$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: RPh12YHO5ekgtRwUEFar5M9lmIB0OQHFmra5LUg0l5w= Subject key identifier: 8F:6E:98:B1:7A:D3:97:E0:AB:20:32:6D:A9:42:5E:A3:D7:09:38:B2 Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 30E20ACC80DE0C1862A24FF57498EBC5A84F0260 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 18:13:28 +0000 Manifest this update: Mon 09 Nov 2026 18:08:28 +0000 Manifest next update: Tue 10 Nov 2026 19:49:28 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: Tamh8JuyPNKNnm+Ms2wm0YgKTn9P3tF1g7Kyi5egLW0=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e2:0a:cc:80:de:0c:18:62:a2:4f:f5:74:98:eb:c5:a8:4f:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Nov 9 18:08:28 2026 GMT Not After : Nov 10 19:49:28 2026 GMT Subject: CN=8F6E98B17AD397E0AB20326DA9425EA3D70938B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:bb:1c:82:db:a3:52:0f:f6:28:4c:30:66: bd:73:80:98:a9:f9:14:51:d3:29:71:f9:56:cf:f7: ed:ce:b0:2f:88:b4:a8:a6:00:8a:f4:8f:d0:62:3b: 8c:2d:5a:27:1e:f7:8b:74:13:d1:30:38:66:ee:5c: e7:26:cf:7c:db:72:03:88:09:90:a6:45:68:a9:df: 0b:74:d5:9b:cf:c1:ae:b3:70:d3:81:2b:c9:1e:94: a0:ab:56:30:40:e0:05:30:aa:9b:fa:00:19:0c:6b: 6f:ee:3c:9e:41:c2:5b:71:7e:7d:5d:b8:24:a2:3b: e3:75:bd:f8:4c:4c:88:5f:c1:28:ab:b0:d4:c5:d3: ca:4f:bc:09:b3:2d:8e:8e:4b:01:97:34:97:df:db: a3:ff:7d:96:59:a0:c0:82:e9:b5:01:13:27:b3:fb: dd:e6:f1:55:7a:21:94:59:ea:89:19:3a:15:89:c6: 36:69:d4:59:25:7c:54:25:4f:2c:64:6e:ac:5f:25: 99:94:b5:ff:66:f8:31:d9:68:7f:8e:b9:ed:cc:36: 0f:3a:dc:c3:58:0f:bd:fc:2a:95:7f:d1:53:65:71: 1c:25:72:f6:2b:ea:ba:db:8b:6d:63:54:44:ac:99: 1d:56:f1:62:ec:2d:c9:bc:60:6d:21:38:66:68:54: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6E:98:B1:7A:D3:97:E0:AB:20:32:6D:A9:42:5E:A3:D7:09:38:B2 X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:a5:1e:00:60:35:82:be:30:44:03:bd:af:5f:6f:b0:48: 79:13:3c:27:95:a0:d6:85:20:72:b7:cc:35:82:a0:a2:74:d7: 51:29:b0:98:6a:c2:12:3f:3a:fe:54:96:80:30:4c:a2:be:56: fc:25:1d:83:de:d4:85:34:6a:c5:22:1a:45:e1:05:4d:ac:a8: 2a:fe:79:4f:ad:cf:18:89:17:c7:cc:17:a3:26:c5:e4:1f:5b: 86:87:f8:42:9f:fb:c9:b8:0f:6a:ad:40:16:a3:21:27:fc:3d: 60:41:f0:19:8a:ac:ea:5d:6b:ee:bf:78:80:ce:bc:e5:05:3c: de:3b:88:6d:33:2a:b6:ba:fe:38:c6:50:94:ce:73:9d:af:13: 1e:18:f1:17:9e:64:b3:cb:02:52:68:63:b0:b9:17:71:56:b6: fd:ad:f4:93:e4:45:77:c2:50:e7:2b:39:75:eb:3b:1b:39:77: a4:af:63:b8:4b:56:6a:bd:f8:5f:86:b9:dc:c0:69:f4:df:cd: 99:7f:fa:62:9e:64:9b:cd:ee:e8:6e:fa:7a:50:00:78:bf:42: 66:54:10:6d:3e:93:a5:12:29:6b:37:ad:d5:19:a6:29:ce:d9: da:5c:8b:b4:89:39:50:9c:7c:e9:ee:b1:33:b1:77:0d:dd:5a: e6:e1:bf:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOIKzIDeDBhiok/1dJjrxahPAmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjExMDkxODA4MjhaFw0yNjExMTAxOTQ5MjhaMDMxMTAvBgNV BAMTKDhGNkU5OEIxN0FEMzk3RTBBQjIwMzI2REE5NDI1RUEzRDcwOTM4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeArscgtujUg/2KEwwZr1zgJip +RRR0ylx+VbP9+3OsC+ItKimAIr0j9BiO4wtWice94t0E9EwOGbuXOcmz3zbcgOI CZCmRWip3wt01ZvPwa6zcNOBK8kelKCrVjBA4AUwqpv6ABkMa2/uPJ5Bwltxfn1d uCSiO+N1vfhMTIhfwSirsNTF08pPvAmzLY6OSwGXNJff26P/fZZZoMCC6bUBEyez +93m8VV6IZRZ6okZOhWJxjZp1FklfFQlTyxkbqxfJZmUtf9m+DHZaH+Oue3MNg86 3MNYD738KpV/0VNlcRwlcvYr6rrbi21jVESsmR1W8WLsLcm8YG0hOGZoVJU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj26YsXrTl+CrIDJtqUJeo9cJOLIwHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnMpR4AYDWCvjBEA72vX2+wSHkTPCeVoNaF IHK3zDWCoKJ011EpsJhqwhI/Ov5UloAwTKK+VvwlHYPe1IU0asUiGkXhBU2sqCr+ eU+tzxiJF8fMF6MmxeQfW4aH+EKf+8m4D2qtQBajISf8PWBB8BmKrOpda+6/eIDO vOUFPN47iG0zKra6/jjGUJTOc52vEx4Y8ReeZLPLAlJoY7C5F3FWtv2t9JPkRXfC UOcrOXXrOxs5d6SvY7hLVmq9+F+GudzAafTfzZl/+mKeZJvN7uhu+npQAHi/QmZU EG0+k6USKWs3rdUZpinO2dpci7SJOVCcfOnusTOxdw3dWubhvys= -----END CERTIFICATE-----Generated at Tue Nov 10 01:04:23 2026 by rpki-client