$ rpki-client -vvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: hDT7xo2R3PD9VpssxJY/DLKTaZ33W313Kl/6/VhAQBw= Subject key identifier: B4:AF:AE:5A:EA:34:62:78:9B:94:5E:AA:6F:C8:F5:72:BB:BF:98:E5 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 4130D26FF1C3B6295055AE31B3489074040B6C7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:41:19 +0000 Manifest this update: Fri 24 Jul 2026 01:36:19 +0000 Manifest next update: Sat 25 Jul 2026 03:38:19 +0000 Files and hashes: 1: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: x6+gyRqccgi9wvIvBTNpOJnw7dYo50nVynbC/KeB9/Y=) 2: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:30:d2:6f:f1:c3:b6:29:50:55:ae:31:b3:48:90:74:04:0b:6c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Jul 24 01:36:19 2026 GMT Not After : Jul 25 03:38:19 2026 GMT Subject: CN=B4AFAE5AEA3462789B945EAA6FC8F572BBBF98E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:31:d1:1d:b4:21:44:79:d3:4f:4b:e7:b8: fc:9c:0b:ff:ab:37:c2:6f:97:ef:cd:72:2a:ab:9b: 92:a7:49:9f:9a:37:c3:09:7c:c6:8d:82:41:8a:e4: a9:4a:b0:4e:54:28:4d:13:f9:94:97:54:00:e2:a8: dd:9b:3e:ba:ba:61:9e:b2:70:ae:a3:e4:cb:d3:58: 41:ba:fe:19:c1:f2:35:10:5a:d0:ef:4b:38:d1:29: 65:be:fe:42:ba:59:77:f0:7b:1a:0d:e2:b1:2e:b7: e4:6c:42:b2:4f:93:e8:49:67:70:2b:73:7e:23:7d: 96:89:b5:66:56:ae:b8:0e:19:2a:08:e0:67:16:61: 89:49:84:de:da:d5:54:66:c2:b0:43:47:83:31:30: 57:d3:3a:34:e2:de:97:2a:4e:90:ed:12:4b:53:a5: bb:9f:99:b3:cc:79:b6:b9:62:16:9f:2d:64:70:c8: 71:81:8b:b9:a2:c6:f2:1b:59:f3:dc:e2:90:18:a2: eb:3b:12:3f:e1:c4:89:93:4b:49:5f:74:30:4d:d9: b5:4b:3f:18:dc:72:6b:02:eb:65:b2:0c:60:01:26: 36:49:86:44:0d:2f:d9:7c:5f:40:07:b5:bd:7c:0d: f1:83:67:cd:ac:d4:fa:b9:23:bf:8c:77:b8:81:db: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:AE:5A:EA:34:62:78:9B:94:5E:AA:6F:C8:F5:72:BB:BF:98:E5 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:28:19:4c:32:af:87:a1:e4:36:86:71:81:62:a0:ab:cc: f6:3c:0a:40:62:bc:62:5b:a9:1c:09:d2:86:a9:95:7b:3d:a0: 02:d5:3c:e6:46:56:25:08:e1:3e:1c:95:60:63:71:7d:b7:d2: 74:45:07:61:b8:2a:9d:26:54:8f:07:24:1c:c4:d0:2a:91:88: e1:6d:24:9a:27:a2:6a:e1:4c:76:d7:e5:cd:19:da:ea:59:d2: 76:27:77:1f:4c:ca:51:a1:fc:73:74:47:40:11:c8:ec:c9:c7: 7d:8a:21:11:a4:67:cd:b6:68:6f:51:1c:dd:6a:0c:3f:11:31: 59:84:f0:d3:38:5f:9b:e0:a0:15:0c:56:41:eb:73:79:66:9b: b5:db:bd:7c:59:c3:a9:8f:54:cc:43:3e:4a:b7:5d:a4:6f:30: e2:92:64:4f:da:4a:f1:89:68:07:56:d0:c6:d9:e3:38:e7:05: 7c:3c:5c:9c:92:b6:1d:09:3f:2d:94:04:7a:fb:6c:15:99:dd: 70:05:fc:41:6c:87:cd:bb:bc:c6:f1:00:18:06:b7:dd:36:13: b3:65:01:7c:75:13:e9:27:54:f9:4f:49:c2:21:72:7e:30:fe: 90:ca:cd:53:03:45:a1:13:50:1d:45:f7:ef:32:f4:88:5e:bb: 42:05:7c:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTDSb/HDtilQVa4xs0iQdAQLbHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA3MjQwMTM2MTlaFw0yNjA3MjUwMzM4MTlaMDMxMTAvBgNV BAMTKEI0QUZBRTVBRUEzNDYyNzg5Qjk0NUVBQTZGQzhGNTcyQkJCRjk4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8zHRHbQhRHnTT0vnuPycC/+r N8Jvl+/Nciqrm5KnSZ+aN8MJfMaNgkGK5KlKsE5UKE0T+ZSXVADiqN2bPrq6YZ6y cK6j5MvTWEG6/hnB8jUQWtDvSzjRKWW+/kK6WXfwexoN4rEut+RsQrJPk+hJZ3Ar c34jfZaJtWZWrrgOGSoI4GcWYYlJhN7a1VRmwrBDR4MxMFfTOjTi3pcqTpDtEktT pbufmbPMeba5YhafLWRwyHGBi7mixvIbWfPc4pAYous7Ej/hxImTS0lfdDBN2bVL PxjccmsC62WyDGABJjZJhkQNL9l8X0AHtb18DfGDZ82s1Pq5I7+Md7iB28ubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtK+uWuo0YniblF6qb8j1cru/mOUwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkTKBlMMq+HoeQ2hnGBYqCrzPY8CkBivGJb qRwJ0oaplXs9oALVPOZGViUI4T4clWBjcX230nRFB2G4Kp0mVI8HJBzE0CqRiOFt JJonomrhTHbX5c0Z2upZ0nYndx9MylGh/HN0R0ARyOzJx32KIRGkZ822aG9RHN1q DD8RMVmE8NM4X5vgoBUMVkHrc3lmm7XbvXxZw6mPVMxDPkq3XaRvMOKSZE/aSvGJ aAdW0MbZ4zjnBXw8XJySth0JPy2UBHr7bBWZ3XAF/EFsh827vMbxABgGt902E7Nl AXx1E+knVPlPScIhcn4w/pDKzVMDRaETUB1F9+8y9Iheu0IFfNM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:39:34 2026 by rpki-client