$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: okl3rqKz9OgL/wjcPytQ3pEXqEMPeEpvet0Lo635dLo= Subject key identifier: EA:40:94:86:81:1F:78:FC:F2:64:4F:59:52:F7:8C:D5:84:08:86:41 Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 2993B9AABF31369A9B6614DAC0A6B040D0E03083 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 13:28:05 +0000 Manifest this update: Tue 10 Nov 2026 13:23:05 +0000 Manifest next update: Wed 11 Nov 2026 14:05:05 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) 2: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: v4UO7sfp7tLS3JNHcnTJVL3lO5Aj3HL0Pzj6sk68Q58=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:93:b9:aa:bf:31:36:9a:9b:66:14:da:c0:a6:b0:40:d0:e0:30:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Nov 10 13:23:05 2026 GMT Not After : Nov 11 14:05:05 2026 GMT Subject: CN=EA409486811F78FCF2644F5952F78CD584088641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:ff:5f:19:7b:48:3c:74:71:85:2f:1c:fe: e0:d8:83:45:97:3f:b7:23:db:11:ec:f8:e1:b0:a8: ea:7d:10:c0:43:f8:f7:18:60:63:e2:74:b1:50:b2: b9:a7:c9:6b:4e:3a:d7:fb:87:b9:25:86:93:dd:e6: c5:0b:e0:1b:3c:ff:df:fd:ba:d6:56:d2:91:0a:6f: de:9a:ed:ac:ca:cc:a6:a1:1e:f0:66:86:9c:31:db: ea:2c:fa:bb:86:8b:c6:9f:f9:bc:5c:89:40:da:22: 2c:47:8c:85:5b:1c:0f:25:55:70:52:31:ee:d3:a0: 7a:d8:d4:eb:02:99:d7:38:7f:fc:dc:ef:45:21:53: 5a:d8:23:bd:87:4e:fe:fb:be:5f:25:8f:43:8e:e4: 73:49:b3:96:98:ca:fd:ce:70:60:4f:65:08:b2:ff: 2b:86:c8:01:71:83:32:21:8f:57:fe:52:9c:ca:36: f9:63:48:18:aa:59:1a:69:1f:ea:1a:e5:5d:22:78: 98:7a:41:1c:95:48:c2:85:70:4d:ab:4a:44:a1:1e: 9b:95:5f:0c:91:1d:a8:c7:4a:93:d4:d4:b1:fd:91: 25:af:bb:3f:a1:c2:c3:3b:06:42:9a:cd:81:08:82: 4b:fc:67:da:11:1c:0c:f5:42:ca:74:9b:56:eb:1e: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:40:94:86:81:1F:78:FC:F2:64:4F:59:52:F7:8C:D5:84:08:86:41 X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e8:12:2f:cc:5d:4e:9d:ca:98:4b:dc:4a:d4:e5:c9:32:1e: 86:bf:ac:ac:7f:17:fb:89:46:79:d0:f2:73:72:69:a7:31:ff: b8:b0:d0:70:1e:53:3c:f0:92:3f:cf:69:26:a4:53:d7:73:f4: ea:3a:3f:db:40:87:94:a3:09:85:df:1d:60:87:01:8b:33:32: df:b3:46:78:4c:c3:fd:3b:7e:a6:71:fb:97:d9:cf:2f:d3:d5: 71:4d:ee:f8:86:ec:93:2a:8d:9f:ec:4f:10:ed:d4:9b:9a:b8: b3:b7:9c:8d:6f:b0:44:6f:81:d8:6c:a8:20:1a:83:84:4a:72: 33:a8:a2:24:90:d2:18:3b:31:fd:2e:9e:15:ab:18:8a:38:3f: d8:cb:a3:05:d9:b6:3f:94:1b:5f:fb:8b:96:d0:19:66:b9:98: e2:a0:ca:c5:af:fe:eb:c9:56:d8:e7:e5:81:dc:2a:da:24:45: c6:c5:c4:10:23:86:1c:e3:f1:83:00:5c:84:08:c8:72:7f:94: 01:1d:d0:ea:0a:2d:db:71:3d:3b:77:60:57:d5:55:73:ed:f3: ce:fa:08:29:b6:11:c8:ba:e1:4a:be:8c:3f:18:69:4a:75:5d: 57:22:7d:b8:2f:65:c7:fa:b3:4a:08:f8:39:c5:62:02:03:d5: 52:a3:35:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZO5qr8xNpqbZhTawKawQNDgMIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjExMTAxMzIzMDVaFw0yNjExMTExNDA1MDVaMDMxMTAvBgNV BAMTKEVBNDA5NDg2ODExRjc4RkNGMjY0NEY1OTUyRjc4Q0Q1ODQwODg2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChU/9fGXtIPHRxhS8c/uDYg0WX P7cj2xHs+OGwqOp9EMBD+PcYYGPidLFQsrmnyWtOOtf7h7klhpPd5sUL4Bs8/9/9 utZW0pEKb96a7azKzKahHvBmhpwx2+os+ruGi8af+bxciUDaIixHjIVbHA8lVXBS Me7ToHrY1OsCmdc4f/zc70UhU1rYI72HTv77vl8lj0OO5HNJs5aYyv3OcGBPZQiy /yuGyAFxgzIhj1f+UpzKNvljSBiqWRppH+oa5V0ieJh6QRyVSMKFcE2rSkShHpuV XwyRHajHSpPU1LH9kSWvuz+hwsM7BkKazYEIgkv8Z9oRHAz1Qsp0m1brHrF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6kCUhoEfePzyZE9ZUveM1YQIhkEwHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvoEi/MXU6dyphL3ErU5ckyHoa/rKx/F/uJ RnnQ8nNyaacx/7iw0HAeUzzwkj/PaSakU9dz9Oo6P9tAh5SjCYXfHWCHAYszMt+z RnhMw/07fqZx+5fZzy/T1XFN7viG7JMqjZ/sTxDt1JuauLO3nI1vsERvgdhsqCAa g4RKcjOooiSQ0hg7Mf0unhWrGIo4P9jLowXZtj+UG1/7i5bQGWa5mOKgysWv/uvJ Vtjn5YHcKtokRcbFxBAjhhzj8YMAXIQIyHJ/lAEd0OoKLdtxPTt3YFfVVXPt8876 CCm2Eci64Uq+jD8YaUp1XVcifbgvZcf6s0oI+DnFYgID1VKjNXQ= -----END CERTIFICATE-----Generated at Tue Nov 10 19:14:19 2026 by rpki-client