$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft File: 00BA333E1070BAC4039454B475BAA9D7802B83D6.mft (raw, json) Hash identifier: 0H9FNDUNjfCBn3FstiPgCC2w5VxUjIqUEFyAECHsi0s= Subject key identifier: 0C:9E:A4:84:95:40:8B:CB:12:8D:F2:4C:C6:3F:E1:3F:9F:07:0B:9B Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Certificate serial: 55641C6C75513A24D1F78C63FA8B1AB32D273B6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:51:44 +0000 Manifest this update: Thu 24 Sep 2026 12:46:44 +0000 Manifest next update: Fri 25 Sep 2026 14:44:44 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: TkJj4PfQ/aDGlDkDNfKuq4Lop3tC8gbIR74WO1bqwO8=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: IhRU7xqMF7ymzp1jTbklUO54eBcVkN56coUh2E855Uc=) 3: 00BA333E1070BAC4039454B475BAA9D7802B83D6.crl (hash: GF+wo5plLYnRF8VtlPQfmVlOxJ+KJ6VHq/mGqrjqLYg=) 4: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: u58hGkofFGWAycHfS2yt+5KkCwu1d003TmCn4MuzF24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:64:1c:6c:75:51:3a:24:d1:f7:8c:63:fa:8b:1a:b3:2d:27:3b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Validity Not Before: Sep 24 12:46:44 2026 GMT Not After : Sep 25 14:44:44 2026 GMT Subject: CN=0C9EA48495408BCB128DF24CC63FE13F9F070B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:d3:4e:60:96:cc:d3:22:fe:90:f1:f5:44: 8b:1b:d0:19:6b:01:78:e6:14:1b:c0:53:e9:fd:28: 87:f5:23:86:fe:fe:6a:57:08:93:0d:0b:7a:08:01: d7:74:5c:0e:b8:dd:24:da:9e:6b:f7:a2:e3:67:69: 91:d5:6a:16:3c:18:a3:c3:97:4d:d3:11:d9:aa:ab: 4f:f0:5d:6d:c4:b2:1c:77:7a:65:77:93:42:66:fb: 83:17:1f:3c:d2:50:d0:a8:a3:7d:f4:da:90:e5:7a: ca:15:c0:32:02:e7:71:ee:3d:a1:5a:80:b5:19:ed: a2:17:de:dd:bc:33:53:bd:a0:d5:f7:bc:9d:4d:59: 28:3b:ed:0b:04:eb:79:6c:34:cf:70:f6:0b:d2:c1: cd:9d:58:5a:b1:50:9d:c9:ed:8a:78:84:ef:0f:a9: 49:51:10:d2:e8:d9:e8:73:68:1b:3f:5e:2f:05:71: 74:ae:31:ad:46:e6:fa:9e:21:ac:93:d1:5b:61:aa: ed:5e:44:ae:2c:a8:7e:cd:43:a4:37:2d:aa:39:5a: fc:a4:f9:42:99:45:9c:45:15:8c:ac:64:d4:67:2f: cc:82:e7:d9:a1:70:ad:5f:f6:c0:dc:89:f0:a2:89: c1:23:28:6e:34:bb:35:59:ea:1e:cb:a5:cf:d1:02: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9E:A4:84:95:40:8B:CB:12:8D:F2:4C:C6:3F:E1:3F:9F:07:0B:9B X509v3 Authority Key Identifier: keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:28:46:15:3f:07:80:6e:45:65:bf:1c:ad:51:c5:44:9e:fc: 60:c5:02:4f:2c:21:fc:c4:8f:ef:77:6e:0b:8d:39:57:d9:0c: 74:e6:5a:99:07:cc:e7:3d:05:6c:98:ba:a8:60:ed:22:b0:bf: a4:65:e8:74:58:b1:e4:eb:09:e9:ee:ad:30:63:4d:61:29:5f: c5:c2:a7:e8:de:10:a6:cd:20:ac:41:e6:87:40:a5:d2:86:5f: 26:6f:d9:98:75:fc:7c:38:f9:bd:0c:79:1b:9f:4a:2f:8d:ac: 84:15:06:9b:a5:57:ff:c8:22:8f:c5:f6:1f:ba:c5:82:d6:62: 18:6f:88:5f:2d:a5:0b:e3:63:17:b5:ca:2b:b0:2c:c3:22:2f: f5:91:0a:e9:5b:cf:92:ba:1f:14:84:fd:ca:87:d0:a4:dd:a9: c6:6b:11:db:44:5b:67:cf:91:d6:b3:2c:ab:09:eb:b7:a0:eb: ce:11:df:33:c5:f1:bb:7b:c2:37:51:c9:9b:d8:d3:d4:da:12: 95:61:85:55:86:63:d3:bb:c4:c3:39:c8:1a:e3:25:5b:c6:ee: d6:d8:13:98:6b:be:d2:86:e3:72:cb:8e:9d:de:b3:35:70:4a: c0:e1:ec:20:38:91:e4:cd:e2:4e:e2:60:6c:2a:dd:0c:9c:ed: 1d:12:3c:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWQcbHVROiTR94xj+osasy0nO2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4 MDJCODNENjAeFw0yNjA5MjQxMjQ2NDRaFw0yNjA5MjUxNDQ0NDRaMDMxMTAvBgNV BAMTKDBDOUVBNDg0OTU0MDhCQ0IxMjhERjI0Q0M2M0ZFMTNGOUYwNzBCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtb9NOYJbM0yL+kPH1RIsb0Blr AXjmFBvAU+n9KIf1I4b+/mpXCJMNC3oIAdd0XA643STanmv3ouNnaZHVahY8GKPD l03TEdmqq0/wXW3Eshx3emV3k0Jm+4MXHzzSUNCoo3302pDlesoVwDIC53HuPaFa gLUZ7aIX3t28M1O9oNX3vJ1NWSg77QsE63lsNM9w9gvSwc2dWFqxUJ3J7Yp4hO8P qUlRENLo2ehzaBs/Xi8FcXSuMa1G5vqeIayT0Vthqu1eRK4sqH7NQ6Q3Lao5Wvyk +UKZRZxFFYysZNRnL8yC59mhcK1f9sDcifCiicEjKG40uzVZ6h7Lpc/RAkT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJ6khJVAi8sSjfJMxj/hP58HC5swHwYDVR0j BBgwFoAUALozPhBwusQDlFS0dbqp14Arg9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBkYjBkZWMtZjQ5YS00ZTdjLTg1NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0Ux MDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4MDJCODNENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMEJBMzMzRTEwNzBCQUM0MDM5NDU0QjQ3NUJBQTlENzgwMkI4 M0Q2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5 RDc4MDJCODNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8oRhU/B4BuRWW/HK1RxUSe/GDFAk8sIfzE j+93bguNOVfZDHTmWpkHzOc9BWyYuqhg7SKwv6Rl6HRYseTrCenurTBjTWEpX8XC p+jeEKbNIKxB5odApdKGXyZv2Zh1/Hw4+b0MeRufSi+NrIQVBpulV//IIo/F9h+6 xYLWYhhviF8tpQvjYxe1yiuwLMMiL/WRCulbz5K6HxSE/cqH0KTdqcZrEdtEW2fP kdazLKsJ67eg684R3zPF8bt7wjdRyZvY09TaEpVhhVWGY9O7xMM5yBrjJVvG7tbY E5hrvtKG43LLjp3eszVwSsDh7CA4keTN4k7iYGwq3Qyc7R0SPBs= -----END CERTIFICATE-----Generated at Fri Sep 25 05:41:54 2026 by rpki-client