$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: N6GkXzQnzuR9LgGJpzf/NI5ZqPA3FhSjgncLeWI+wdE= Subject key identifier: 26:B9:5C:C3:19:01:BC:F0:FD:A9:77:5A:D4:22:D9:03:06:99:A9:D2 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 4F291C54C79088A61F972834C1488F8312F770A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:17:06 +0000 Manifest this update: Thu 23 Jul 2026 22:12:06 +0000 Manifest next update: Sat 25 Jul 2026 01:35:06 +0000 Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) 2: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 3: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) 4: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: MySKl1sq4OadsXwe8ZEymBtFy7ccwbMVoTy3Fss7Jr4=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:29:1c:54:c7:90:88:a6:1f:97:28:34:c1:48:8f:83:12:f7:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: Jul 23 22:12:06 2026 GMT Not After : Jul 25 01:35:06 2026 GMT Subject: CN=26B95CC31901BCF0FDA9775AD422D9030699A9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:b8:71:70:20:30:c6:db:ef:b1:47:b9:e9: 07:37:04:3f:46:73:4a:e9:91:1a:fd:f7:3a:ea:51: 22:f8:8f:99:08:d2:64:a2:c0:63:a9:1a:03:ce:16: 8f:cf:6e:ba:e0:ac:84:81:3d:d4:9a:49:86:84:13: df:ea:64:86:8b:a1:c8:44:4f:bb:29:42:ba:f4:78: a2:02:89:8c:ad:e9:1c:08:df:77:a1:22:53:86:09: 0b:4d:f8:82:e9:e5:54:92:80:27:79:53:34:e7:75: c3:e8:dc:22:87:4b:14:4b:4b:09:fd:fd:4b:c7:24: c9:ca:2e:c9:10:f0:78:82:e6:a7:04:5b:7f:2d:11: 3d:56:90:54:a6:70:19:ce:17:4e:92:57:d1:ee:d1: 39:f8:c1:b4:5f:ca:d7:ed:3d:e9:50:f0:1c:38:8a: 1f:9d:53:6a:57:9f:99:17:c0:92:a1:df:89:4b:a1: b3:44:67:ed:7f:44:91:c2:72:5a:4b:a8:a8:f7:18: a9:d6:76:05:e8:1d:29:9c:e9:d6:a7:c8:d2:36:99: f8:d0:10:fe:f5:a4:9b:9f:20:f4:da:0c:a9:18:10: 15:36:bc:16:ee:05:f0:f7:55:34:13:9a:3f:be:d2: 2e:b4:75:2d:90:7f:9c:47:34:b6:c7:15:ce:32:ce: 18:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:5C:C3:19:01:BC:F0:FD:A9:77:5A:D4:22:D9:03:06:99:A9:D2 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0b:06:a2:5a:94:4e:39:a4:dd:39:0c:9a:89:c0:65:51:a9: 0d:30:b1:32:bd:69:c9:eb:5d:1c:d6:31:79:bc:7b:c6:f0:34: 21:c6:d9:46:88:97:cf:f1:e0:12:89:47:e9:c3:79:2e:20:0b: 98:92:5a:95:dd:a3:0f:ce:5e:c0:41:9d:9d:f5:ee:68:ae:48: 47:24:96:c5:af:cc:8e:f7:a8:52:01:5b:67:3f:70:d8:cf:b8: cf:d6:f2:e9:cc:80:e9:40:2d:58:3f:77:8a:e4:40:dc:90:f9: 8d:91:84:58:ac:10:61:f5:21:98:2f:23:4e:6a:8d:1e:c2:06: b6:43:4b:82:3a:ed:ae:24:72:8b:65:0c:4f:91:c2:cf:ed:7a: 1c:f4:1c:9a:2c:9e:62:58:28:f8:21:44:50:c1:a2:d0:5e:6c: 7e:4a:71:23:33:b2:26:39:6e:ff:1f:fd:e7:ba:a9:43:37:3d: a2:f7:6b:eb:06:ff:de:87:46:16:18:94:7d:b0:40:e9:ad:81: 70:a9:ab:b3:50:a8:9e:3f:89:29:24:48:94:db:cc:78:6d:69: 0a:3e:78:8a:53:71:21:10:df:89:59:29:f1:86:b5:33:9e:49: 8e:ce:48:32:33:f1:36:e2:e3:8d:79:d1:7d:e7:e1:ae:52:fa: 47:0f:64:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTykcVMeQiKYflyg0wUiPgxL3cKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA3MjMyMjEyMDZaFw0yNjA3MjUwMTM1MDZaMDMxMTAvBgNV BAMTKDI2Qjk1Q0MzMTkwMUJDRjBGREE5Nzc1QUQ0MjJEOTAzMDY5OUE5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1bhxcCAwxtvvsUe56Qc3BD9G c0rpkRr99zrqUSL4j5kI0mSiwGOpGgPOFo/PbrrgrISBPdSaSYaEE9/qZIaLochE T7spQrr0eKICiYyt6RwI33ehIlOGCQtN+ILp5VSSgCd5UzTndcPo3CKHSxRLSwn9 /UvHJMnKLskQ8HiC5qcEW38tET1WkFSmcBnOF06SV9Hu0Tn4wbRfytftPelQ8Bw4 ih+dU2pXn5kXwJKh34lLobNEZ+1/RJHCclpLqKj3GKnWdgXoHSmc6danyNI2mfjQ EP71pJufIPTaDKkYEBU2vBbuBfD3VTQTmj++0i60dS2Qf5xHNLbHFc4yzhjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJrlcwxkBvPD9qXda1CLZAwaZqdIwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKILBqJalE45pN05DJqJwGVRqQ0wsTK9acnr XRzWMXm8e8bwNCHG2UaIl8/x4BKJR+nDeS4gC5iSWpXdow/OXsBBnZ317miuSEck lsWvzI73qFIBW2c/cNjPuM/W8unMgOlALVg/d4rkQNyQ+Y2RhFisEGH1IZgvI05q jR7CBrZDS4I67a4kcotlDE+Rws/tehz0HJosnmJYKPghRFDBotBebH5KcSMzsiY5 bv8f/ee6qUM3PaL3a+sG/96HRhYYlH2wQOmtgXCpq7NQqJ4/iSkkSJTbzHhtaQo+ eIpTcSEQ34lZKfGGtTOeSY7OSDIz8Tbi44150X3n4a5S+kcPZE0= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:54 2026 by rpki-client