$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: r9RpjBDIWSQiCGKWIo/4QAvuPCqTYkqKVwCsUugFIsw= Subject key identifier: E8:DA:9E:32:2A:FE:9E:6E:D1:CF:43:17:F8:76:73:4E:9B:A8:8A:10 Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 08E0C3DCA4802E49ABD20E597AAB45592AEB7266 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:17:26 +0000 Manifest this update: Wed 23 Sep 2026 17:12:26 +0000 Manifest next update: Thu 24 Sep 2026 20:10:26 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: Sg8AoIfJxdNEQ4Yb2o2/tYFuIxAQeQB50e/4rFKngKU=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:c3:dc:a4:80:2e:49:ab:d2:0e:59:7a:ab:45:59:2a:eb:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Sep 23 17:12:26 2026 GMT Not After : Sep 24 20:10:26 2026 GMT Subject: CN=E8DA9E322AFE9E6ED1CF4317F876734E9BA88A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:f5:ce:1f:20:1b:3d:e6:7b:6a:3e:0b:08: e4:9d:e4:00:29:41:e1:4f:73:4e:e8:65:8d:8b:da: a2:12:f2:87:7e:3d:3f:2d:b5:02:34:92:9b:72:bd: d5:b2:6c:3a:52:e0:da:8c:d4:c0:fa:01:dd:6d:2a: 78:f8:3d:d0:95:6a:b4:86:cd:e4:e8:29:be:d2:5e: 3a:18:da:3e:79:c7:d0:cd:c3:76:a5:7d:b7:4d:0b: d6:b0:bf:69:9b:d6:5b:58:60:f1:17:f9:c5:19:5a: 66:6a:63:98:ce:38:95:5a:e8:11:0d:fa:3c:88:53: 1c:3a:65:4c:ad:85:3b:84:e3:32:ee:a2:91:75:03: 31:b8:29:1d:f2:20:1f:b3:eb:fa:bb:50:62:94:40: 82:64:df:d6:9f:e3:38:f9:5e:37:08:ce:94:1b:17: bc:34:e4:6d:c9:1e:e7:e0:6d:84:ba:1b:6d:71:4e: fe:25:b7:50:2b:18:3e:a3:4f:7c:a6:5d:24:8a:ab: d5:97:86:a1:db:cb:bb:5d:19:59:c4:ab:2c:05:f7: 36:4d:65:b5:7d:91:89:87:31:01:bb:84:38:1c:fb: 97:f5:b8:28:38:61:52:9d:9e:f5:07:a9:3e:8f:6a: 7b:0c:24:1c:9d:6c:81:dd:58:43:e5:a6:5b:19:73: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:9E:32:2A:FE:9E:6E:D1:CF:43:17:F8:76:73:4E:9B:A8:8A:10 X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:70:e9:09:9b:da:a4:8f:e8:93:7b:d2:0e:94:c6:d5:cd:bf: 00:18:8f:5f:2e:63:0f:bc:6f:8f:de:7e:5f:b2:d5:25:4f:d4: c3:62:7a:36:4f:b1:fe:6e:ce:40:6e:d4:a3:b7:5e:9c:46:53: 0c:e7:01:ce:c9:79:50:2e:7d:96:11:58:54:84:81:1e:e9:2a: f2:22:01:fc:73:3b:e6:58:cf:5e:21:2b:a1:89:c8:31:ff:8c: 5c:bf:65:bb:3d:a2:2a:b1:09:84:9c:17:61:b5:0c:4d:95:17: 2e:ef:82:5a:0c:f0:f2:ca:1b:49:d5:43:22:7a:a0:50:5b:68: 8e:1c:0a:9a:41:95:25:27:4e:96:bc:42:b0:d4:6d:5e:2e:56: 9c:2e:3b:4e:f3:79:01:1d:31:11:78:07:d3:fe:a3:63:8f:d5: 87:f3:b7:97:26:4d:40:7f:54:1d:48:c0:d7:a5:a4:e8:b3:40: b2:bd:5d:a2:93:8c:da:41:95:29:d4:ca:f1:94:5c:57:04:b7: ad:0a:66:90:54:f4:a9:cd:2d:2c:9a:4c:63:b8:99:6c:3a:ce: 10:1d:ce:61:20:78:3b:15:09:85:5c:f1:91:c4:fc:39:04:ee: 0d:94:a8:81:3a:b5:76:37:bd:93:ad:15:69:af:a0:3c:af:0b: 4c:81:46:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCODD3KSALkmr0g5ZeqtFWSrrcmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjA5MjMxNzEyMjZaFw0yNjA5MjQyMDEwMjZaMDMxMTAvBgNV BAMTKEU4REE5RTMyMkFGRTlFNkVEMUNGNDMxN0Y4NzY3MzRFOUJBODhBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58vXOHyAbPeZ7aj4LCOSd5AAp QeFPc07oZY2L2qIS8od+PT8ttQI0kptyvdWybDpS4NqM1MD6Ad1tKnj4PdCVarSG zeToKb7SXjoY2j55x9DNw3alfbdNC9awv2mb1ltYYPEX+cUZWmZqY5jOOJVa6BEN +jyIUxw6ZUythTuE4zLuopF1AzG4KR3yIB+z6/q7UGKUQIJk39af4zj5XjcIzpQb F7w05G3JHufgbYS6G21xTv4lt1ArGD6jT3ymXSSKq9WXhqHby7tdGVnEqywF9zZN ZbV9kYmHMQG7hDgc+5f1uCg4YVKdnvUHqT6PansMJBydbIHdWEPlplsZc2dPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NqeMir+nm7Rz0MX+HZzTpuoihAwHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9w6Qmb2qSP6JN70g6UxtXNvwAYj18uYw+8 b4/efl+y1SVP1MNiejZPsf5uzkBu1KO3XpxGUwznAc7JeVAufZYRWFSEgR7pKvIi AfxzO+ZYz14hK6GJyDH/jFy/Zbs9oiqxCYScF2G1DE2VFy7vgloM8PLKG0nVQyJ6 oFBbaI4cCppBlSUnTpa8QrDUbV4uVpwuO07zeQEdMRF4B9P+o2OP1Yfzt5cmTUB/ VB1IwNelpOizQLK9XaKTjNpBlSnUyvGUXFcEt60KZpBU9KnNLSyaTGO4mWw6zhAd zmEgeDsVCYVc8ZHE/DkE7g2UqIE6tXY3vZOtFWmvoDyvC0yBRo8= -----END CERTIFICATE-----Generated at Wed Sep 23 20:53:50 2026 by rpki-client