$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: XCaxogzATb4kAFLotzUF8k38vGX7v+wKb16gPvGjHIk= Subject key identifier: B2:35:F1:36:05:11:AC:6B:EF:01:20:3D:D2:88:C5:5B:56:85:95:FF Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 526D4A5886ED51B759090DD3F0E926776C179CB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: 0F Signing time: Tue 12 May 2026 11:32:13 +0000 Manifest this update: Tue 12 May 2026 11:27:13 +0000 Manifest next update: Wed 13 May 2026 15:13:13 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) 2: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: YXJeCecot24TY7IUR1gAnD/4aLSweqf3uxw1LOmXUUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6d:4a:58:86:ed:51:b7:59:09:0d:d3:f0:e9:26:77:6c:17:9c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: May 12 11:27:13 2026 GMT Not After : May 13 15:13:13 2026 GMT Subject: CN=B235F1360511AC6BEF01203DD288C55B568595FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:fc:fb:40:e1:e2:4f:c1:54:74:a4:cc:a4: 24:c0:08:b8:70:74:e3:ee:b9:89:40:1f:87:af:fc: 3d:d5:2b:88:e4:bc:d7:9e:29:a6:2f:82:d0:5a:17: 7c:0b:08:50:8d:aa:7c:64:28:d2:b4:9f:5d:5f:1e: 5f:03:3e:b5:a6:75:9e:22:c1:cf:59:fa:a4:0c:bc: e8:ef:5a:ea:9e:0a:b4:78:23:2e:95:24:91:e0:0c: 99:45:85:6a:b8:a8:b8:61:bd:df:17:71:0b:c4:26: fc:72:93:b8:79:7a:94:79:1f:6e:b3:7b:cf:70:1e: 11:90:87:5f:2a:a1:0a:34:ba:90:f2:ca:15:a7:47: 10:d5:d3:86:44:a3:85:0f:96:39:64:79:fe:b0:77: 4d:93:d4:40:56:9d:d7:66:8e:72:69:40:14:19:d5: 4f:64:0b:88:24:c3:b6:f4:3f:47:f0:68:6b:14:e7: 01:cd:60:96:a5:a9:4e:ce:e8:b4:18:ef:ef:c4:95: 6a:6d:47:62:ad:c5:c0:b5:05:61:c7:be:49:74:74: a5:9b:0c:4a:1b:eb:76:f5:da:65:f7:29:cf:9e:6e: f1:f9:de:55:cb:f2:8b:08:eb:f2:2a:56:a0:13:de: 21:ee:1e:49:63:3a:13:0f:ae:6f:de:67:8f:c3:ae: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:F1:36:05:11:AC:6B:EF:01:20:3D:D2:88:C5:5B:56:85:95:FF X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d2:37:c9:7b:cb:66:ca:0b:d7:e0:5f:f4:95:7e:a9:8f:fd: 81:cb:5e:cb:05:58:e0:9b:6f:16:a1:38:d3:fe:75:2a:81:5b: 0c:9b:aa:9c:4c:28:db:a6:87:37:1f:ba:46:f0:da:02:42:39: ef:a0:ac:c3:b2:23:31:c8:90:9d:ae:d6:45:96:57:63:8b:db: 3f:65:1e:09:36:82:af:60:89:4d:47:94:6d:21:61:85:12:61: 50:1b:0c:e9:da:8b:7d:66:8e:53:1d:ec:16:f3:b8:30:08:e5: 8e:7a:08:1c:ae:59:95:9c:d8:7e:81:6f:cb:27:e5:22:82:da: 6c:c8:ed:02:3e:54:ff:01:da:a9:d5:6e:c6:c9:8d:09:e1:a0: 73:72:a4:92:89:0e:23:02:89:6c:4b:6e:0a:58:2e:dc:f0:7a: 76:6c:e0:02:1b:89:ff:86:e5:15:25:88:3b:76:7d:9a:30:7a: 85:6d:4f:64:89:67:5f:ee:58:b0:34:02:55:fe:27:69:1f:e2: 5d:0f:60:0d:8b:51:f1:88:37:10:11:37:f2:52:95:a8:a8:cc: 7c:6d:fd:46:0c:ea:2b:7a:86:45:cc:de:9f:2f:0f:9e:0b:46: 65:b1:d4:30:e4:2e:dc:1d:b2:28:63:74:41:c8:30:1d:da:49: c4:d6:26:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUm1KWIbtUbdZCQ3T8Okmd2wXnLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA1MTIxMTI3MTNaFw0yNjA1MTMxNTEzMTNaMDMxMTAvBgNV BAMTKEIyMzVGMTM2MDUxMUFDNkJFRjAxMjAzREQyODhDNTVCNTY4NTk1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/vz7QOHiT8FUdKTMpCTACLhw dOPuuYlAH4ev/D3VK4jkvNeeKaYvgtBaF3wLCFCNqnxkKNK0n11fHl8DPrWmdZ4i wc9Z+qQMvOjvWuqeCrR4Iy6VJJHgDJlFhWq4qLhhvd8XcQvEJvxyk7h5epR5H26z e89wHhGQh18qoQo0upDyyhWnRxDV04ZEo4UPljlkef6wd02T1EBWnddmjnJpQBQZ 1U9kC4gkw7b0P0fwaGsU5wHNYJalqU7O6LQY7+/ElWptR2KtxcC1BWHHvkl0dKWb DEob63b12mX3Kc+ebvH53lXL8osI6/IqVqAT3iHuHkljOhMPrm/eZ4/Drgx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjXxNgURrGvvASA90ojFW1aFlf8wHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErSN8l7y2bKC9fgX/SVfqmP/YHLXssFWOCb bxahONP+dSqBWwybqpxMKNumhzcfukbw2gJCOe+grMOyIzHIkJ2u1kWWV2OL2z9l Hgk2gq9giU1HlG0hYYUSYVAbDOnai31mjlMd7BbzuDAI5Y56CByuWZWc2H6Bb8sn 5SKC2mzI7QI+VP8B2qnVbsbJjQnhoHNypJKJDiMCiWxLbgpYLtzwenZs4AIbif+G 5RUliDt2fZoweoVtT2SJZ1/uWLA0AlX+J2kf4l0PYA2LUfGINxARN/JSlaiozHxt /UYM6it6hkXM3p8vD54LRmWx1DDkLtwdsihjdEHIMB3aScTWJpo= -----END CERTIFICATE-----Generated at Tue May 12 22:47:04 2026 by rpki-client