$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: GXQ7mQssoSggi7dCv48IZf08ZFn5uwyyh7gFoxhz78Y= Subject key identifier: 39:9D:40:E6:EF:09:87:17:3A:5A:09:C9:34:98:00:D4:05:CF:26:A9 Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 738C35F111E1D8E6DDF97588EA1CA201B20075C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 23:37:03 +0000 Manifest this update: Mon 02 Nov 2026 23:32:03 +0000 Manifest next update: Wed 04 Nov 2026 01:40:03 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: LkB+XkJnyreRsrRpnpCHMr+fHksz2b4GM0FneDSwVBQ=) 2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8c:35:f1:11:e1:d8:e6:dd:f9:75:88:ea:1c:a2:01:b2:00:75:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Nov 2 23:32:03 2026 GMT Not After : Nov 4 01:40:03 2026 GMT Subject: CN=399D40E6EF0987173A5A09C9349800D405CF26A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:0e:53:48:7b:ed:c3:62:85:b0:09:8a:02: 6b:f7:66:b4:f9:86:df:47:90:a3:34:f2:ea:d6:db: 19:6c:58:51:8c:4b:ae:4d:8e:0f:b6:ae:4e:1c:e7: 1f:da:a2:6c:70:0a:99:65:57:52:70:f7:ae:80:90: be:eb:f8:ea:25:c6:d4:83:ac:8b:cb:5f:57:42:60: c3:24:9d:22:b4:2a:81:cb:a3:0c:e1:40:23:2d:5c: 3e:8b:61:20:49:6d:55:83:52:7f:1b:3c:5e:b2:03: 3e:01:95:53:8d:ed:05:a3:c8:bf:c2:50:fa:cd:53: a7:8d:b7:05:86:de:9a:7b:e5:22:d8:2a:31:9a:5e: fd:e1:ef:7f:c3:88:b3:47:4c:1f:68:39:4c:2f:07: d7:85:ec:38:1e:e2:4f:31:4d:af:f5:bc:7f:3d:6e: c4:90:49:50:77:f3:f7:db:9a:b6:b2:f6:43:93:85: bb:5b:fa:af:ed:32:73:f0:3e:ba:92:f7:e1:ec:99: 95:42:6c:03:b9:9c:98:99:8e:63:14:d3:bc:a9:56: ad:82:02:7f:6f:86:ee:23:d9:36:c0:c0:de:92:76: ab:3a:ba:bb:b9:e9:5b:19:0e:3f:7d:48:f7:5f:87: 5c:75:4c:1b:9d:83:07:0a:0f:ce:7c:a6:cd:de:14: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:40:E6:EF:09:87:17:3A:5A:09:C9:34:98:00:D4:05:CF:26:A9 X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:30:d5:73:64:11:06:81:fa:03:32:85:3b:98:e2:7f:4f:3b: 9c:03:b7:6b:92:c1:3d:dc:be:11:02:dd:6a:45:f0:cc:00:9e: 4a:b5:3d:36:57:0c:77:cb:ad:17:e2:07:5e:50:ce:a4:10:de: bd:23:d2:a8:2d:46:6c:0f:19:0b:cf:04:17:6d:1f:34:fe:7a: 09:59:1b:a2:0e:01:01:2a:7c:48:48:bf:22:f1:9b:5e:73:e7: d4:30:ff:7f:b6:50:30:18:dc:d0:e6:69:fa:0e:c6:17:1a:03: fd:6d:5f:41:50:a3:ad:06:4c:b4:a9:45:e5:69:25:10:7f:0a: 12:0c:14:4b:3f:51:5d:36:0c:c2:50:3f:8f:a9:29:25:e4:bb: 03:9f:38:4e:d2:76:2d:60:c0:23:47:18:39:d0:10:12:a1:4d: 28:3c:3b:64:46:20:13:70:be:73:89:2c:6a:01:79:5f:95:09: 43:ef:07:af:d8:2c:7f:f0:56:e3:4b:37:5d:c5:82:8c:52:8f: 96:0e:28:39:66:f9:e9:11:2f:30:c0:8a:89:0c:8e:cd:59:8c: 23:38:0c:91:d9:dc:f9:2f:36:e4:8d:2f:42:36:40:01:d8:cb: 43:b7:1c:a9:1d:84:84:fb:0b:46:47:00:d7:18:12:47:2c:ce: ce:2b:26:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4w18RHh2Obd+XWI6hyiAbIAdcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjExMDIyMzMyMDNaFw0yNjExMDQwMTQwMDNaMDMxMTAvBgNV BAMTKDM5OUQ0MEU2RUYwOTg3MTczQTVBMDlDOTM0OTgwMEQ0MDVDRjI2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnQ5TSHvtw2KFsAmKAmv3ZrT5 ht9HkKM08urW2xlsWFGMS65Njg+2rk4c5x/aomxwCpllV1Jw966AkL7r+OolxtSD rIvLX1dCYMMknSK0KoHLowzhQCMtXD6LYSBJbVWDUn8bPF6yAz4BlVON7QWjyL/C UPrNU6eNtwWG3pp75SLYKjGaXv3h73/DiLNHTB9oOUwvB9eF7Dge4k8xTa/1vH89 bsSQSVB38/fbmray9kOThbtb+q/tMnPwPrqS9+HsmZVCbAO5nJiZjmMU07ypVq2C An9vhu4j2TbAwN6Sdqs6uru56VsZDj99SPdfh1x1TBudgwcKD858ps3eFAqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZ1A5u8Jhxc6WgnJNJgA1AXPJqkwHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHww1XNkEQaB+gMyhTuY4n9PO5wDt2uSwT3c vhEC3WpF8MwAnkq1PTZXDHfLrRfiB15QzqQQ3r0j0qgtRmwPGQvPBBdtHzT+eglZ G6IOAQEqfEhIvyLxm15z59Qw/3+2UDAY3NDmafoOxhcaA/1tX0FQo60GTLSpReVp JRB/ChIMFEs/UV02DMJQP4+pKSXkuwOfOE7Sdi1gwCNHGDnQEBKhTSg8O2RGIBNw vnOJLGoBeV+VCUPvB6/YLH/wVuNLN13FgoxSj5YOKDlm+ekRLzDAiokMjs1ZjCM4 DJHZ3PkvNuSNL0I2QAHYy0O3HKkdhIT7C0ZHANcYEkcszs4rJoI= -----END CERTIFICATE-----Generated at Tue Nov 3 01:28:58 2026 by rpki-client