$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: jIpiPOAL9uTHShG62sVLb0JgMz60UMe1pSZk+7BJrk4= Subject key identifier: 8D:66:81:D9:0D:83:E8:09:C1:AD:D5:AD:EC:2C:1B:BA:7F:E4:0D:C4 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 4127F32FC683EEA14C61EFFD37207286B10F7DAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:01:53 +0000 Manifest this update: Tue 12 May 2026 22:56:53 +0000 Manifest next update: Thu 14 May 2026 02:52:53 +0000 Files and hashes: 1: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) 2: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 3: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) 4: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: /cOvkcaIjqkTXCvHbTGmyNjBg/DJ4ztVD0x801++dFY=) 5: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:27:f3:2f:c6:83:ee:a1:4c:61:ef:fd:37:20:72:86:b1:0f:7d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: May 12 22:56:53 2026 GMT Not After : May 14 02:52:53 2026 GMT Subject: CN=8D6681D90D83E809C1ADD5ADEC2C1BBA7FE40DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8c:85:d0:02:3f:ff:81:f4:1d:b8:1b:6f:79: c8:d5:6a:2e:1e:fd:76:5d:51:f1:e7:55:4c:c3:53: cd:06:fb:1c:e4:4d:28:fa:95:45:c7:0c:e8:75:5a: 02:49:30:28:66:28:6e:23:14:63:d4:13:b9:ed:cc: c7:a3:7e:5d:a6:50:f7:9a:bf:09:b0:21:fa:1f:11: a6:d0:25:39:aa:a7:1c:c4:14:60:1c:59:92:e6:5f: 2c:80:a4:1d:f2:7f:dd:60:61:cb:fd:aa:21:7c:12: e3:84:85:b5:cd:05:e0:6f:e3:20:4a:f1:60:fc:7b: 4e:00:2f:2f:20:d9:82:39:8a:7c:2c:b8:e9:f4:2e: df:76:cf:e5:a0:e8:4b:2a:04:dd:8a:26:f7:1d:6a: cd:df:3c:58:69:a9:a5:9e:0d:f8:3c:f2:68:7d:5f: 78:83:77:48:52:17:ab:f6:77:f4:de:be:6e:f8:32: 5b:ea:4d:5b:50:6c:fc:4f:ff:05:11:7c:29:e0:81: e0:3a:43:94:7b:4f:3c:9a:b4:f4:88:b0:00:56:03: 16:88:e9:ed:27:28:3a:4b:98:33:3b:b5:92:2d:49: f4:91:21:d4:67:8c:cc:b9:d6:35:63:48:d0:83:46: a9:fe:44:c2:8d:c5:16:88:82:39:cc:ac:c8:b2:4d: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:66:81:D9:0D:83:E8:09:C1:AD:D5:AD:EC:2C:1B:BA:7F:E4:0D:C4 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6b:e7:58:9b:42:ed:e0:e4:92:bd:ca:dc:0b:49:32:03:81: 05:7b:5e:7f:90:c0:c1:67:2d:c8:02:79:c5:51:7f:5f:aa:8c: 5d:26:ba:2a:79:46:4e:6e:50:85:88:4f:d5:35:50:ba:0e:65: 85:c1:dd:f2:40:cd:43:2a:7d:dd:35:1c:b8:04:14:df:e0:ed: e9:45:ae:e3:5f:a3:ab:5a:1c:e5:c7:ee:b9:98:c6:42:26:ae: 25:9b:21:23:ae:6d:79:c2:db:6a:ff:b0:dd:d1:6d:3b:55:7c: 03:96:6e:ed:2b:7c:7d:33:1a:f8:78:a7:50:76:b1:4d:c6:f6: 89:52:80:84:00:4c:d9:c6:c8:2a:ff:81:c9:5b:33:4e:97:9f: 53:5a:7f:db:dc:77:ba:fd:95:b4:bc:5c:bd:61:77:a4:74:40: 65:59:06:a0:a4:da:39:ce:ac:5f:ec:3f:eb:1e:ad:98:25:f6: 68:04:a8:37:97:88:1b:21:4e:cb:87:ca:4b:e9:cb:ec:01:36: ed:f7:07:ed:5a:1a:ba:e3:80:54:3e:fd:06:63:1e:25:52:97: 0d:08:04:b5:4c:7b:22:ed:51:93:95:c5:b2:d2:0f:59:94:d7: 77:cb:ad:b6:7a:8c:fc:c8:70:3b:40:d3:e4:52:58:e2:dd:0c: 44:9e:5c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSfzL8aD7qFMYe/9NyByhrEPfa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA1MTIyMjU2NTNaFw0yNjA1MTQwMjUyNTNaMDMxMTAvBgNV BAMTKDhENjY4MUQ5MEQ4M0U4MDlDMUFERDVBREVDMkMxQkJBN0ZFNDBEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7jIXQAj//gfQduBtvecjVai4e /XZdUfHnVUzDU80G+xzkTSj6lUXHDOh1WgJJMChmKG4jFGPUE7ntzMejfl2mUPea vwmwIfofEabQJTmqpxzEFGAcWZLmXyyApB3yf91gYcv9qiF8EuOEhbXNBeBv4yBK 8WD8e04ALy8g2YI5inwsuOn0Lt92z+Wg6EsqBN2KJvcdas3fPFhpqaWeDfg88mh9 X3iDd0hSF6v2d/Tevm74MlvqTVtQbPxP/wURfCnggeA6Q5R7TzyatPSIsABWAxaI 6e0nKDpLmDM7tZItSfSRIdRnjMy51jVjSNCDRqn+RMKNxRaIgjnMrMiyTelpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjWaB2Q2D6AnBrdWt7Cwbun/kDcQwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFr51ibQu3g5JK9ytwLSTIDgQV7Xn+QwMFn LcgCecVRf1+qjF0muip5Rk5uUIWIT9U1ULoOZYXB3fJAzUMqfd01HLgEFN/g7elF ruNfo6taHOXH7rmYxkImriWbISOubXnC22r/sN3RbTtVfAOWbu0rfH0zGvh4p1B2 sU3G9olSgIQATNnGyCr/gclbM06Xn1Naf9vcd7r9lbS8XL1hd6R0QGVZBqCk2jnO rF/sP+serZgl9mgEqDeXiBshTsuHykvpy+wBNu33B+1aGrrjgFQ+/QZjHiVSlw0I BLVMeyLtUZOVxbLSD1mU13fLrbZ6jPzIcDtA0+RSWOLdDESeXEc= -----END CERTIFICATE-----Generated at Wed May 13 02:47:05 2026 by rpki-client