$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft File: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft (raw, json) Hash identifier: bnCgyKPNlU6JbsI/ZIjCHrBCwhmc9QdH2O8hlIS3rBk= Subject key identifier: DB:CE:F0:A1:D7:FC:B4:53:34:24:07:CC:37:3A:8A:FC:1D:F3:AD:3F Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 6C24EFE37D2DD6D969B0DADA916BB90F30DCC296 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft Manifest number: E0 Signing time: Fri 16 Oct 2026 21:05:43 +0000 Manifest this update: Fri 16 Oct 2026 21:00:43 +0000 Manifest next update: Sun 18 Oct 2026 00:08:43 +0000 Files and hashes: 1: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc=) 2: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: 6KPoXiqtvd9nuyAco4ru4jZgNuQNFI930Qn7LAylJPg=) 3: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM=) 4: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl (hash: MgvXUhI1JWZfCYZLlWFyP7dIQ5spsosl9UeNT6jc61o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 00:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:24:ef:e3:7d:2d:d6:d9:69:b0:da:da:91:6b:b9:0f:30:dc:c2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: Oct 16 21:00:43 2026 GMT Not After : Oct 18 00:08:43 2026 GMT Subject: CN=DBCEF0A1D7FCB453342407CC373A8AFC1DF3AD3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:20:7e:9e:f1:cd:86:be:0f:0d:cb:f6:1d: 26:71:a6:d8:7e:c1:a0:8a:0b:3e:6b:37:88:54:01: 69:ee:40:bf:cf:0d:7b:4e:ee:95:3d:16:ea:4b:2f: 59:83:76:9c:39:77:1b:3d:df:67:b4:54:a6:f2:5c: 04:ce:d7:43:83:dd:4d:6a:ea:d0:ce:84:a0:c2:71: 3e:dd:7b:e7:09:23:41:34:18:2a:e8:46:d9:61:dd: 27:cd:cc:19:dd:05:97:68:ec:88:d6:81:49:2a:69: 85:b4:ad:c5:b4:5f:4e:ac:89:a8:cd:87:ec:82:cd: 9c:1f:0b:8b:e8:80:89:4e:f5:92:c4:cd:95:e3:b3: 20:44:00:1c:cb:9e:ea:d8:cf:0c:09:b0:f4:7f:b1: b4:fa:42:7e:5f:25:dd:06:81:cc:9b:18:bf:8d:8f: 69:00:eb:f4:2b:83:15:da:a5:78:33:db:03:00:29: 5f:81:bc:fc:f9:47:0c:c4:5d:17:89:0b:18:c5:79: 0f:ba:0c:cd:af:66:64:6a:a4:bf:19:e7:90:72:89: 6b:ef:42:bd:09:9f:43:e2:24:0f:2e:20:56:1b:32: 3b:74:46:84:3b:13:57:51:b4:e6:56:b7:b1:28:4a: 3f:73:c2:14:d6:4f:50:c4:9a:74:cf:49:b7:2f:33: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CE:F0:A1:D7:FC:B4:53:34:24:07:CC:37:3A:8A:FC:1D:F3:AD:3F X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:eb:6b:44:83:59:1b:3b:9c:f3:46:de:23:ba:7d:4c:cd:65: 7b:44:3f:06:95:2e:cb:91:41:62:83:0d:c9:ad:bd:fd:73:29: f4:70:74:29:ab:76:8e:78:99:8b:67:65:06:e0:5f:e7:d7:69: 94:53:2d:54:b5:97:93:70:5c:10:b8:aa:02:e0:15:6b:f0:0d: 7a:96:30:14:bd:70:21:3d:dc:0b:2b:e1:7b:65:c5:11:4d:ff: c5:66:a5:86:a7:81:16:21:d8:49:4d:f2:e1:8f:a6:6d:e3:aa: 54:cb:4a:98:de:d0:2f:df:1d:f5:4b:3b:06:ab:77:8c:d8:25: 2d:96:35:ec:24:20:d4:f0:0a:41:d1:6f:04:c6:a6:f4:a7:ce: 26:e0:6d:38:ee:f4:d0:7b:87:7f:07:64:c7:ca:60:8a:ca:ec: 70:59:81:1b:15:17:23:08:d2:67:02:da:b3:52:bf:3b:8a:4a: 81:7d:c3:ed:fb:13:a8:91:5e:09:e9:6c:13:8f:4a:92:de:a0: 89:62:86:43:74:09:f7:9d:a9:aa:f7:1e:4c:c3:cf:97:04:41: 46:bb:df:26:31:2d:9e:b1:97:a4:8e:cf:31:c9:f4:cb:59:15: 39:a1:3e:ee:60:e6:4d:97:ed:1e:9b:8c:46:05:9c:e7:f1:ff: c5:64:6c:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCTv430t1tlpsNrakWu5DzDcwpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjEwMTYyMTAwNDNaFw0yNjEwMTgwMDA4NDNaMDMxMTAvBgNV BAMTKERCQ0VGMEExRDdGQ0I0NTMzNDI0MDdDQzM3M0E4QUZDMURGM0FEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClciB+nvHNhr4PDcv2HSZxpth+ waCKCz5rN4hUAWnuQL/PDXtO7pU9FupLL1mDdpw5dxs932e0VKbyXATO10OD3U1q 6tDOhKDCcT7de+cJI0E0GCroRtlh3SfNzBndBZdo7IjWgUkqaYW0rcW0X06siajN h+yCzZwfC4vogIlO9ZLEzZXjsyBEABzLnurYzwwJsPR/sbT6Qn5fJd0GgcybGL+N j2kA6/QrgxXapXgz2wMAKV+BvPz5RwzEXReJCxjFeQ+6DM2vZmRqpL8Z55ByiWvv Qr0Jn0PiJA8uIFYbMjt0RoQ7E1dRtOZWt7EoSj9zwhTWT1DEmnTPSbcvM9C5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU287wodf8tFM0JAfMNzqK/B3zrT8wHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQz MTQyQkRGM0M2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfra0SDWRs7nPNG3iO6fUzNZXtEPwaVLsuR QWKDDcmtvf1zKfRwdCmrdo54mYtnZQbgX+fXaZRTLVS1l5NwXBC4qgLgFWvwDXqW MBS9cCE93Asr4XtlxRFN/8VmpYangRYh2ElN8uGPpm3jqlTLSpje0C/fHfVLOwar d4zYJS2WNewkINTwCkHRbwTGpvSnzibgbTju9NB7h38HZMfKYIrK7HBZgRsVFyMI 0mcC2rNSvzuKSoF9w+37E6iRXgnpbBOPSpLeoIlihkN0Cfedqar3HkzDz5cEQUa7 3yYxLZ6xl6SOzzHJ9MtZFTmhPu5g5k2X7R6bjEYFnOfx/8VkbG8= -----END CERTIFICATE-----Generated at Sat Oct 17 17:19:04 2026 by rpki-client