$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: 3+1I3jgved+zYw+Wm1RkKCbQQasxvAv52nDoi6gMdE0= Subject key identifier: 43:29:8C:98:FF:BC:69:DA:4F:48:60:F6:6B:7D:80:D8:C5:96:DF:44 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 158FD1FAEE8FC65F15ADEEDAA1498DC56B73891D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 19:45:22 +0000 Manifest this update: Mon 09 Nov 2026 19:40:22 +0000 Manifest next update: Tue 10 Nov 2026 22:05:22 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) 2: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: GvWsA0sSBjw9DbMf+aOQcAAduR5jhNBVn8sx029atUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 22:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8f:d1:fa:ee:8f:c6:5f:15:ad:ee:da:a1:49:8d:c5:6b:73:89:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Nov 9 19:40:22 2026 GMT Not After : Nov 10 22:05:22 2026 GMT Subject: CN=43298C98FFBC69DA4F4860F66B7D80D8C596DF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:b0:88:e5:a0:84:34:23:8a:c7:e4:f4:3f: f9:73:b2:22:fc:bd:eb:b1:64:92:b4:1c:a0:25:d4: 59:a3:30:2c:f4:d2:fa:c4:40:72:19:25:27:e4:5e: 49:3e:85:c5:f3:7e:b6:97:09:ea:5b:fc:8a:28:93: 40:30:60:8c:c6:ba:36:0c:f5:89:1d:e9:bc:03:21: db:7a:ed:4e:c4:47:56:93:93:1c:58:8b:4b:35:e4: e9:30:cb:66:cb:14:27:62:ec:7d:cb:95:b1:3c:8e: a3:50:de:83:d4:d0:65:26:71:c4:62:d4:e2:04:f0: 6f:ee:0a:d9:b2:60:5c:9d:0e:01:62:77:a0:df:ce: 64:27:92:50:be:37:ca:6c:d9:97:b5:db:eb:6b:12: 39:37:37:9d:3a:a8:ad:c2:6d:53:7f:59:56:1b:1d: 80:f4:3a:54:16:c8:e9:94:5b:58:ca:d4:4d:b3:a9: 4f:57:ab:79:be:c5:2d:46:14:5c:70:16:b2:6d:cf: d5:3e:8e:58:7d:26:c2:a3:44:07:94:de:36:00:ec: fb:fd:99:68:9f:a5:e6:64:70:03:77:54:f5:4b:52: ea:48:c0:23:73:5f:d0:52:6e:b5:a3:c7:f1:39:84: c9:ab:30:fd:e1:eb:6d:db:06:ce:bb:e9:70:e0:dc: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:29:8C:98:FF:BC:69:DA:4F:48:60:F6:6B:7D:80:D8:C5:96:DF:44 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:34:d2:d5:b6:5a:03:e4:13:66:12:4e:0a:74:d9:41:c8:44: 45:bb:ac:a0:fa:ee:d1:f2:0f:39:ad:21:6b:db:32:04:81:fc: d1:71:97:64:1f:94:2a:a1:e3:60:fa:1f:8d:45:4e:90:c9:7c: 2e:41:1a:05:1a:fc:08:3a:d5:9f:2d:8f:53:0a:de:e5:f8:c0: 46:5f:96:da:4d:e1:f5:4b:b5:0b:4e:c2:03:a6:6b:ba:b8:b2: a9:35:2f:cd:fd:c4:6a:4b:78:2e:54:49:d2:b3:81:a6:9f:f6: ba:b9:b7:30:66:36:83:18:38:6e:3c:27:7e:42:31:c6:5e:26: 61:61:e5:90:70:d8:98:84:1e:a5:26:85:fc:03:85:93:f2:af: 60:57:04:9f:78:38:96:58:46:af:9a:f8:71:d5:02:f2:65:9d: 85:05:ee:9d:fe:3e:d7:c9:3e:fd:f5:17:c3:8d:47:ef:d8:33: f4:79:0f:87:8a:6e:08:57:ab:27:1e:00:82:b6:49:3f:7f:68: 26:f9:d3:ca:71:3b:31:75:93:32:8e:4b:a2:4a:f2:29:ca:24: 47:4c:e2:55:d5:0c:74:21:91:43:73:13:c0:54:d8:73:ce:ae: e0:e6:ca:f0:6d:61:6f:dd:ad:56:1d:19:5e:39:64:c2:47:fb: 07:d9:71:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFY/R+u6Pxl8Vre7aoUmNxWtziR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjExMDkxOTQwMjJaFw0yNjExMTAyMjA1MjJaMDMxMTAvBgNV BAMTKDQzMjk4Qzk4RkZCQzY5REE0RjQ4NjBGNjZCN0Q4MEQ4QzU5NkRGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGrCI5aCENCOKx+T0P/lzsiL8 veuxZJK0HKAl1FmjMCz00vrEQHIZJSfkXkk+hcXzfraXCepb/Iook0AwYIzGujYM 9Ykd6bwDIdt67U7ER1aTkxxYi0s15Okwy2bLFCdi7H3LlbE8jqNQ3oPU0GUmccRi 1OIE8G/uCtmyYFydDgFid6DfzmQnklC+N8ps2Ze12+trEjk3N506qK3CbVN/WVYb HYD0OlQWyOmUW1jK1E2zqU9Xq3m+xS1GFFxwFrJtz9U+jlh9JsKjRAeU3jYA7Pv9 mWifpeZkcAN3VPVLUupIwCNzX9BSbrWjx/E5hMmrMP3h623bBs676XDg3EO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQymMmP+8adpPSGD2a32A2MWW30QwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA400tW2WgPkE2YSTgp02UHIREW7rKD67tHy DzmtIWvbMgSB/NFxl2QflCqh42D6H41FTpDJfC5BGgUa/Ag61Z8tj1MK3uX4wEZf ltpN4fVLtQtOwgOma7q4sqk1L839xGpLeC5USdKzgaaf9rq5tzBmNoMYOG48J35C McZeJmFh5ZBw2JiEHqUmhfwDhZPyr2BXBJ94OJZYRq+a+HHVAvJlnYUF7p3+PtfJ Pv31F8ONR+/YM/R5D4eKbghXqyceAIK2ST9/aCb508pxOzF1kzKOS6JK8inKJEdM 4lXVDHQhkUNzE8BU2HPOruDmyvBtYW/drVYdGV45ZMJH+wfZceA= -----END CERTIFICATE-----Generated at Tue Nov 10 06:39:38 2026 by rpki-client