$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: ydIyOpXwwjNzPmf6v2p6i4uGYw22mGKlgflrrziG4QM= Subject key identifier: 5A:CA:D6:ED:75:3F:7E:85:CC:A4:1F:64:73:2A:81:A2:11:E2:86:7A Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 1F04E4CF4512F2B4AEE5CBFD4B6510F631DD98DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 17:06:55 +0000 Manifest this update: Thu 24 Sep 2026 17:01:55 +0000 Manifest next update: Fri 25 Sep 2026 17:29:55 +0000 Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) 2: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 3: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: ENiuulUDr6xFExsvPYag/OYSX9+b3KQ0yBgShVYdQ7I=) 4: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) 5: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:04:e4:cf:45:12:f2:b4:ae:e5:cb:fd:4b:65:10:f6:31:dd:98:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: Sep 24 17:01:55 2026 GMT Not After : Sep 25 17:29:55 2026 GMT Subject: CN=5ACAD6ED753F7E85CCA41F64732A81A211E2867A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:27:ca:9f:7d:58:9f:e7:dc:32:2a:be:80:2c: 7a:6c:d6:22:e0:f3:73:d6:92:dc:1d:fa:c4:c9:14: 8d:77:7d:29:98:d2:6b:26:fb:9e:d7:0e:b0:5d:cc: ed:92:fe:9a:b7:7a:45:46:3e:16:8b:fe:f3:e2:b4: 06:97:5c:fb:86:4d:2a:0e:d0:e2:95:18:ae:c7:d2: b5:ee:c7:be:2e:b2:87:fb:3d:7a:20:1a:65:b9:35: ed:f3:28:26:ae:7c:d3:dc:23:41:34:db:80:18:5a: fe:f3:6a:cf:07:1a:0a:b4:0d:da:52:fd:9f:7f:28: 40:80:56:c6:8b:1d:7b:84:2b:f0:fb:fe:05:f7:7d: 8e:19:51:92:ae:b6:38:7c:ef:b5:06:fe:21:76:ac: bf:09:1f:d6:61:58:5d:d4:f1:c0:86:ac:5d:e4:45: 55:a3:10:f6:36:52:94:86:6e:0f:b7:cd:6c:05:c7: 14:42:34:75:ed:30:ef:e2:98:78:1d:da:50:79:ac: 49:5e:94:55:c7:e1:e8:e4:4b:58:f7:99:ac:d3:9d: 7b:f6:85:72:70:89:86:32:7a:5d:94:cb:96:a1:32: 5f:85:15:cb:3c:6a:30:85:c0:87:56:ee:fc:1b:3e: 97:17:de:09:a6:3a:0c:1d:1a:09:b8:5a:2e:23:49: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CA:D6:ED:75:3F:7E:85:CC:A4:1F:64:73:2A:81:A2:11:E2:86:7A X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:36:00:4b:89:4f:f7:04:2b:67:bc:4a:fb:69:30:8c:06:2a: 0f:d3:2b:03:52:8e:3a:d9:c2:74:49:37:b7:46:c5:67:50:ad: 37:a7:36:be:17:da:4b:44:22:06:ce:5b:29:e2:f9:84:80:13: e7:42:f1:4c:04:54:4f:12:9f:3b:69:1d:21:9a:46:00:0d:eb: fd:9b:89:f4:9a:4e:c0:bd:3a:8b:36:93:a9:b6:7e:5d:42:13: 97:09:4c:b6:cf:97:62:3d:a8:a3:83:40:d3:3f:af:23:32:34: 34:a9:73:1a:ed:74:da:fa:fd:50:0d:d7:d1:ae:4b:a2:8b:74: 35:6b:8b:fb:30:8b:c9:45:e4:9d:8a:f4:c0:67:f8:b4:4e:7d: 7a:8c:ff:db:2c:9e:8a:da:cc:03:df:a3:d6:73:b9:69:ab:12: 4b:31:99:87:c7:04:64:28:b9:02:bc:91:94:10:fc:b1:00:5a: 34:46:08:84:32:66:bc:df:fa:88:98:a2:b8:76:bf:63:38:84: c8:b9:ba:fa:68:47:94:c0:db:7b:27:78:6d:08:a3:f5:e6:4c: 1a:f7:d2:bb:03:13:d1:06:47:fd:39:8c:ca:b0:84:2c:1d:bd: b5:19:fa:9f:10:ed:8e:74:0c:9b:a3:d0:a9:4b:cf:1a:cf:a8: b0:6a:50:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwTkz0US8rSu5cv9S2UQ9jHdmNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA5MjQxNzAxNTVaFw0yNjA5MjUxNzI5NTVaMDMxMTAvBgNV BAMTKDVBQ0FENkVENzUzRjdFODVDQ0E0MUY2NDczMkE4MUEyMTFFMjg2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJ8qffVif59wyKr6ALHps1iLg 83PWktwd+sTJFI13fSmY0msm+57XDrBdzO2S/pq3ekVGPhaL/vPitAaXXPuGTSoO 0OKVGK7H0rXux74usof7PXogGmW5Ne3zKCaufNPcI0E024AYWv7zas8HGgq0DdpS /Z9/KECAVsaLHXuEK/D7/gX3fY4ZUZKutjh877UG/iF2rL8JH9ZhWF3U8cCGrF3k RVWjEPY2UpSGbg+3zWwFxxRCNHXtMO/imHgd2lB5rElelFXH4ejkS1j3mazTnXv2 hXJwiYYyel2Uy5ahMl+FFcs8ajCFwIdW7vwbPpcX3gmmOgwdGgm4Wi4jSb6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWsrW7XU/foXMpB9kcyqBohHihnowHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI2AEuJT/cEK2e8SvtpMIwGKg/TKwNSjjrZ wnRJN7dGxWdQrTenNr4X2ktEIgbOWyni+YSAE+dC8UwEVE8SnztpHSGaRgAN6/2b ifSaTsC9Oos2k6m2fl1CE5cJTLbPl2I9qKODQNM/ryMyNDSpcxrtdNr6/VAN19Gu S6KLdDVri/swi8lF5J2K9MBn+LROfXqM/9ssnorazAPfo9ZzuWmrEksxmYfHBGQo uQK8kZQQ/LEAWjRGCIQyZrzf+oiYorh2v2M4hMi5uvpoR5TA23sneG0Io/XmTBr3 0rsDE9EGR/05jMqwhCwdvbUZ+p8Q7Y50DJuj0KlLzxrPqLBqUHI= -----END CERTIFICATE-----Generated at Thu Sep 24 20:44:30 2026 by rpki-client