$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: uf8Pi+Z75W1oTMOKZ3/8JDdViRvmctPwp94oPkQ9zvI= Subject key identifier: 49:C5:12:61:76:5B:62:F5:94:C4:A0:97:7A:69:28:67:3F:CD:45:84 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 42EABE7378127A4A6D39BAEC8971C9801B24B164 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:02:08 +0000 Manifest this update: Thu 24 Sep 2026 00:57:08 +0000 Manifest next update: Fri 25 Sep 2026 03:32:08 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: 2qO73ikfoAtCqxCgoIt7gGYCqnz3WGGUlEOO+w3CUrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ea:be:73:78:12:7a:4a:6d:39:ba:ec:89:71:c9:80:1b:24:b1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: Sep 24 00:57:08 2026 GMT Not After : Sep 25 03:32:08 2026 GMT Subject: CN=49C51261765B62F594C4A0977A6928673FCD4584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:59:92:e8:26:7e:61:e6:3e:fd:da:f6:69: 2a:b2:c6:d7:9a:ee:ec:dd:91:da:b0:0c:73:bc:25: a2:86:be:f5:4d:4b:b2:88:4e:1b:83:84:9f:60:3f: ac:9c:d6:4e:30:97:ea:ae:0d:5a:ef:50:10:fb:ff: cb:19:1b:87:c3:5b:67:f9:33:2d:31:12:43:6d:ed: 94:24:65:5d:e5:06:25:b4:73:05:a8:98:33:58:ad: 97:fe:61:a4:92:4e:9c:d1:33:e4:71:be:b2:92:78: e5:18:28:7a:d4:74:5e:fc:44:24:b2:b7:af:2e:de: 80:32:72:ab:d0:98:2c:5f:9e:b8:72:40:5f:01:28: 24:e9:96:a1:0d:e7:a0:98:ce:d9:dc:82:c6:38:41: b9:90:d9:a7:3f:4e:7f:d0:28:be:60:8e:4c:ca:50: 8f:ba:c6:e5:bf:cd:a0:49:be:0d:0b:34:ec:62:5d: 28:dd:cb:ec:c2:87:e7:2a:2c:e8:24:94:e3:4a:eb: b4:a9:65:cd:ab:b4:39:8b:0e:dd:e6:7e:02:a1:b8: 2c:47:12:7f:ae:e3:45:0e:44:9b:6e:88:e5:39:a3: ac:fe:01:14:21:7a:7b:15:90:59:8c:2e:8b:5c:d8: 9c:38:a9:7b:6c:9f:f3:1d:e4:21:2f:1d:26:24:62: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C5:12:61:76:5B:62:F5:94:C4:A0:97:7A:69:28:67:3F:CD:45:84 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d5:f7:02:b9:ce:ad:22:f9:cf:60:00:33:17:1a:76:00:0f: 59:33:f9:25:bd:73:85:6f:2a:82:3d:0c:57:a8:f1:4b:5a:25: 6a:e9:13:4a:90:04:6d:e3:71:e4:2a:8d:53:09:cb:a8:65:e4: 2c:7d:12:e7:b6:8f:2e:20:9a:8f:6e:fc:e8:e3:40:41:b5:00: 34:df:1c:d0:05:58:3a:d6:4d:ba:e7:2f:09:b0:85:f6:d0:65: 11:2b:79:36:f0:e8:cb:08:eb:9b:20:b1:89:86:1e:5f:c8:e0: 61:ff:8d:1d:e7:00:db:f2:b0:d9:b2:b3:68:c8:08:46:bb:01: 3c:ac:0e:92:76:38:45:e4:af:ab:27:bd:06:6a:b5:8e:0c:09: 52:78:ce:8c:7e:03:cc:a2:ce:84:c6:79:f1:cf:35:85:a1:0b: 57:ba:3d:f4:75:c8:de:31:10:e9:ed:38:90:76:33:78:98:ee: a9:48:81:71:57:12:c8:09:4a:18:f8:59:b2:e0:20:72:70:21: 9a:23:41:22:ed:c9:eb:e0:62:9a:4f:31:85:69:13:a0:bd:14: 47:7e:88:a3:b8:08:22:e8:bd:df:01:fa:9e:70:4f:df:a3:79: f2:81:3d:ee:88:a1:c4:3e:6f:88:96:63:2b:63:56:15:fb:eb: c3:2d:ed:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuq+c3gSekptObrsiXHJgBsksWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA5MjQwMDU3MDhaFw0yNjA5MjUwMzMyMDhaMDMxMTAvBgNV BAMTKDQ5QzUxMjYxNzY1QjYyRjU5NEM0QTA5NzdBNjkyODY3M0ZDRDQ1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiflmS6CZ+YeY+/dr2aSqyxtea 7uzdkdqwDHO8JaKGvvVNS7KIThuDhJ9gP6yc1k4wl+quDVrvUBD7/8sZG4fDW2f5 My0xEkNt7ZQkZV3lBiW0cwWomDNYrZf+YaSSTpzRM+RxvrKSeOUYKHrUdF78RCSy t68u3oAycqvQmCxfnrhyQF8BKCTplqEN56CYztncgsY4QbmQ2ac/Tn/QKL5gjkzK UI+6xuW/zaBJvg0LNOxiXSjdy+zCh+cqLOgklONK67SpZc2rtDmLDt3mfgKhuCxH En+u40UORJtuiOU5o6z+ARQhensVkFmMLotc2Jw4qXtsn/Md5CEvHSYkYh6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUScUSYXZbYvWUxKCXemkoZz/NRYQwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfV9wK5zq0i+c9gADMXGnYAD1kz+SW9c4Vv KoI9DFeo8UtaJWrpE0qQBG3jceQqjVMJy6hl5Cx9Eue2jy4gmo9u/OjjQEG1ADTf HNAFWDrWTbrnLwmwhfbQZREreTbw6MsI65sgsYmGHl/I4GH/jR3nANvysNmys2jI CEa7ATysDpJ2OEXkr6snvQZqtY4MCVJ4zox+A8yizoTGefHPNYWhC1e6PfR1yN4x EOntOJB2M3iY7qlIgXFXEsgJShj4WbLgIHJwIZojQSLtyevgYppPMYVpE6C9FEd+ iKO4CCLovd8B+p5wT9+jefKBPe6IocQ+b4iWYytjVhX768Mt7UE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:51:45 2026 by rpki-client