$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: nQBVVsBBmvu1QNJzv5UO9eUIWjQragpsPS0oLcZF0tU= Subject key identifier: 09:3E:01:13:0E:49:C3:96:E8:A3:5A:08:88:E8:66:16:EF:36:61:47 Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 1AB8ABEB133A8EA7AADE3D8530FB3CE5AE5E490D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:45:42 +0000 Manifest this update: Thu 23 Jul 2026 12:40:42 +0000 Manifest next update: Fri 24 Jul 2026 15:47:42 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: TELOFqYcoZg/uQqJ2N5XVS/u8o/EAbLvtJSsO0c3Uvk=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b8:ab:eb:13:3a:8e:a7:aa:de:3d:85:30:fb:3c:e5:ae:5e:49:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Jul 23 12:40:42 2026 GMT Not After : Jul 24 15:47:42 2026 GMT Subject: CN=093E01130E49C396E8A35A0888E86616EF366147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:03:fe:31:57:36:41:c7:1d:18:bb:e0:18: 0e:42:0b:9e:23:19:04:ab:6a:09:e8:d0:a3:e9:c1: 40:03:04:d9:79:0c:39:23:ce:2f:da:c8:23:9f:f0: 70:66:5e:83:1a:29:ca:c2:35:51:14:5e:a5:51:55: 76:b2:d2:55:5e:39:5d:0f:4b:90:9b:0c:23:4d:50: 8d:5c:c9:d3:c3:c3:61:14:86:ad:d7:1d:c8:08:00: 8b:9e:32:ee:6a:bd:dc:20:93:63:ab:03:2d:99:91: f0:1c:33:f6:e0:42:15:c7:96:1b:5e:14:bd:ed:61: 16:9e:20:28:70:88:4e:9d:86:f3:9d:48:be:e9:e1: f0:28:b6:20:2e:32:66:78:01:65:bf:7a:8c:f4:73: d9:93:29:35:8b:01:90:72:d6:65:5e:b8:d7:a0:8b: 68:fc:75:45:1d:00:2d:a9:4c:a5:7b:d1:0c:be:7a: 26:04:5a:65:43:4f:07:80:69:8c:74:03:47:c7:cd: c2:c0:84:5f:08:67:60:e3:24:6b:67:57:02:70:66: bd:7f:a9:2c:6b:67:0c:e1:7f:8d:91:e4:62:92:7c: 37:48:4e:bf:25:d5:f3:cc:a4:6a:8f:2d:ae:6a:8d: 2b:3a:a6:9a:4f:92:6e:11:4e:df:14:c8:97:b0:de: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:01:13:0E:49:C3:96:E8:A3:5A:08:88:E8:66:16:EF:36:61:47 X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:f1:c0:45:49:29:d2:dc:c3:b5:f2:67:05:68:57:fb:f5: 43:b9:fc:5e:c6:62:e4:8f:c3:db:fb:d2:15:40:ac:a5:b8:41: b9:13:78:85:db:52:88:66:58:8f:15:40:c0:77:bf:e6:f1:f4: 3c:be:a3:10:55:98:0c:01:e0:03:5d:0d:c6:74:96:ff:06:d2: c9:f3:ad:0b:b6:7b:d9:bf:ed:7e:63:49:a6:98:d6:af:e2:49: cf:2d:7d:22:4e:42:67:5e:81:11:b7:8b:b7:43:46:c9:03:5d: ab:ed:ca:e7:c9:db:0f:26:a1:8d:06:d1:05:d2:c1:e8:78:71: 41:5f:81:e0:dd:ee:91:07:19:bf:4e:6c:99:5c:2f:12:be:07: 59:05:5e:ca:bf:ae:6c:54:57:ef:d7:dc:28:69:5a:84:59:6d: 6a:27:25:f4:71:05:14:99:9a:4b:fe:3f:fb:c4:71:06:a2:76: 63:13:3c:18:b4:e4:c1:be:1d:75:7b:99:cd:ec:28:3c:ba:57: 10:dc:42:7b:f0:dc:a6:00:07:79:9a:28:66:8f:10:ab:04:a6: ac:7c:7b:8e:51:65:9b:8d:20:f0:33:ca:e2:05:03:5e:c8:f7: 9b:30:8c:6f:0a:f0:20:1f:d0:91:51:85:57:ab:8e:7d:00:a1: 58:a1:c9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrir6xM6jqeq3j2FMPs85a5eSQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjA3MjMxMjQwNDJaFw0yNjA3MjQxNTQ3NDJaMDMxMTAvBgNV BAMTKDA5M0UwMTEzMEU0OUMzOTZFOEEzNUEwODg4RTg2NjE2RUYzNjYxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NAP+MVc2QccdGLvgGA5CC54j GQSragno0KPpwUADBNl5DDkjzi/ayCOf8HBmXoMaKcrCNVEUXqVRVXay0lVeOV0P S5CbDCNNUI1cydPDw2EUhq3XHcgIAIueMu5qvdwgk2OrAy2ZkfAcM/bgQhXHlhte FL3tYRaeIChwiE6dhvOdSL7p4fAotiAuMmZ4AWW/eoz0c9mTKTWLAZBy1mVeuNeg i2j8dUUdAC2pTKV70Qy+eiYEWmVDTweAaYx0A0fHzcLAhF8IZ2DjJGtnVwJwZr1/ qSxrZwzhf42R5GKSfDdITr8l1fPMpGqPLa5qjSs6pppPkm4RTt8UyJew3gzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCT4BEw5Jw5boo1oIiOhmFu82YUcwHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUJ8cBFSSnS3MO18mcFaFf79UO5/F7GYuSP w9v70hVArKW4QbkTeIXbUohmWI8VQMB3v+bx9Dy+oxBVmAwB4ANdDcZ0lv8G0snz rQu2e9m/7X5jSaaY1q/iSc8tfSJOQmdegRG3i7dDRskDXavtyufJ2w8moY0G0QXS weh4cUFfgeDd7pEHGb9ObJlcLxK+B1kFXsq/rmxUV+/X3ChpWoRZbWonJfRxBRSZ mkv+P/vEcQaidmMTPBi05MG+HXV7mc3sKDy6VxDcQnvw3KYAB3maKGaPEKsEpqx8 e45RZZuNIPAzyuIFA17I95swjG8K8CAf0JFRhVerjn0AoVihyf4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:39:52 2026 by rpki-client