$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json) Hash identifier: peYBM5Z4BdZ0cbWbdFsNFm6V8cm5SkgfHW5zLYsjFe4= Subject key identifier: D3:50:1D:C3:7F:A2:15:E3:63:BD:8C:EA:FF:32:16:D7:63:C7:0A:ED Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Certificate serial: 7E9AB14C96A89C04872E2C2C7FF75C6C1A0C5A5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 16:33:20 +0000 Manifest this update: Tue 03 Nov 2026 16:28:20 +0000 Manifest next update: Wed 04 Nov 2026 20:01:20 +0000 Files and hashes: 1: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: vVAAHx/wcSCvp1cmLw4HoX/AU21TVtswcNn+jW/biyo=) 2: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=) 3: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=) 4: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=) 5: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9a:b1:4c:96:a8:9c:04:87:2e:2c:2c:7f:f7:5c:6c:1a:0c:5a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Validity Not Before: Nov 3 16:28:20 2026 GMT Not After : Nov 4 20:01:20 2026 GMT Subject: CN=D3501DC37FA215E363BD8CEAFF3216D763C70AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:ad:05:7e:aa:ab:d5:13:8b:70:85:90:2b: 89:05:01:05:d6:73:cd:c5:80:98:12:af:13:17:fe: 01:45:56:c6:15:40:94:81:c3:20:53:5c:a2:84:67: e6:03:a0:cd:f3:6a:1e:61:d7:6a:d2:ba:e8:f4:06: ef:b4:86:9f:1a:bf:bc:2b:d0:7b:61:3f:79:bb:f0: b4:e0:ce:51:31:f0:df:28:fa:ee:89:2e:9a:a9:21: 61:e4:88:6a:14:88:ec:8d:80:11:af:c1:90:35:a8: 0f:18:ad:85:5a:a1:ba:f9:13:f4:14:62:03:08:42: e2:90:46:73:69:a4:2f:b2:4a:eb:4b:5f:ea:79:b1: 16:d5:76:1d:06:ac:94:e4:96:04:ac:32:ba:9d:e6: c4:cb:d7:aa:da:22:f5:33:28:80:1b:b4:ff:1f:7c: a8:ca:08:c0:52:ab:e7:c0:2c:7c:5a:47:11:1e:6a: 68:07:b3:ae:d5:21:02:cc:2a:11:04:17:85:f4:bc: fc:da:c5:a9:3c:6b:a4:ed:c4:39:a2:5b:2a:8e:64: 34:ae:5d:73:71:b7:db:eb:3b:0b:8b:e7:fb:18:95: c9:4e:5e:95:ed:b1:8d:c4:4e:aa:83:0e:85:94:db: 1b:b6:34:48:6f:a6:e2:dd:b5:aa:7b:54:b6:7b:fd: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:50:1D:C3:7F:A2:15:E3:63:BD:8C:EA:FF:32:16:D7:63:C7:0A:ED X509v3 Authority Key Identifier: keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f5:02:26:5d:a7:8f:7d:e6:ad:49:50:36:cd:77:7c:f5:51: 71:b2:25:40:ad:16:b0:83:f9:a2:d7:32:40:0a:0f:15:22:97: d9:90:ef:92:b4:70:d7:ed:91:59:15:41:06:d6:ce:01:27:73: 37:3e:b8:06:a9:c1:5f:cc:b9:3a:c2:f3:af:d5:f3:c7:67:72: bc:00:41:d7:60:27:fd:ce:9f:98:a2:a1:da:ca:4b:dc:21:5f: 6f:76:52:30:e3:c6:0e:87:48:26:9c:79:6b:00:d0:1b:72:63: c0:15:6d:50:3a:30:49:af:6f:68:7f:1a:34:1f:6e:4a:f1:c4: d6:f3:0e:08:0b:e7:60:a1:67:6b:41:48:50:20:3d:85:48:2d: c1:2a:f8:0b:6c:fb:9a:e5:19:12:e5:0a:6f:66:49:f5:3b:54: 10:1f:2e:39:49:c5:ff:e7:f1:a4:a2:73:07:ae:c1:78:7b:ee: 78:8f:96:2c:31:8f:5c:45:30:bf:7d:fd:35:d9:e4:56:3c:8f: a6:70:ec:ce:67:c8:5f:eb:89:26:7d:51:c1:7b:6d:76:46:0b: 59:6e:51:13:cc:a0:98:ed:38:70:f2:c2:bd:a0:2a:be:2f:c3: 51:fe:29:b5:49:22:f8:4a:80:a9:59:9c:ce:da:7e:77:c8:7a: f3:ba:d5:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpqxTJaonASHLiwsf/dcbBoMWlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4 QjRFRTc1MDAeFw0yNjExMDMxNjI4MjBaFw0yNjExMDQyMDAxMjBaMDMxMTAvBgNV BAMTKEQzNTAxREMzN0ZBMjE1RTM2M0JEOENFQUZGMzIxNkQ3NjNDNzBBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjK0Ffqqr1ROLcIWQK4kFAQXW c83FgJgSrxMX/gFFVsYVQJSBwyBTXKKEZ+YDoM3zah5h12rSuuj0Bu+0hp8av7wr 0HthP3m78LTgzlEx8N8o+u6JLpqpIWHkiGoUiOyNgBGvwZA1qA8YrYVaobr5E/QU YgMIQuKQRnNppC+ySutLX+p5sRbVdh0GrJTklgSsMrqd5sTL16raIvUzKIAbtP8f fKjKCMBSq+fALHxaRxEeamgHs67VIQLMKhEEF4X0vPzaxak8a6TtxDmiWyqOZDSu XXNxt9vrOwuL5/sYlclOXpXtsY3ETqqDDoWU2xu2NEhvpuLdtap7VLZ7/VGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU01Adw3+iFeNjvYzq/zIW12PHCu0wHwYDVR0j BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVG N0I4QjRFRTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn1AiZdp4995q1JUDbNd3z1UXGyJUCtFrCD +aLXMkAKDxUil9mQ75K0cNftkVkVQQbWzgEnczc+uAapwV/MuTrC86/V88dncrwA QddgJ/3On5iiodrKS9whX292UjDjxg6HSCaceWsA0BtyY8AVbVA6MEmvb2h/GjQf bkrxxNbzDggL52ChZ2tBSFAgPYVILcEq+Ats+5rlGRLlCm9mSfU7VBAfLjlJxf/n 8aSicweuwXh77niPliwxj1xFML99/TXZ5FY8j6Zw7M5nyF/riSZ9UcF7bXZGC1lu URPMoJjtOHDywr2gKr4vw1H+KbVJIvhKgKlZnM7afnfIevO61eE= -----END CERTIFICATE-----Generated at Wed Nov 4 05:30:33 2026 by rpki-client