$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: pcN6sOkD8/Zhxqv5SzOq/aPaJsqTMKBjc6CNhHxm1lc= Subject key identifier: 11:29:49:83:C6:AB:31:AC:49:89:D7:34:FC:AB:82:CE:6F:9E:CE:E3 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 7F473EBA0EDE5EAEC4608112BF2E205105617D49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: D5 Signing time: Fri 09 Oct 2026 10:55:27 +0000 Manifest this update: Fri 09 Oct 2026 10:50:27 +0000 Manifest next update: Sat 10 Oct 2026 14:47:27 +0000 Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) 2: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) 3: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 4: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) 5: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: jsEnK+od9sctcHY8kmLVAOzR1AVb3lbfmnLPcwxzi4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:47:3e:ba:0e:de:5e:ae:c4:60:81:12:bf:2e:20:51:05:61:7d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: Oct 9 10:50:27 2026 GMT Not After : Oct 10 14:47:27 2026 GMT Subject: CN=11294983C6AB31AC4989D734FCAB82CE6F9ECEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:b8:f2:83:2f:8c:2c:ff:9d:28:54:73:10: 14:ce:56:1d:31:7b:96:0c:25:55:4c:b6:0e:1f:75: 15:a2:ab:97:7c:7f:b0:8e:ce:eb:0c:ab:72:77:ff: 2c:d1:d0:10:00:d1:3d:bd:73:9c:63:ba:45:67:2b: 65:d5:8d:dc:0c:cb:59:58:03:6d:f5:b2:83:e6:08: 18:4f:39:c5:e2:52:4c:c1:5d:a3:f5:f4:3f:ba:26: 09:7b:81:62:21:a7:c7:9a:df:57:a0:92:2c:d1:78: ef:6a:1a:12:66:ae:6e:19:1e:0f:93:e7:a4:44:46: b8:a4:79:cd:f5:e0:04:50:36:55:d0:ad:0a:f0:bf: ae:69:14:50:d9:16:09:38:af:73:4d:3d:69:b0:c6: 23:62:cf:0c:76:0c:b8:62:cd:60:0e:b4:ff:aa:30: d7:7b:09:f9:81:51:c7:94:56:84:96:7e:18:34:57: 80:03:6a:bd:93:11:d8:03:d9:64:ae:05:72:8d:93: b3:86:cf:75:4d:22:84:53:2b:eb:4c:dd:51:fd:30: 4b:b4:fb:d8:6f:f1:0e:00:a1:b4:86:b0:ba:53:c1: 09:bc:d1:74:41:aa:63:58:f4:c5:b1:0a:e4:6f:19: 72:2e:4f:c3:e8:cc:08:72:ee:20:ce:16:9f:af:00: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:49:83:C6:AB:31:AC:49:89:D7:34:FC:AB:82:CE:6F:9E:CE:E3 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:37:11:d5:bb:0e:28:bc:e8:05:8b:ee:e5:11:b7:e7:d6:8f: 80:6e:06:a5:b4:8b:db:90:39:73:db:b4:4a:8c:e9:61:23:ae: 22:69:c3:ae:84:b1:80:16:01:84:ae:b2:d1:05:74:de:af:21: 11:25:a4:f5:0b:2e:35:c2:86:e5:98:7e:f7:c3:20:1d:e9:35: 43:12:39:77:e3:cb:1e:b1:e8:67:ff:46:08:62:27:6b:8f:22: f5:03:8b:66:4a:f9:0c:5b:9a:da:26:9a:ba:0e:6a:cb:a0:72: 29:7d:fd:6f:74:64:39:0c:5f:af:bb:fe:2f:76:89:1c:e2:45: df:d8:1b:05:f0:1e:b1:09:b9:96:70:03:9e:4b:2d:07:3c:7b: e7:8d:9d:27:e9:46:4e:ae:a7:2a:29:26:1b:ae:70:f4:b9:c1: 82:a1:5f:1c:57:52:3a:32:77:f5:98:32:57:a9:f2:38:90:f4: 5b:63:66:7f:b4:2c:3e:99:38:aa:9e:ca:18:cd:a2:1e:c9:88: 2f:b9:31:6b:6f:19:b6:37:dc:98:33:2a:68:05:c4:65:dc:3f: a0:77:58:c9:68:3b:5d:88:b1:03:64:d7:43:3d:fe:f2:df:fb: 0e:f5:07:ae:4a:25:a3:2c:dd:49:8c:07:f4:f3:7c:ac:a6:26: fa:f8:e5:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0c+ug7eXq7EYIESvy4gUQVhfUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjEwMDkxMDUwMjdaFw0yNjEwMTAxNDQ3MjdaMDMxMTAvBgNV BAMTKDExMjk0OTgzQzZBQjMxQUM0OTg5RDczNEZDQUI4MkNFNkY5RUNFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljrjygy+MLP+dKFRzEBTOVh0x e5YMJVVMtg4fdRWiq5d8f7COzusMq3J3/yzR0BAA0T29c5xjukVnK2XVjdwMy1lY A231soPmCBhPOcXiUkzBXaP19D+6Jgl7gWIhp8ea31egkizReO9qGhJmrm4ZHg+T 56RERrikec314ARQNlXQrQrwv65pFFDZFgk4r3NNPWmwxiNizwx2DLhizWAOtP+q MNd7CfmBUceUVoSWfhg0V4ADar2TEdgD2WSuBXKNk7OGz3VNIoRTK+tM3VH9MEu0 +9hv8Q4AobSGsLpTwQm80XRBqmNY9MWxCuRvGXIuT8PozAhy7iDOFp+vAHyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESlJg8arMaxJidc0/KuCzm+ezuMwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo3EdW7Dii86AWL7uURt+fWj4BuBqW0i9uQ OXPbtEqM6WEjriJpw66EsYAWAYSustEFdN6vIRElpPULLjXChuWYfvfDIB3pNUMS OXfjyx6x6Gf/RghiJ2uPIvUDi2ZK+QxbmtommroOasugcil9/W90ZDkMX6+7/i92 iRziRd/YGwXwHrEJuZZwA55LLQc8e+eNnSfpRk6upyopJhuucPS5wYKhXxxXUjoy d/WYMlep8jiQ9FtjZn+0LD6ZOKqeyhjNoh7JiC+5MWtvGbY33JgzKmgFxGXcP6B3 WMloO12IsQNk10M9/vLf+w71B65KJaMs3UmMB/TzfKymJvr45ZM= -----END CERTIFICATE-----Generated at Sat Oct 10 00:39:19 2026 by rpki-client