$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: 18mlNzV8288twKPFMZjqAxRKcig2xxBS4zSb9fNh904= Subject key identifier: 63:D8:4E:63:2C:6E:8D:89:5E:D1:1B:FD:A7:29:01:53:89:16:77:B1 Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 1390BB9772984EF62B550F51D16355AB51004ADC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:26:29 +0000 Manifest this update: Thu 23 Jul 2026 13:21:29 +0000 Manifest next update: Fri 24 Jul 2026 17:21:29 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) 2: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: xe1KQk5YUntMivREqv6MntYOrn8f9+GZ8mV5P/aGq+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:90:bb:97:72:98:4e:f6:2b:55:0f:51:d1:63:55:ab:51:00:4a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Jul 23 13:21:29 2026 GMT Not After : Jul 24 17:21:29 2026 GMT Subject: CN=63D84E632C6E8D895ED11BFDA7290153891677B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:b9:20:ce:62:19:99:e3:b1:96:2e:e5:9d: 01:de:5c:f5:31:87:74:ac:d6:b4:e7:20:4a:bb:14: 42:cd:4b:d4:51:92:e8:62:e1:c2:7b:e0:d2:35:da: 3b:bb:cc:09:42:2b:8b:9e:b8:b0:1b:a2:d6:0c:c3: 12:45:44:0d:1d:8c:f4:ee:26:eb:09:fa:58:ef:2b: e1:32:82:72:67:9f:3c:ff:9a:ce:5e:a4:4f:23:35: 6e:39:41:b0:75:52:f7:95:d2:40:1b:e9:05:3c:bd: 8c:35:62:6b:5f:a7:7f:ad:a9:c7:da:b0:9c:32:2d: b5:a2:d5:b0:c6:6d:42:62:f0:ec:24:1f:bd:de:b8: 54:57:47:0a:05:93:d4:bd:7e:f1:2c:09:86:6e:c8: 56:b8:72:d3:99:fe:98:d0:61:36:b0:62:f6:08:a4: 7d:c1:59:b9:14:29:f2:68:52:f6:d0:f7:56:ff:86: e3:80:06:bc:51:5f:35:5c:9d:c6:f9:d1:78:41:23: 1e:0a:1a:e9:51:b5:67:fb:c1:66:d8:5a:9f:f8:20: d7:59:ee:a6:ec:a0:e8:73:94:dd:44:26:4c:bd:08: 73:9e:8e:da:af:0e:e0:ad:b0:e1:7e:d0:45:cd:74: 9e:ea:28:77:29:ba:9a:20:07:c0:22:5b:4c:08:61: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:4E:63:2C:6E:8D:89:5E:D1:1B:FD:A7:29:01:53:89:16:77:B1 X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4f:65:d3:98:17:ec:69:5b:44:34:bc:f5:10:48:65:9c:c9: 1b:b3:77:6d:14:21:f5:4b:4c:9b:72:89:d3:55:a6:56:9c:d4: 46:73:a6:2e:a5:08:9f:5e:f3:14:ed:82:f0:0a:85:6c:5e:f4: f1:3b:34:65:a7:53:ed:fa:ed:59:c1:cc:8e:14:3e:e4:8d:64: c0:67:e5:99:60:b8:fa:a6:fd:48:7e:a0:d8:17:5c:73:62:73: ba:56:38:ec:38:03:d1:ca:ff:11:ce:c9:3a:3c:ee:fd:82:6a: a6:6c:3a:40:75:c2:40:46:16:6a:b2:e6:e3:a9:ef:bf:21:3e: 34:4d:1f:37:ec:a8:48:08:cb:28:4e:a7:82:3d:45:9c:5d:f6: 4c:f5:c6:74:2f:81:9b:5a:68:d2:cf:30:44:6b:0e:71:85:a3: f3:1d:d7:75:c2:cc:8a:5f:c6:95:99:fe:15:02:9f:f6:24:fc: c8:06:52:a6:b6:c6:c1:d1:06:d8:81:3a:83:ad:d2:4e:7f:ed: 50:d6:ad:43:c3:e1:fa:e1:af:da:b6:db:5c:20:23:24:6a:cd: 5e:7d:8f:ac:af:91:da:f1:c0:46:81:a9:55:2c:f2:b8:23:c1: c4:b6:1d:36:cd:be:c8:e2:65:4a:68:b1:2d:61:69:32:6f:4f: f6:3b:d2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5C7l3KYTvYrVQ9R0WNVq1EAStwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA3MjMxMzIxMjlaFw0yNjA3MjQxNzIxMjlaMDMxMTAvBgNV BAMTKDYzRDg0RTYzMkM2RThEODk1RUQxMUJGREE3MjkwMTUzODkxNjc3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPLkgzmIZmeOxli7lnQHeXPUx h3Ss1rTnIEq7FELNS9RRkuhi4cJ74NI12ju7zAlCK4ueuLAbotYMwxJFRA0djPTu JusJ+ljvK+EygnJnnzz/ms5epE8jNW45QbB1UveV0kAb6QU8vYw1Ymtfp3+tqcfa sJwyLbWi1bDGbUJi8OwkH73euFRXRwoFk9S9fvEsCYZuyFa4ctOZ/pjQYTawYvYI pH3BWbkUKfJoUvbQ91b/huOABrxRXzVcncb50XhBIx4KGulRtWf7wWbYWp/4INdZ 7qbsoOhzlN1EJky9CHOejtqvDuCtsOF+0EXNdJ7qKHcpupogB8AiW0wIYUKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY9hOYyxujYle0Rv9pykBU4kWd7EwHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBPZdOYF+xpW0Q0vPUQSGWcyRuzd20UIfVL TJtyidNVplac1EZzpi6lCJ9e8xTtgvAKhWxe9PE7NGWnU+367VnBzI4UPuSNZMBn 5ZlguPqm/Uh+oNgXXHNic7pWOOw4A9HK/xHOyTo87v2CaqZsOkB1wkBGFmqy5uOp 778hPjRNHzfsqEgIyyhOp4I9RZxd9kz1xnQvgZtaaNLPMERrDnGFo/Md13XCzIpf xpWZ/hUCn/Yk/MgGUqa2xsHRBtiBOoOt0k5/7VDWrUPD4frhr9q221wgIyRqzV59 j6yvkdrxwEaBqVUs8rgjwcS2HTbNvsjiZUposS1haTJvT/Y70vA= -----END CERTIFICATE-----Generated at Fri Jul 24 08:44:56 2026 by rpki-client