$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: lhy4zgFfb5D++hkRWaQcPGMdEzCTl/NvfLSB4k1Gweo= Subject key identifier: 56:0C:8A:11:3E:54:4B:A8:E1:10:F8:CB:C8:E9:2A:C4:02:0E:D6:83 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 584544AC94D8929BDC06547649DCDC8CD42A08ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:58:24 +0000 Manifest this update: Thu 23 Jul 2026 18:53:24 +0000 Manifest next update: Fri 24 Jul 2026 22:42:24 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: lBUMz80686d/Wc9txtEcp78qUQ8ryWvgflfjrA3dnX0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:45:44:ac:94:d8:92:9b:dc:06:54:76:49:dc:dc:8c:d4:2a:08:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: Jul 23 18:53:24 2026 GMT Not After : Jul 24 22:42:24 2026 GMT Subject: CN=560C8A113E544BA8E110F8CBC8E92AC4020ED683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:4a:05:a4:13:7a:7c:81:a4:65:59:15:54: 8a:13:77:87:f5:c0:2b:29:7c:29:da:d6:88:e6:4f: 8c:27:c0:21:6e:7e:d1:cc:39:0a:91:9d:65:52:0a: 48:11:0b:69:3a:3c:6e:6d:45:6c:97:a2:b5:32:6f: eb:6c:81:36:b8:9a:59:5e:25:46:e7:2d:ea:8e:f3: d2:e2:1f:16:da:33:4d:57:3b:8d:af:fa:f9:db:c0: e2:6c:0a:48:7b:6f:4f:19:b9:c8:c5:74:8b:25:41: 88:0e:ca:30:81:ce:fb:3c:d2:92:f4:43:33:c2:e9: 21:84:fa:0a:bf:0b:76:2c:c7:2e:a2:1d:f6:f5:7c: 9d:13:8b:ee:fd:a1:c8:24:ad:e6:5e:6a:a9:37:4d: 8f:fa:eb:9b:7e:cd:f4:4e:81:2e:87:6c:09:00:fe: 6e:7f:32:e5:d6:f4:a4:ab:2e:5f:70:3f:a1:dc:ca: aa:d8:3e:bd:aa:48:83:eb:d8:60:25:fa:ff:a7:5a: 1c:6b:c9:99:df:5e:b0:10:6c:dc:39:0d:39:8f:68: 5e:a5:a4:7d:59:72:fa:b3:de:2b:98:64:40:52:4b: 16:a6:83:3f:4a:01:d4:a3:9d:eb:f1:58:42:46:7e: 38:d1:2f:9f:17:f0:5d:01:5a:24:ac:32:00:36:3c: 34:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0C:8A:11:3E:54:4B:A8:E1:10:F8:CB:C8:E9:2A:C4:02:0E:D6:83 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:23:44:07:71:c7:2c:b8:9c:bb:7b:68:08:99:e9:cb:4d: 8a:61:ea:41:8e:9d:33:55:1b:8f:18:e5:e9:84:4d:f3:56:e2: 7e:ef:a4:64:62:69:7b:9b:65:7e:76:22:3e:ca:04:55:ff:fc: c6:51:2e:6b:77:29:be:4f:67:bd:d5:f0:3d:60:1f:54:ca:1d: c7:6d:78:5d:22:89:e5:c4:12:c3:50:20:20:61:d2:19:50:09: 0a:99:44:c8:5f:2a:1f:4a:fd:a0:5a:03:4e:74:e2:20:8c:16: 8c:fe:92:47:da:85:8b:c6:79:3f:66:21:11:54:9d:b1:8f:41: 2b:6e:57:0a:a4:c7:e1:4e:c3:2f:1e:18:71:a0:15:7c:5f:b1: ce:b7:ea:c8:ac:b1:bb:9e:b1:b1:fe:ef:e5:fe:5c:e7:2b:13: e9:22:24:12:46:ad:a6:a8:e5:80:f4:31:1a:ef:52:ba:d9:e5: fb:fb:f7:f8:50:a2:7e:3a:65:c2:f6:ae:2e:2f:59:89:14:5d: f0:53:17:c9:02:af:3e:4e:ce:fc:92:ce:18:4a:bb:6f:c0:65: b3:c6:7e:d4:11:c4:39:3b:3c:58:73:89:8e:3f:07:93:6d:d0: 0c:ae:6e:8b:dc:47:75:e8:2b:80:47:53:04:fd:f1:16:40:31: 5f:82:36:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEVErJTYkpvcBlR2SdzcjNQqCO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA3MjMxODUzMjRaFw0yNjA3MjQyMjQyMjRaMDMxMTAvBgNV BAMTKDU2MEM4QTExM0U1NDRCQThFMTEwRjhDQkM4RTkyQUM0MDIwRUQ2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDby0oFpBN6fIGkZVkVVIoTd4f1 wCspfCna1ojmT4wnwCFuftHMOQqRnWVSCkgRC2k6PG5tRWyXorUyb+tsgTa4mlle JUbnLeqO89LiHxbaM01XO42v+vnbwOJsCkh7b08ZucjFdIslQYgOyjCBzvs80pL0 QzPC6SGE+gq/C3Ysxy6iHfb1fJ0Ti+79ocgkreZeaqk3TY/665t+zfROgS6HbAkA /m5/MuXW9KSrLl9wP6HcyqrYPr2qSIPr2GAl+v+nWhxryZnfXrAQbNw5DTmPaF6l pH1Zcvqz3iuYZEBSSxamgz9KAdSjnevxWEJGfjjRL58X8F0BWiSsMgA2PDQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVgyKET5US6jhEPjLyOkqxAIO1oMwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHcI0QHcccsuJy7e2gImenLTYph6kGOnTNV G48Y5emETfNW4n7vpGRiaXubZX52Ij7KBFX//MZRLmt3Kb5PZ73V8D1gH1TKHcdt eF0iieXEEsNQICBh0hlQCQqZRMhfKh9K/aBaA0504iCMFoz+kkfahYvGeT9mIRFU nbGPQStuVwqkx+FOwy8eGHGgFXxfsc636sissbuesbH+7+X+XOcrE+kiJBJGraao 5YD0MRrvUrrZ5fv79/hQon46ZcL2ri4vWYkUXfBTF8kCrz5OzvySzhhKu2/AZbPG ftQRxDk7PFhziY4/B5Nt0AyubovcR3XoK4BHUwT98RZAMV+CNoU= -----END CERTIFICATE-----Generated at Fri Jul 24 05:12:42 2026 by rpki-client