$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft File: BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft (raw, json) Hash identifier: xTGLitl1oCX0DTpPiyEosK53G4qq8uTQnnytDugA0dA= Subject key identifier: B1:BE:F2:A2:91:5D:CE:10:B1:8F:7F:24:96:32:12:DE:22:21:E8:A5 Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 Certificate issuer: /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Certificate serial: 3A662CE1DD54CA14A4718CA22B1BBE74702F6A7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 12:51:54 +0000 Manifest this update: Mon 09 Nov 2026 12:46:54 +0000 Manifest next update: Tue 10 Nov 2026 16:15:54 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=) 2: BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl (hash: wpyxGkkPQ8lf8bHsTo9tphjSLCnSuNSNppg1SF4iY0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:66:2c:e1:dd:54:ca:14:a4:71:8c:a2:2b:1b:be:74:70:2f:6a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Validity Not Before: Nov 9 12:46:54 2026 GMT Not After : Nov 10 16:15:54 2026 GMT Subject: CN=B1BEF2A2915DCE10B18F7F24963212DE2221E8A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:2c:b0:ab:29:dd:a5:bc:e0:f0:0b:22:ba: b5:e8:d0:4c:1c:e8:e6:70:89:1b:61:f4:e0:68:71: 84:7c:33:18:b4:78:ed:b4:7b:a9:fd:b7:51:7d:a5: e3:94:b9:af:51:7d:d6:6b:12:28:e7:6c:04:ed:9d: d9:28:60:36:b1:c7:e2:cc:f6:9a:c5:0c:b1:15:db: 10:b0:42:5f:b4:71:5d:af:07:cd:a4:6f:b5:9b:a9: 50:0b:ed:e5:a0:61:85:e1:69:aa:06:00:37:12:a0: 2f:be:a7:72:61:15:29:8a:8a:d9:d8:05:0b:e9:3d: 9c:5e:35:db:ff:54:30:1a:62:55:20:5f:76:3d:50: 65:b8:a4:33:f2:4d:5b:d7:4a:af:bd:5a:58:9c:36: 65:e2:f7:ef:bf:59:6c:63:62:c5:98:b9:de:bb:a9: b7:d7:4c:72:03:4d:c8:56:e3:95:b6:d5:25:27:81: 8d:88:03:56:65:a8:eb:60:86:7f:a1:ed:97:f2:dd: 75:31:33:2b:5f:bf:89:70:81:f6:c6:c6:f5:71:ff: f6:07:56:28:0d:9d:73:09:96:ff:56:99:d7:dd:32: 80:21:01:2e:fa:4d:af:04:2d:d1:9f:6c:c9:6a:d7: ea:a3:e0:47:c0:a6:8d:7f:40:a0:c8:66:f9:e1:78: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BE:F2:A2:91:5D:CE:10:B1:8F:7F:24:96:32:12:DE:22:21:E8:A5 X509v3 Authority Key Identifier: keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ba:5d:1a:d7:9f:17:5e:cc:c3:69:e2:63:ee:68:44:5d:54: 94:b2:d6:58:2c:ff:6e:27:94:5e:42:89:5b:52:0d:fe:54:78: d1:46:90:d3:fa:58:d0:c6:66:54:a2:b5:22:6d:53:ee:bf:58: 13:01:d4:0e:0f:42:13:03:b0:34:4f:82:87:c6:a3:87:af:a1: 0d:50:f5:7b:c4:61:a9:8f:de:c0:e5:91:2b:0f:80:cd:25:b2: 02:8c:81:38:55:bc:0f:17:80:e3:d8:57:2d:e0:31:2e:46:a5: dd:98:29:a9:99:4a:95:3e:e3:1a:51:07:a2:57:ec:96:db:a7: 1b:06:25:73:b3:53:03:06:9f:83:4b:33:65:6a:cc:e1:60:0a: 57:90:4d:c7:8d:5a:1b:56:95:b3:d4:c8:02:b8:f5:fc:22:67: 1b:24:bd:7c:69:9a:48:ce:49:15:3a:95:7e:40:23:70:6d:49: 27:df:c9:71:52:b3:3d:09:35:a6:4e:ca:d9:7e:0b:ac:6b:0a: de:e0:4e:bc:4d:4d:77:26:5b:27:b3:4c:3a:21:0a:63:4f:d4: 31:5c:c2:9c:f8:79:b6:c5:92:ea:07:f7:ac:06:91:bc:4f:92: 24:8c:c4:83:76:5f:4c:10:eb:59:bc:69:86:86:44:08:19:e3: 75:f2:32:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmYs4d1UyhSkcYyiKxu+dHAvanwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5 MjQ0ODBEMTAeFw0yNjExMDkxMjQ2NTRaFw0yNjExMTAxNjE1NTRaMDMxMTAvBgNV BAMTKEIxQkVGMkEyOTE1RENFMTBCMThGN0YyNDk2MzIxMkRFMjIyMUU4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TCywqyndpbzg8AsiurXo0Ewc 6OZwiRth9OBocYR8Mxi0eO20e6n9t1F9peOUua9RfdZrEijnbATtndkoYDaxx+LM 9prFDLEV2xCwQl+0cV2vB82kb7WbqVAL7eWgYYXhaaoGADcSoC++p3JhFSmKitnY BQvpPZxeNdv/VDAaYlUgX3Y9UGW4pDPyTVvXSq+9WlicNmXi9++/WWxjYsWYud67 qbfXTHIDTchW45W21SUngY2IA1ZlqOtghn+h7Zfy3XUxMytfv4lwgfbGxvVx//YH VigNnXMJlv9WmdfdMoAhAS76Ta8ELdGfbMlq1+qj4EfApo1/QKDIZvnheB+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsb7yopFdzhCxj38kljIS3iIh6KUwHwYDVR0j BBgwFoAUug49SPtWJiyG35c//HyYdJJEgNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjViODQ1OWEtZTM1MS00YzhkLWJjMjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhG QjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5MjQ0ODBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTBFM0Q0OEZCNTYyNjJDODZERjk3M0ZGQzdDOTg3NDkyNDQ4 MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4 NzQ5MjQ0ODBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK6XRrXnxdezMNp4mPuaERdVJSy1lgs/24n lF5CiVtSDf5UeNFGkNP6WNDGZlSitSJtU+6/WBMB1A4PQhMDsDRPgofGo4evoQ1Q 9XvEYamP3sDlkSsPgM0lsgKMgThVvA8XgOPYVy3gMS5Gpd2YKamZSpU+4xpRB6JX 7JbbpxsGJXOzUwMGn4NLM2VqzOFgCleQTceNWhtWlbPUyAK49fwiZxskvXxpmkjO SRU6lX5AI3BtSSffyXFSsz0JNaZOytl+C6xrCt7gTrxNTXcmWyezTDohCmNP1DFc wpz4ebbFkuoH96wGkbxPkiSMxIN2X0wQ61m8aYaGRAgZ43XyMi8= -----END CERTIFICATE-----Generated at Tue Nov 10 01:57:52 2026 by rpki-client