$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: ve8m0UrXEaZaKx1lIf3KGpqEP3Kl8asjNaD9/Ge7znI= Subject key identifier: 27:0B:E6:41:C5:76:C0:34:F5:EA:71:D3:4E:59:A1:F0:40:A7:F6:0B Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 11E058B556B8D9F6460070A9ABD92FF15E4FABC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 04:34:52 +0000 Manifest this update: Sun 15 Nov 2026 04:29:52 +0000 Manifest next update: Mon 16 Nov 2026 06:07:52 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) 2: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: wSD0nWEbhTd8rBLq5e/HcQiLAderYsx25aEZ7GTxO8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e0:58:b5:56:b8:d9:f6:46:00:70:a9:ab:d9:2f:f1:5e:4f:ab:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Nov 15 04:29:52 2026 GMT Not After : Nov 16 06:07:52 2026 GMT Subject: CN=270BE641C576C034F5EA71D34E59A1F040A7F60B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:68:df:c6:d5:9d:3a:70:ce:5f:d6:6b:98: b7:7f:cf:80:fe:bf:c7:1d:98:c6:cb:c2:30:04:ac: eb:16:6a:88:ec:74:32:6a:5c:94:f5:e7:f0:ae:ab: 26:0a:e8:a9:29:c3:c9:7c:df:1c:48:24:f1:58:93: 4d:03:ae:07:ab:2e:b8:40:38:af:30:ce:f0:79:2e: f7:a4:bc:d8:b0:8e:08:51:c3:3d:cd:33:f5:3b:0a: 08:0a:a1:21:5f:16:08:76:84:2a:3f:4d:8a:23:bd: f1:88:87:a2:12:48:86:86:6c:bc:25:1e:24:85:00: 19:79:13:c3:36:2c:ae:57:46:51:25:a7:b5:8c:c4: 81:f2:12:29:20:4a:28:e7:b4:89:7b:4a:d0:84:e9: 13:a6:96:eb:14:cc:ab:72:56:79:10:8c:be:51:88: 24:e1:c4:72:17:f5:5a:36:14:3c:07:6f:a9:23:69: a5:e6:9e:7d:ae:d1:d7:e5:70:29:ca:db:74:21:d5: 9e:93:23:71:50:92:d6:7c:ea:b7:c9:c1:6f:06:41: f4:c3:41:02:ca:f1:dd:53:2a:7d:c0:67:fc:83:ea: 1d:66:dc:47:70:6b:e2:2f:ea:8a:cf:20:26:2d:42: 77:14:7f:1c:ca:c8:10:87:d6:34:84:9a:ab:a4:22: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:E6:41:C5:76:C0:34:F5:EA:71:D3:4E:59:A1:F0:40:A7:F6:0B X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:27:fc:36:c6:b3:68:86:01:73:80:ff:3a:dd:42:77:8e: 51:0e:77:7b:e7:5c:26:ad:11:1e:c8:d4:cb:fb:d9:92:21:15: 27:85:e1:83:37:07:97:01:72:ee:8e:03:77:9b:4a:5a:fe:7e: e0:b0:02:ab:ce:e3:6e:f1:e0:d9:10:4a:d4:55:75:ca:78:4a: df:e1:ab:75:2a:fa:76:ff:f9:20:c7:73:d5:77:ce:d7:04:1b: e4:3e:31:c3:ea:dc:ad:1b:3e:e4:72:80:90:7a:37:f9:bd:e5: b3:8a:30:74:a9:6c:76:97:97:04:77:c6:9a:cd:52:75:e4:b4: 93:c8:d2:5d:a0:9c:f5:91:bb:4c:50:96:df:be:4e:c3:3a:c5: 1a:5e:d3:51:00:0a:c4:4c:75:77:98:94:1a:59:b0:2f:eb:a7: 60:8e:58:7b:d0:d5:07:17:4b:ee:77:b0:a5:f8:cc:55:63:76: 9f:51:c7:ae:a1:94:32:26:d8:97:a7:e7:c2:89:cb:7b:f4:1a: 28:f6:43:c7:ca:33:bc:7a:41:7f:f4:94:f7:98:d6:a7:d1:ad: d1:c5:12:33:f6:97:2c:fb:97:2f:ec:e1:ec:e2:f8:6c:fe:a1: 28:d0:2d:19:31:ae:01:ed:7a:d7:ab:2d:78:1c:fd:33:7a:47: 26:53:64:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeBYtVa42fZGAHCpq9kv8V5Pq8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjExMTUwNDI5NTJaFw0yNjExMTYwNjA3NTJaMDMxMTAvBgNV BAMTKDI3MEJFNjQxQzU3NkMwMzRGNUVBNzFEMzRFNTlBMUYwNDBBN0Y2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCGjfxtWdOnDOX9ZrmLd/z4D+ v8cdmMbLwjAErOsWaojsdDJqXJT15/CuqyYK6Kkpw8l83xxIJPFYk00DrgerLrhA OK8wzvB5LvekvNiwjghRwz3NM/U7CggKoSFfFgh2hCo/TYojvfGIh6ISSIaGbLwl HiSFABl5E8M2LK5XRlElp7WMxIHyEikgSijntIl7StCE6ROmlusUzKtyVnkQjL5R iCThxHIX9Vo2FDwHb6kjaaXmnn2u0dflcCnK23Qh1Z6TI3FQktZ86rfJwW8GQfTD QQLK8d1TKn3AZ/yD6h1m3Edwa+Iv6orPICYtQncUfxzKyBCH1jSEmqukIsMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwvmQcV2wDT16nHTTlmh8ECn9gswHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGHJ/w2xrNohgFzgP863UJ3jlEOd3vnXCat ER7I1Mv72ZIhFSeF4YM3B5cBcu6OA3ebSlr+fuCwAqvO427x4NkQStRVdcp4St/h q3Uq+nb/+SDHc9V3ztcEG+Q+McPq3K0bPuRygJB6N/m95bOKMHSpbHaXlwR3xprN UnXktJPI0l2gnPWRu0xQlt++TsM6xRpe01EACsRMdXeYlBpZsC/rp2COWHvQ1QcX S+53sKX4zFVjdp9Rx66hlDIm2Jen58KJy3v0Gij2Q8fKM7x6QX/0lPeY1qfRrdHF EjP2lyz7ly/s4ezi+Gz+oSjQLRkxrgHteterLXgc/TN6RyZTZEE= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:05 2026 by rpki-client