$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: 02IzFwhu8IwekegywKVucVmEj8Hs3HXf1FKhtKDP5Vs= Subject key identifier: A2:AF:AD:AE:9C:89:77:E8:CB:63:B5:74:C7:C0:F7:16:25:0C:3F:A7 Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 3C28B998CE12F9BB922BB15F0D073E8FAB58F974 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:43:12 +0000 Manifest this update: Wed 23 Sep 2026 09:38:12 +0000 Manifest next update: Thu 24 Sep 2026 13:16:12 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) 2: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: h+QkmS7SL80jgCK9gVuoq7YOUDKNdpsF2W91at1Vbec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:28:b9:98:ce:12:f9:bb:92:2b:b1:5f:0d:07:3e:8f:ab:58:f9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Sep 23 09:38:12 2026 GMT Not After : Sep 24 13:16:12 2026 GMT Subject: CN=A2AFADAE9C8977E8CB63B574C7C0F716250C3FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:0d:1b:84:6b:64:18:9c:89:a2:e3:78:c8: 01:00:29:aa:64:6d:cf:56:48:95:5c:55:03:20:39: f8:81:89:27:0c:5a:4f:f0:c7:25:cf:41:7b:5b:f9: 05:b5:e2:cb:1d:21:4b:d7:ba:ab:a1:db:fe:83:5c: c2:c6:65:08:b8:b8:87:a2:9e:f6:e6:78:21:87:3c: 3c:43:df:28:2b:15:0a:d0:87:a3:e7:20:63:72:79: e0:65:dc:de:ba:9b:27:4a:c3:f3:83:1a:c2:10:74: e7:9e:8a:37:6f:5d:b9:da:58:d0:fc:a5:7a:79:53: ef:a8:10:49:fb:ec:07:f7:45:15:c4:bb:54:2f:3d: f2:ac:49:6f:6d:e3:9b:47:a9:97:50:99:d6:1c:3c: 60:7f:4c:58:b6:9b:eb:54:86:95:14:fb:06:16:a4: 58:66:c5:8c:77:86:a4:00:be:f0:04:13:d7:0e:26: 2b:7c:f5:04:28:a7:12:59:d0:6a:c7:45:39:73:29: 93:57:f8:c4:d1:cb:7a:c3:70:25:3d:d0:71:47:69: a6:b0:1c:2e:fa:09:a1:4d:f0:76:47:bd:e0:ed:e7: 6d:53:ad:e4:31:42:d9:b9:79:8d:45:ff:59:eb:f8: f7:d5:d9:b8:6c:91:a5:40:2d:81:51:fd:2f:c6:75: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AF:AD:AE:9C:89:77:E8:CB:63:B5:74:C7:C0:F7:16:25:0C:3F:A7 X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:fd:73:5f:ac:31:f4:b8:f4:7f:18:25:64:b2:d1:84:f4:47: b1:e7:cb:89:ee:22:1d:16:ff:e6:e1:25:22:d9:ab:c0:ec:af: 2b:c3:34:3b:e3:88:4e:f3:64:8c:52:f4:5d:d0:45:e0:a0:5b: 12:0e:61:06:45:f0:aa:cd:42:3e:26:a9:f4:a4:cf:b8:43:28: 2d:d9:a0:10:9c:5e:58:5c:7a:1d:b7:f6:6c:00:17:ff:24:10: a8:b8:58:66:8e:d5:ce:fd:46:72:6d:09:04:39:5c:34:13:ae: a3:ce:ab:f5:28:7e:b7:af:2d:b8:b3:2c:2c:f4:34:13:3d:d2: e9:6f:1a:70:67:ee:a8:53:dd:d1:11:22:d9:cf:3b:3a:0f:38: e2:66:34:24:26:06:92:a4:15:e6:41:22:44:66:03:5f:8b:be: 81:7b:15:6e:df:81:d5:ea:c6:ca:d5:8c:07:66:8e:ea:bb:f2: 64:40:4f:3c:ef:b9:9f:e8:06:12:a1:d8:f4:0a:93:81:29:21: 8c:ec:46:bb:5c:2f:8d:ea:da:91:9e:e6:a8:85:7c:36:a0:c2: c2:c7:0b:dc:f9:7b:d4:78:54:6d:e1:23:70:75:2e:ef:b5:2f: 7d:49:0a:5a:2f:b4:20:9b:48:d9:3b:a3:69:ad:4c:b0:61:f8: 8a:58:88:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCi5mM4S+buSK7FfDQc+j6tY+XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA5MjMwOTM4MTJaFw0yNjA5MjQxMzE2MTJaMDMxMTAvBgNV BAMTKEEyQUZBREFFOUM4OTc3RThDQjYzQjU3NEM3QzBGNzE2MjUwQzNGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNQ0bhGtkGJyJouN4yAEAKapk bc9WSJVcVQMgOfiBiScMWk/wxyXPQXtb+QW14ssdIUvXuquh2/6DXMLGZQi4uIei nvbmeCGHPDxD3ygrFQrQh6PnIGNyeeBl3N66mydKw/ODGsIQdOeeijdvXbnaWND8 pXp5U++oEEn77Af3RRXEu1QvPfKsSW9t45tHqZdQmdYcPGB/TFi2m+tUhpUU+wYW pFhmxYx3hqQAvvAEE9cOJit89QQopxJZ0GrHRTlzKZNX+MTRy3rDcCU90HFHaaaw HC76CaFN8HZHveDt521TreQxQtm5eY1F/1nr+PfV2bhskaVALYFR/S/GdXp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoq+trpyJd+jLY7V0x8D3FiUMP6cwHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALn9c1+sMfS49H8YJWSy0YT0R7Hny4nuIh0W /+bhJSLZq8DsryvDNDvjiE7zZIxS9F3QReCgWxIOYQZF8KrNQj4mqfSkz7hDKC3Z oBCcXlhceh239mwAF/8kEKi4WGaO1c79RnJtCQQ5XDQTrqPOq/UofrevLbizLCz0 NBM90ulvGnBn7qhT3dERItnPOzoPOOJmNCQmBpKkFeZBIkRmA1+LvoF7FW7fgdXq xsrVjAdmjuq78mRATzzvuZ/oBhKh2PQKk4EpIYzsRrtcL43q2pGe5qiFfDagwsLH C9z5e9R4VG3hI3B1Lu+1L31JClovtCCbSNk7o2mtTLBh+IpYiC0= -----END CERTIFICATE-----Generated at Wed Sep 23 21:34:05 2026 by rpki-client