$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: RfHW7DhSlrunq7LBTMzPuCnCvwiZtnBQ8o3rf4vzwQI= Subject key identifier: 18:3C:F5:20:09:1B:25:A0:C7:7E:0E:4E:91:77:45:4C:E0:E3:D0:E8 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 0D0E6F15B832D7B53D8C05E20DC03EE00E35EC9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:29:14 +0000 Manifest this update: Tue 12 May 2026 21:24:14 +0000 Manifest next update: Wed 13 May 2026 22:52:14 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: d/05jR7ggRQFqlDSiJq0h9UkEf37LysBAgkoACNvfP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0e:6f:15:b8:32:d7:b5:3d:8c:05:e2:0d:c0:3e:e0:0e:35:ec:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: May 12 21:24:14 2026 GMT Not After : May 13 22:52:14 2026 GMT Subject: CN=183CF520091B25A0C77E0E4E9177454CE0E3D0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:f7:20:38:97:f1:8f:7f:04:2a:f9:e4:9e: cb:33:b0:65:a0:8f:3d:3e:e7:59:32:1c:67:60:44: 5f:ca:c4:ea:50:1e:1b:0c:6d:19:af:ec:41:30:ce: e3:c1:81:61:29:fc:a4:68:7d:8d:a4:f5:df:f1:68: a6:42:d6:ec:0d:fe:4b:55:cf:56:73:c8:9d:31:86: f3:9e:af:a9:48:a3:1c:40:ba:6f:20:9b:3e:2e:75: 2f:f9:52:40:3d:ad:d9:2b:0c:0b:3f:75:7e:61:51: 5e:df:12:3b:0a:fa:0f:4a:fa:e9:ed:da:c0:6e:87: f0:a2:0c:0e:c1:b8:c2:17:7b:bb:44:32:e1:9b:79: 39:56:5b:9f:00:53:8d:e7:d4:03:30:8f:29:a5:ec: cc:78:8b:ba:54:4b:da:eb:c1:35:e3:ce:ff:ba:00: 1a:7e:9c:e5:06:63:6c:a7:fb:0d:41:a8:27:e1:93: 7d:a4:97:8d:41:93:b1:c6:5c:9f:10:6a:32:e7:9a: 75:37:58:02:32:b4:a4:e2:e9:8e:71:65:a5:e3:58: a3:6e:3f:45:f1:97:38:46:95:f1:80:25:26:a8:07: a0:89:cf:61:41:c5:a3:44:66:1d:f8:09:1a:35:48: ff:d8:5b:fd:be:09:57:45:05:fd:1d:f1:0b:37:5e: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3C:F5:20:09:1B:25:A0:C7:7E:0E:4E:91:77:45:4C:E0:E3:D0:E8 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:50:54:db:9d:d2:07:8b:97:06:32:60:60:b0:41:6e:99:48: c3:e1:61:03:67:5f:62:e7:8c:cf:2a:7a:8b:d7:e0:b1:10:c9: 7c:eb:2d:03:8b:44:a3:d6:9d:8b:f2:83:6f:c3:67:2a:02:23: bf:e0:2f:e8:ff:da:1f:98:db:5f:70:92:37:77:38:64:33:e3: e8:b8:8d:69:93:63:3d:e0:1c:ba:5e:24:24:d0:24:aa:5e:6b: 58:3c:36:21:f8:22:27:b5:48:02:ee:f4:e7:a3:6d:10:2c:15: 0f:18:e9:98:69:7b:89:91:4b:39:51:9c:ae:e0:c9:74:87:d4: 41:86:de:bf:2e:5d:01:1d:b2:3e:66:68:aa:72:90:19:ed:e8: bd:d2:61:4d:6b:a1:ec:21:84:b0:58:44:23:7c:c5:81:d3:66: 39:cb:99:f2:10:76:67:32:7c:1f:7d:88:b0:5d:7f:58:da:8b: 96:ba:93:8e:3c:f2:48:7d:14:a1:b5:b7:48:b7:e5:88:a6:30: 63:8f:c7:34:38:d1:b6:14:0d:36:89:3c:d3:f4:80:27:8b:31: af:1d:be:28:71:83:53:58:63:2b:d7:6f:5e:31:3e:96:ec:b2: 8f:80:a7:8d:de:82:6b:9b:d1:0e:00:e4:86:16:96:ef:53:8b: af:6c:02:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQ5vFbgy17U9jAXiDcA+4A417J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA1MTIyMTI0MTRaFw0yNjA1MTMyMjUyMTRaMDMxMTAvBgNV BAMTKDE4M0NGNTIwMDkxQjI1QTBDNzdFMEU0RTkxNzc0NTRDRTBFM0QwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldvcgOJfxj38EKvnknsszsGWg jz0+51kyHGdgRF/KxOpQHhsMbRmv7EEwzuPBgWEp/KRofY2k9d/xaKZC1uwN/ktV z1ZzyJ0xhvOer6lIoxxAum8gmz4udS/5UkA9rdkrDAs/dX5hUV7fEjsK+g9K+unt 2sBuh/CiDA7BuMIXe7tEMuGbeTlWW58AU43n1AMwjyml7Mx4i7pUS9rrwTXjzv+6 ABp+nOUGY2yn+w1BqCfhk32kl41Bk7HGXJ8QajLnmnU3WAIytKTi6Y5xZaXjWKNu P0XxlzhGlfGAJSaoB6CJz2FBxaNEZh34CRo1SP/YW/2+CVdFBf0d8Qs3Xv7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDz1IAkbJaDHfg5OkXdFTODj0OgwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtQVNud0geLlwYyYGCwQW6ZSMPhYQNnX2Ln jM8qeovX4LEQyXzrLQOLRKPWnYvyg2/DZyoCI7/gL+j/2h+Y219wkjd3OGQz4+i4 jWmTYz3gHLpeJCTQJKpea1g8NiH4Iie1SALu9OejbRAsFQ8Y6Zhpe4mRSzlRnK7g yXSH1EGG3r8uXQEdsj5maKpykBnt6L3SYU1roewhhLBYRCN8xYHTZjnLmfIQdmcy fB99iLBdf1jai5a6k4488kh9FKG1t0i35YimMGOPxzQ40bYUDTaJPNP0gCeLMa8d vihxg1NYYyvXb14xPpbsso+Ap43egmub0Q4A5IYWlu9Ti69sAsA= -----END CERTIFICATE-----Generated at Wed May 13 01:11:01 2026 by rpki-client