$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: Sg0roY/a4wJqzRTIlT2OpTeyror+EqY8GzVySrzSvOk= Subject key identifier: 4D:A8:68:4F:99:99:E4:76:84:AB:2E:5D:B5:9A:ED:BE:21:43:85:76 Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 1403A3A7BA77DA780338FAE07EBF0001E0AA6FEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: EA Signing time: Sun 25 Oct 2026 07:30:50 +0000 Manifest this update: Sun 25 Oct 2026 07:25:50 +0000 Manifest next update: Mon 26 Oct 2026 08:17:50 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) 2: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: dy8R5NSIVxvM6JRZGEpLvWSSw97s72qgKzwruSw9rCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:03:a3:a7:ba:77:da:78:03:38:fa:e0:7e:bf:00:01:e0:aa:6f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Oct 25 07:25:50 2026 GMT Not After : Oct 26 08:17:50 2026 GMT Subject: CN=4DA8684F9999E47684AB2E5DB59AEDBE21438576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:bf:b3:14:f0:81:37:c4:f1:da:ce:f1:0b: 95:d6:7b:e4:c6:bc:88:ab:b4:b8:d7:02:44:ca:43: 1c:33:e0:1f:05:0e:d9:63:01:21:e3:b8:a1:ff:0a: b1:cc:e3:04:66:e7:bb:2c:fc:8e:af:41:ed:d3:71: 18:e7:8d:1f:0e:6e:cb:05:ea:b7:4a:81:5b:2a:04: 8e:93:6c:b1:cf:be:99:a2:60:5e:f9:06:13:81:ed: 3b:2d:4e:ee:3d:c7:fc:5a:b0:bc:91:4a:2d:e9:45: 80:f8:c0:0d:51:8c:6b:2f:cb:e3:cb:63:32:2c:fc: 8f:56:67:ee:78:86:b7:7d:e1:8e:fd:59:7e:b8:cd: f6:40:08:d7:e5:4f:bd:73:76:03:ab:7d:2b:59:f1: 96:02:0a:62:10:fd:76:cf:ad:51:46:58:c4:c5:e1: 88:0f:84:9f:f1:aa:29:26:d3:bc:4d:f9:4a:1c:9a: 99:bb:e7:b0:85:21:12:99:da:f2:a9:a2:25:f9:9d: e3:d5:cb:be:08:b5:73:6b:c5:6b:0e:8d:49:44:31: 46:c3:7a:9a:ff:9a:0b:9a:62:28:63:ec:2d:c2:32: 2c:5f:91:59:8d:5b:5c:66:0e:ca:4b:8d:8b:96:39: 85:12:31:35:7f:f7:4d:53:27:91:23:7b:c9:6d:81: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:68:4F:99:99:E4:76:84:AB:2E:5D:B5:9A:ED:BE:21:43:85:76 X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:15:6d:c9:b8:a1:fc:43:a0:4d:15:4b:08:ea:d1:9a:24:60: bc:c1:1b:a3:67:35:fb:58:d3:c5:ca:8c:28:b6:af:d3:b5:de: 35:53:88:87:c5:51:bc:04:19:e1:0a:91:18:aa:ca:23:71:8e: dc:64:6e:3e:30:c3:d1:cd:44:ad:e2:2d:29:aa:e5:27:0d:dc: 25:1a:25:b1:21:64:ee:95:ba:bc:6a:df:fe:fd:d8:95:a6:3e: 7c:67:49:54:dc:14:12:e4:1c:41:dd:18:8e:cb:95:5b:10:da: 95:6a:eb:4d:9b:99:26:cf:98:3a:b6:46:b2:d3:8d:c2:76:e0: a1:64:b1:c2:34:f9:8b:3c:3c:a8:ba:1e:98:c8:9e:4e:4c:0b: f0:2c:73:bb:82:98:f7:1f:0a:c8:ea:54:20:34:88:ab:7c:a9: cd:e5:68:3e:8c:92:17:e5:3e:b1:0c:48:20:21:a4:71:6e:02: f4:94:be:8e:df:4e:56:82:ae:2e:27:0a:72:fc:1c:fb:a2:b8: f4:42:d9:35:fe:a9:69:cf:28:95:05:d2:a9:d7:fb:a1:98:dc: 5a:b1:33:03:7f:0b:42:b8:2d:08:89:10:d1:91:a1:91:af:dc: bf:d8:d8:44:47:02:74:b0:b8:8a:78:c8:a4:21:a6:25:4d:9e: 5e:34:4b:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAOjp7p32ngDOPrgfr8AAeCqb+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjEwMjUwNzI1NTBaFw0yNjEwMjYwODE3NTBaMDMxMTAvBgNV BAMTKDREQTg2ODRGOTk5OUU0NzY4NEFCMkU1REI1OUFFREJFMjE0Mzg1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtr+zFPCBN8Tx2s7xC5XWe+TG vIirtLjXAkTKQxwz4B8FDtljASHjuKH/CrHM4wRm57ss/I6vQe3TcRjnjR8ObssF 6rdKgVsqBI6TbLHPvpmiYF75BhOB7TstTu49x/xasLyRSi3pRYD4wA1RjGsvy+PL YzIs/I9WZ+54hrd94Y79WX64zfZACNflT71zdgOrfStZ8ZYCCmIQ/XbPrVFGWMTF 4YgPhJ/xqikm07xN+Uocmpm757CFIRKZ2vKpoiX5nePVy74ItXNrxWsOjUlEMUbD epr/mguaYihj7C3CMixfkVmNW1xmDspLjYuWOYUSMTV/901TJ5Eje8ltgZ8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTahoT5mZ5HaEqy5dtZrtviFDhXYwHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0Vbcm4ofxDoE0VSwjq0ZokYLzBG6NnNftY 08XKjCi2r9O13jVTiIfFUbwEGeEKkRiqyiNxjtxkbj4ww9HNRK3iLSmq5ScN3CUa JbEhZO6Vurxq3/792JWmPnxnSVTcFBLkHEHdGI7LlVsQ2pVq602bmSbPmDq2RrLT jcJ24KFkscI0+Ys8PKi6HpjInk5MC/Asc7uCmPcfCsjqVCA0iKt8qc3laD6Mkhfl PrEMSCAhpHFuAvSUvo7fTlaCri4nCnL8HPuiuPRC2TX+qWnPKJUF0qnX+6GY3Fqx MwN/C0K4LQiJENGRoZGv3L/Y2ERHAnSwuIp4yKQhpiVNnl40Sxo= -----END CERTIFICATE-----Generated at Sun Oct 25 14:25:06 2026 by rpki-client