$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: iqI8YRocYBzt3Cs9rwKavsnBL+Q0nX1T1BNfC4SUp8k= Subject key identifier: CC:33:40:92:3A:36:07:93:01:1C:04:CE:AF:4C:46:0A:81:CA:D3:72 Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 3C885B507B7BF2E7F172AA25420AC5D2B4E8C895 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: EA Signing time: Sat 24 Oct 2026 20:24:34 +0000 Manifest this update: Sat 24 Oct 2026 20:19:34 +0000 Manifest next update: Sun 25 Oct 2026 22:20:34 +0000 Files and hashes: 1: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) 2: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) 3: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: 1U4IdI349sIN83n67w6cLE9Fuwl+YZHAl6bwFgsavEY=) 4: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:88:5b:50:7b:7b:f2:e7:f1:72:aa:25:42:0a:c5:d2:b4:e8:c8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Oct 24 20:19:34 2026 GMT Not After : Oct 25 22:20:34 2026 GMT Subject: CN=CC3340923A360793011C04CEAF4C460A81CAD372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:df:fe:48:b6:10:4c:b3:07:25:14:be:8d: ef:7f:99:6c:b9:39:42:7e:d8:1f:c9:ca:85:67:4c: 45:9f:c2:e6:1d:60:60:48:e0:a7:48:48:6b:4c:64: 2a:9f:80:70:17:01:89:c7:7a:72:fd:bf:d6:48:a4: fe:63:f4:5e:b5:47:dd:94:49:4a:20:1b:79:c0:35: 25:64:7a:b4:ff:8a:83:b9:79:6a:25:b2:f6:eb:2b: c1:f9:27:51:a6:d0:6d:38:77:00:e2:14:4c:80:12: 1c:cd:d0:a3:17:3b:f7:30:8e:9d:56:43:13:89:c1: 91:4b:b9:09:11:81:17:ff:bd:ef:ca:87:a5:40:a4: e4:50:c7:97:c0:9a:ee:ff:74:76:41:9f:46:39:57: 14:17:0a:ca:ae:2a:9a:a6:41:16:4c:81:49:6f:1f: eb:26:82:82:29:64:d9:0d:71:f0:ed:6b:85:0c:a8: 3e:68:e1:d9:65:35:e5:84:1e:e7:db:49:6a:7d:4c: 62:ab:23:3a:1a:f5:20:b6:b3:15:aa:38:6e:82:8a: 09:3f:f8:ed:a1:9c:c9:cc:67:87:1a:25:6c:83:2e: 9a:e3:10:1c:8c:c8:cd:67:e5:b6:f7:04:e7:f7:0b: 8c:86:d3:96:00:0e:d4:87:46:af:52:32:f9:aa:bc: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:40:92:3A:36:07:93:01:1C:04:CE:AF:4C:46:0A:81:CA:D3:72 X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:37:fe:4f:49:8d:b8:6a:c9:ee:75:8d:de:e7:c1:cb:1a:23: 1a:52:b9:1b:e5:7f:c2:6e:7e:a7:2b:89:bc:e0:59:94:12:02: 9f:91:9b:f6:15:13:93:4b:8a:c3:32:ba:a6:28:34:ae:37:7f: 4b:8f:b1:cb:72:08:a2:2a:46:32:f9:0a:c5:c8:dc:87:58:f4: 60:48:3d:b2:b8:1d:6d:c6:09:ef:72:0a:e9:d5:54:87:0d:40: 46:80:76:db:84:72:b2:46:d4:0b:52:39:4f:f0:3b:c1:fb:01: f6:80:bc:31:77:a1:07:c3:54:88:53:40:87:e1:68:a8:6e:a1: 3a:98:90:ca:0e:78:d0:a8:75:e9:a8:c9:34:70:f8:9d:32:de: 6d:f4:75:31:d8:03:28:e4:4c:34:e9:1b:3f:91:3d:7c:06:05: 29:70:02:dd:3b:cb:23:41:5a:5d:90:62:fe:e8:df:b0:29:0c: a6:c1:4d:08:12:97:03:7c:f1:14:4d:88:0d:7e:53:3e:1d:d6: 6b:18:81:8b:58:b0:bc:58:a1:65:be:d4:38:1a:c4:71:12:32: 71:cd:2e:8c:f5:9a:0f:d9:06:e2:26:ce:89:9d:1d:69:b7:a0: 17:fc:21:8f:d0:11:50:38:50:8e:e0:ea:0d:b9:61:96:5c:9d: 5b:83:78:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIhbUHt78ufxcqolQgrF0rToyJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjEwMjQyMDE5MzRaFw0yNjEwMjUyMjIwMzRaMDMxMTAvBgNV BAMTKENDMzM0MDkyM0EzNjA3OTMwMTFDMDRDRUFGNEM0NjBBODFDQUQzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+9/+SLYQTLMHJRS+je9/mWy5 OUJ+2B/JyoVnTEWfwuYdYGBI4KdISGtMZCqfgHAXAYnHenL9v9ZIpP5j9F61R92U SUogG3nANSVkerT/ioO5eWolsvbrK8H5J1Gm0G04dwDiFEyAEhzN0KMXO/cwjp1W QxOJwZFLuQkRgRf/ve/Kh6VApORQx5fAmu7/dHZBn0Y5VxQXCsquKpqmQRZMgUlv H+smgoIpZNkNcfDta4UMqD5o4dllNeWEHufbSWp9TGKrIzoa9SC2sxWqOG6Cigk/ +O2hnMnMZ4caJWyDLprjEByMyM1n5bb3BOf3C4yG05YADtSHRq9SMvmqvP+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDNAkjo2B5MBHATOr0xGCoHK03IwHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw3/k9Jjbhqye51jd7nwcsaIxpSuRvlf8Ju fqcribzgWZQSAp+Rm/YVE5NLisMyuqYoNK43f0uPsctyCKIqRjL5CsXI3IdY9GBI PbK4HW3GCe9yCunVVIcNQEaAdtuEcrJG1AtSOU/wO8H7AfaAvDF3oQfDVIhTQIfh aKhuoTqYkMoOeNCodemoyTRw+J0y3m30dTHYAyjkTDTpGz+RPXwGBSlwAt07yyNB Wl2QYv7o37ApDKbBTQgSlwN88RRNiA1+Uz4d1msYgYtYsLxYoWW+1DgaxHESMnHN Loz1mg/ZBuImzomdHWm3oBf8IY/QEVA4UI7g6g25YZZcnVuDeAU= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:43 2026 by rpki-client