$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft File: BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft (raw, json) Hash identifier: 0ftyCnjCy4G/rIILQCBeikeg1fz6rhh8huSD4AjDmMM= Subject key identifier: B8:0C:7A:90:11:E2:72:EC:07:5B:06:5D:91:B0:98:BE:67:B2:1D:9E Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 Certificate issuer: /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Certificate serial: 14D854913078632AF47ED8B2C0232DE614CAA5C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:55:51 +0000 Manifest this update: Wed 23 Sep 2026 11:50:51 +0000 Manifest next update: Thu 24 Sep 2026 13:28:51 +0000 Files and hashes: 1: BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl (hash: PnreB7lWZJeOI4DYKW+Ypnh0lNr/yJeiph2mSoLdfxs=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d8:54:91:30:78:63:2a:f4:7e:d8:b2:c0:23:2d:e6:14:ca:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Validity Not Before: Sep 23 11:50:51 2026 GMT Not After : Sep 24 13:28:51 2026 GMT Subject: CN=B80C7A9011E272EC075B065D91B098BE67B21D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:75:f7:1c:01:32:02:ab:cf:83:aa:6d:a6: 02:c1:96:6e:7f:12:1b:28:82:76:09:ba:96:0a:66: 02:d1:5b:d3:79:09:39:9e:92:28:5b:f6:6a:4e:5b: 94:df:8a:3a:49:2f:0c:ef:da:95:a1:9b:2e:78:33: f4:be:68:af:4e:98:e3:84:d1:a5:67:12:a9:b7:57: 99:56:0e:f8:d6:14:cd:43:51:4f:f6:51:8a:09:4d: af:a2:95:0f:e6:e7:f1:9f:15:b0:91:7d:17:b8:5c: 37:46:5b:53:9f:cb:94:9e:42:5f:32:9c:3d:f2:9c: ef:71:57:48:c6:8f:74:25:50:20:40:ac:1e:70:9f: 99:77:94:d7:95:02:cf:93:88:3e:e8:f2:7d:29:16: a5:f0:f3:03:18:67:0f:f9:d3:82:47:c0:b2:6a:c1: f1:13:f3:c1:03:a6:c8:15:73:14:ff:a6:9f:07:91: 97:fe:e3:af:07:de:7c:5f:8e:e9:3f:f2:5d:a3:a2: e3:a2:21:4a:96:dd:1b:8d:05:04:35:50:f6:16:e8: 28:3a:85:bb:20:a4:40:cf:a8:4b:c9:08:4e:94:a5: 44:c3:04:62:1b:5d:58:ad:c8:40:a0:bf:e0:cf:51: 1e:ed:88:4a:3d:4d:fb:5c:3f:bd:d5:71:4c:57:72: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:7A:90:11:E2:72:EC:07:5B:06:5D:91:B0:98:BE:67:B2:1D:9E X509v3 Authority Key Identifier: keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:46:4f:91:cd:cc:f4:31:89:06:6f:d3:a9:87:57:a2:1e:3e: 4a:cc:c6:d0:cc:25:e7:23:0b:11:b9:dc:4f:a7:6c:c0:7e:83: 71:97:f9:34:98:3c:32:b9:6e:b2:70:84:4a:cc:91:77:cf:a8: e2:21:db:b5:7a:37:bb:c6:7d:cb:2e:9e:ec:5d:f7:0b:98:f5: 10:2e:16:72:8d:34:bf:df:d3:77:6e:e0:1b:40:f6:93:04:0d: 75:a9:40:d5:fa:bc:49:33:df:a6:94:f3:d8:b1:a3:49:58:e1: f4:73:3c:42:48:0f:fb:ce:e1:27:f4:4f:71:26:1f:7c:15:3b: 85:d5:ff:ca:c7:25:3b:4b:7c:9b:fb:ed:0d:aa:3c:94:19:9a: 85:10:24:db:ee:fa:17:c9:cc:20:3c:f0:3e:5e:5a:9d:cd:0d: 27:ee:b9:8b:ca:53:15:92:44:7d:32:a0:86:70:9b:fd:ac:dd: 83:7e:4e:77:76:02:ff:c5:39:16:61:86:2c:73:a8:43:bf:a7: 2e:3e:13:e1:ff:05:10:de:a4:2d:3e:56:6e:8a:96:bb:c3:87: cd:10:94:6a:78:78:10:76:fa:25:52:a2:db:64:62:a8:4f:94: df:4a:ce:16:b5:d7:99:0e:03:87:d4:ef:d1:fa:25:34:02:4f: 01:9f:9e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNhUkTB4Yyr0ftiywCMt5hTKpcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5 MjQ0ODBEMTAeFw0yNjA5MjMxMTUwNTFaFw0yNjA5MjQxMzI4NTFaMDMxMTAvBgNV BAMTKEI4MEM3QTkwMTFFMjcyRUMwNzVCMDY1RDkxQjA5OEJFNjdCMjFEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFnX3HAEyAqvPg6ptpgLBlm5/ EhsognYJupYKZgLRW9N5CTmekihb9mpOW5TfijpJLwzv2pWhmy54M/S+aK9OmOOE 0aVnEqm3V5lWDvjWFM1DUU/2UYoJTa+ilQ/m5/GfFbCRfRe4XDdGW1Ofy5SeQl8y nD3ynO9xV0jGj3QlUCBArB5wn5l3lNeVAs+TiD7o8n0pFqXw8wMYZw/504JHwLJq wfET88EDpsgVcxT/pp8HkZf+468H3nxfjuk/8l2jouOiIUqW3RuNBQQ1UPYW6Cg6 hbsgpEDPqEvJCE6UpUTDBGIbXVityECgv+DPUR7tiEo9TftcP73VcUxXcmBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuAx6kBHicuwHWwZdkbCYvmeyHZ4wHwYDVR0j BBgwFoAUug49SPtWJiyG35c//HyYdJJEgNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjViODQ1OWEtZTM1MS00YzhkLWJjMjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhG QjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5MjQ0ODBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTBFM0Q0OEZCNTYyNjJDODZERjk3M0ZGQzdDOTg3NDkyNDQ4 MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4 NzQ5MjQ0ODBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNGT5HNzPQxiQZv06mHV6IePkrMxtDMJecj CxG53E+nbMB+g3GX+TSYPDK5brJwhErMkXfPqOIh27V6N7vGfcsunuxd9wuY9RAu FnKNNL/f03du4BtA9pMEDXWpQNX6vEkz36aU89ixo0lY4fRzPEJID/vO4Sf0T3Em H3wVO4XV/8rHJTtLfJv77Q2qPJQZmoUQJNvu+hfJzCA88D5eWp3NDSfuuYvKUxWS RH0yoIZwm/2s3YN+Tnd2Av/FORZhhixzqEO/py4+E+H/BRDepC0+Vm6KlrvDh80Q lGp4eBB2+iVSottkYqhPlN9Kzha115kOA4fU79H6JTQCTwGfnp0= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:35 2026 by rpki-client