$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft File: 00BA333E1070BAC4039454B475BAA9D7802B83D6.mft (raw, json) Hash identifier: TdBP9/EMzVsmnE+uWHu3GOZDgeXwC4QVFjIgqmQ2z5s= Subject key identifier: 6F:D4:AE:CE:7B:04:3C:90:E3:39:26:0E:28:A3:18:D1:12:03:80:5E Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Certificate serial: 28988EACBB31670D3983B5161A1603DA6EE6D7B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:49:10 +0000 Manifest this update: Tue 12 May 2026 07:44:10 +0000 Manifest next update: Wed 13 May 2026 09:25:10 +0000 Files and hashes: 1: 00BA333E1070BAC4039454B475BAA9D7802B83D6.crl (hash: YjOjAhpy2Nn5aegYb2R7ex5bAc5oddwh8sJYJLdEGY0=) 2: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: u58hGkofFGWAycHfS2yt+5KkCwu1d003TmCn4MuzF24=) 3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: TkJj4PfQ/aDGlDkDNfKuq4Lop3tC8gbIR74WO1bqwO8=) 4: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: IhRU7xqMF7ymzp1jTbklUO54eBcVkN56coUh2E855Uc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:98:8e:ac:bb:31:67:0d:39:83:b5:16:1a:16:03:da:6e:e6:d7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Validity Not Before: May 12 07:44:10 2026 GMT Not After : May 13 09:25:10 2026 GMT Subject: CN=6FD4AECE7B043C90E339260E28A318D11203805E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:27:b0:e7:9d:a7:d1:b8:5d:83:f3:a6:28: 39:a9:2b:1c:9d:53:d2:f0:d4:c4:71:d3:cf:b8:71: ad:0a:04:a9:eb:ab:f0:09:88:fc:3f:d1:32:e2:e4: ba:2f:cc:d0:cf:1c:2f:3b:51:9b:c2:5a:df:53:0e: dd:27:34:24:15:7c:e2:7a:6d:6c:46:42:de:eb:5a: a6:95:66:2f:95:49:dd:7d:09:e2:71:8d:9f:64:6a: 78:30:0f:7f:1c:ab:87:64:e0:a3:88:d6:73:fc:22: 53:e5:76:63:8c:72:ca:93:6f:14:8c:58:04:6b:44: fe:16:a9:0b:4e:f6:15:f2:f1:12:80:18:8a:ad:73: 95:b4:a5:7f:a3:bc:23:da:aa:ed:24:69:c9:6d:11: 95:b3:6d:99:d3:2b:ab:a5:2a:b4:12:53:bb:08:2e: f3:2b:ab:4c:0b:3e:5e:d1:c8:71:0b:c7:2c:b1:e6: 1d:74:20:5d:4e:09:30:ad:ef:e1:42:8a:f7:75:bc: 56:e0:40:93:67:16:74:8d:8e:1a:be:ac:41:f5:af: 02:6b:99:01:3d:bf:0b:5b:4f:19:bf:0c:0a:0a:17: b6:0d:a5:68:e4:42:ae:a2:67:b0:d3:68:6b:85:6f: 71:71:aa:51:17:db:39:bb:78:5c:5b:8f:ea:ee:85: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D4:AE:CE:7B:04:3C:90:E3:39:26:0E:28:A3:18:D1:12:03:80:5E X509v3 Authority Key Identifier: keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:07:7a:83:5e:47:73:2b:8f:7b:66:7a:8d:11:20:c8:49:02: 05:8f:e3:00:30:e5:49:a1:c9:08:c7:61:02:09:ca:59:6f:a2: bd:24:df:c7:61:4a:8e:32:7a:0e:aa:df:38:9d:96:ef:25:2c: 05:91:64:a3:62:e9:7a:b0:16:ae:84:e9:75:b4:1d:af:d8:df: e5:8c:14:9f:06:44:77:85:34:52:03:fc:e9:72:9b:b0:cb:19: 6b:f0:6a:20:4b:ee:1f:01:97:ce:70:8b:69:cb:75:52:ff:35: fb:d3:be:6c:b6:95:06:e0:fc:16:23:ca:ad:30:79:f9:69:7f: b0:ea:9c:b5:40:3c:b5:cc:19:ab:3a:fc:09:86:38:64:af:f9: 15:ed:cc:ec:3a:17:77:c3:5b:c6:c5:01:af:96:12:59:fa:db: b5:ed:34:9f:da:2c:6e:15:54:4e:4e:f9:46:8e:4a:80:8a:dc: d6:97:30:50:cc:3c:90:6e:2b:9c:53:f3:b1:b3:93:06:97:16: 2e:ce:2a:00:a0:8e:89:1f:3e:35:c7:e0:1c:76:10:3d:15:c7: 04:9a:3f:28:2c:3f:59:a0:e4:59:66:96:e8:13:c3:5a:ec:39: 4e:4e:61:e3:69:5d:ce:cd:96:f5:d0:02:f6:c6:83:13:49:ee: f8:ce:b8:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJiOrLsxZw05g7UWGhYD2m7m17IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4 MDJCODNENjAeFw0yNjA1MTIwNzQ0MTBaFw0yNjA1MTMwOTI1MTBaMDMxMTAvBgNV BAMTKDZGRDRBRUNFN0IwNDNDOTBFMzM5MjYwRTI4QTMxOEQxMTIwMzgwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVyew552n0bhdg/OmKDmpKxyd U9Lw1MRx08+4ca0KBKnrq/AJiPw/0TLi5LovzNDPHC87UZvCWt9TDt0nNCQVfOJ6 bWxGQt7rWqaVZi+VSd19CeJxjZ9kangwD38cq4dk4KOI1nP8IlPldmOMcsqTbxSM WARrRP4WqQtO9hXy8RKAGIqtc5W0pX+jvCPaqu0kacltEZWzbZnTK6ulKrQSU7sI LvMrq0wLPl7RyHELxyyx5h10IF1OCTCt7+FCivd1vFbgQJNnFnSNjhq+rEH1rwJr mQE9vwtbTxm/DAoKF7YNpWjkQq6iZ7DTaGuFb3FxqlEX2zm7eFxbj+ruhcGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb9SuznsEPJDjOSYOKKMY0RIDgF4wHwYDVR0j BBgwFoAUALozPhBwusQDlFS0dbqp14Arg9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBkYjBkZWMtZjQ5YS00ZTdjLTg1NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0Ux MDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4MDJCODNENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMEJBMzMzRTEwNzBCQUM0MDM5NDU0QjQ3NUJBQTlENzgwMkI4 M0Q2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5 RDc4MDJCODNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQHeoNeR3Mrj3tmeo0RIMhJAgWP4wAw5Umh yQjHYQIJyllvor0k38dhSo4yeg6q3zidlu8lLAWRZKNi6XqwFq6E6XW0Ha/Y3+WM FJ8GRHeFNFID/Olym7DLGWvwaiBL7h8Bl85wi2nLdVL/NfvTvmy2lQbg/BYjyq0w eflpf7DqnLVAPLXMGas6/AmGOGSv+RXtzOw6F3fDW8bFAa+WEln627XtNJ/aLG4V VE5O+UaOSoCK3NaXMFDMPJBuK5xT87GzkwaXFi7OKgCgjokfPjXH4Bx2ED0VxwSa PygsP1mg5FlmlugTw1rsOU5OYeNpXc7NlvXQAvbGgxNJ7vjOuOE= -----END CERTIFICATE-----Generated at Wed May 13 02:40:25 2026 by rpki-client