$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: wGr4OgzEOGbwcA3wjRECgLCGTJjP00FXWAouuVxRJ6E= Subject key identifier: 03:BC:76:0F:7C:B8:1A:D3:55:86:8B:14:B4:9A:F1:43:3E:5A:93:74 Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 73127475A552D26E95BCEDB26B6512307733E5E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 00:02:57 +0000 Manifest this update: Tue 03 Nov 2026 23:57:57 +0000 Manifest next update: Thu 05 Nov 2026 01:52:57 +0000 Files and hashes: 1: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: hzye7uBJwxE8TyehnfqirqFPwMeY4gqMhhbtoGcEEU4=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:12:74:75:a5:52:d2:6e:95:bc:ed:b2:6b:65:12:30:77:33:e5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Nov 3 23:57:57 2026 GMT Not After : Nov 5 01:52:57 2026 GMT Subject: CN=03BC760F7CB81AD355868B14B49AF1433E5A9374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:c7:a0:f5:84:91:44:1d:36:e7:bb:b4:5f: 90:17:28:bd:23:f7:db:cd:73:28:9f:bf:f5:63:f0: 0b:f2:2b:a7:70:6c:46:93:09:07:e9:99:8d:a3:94: 28:b0:40:00:c5:b5:f4:f4:3f:76:76:f4:d6:67:27: 7a:9c:90:7b:30:df:29:4f:88:8f:63:e5:d8:b2:41: 9e:d2:04:00:67:2d:d3:a6:c3:c5:e8:8b:94:d0:01: 68:55:80:eb:89:1c:f2:a0:30:c3:aa:a4:31:69:e1: 8b:a1:f6:86:78:c0:16:c9:5f:6b:fd:71:68:ca:6d: 9a:7d:6f:4e:40:06:a4:2d:ec:e1:f4:a4:fe:d9:cb: 6d:24:56:24:9f:b6:b9:1f:eb:c2:59:dd:a6:69:29: 1c:37:58:5f:fc:dd:07:a2:8a:92:a3:b1:4c:13:ca: 63:de:06:94:1b:d4:44:21:90:05:eb:82:68:40:92: 52:f3:34:4a:5a:ef:3f:f3:c3:9e:1f:59:8e:57:8c: 48:c2:88:c3:3b:cc:bf:a0:bb:59:6e:f8:cc:45:9e: a9:65:dc:bc:f7:fc:cd:b5:77:a5:3a:78:9b:f1:b8: dd:06:18:b0:1b:68:73:5e:92:30:4a:ef:25:26:c9: 7e:9c:3d:1c:aa:e9:2f:c2:b1:62:d2:00:c4:f0:ce: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BC:76:0F:7C:B8:1A:D3:55:86:8B:14:B4:9A:F1:43:3E:5A:93:74 X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:51:8c:a1:10:39:d1:27:06:0c:a0:1f:29:50:83:a1:66:03: d4:74:47:7b:1b:e3:7a:d2:6b:1e:81:f6:ab:ac:f7:91:e1:b5: bf:9d:7a:78:c0:86:90:9b:54:53:84:d8:e0:ce:43:0f:f0:b9: f6:41:92:73:07:47:2b:29:3a:16:18:4b:8e:f8:eb:83:8b:30: c0:f3:e0:3c:a8:cd:06:84:15:bd:8b:b8:c1:5a:10:56:01:3e: c3:58:ae:36:4a:57:66:0f:87:04:2a:f7:d4:fb:35:f3:bf:3a: bd:87:af:ac:4a:e9:69:dc:3e:29:8e:30:41:1f:1c:03:96:81: 3e:41:79:5e:f2:33:2a:2d:35:bb:60:58:79:a7:6e:b0:62:6a: 02:02:76:05:d5:9e:16:8e:f6:7c:14:ce:fb:da:02:8c:25:5d: e0:96:a9:12:23:dd:37:4c:58:dd:e7:81:56:d1:68:a3:45:1b: af:1e:16:a0:d8:d9:09:1a:94:ae:2f:96:d6:f6:82:52:87:ba: 9e:1e:20:13:ed:a3:85:64:0e:cc:37:95:2b:5c:d2:57:b4:d1: f6:67:25:25:a9:fa:3c:6d:fc:7d:59:ab:a1:49:30:6e:d4:22: b3:86:87:42:fd:79:29:22:98:79:24:4d:99:80:f3:88:f7:43: bf:19:1e:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxJ0daVS0m6VvO2ya2USMHcz5eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjExMDMyMzU3NTdaFw0yNjExMDUwMTUyNTdaMDMxMTAvBgNV BAMTKDAzQkM3NjBGN0NCODFBRDM1NTg2OEIxNEI0OUFGMTQzM0U1QTkzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4seg9YSRRB0257u0X5AXKL0j 99vNcyifv/Vj8AvyK6dwbEaTCQfpmY2jlCiwQADFtfT0P3Z29NZnJ3qckHsw3ylP iI9j5diyQZ7SBABnLdOmw8Xoi5TQAWhVgOuJHPKgMMOqpDFp4Yuh9oZ4wBbJX2v9 cWjKbZp9b05ABqQt7OH0pP7Zy20kViSftrkf68JZ3aZpKRw3WF/83QeiipKjsUwT ymPeBpQb1EQhkAXrgmhAklLzNEpa7z/zw54fWY5XjEjCiMM7zL+gu1lu+MxFnqll 3Lz3/M21d6U6eJvxuN0GGLAbaHNekjBK7yUmyX6cPRyq6S/CsWLSAMTwzkPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7x2D3y4GtNVhosUtJrxQz5ak3QwHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhRjKEQOdEnBgygHylQg6FmA9R0R3sb43rS ax6B9qus95Hhtb+denjAhpCbVFOE2ODOQw/wufZBknMHRyspOhYYS47464OLMMDz 4DyozQaEFb2LuMFaEFYBPsNYrjZKV2YPhwQq99T7NfO/Or2Hr6xK6WncPimOMEEf HAOWgT5BeV7yMyotNbtgWHmnbrBiagICdgXVnhaO9nwUzvvaAowlXeCWqRIj3TdM WN3ngVbRaKNFG68eFqDY2QkalK4vltb2glKHup4eIBPto4VkDsw3lStc0le00fZn JSWp+jxt/H1Zq6FJMG7UIrOGh0L9eSkimHkkTZmA84j3Q78ZHgk= -----END CERTIFICATE-----Generated at Wed Nov 4 14:32:45 2026 by rpki-client