXrh7F3meYwGLcZxVn9UCsY0tvgBzSNHpDQ5dsVjTuNWHss YAihwKhRP9ENp6jaK2OJbuWUuV8Y6XE73jkYoQczttsbGj/ztyduUDx9wdRo0iD7 xRQwZuVpd7RjcVc7jF61b2b2itd2HHx6xr/scoyEYzx/GId2BG7ZQXBRy8coScML +n5r2XzOgvsC85bMOSZ7ohaRDQbs1QSmEPSz5S+nwVrOOtBv/NNKiziEx2a1Ec+J OdcyCsPK2CPlGnp9gy6wZTybG9WImX2aXISkAnyFrSORnkyN0EFsQbwkNB4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQhbHI6+C8IEa552sw2N/zt3PczIwHwYDVR0j BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVG N0I4QjRFRTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbSgALEAOYLBY/SrpTPfeIPIpoDHdWmOXvj lQhSfxlcdqnY9WOTBa3qvBGJY572ipR90blYWwFCmjxnRuHsfHG/oN3Y1seSSTGd UevxcR62Yqc3laOxz45Kjlmp265Lrqcjg1tytl38LOCgu5ZSFKwZB6Jx9wlv2bfX GErhEXSeqrPBA2d03fiR3+i6WNXEQXos6rbIpzIBUaNqK4gNNtp26z2dmxpGpEgF Z0lBNPQgaKBEv5CiH32TEdzxcZUqYj2DeGcvPdS0jm7Gt7rnG4p8i3kw1WSQGWL6 stokoSlTWZtFw0tQ2UDZ+q4QtLhK6yoZUkAYuQgGgmIB4JGGmLw= -----END CERTIFICATE-----Generated at Thu Sep 24 11:28:25 2026 by rpki-client