$ rpki-client -vvvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: Cgt3W8ja9rSRhAPazzHlxTuaom9UCUNPYVL7AB9ayqE= Subject key identifier: C4:10:4D:89:60:00:6A:31:25:4C:E1:9B:F5:4B:1C:4F:12:41:0E:D7 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 7E9BF065A6C659A2A4F3103FB67AD517A4A30075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 10:11:48 +0000 Manifest this update: Sun 15 Nov 2026 10:06:48 +0000 Manifest next update: Mon 16 Nov 2026 10:11:48 +0000 Files and hashes: 1: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) 2: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: o6HN+VcGEvqd8fd4yLt2R+k4qwyI+mubEfXsIxW4EVU=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9b:f0:65:a6:c6:59:a2:a4:f3:10:3f:b6:7a:d5:17:a4:a3:00:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Nov 15 10:06:48 2026 GMT Not After : Nov 16 10:11:48 2026 GMT Subject: CN=C4104D8960006A31254CE19BF54B1C4F12410ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:0b:35:b6:92:1e:eb:92:62:01:22:93:92: 6e:6f:97:f2:69:a4:bc:59:7c:0a:1f:6d:b3:d7:99: 0f:e2:9a:11:0d:e2:a2:08:62:e1:ad:c5:4c:ba:e0: e8:05:81:e3:4d:a3:00:98:15:e8:f3:a4:82:54:5e: 26:56:3d:a1:fb:e3:8f:d9:ce:7b:17:9e:51:03:ba: c5:8b:1b:f9:48:6c:17:d2:d6:e7:b5:02:e1:a8:6d: 24:85:d6:ed:4c:f6:1c:1d:6f:59:9b:21:1c:7f:ff: a9:18:1c:7b:c5:db:47:c3:84:3d:29:e0:a2:43:be: 6c:fa:61:9e:73:dd:61:a9:e7:bb:14:aa:38:28:b9: 81:39:15:9b:98:16:e0:fc:0b:6a:c5:e1:58:c2:98: 94:c8:62:e5:ad:34:9e:6a:2a:f5:7b:ed:ba:8b:39: 28:da:69:de:94:28:8a:1a:a4:af:76:66:94:02:78: e2:c8:01:30:dd:a2:a7:c1:ad:59:14:2e:2d:0c:14: fd:21:4e:e1:72:0d:1a:af:b6:51:d0:d3:78:5c:a7: 8c:3d:ef:6e:3f:83:fb:53:a9:03:c4:e6:0d:2c:db: 12:0c:e0:bb:17:98:b0:78:38:61:e7:31:4b:ef:e7: a1:5b:30:0d:98:bf:03:a8:88:11:df:e3:71:a3:86: 65:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:4D:89:60:00:6A:31:25:4C:E1:9B:F5:4B:1C:4F:12:41:0E:D7 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f5:e1:d5:37:ab:2b:67:f2:c5:b6:d0:f8:d8:af:39:c0:13: 56:ca:17:6a:bd:46:bb:e5:15:cf:1c:30:74:68:0c:b4:b4:76: 49:41:c0:c2:d1:c6:e0:30:d8:44:2b:3b:93:f8:92:20:08:9e: 54:3b:54:7e:bb:1b:47:8a:03:49:08:ac:09:25:73:a0:f0:71: 21:73:71:48:ba:f7:80:70:c3:ec:88:45:68:0a:ab:c8:54:42: 94:18:74:c8:eb:1f:9a:29:1b:51:e4:71:37:41:6b:cc:e4:de: 08:6d:59:6a:27:98:d2:74:a9:bb:f5:c1:0a:7f:f1:9b:7a:32: 60:d1:bc:69:90:82:e5:8e:52:20:2f:a7:35:11:e8:c2:8f:fe: 96:9b:96:ad:cb:57:45:d1:c0:3a:7f:9f:57:55:c7:c4:67:52: 42:46:3c:43:95:91:25:d5:2a:28:aa:ce:6a:2a:71:99:0f:13: 03:be:6e:f6:cd:86:cd:fc:a6:c8:ba:21:1f:0f:b9:52:ee:a1: 9c:ca:da:d2:ab:8c:11:c8:68:0c:e8:bf:e8:eb:7d:ab:16:45: 95:9f:42:55:66:dd:f7:11:47:7e:fe:5b:bf:f1:1a:37:0a:c7: f8:61:76:27:30:d1:c7:d4:40:f8:64:bd:5b:fe:14:12:c3:70: f6:95:da:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpvwZabGWaKk8xA/tnrVF6SjAHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjExMTUxMDA2NDhaFw0yNjExMTYxMDExNDhaMDMxMTAvBgNV BAMTKEM0MTA0RDg5NjAwMDZBMzEyNTRDRTE5QkY1NEIxQzRGMTI0MTBFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yAs1tpIe65JiASKTkm5vl/Jp pLxZfAofbbPXmQ/imhEN4qIIYuGtxUy64OgFgeNNowCYFejzpIJUXiZWPaH744/Z znsXnlEDusWLG/lIbBfS1ue1AuGobSSF1u1M9hwdb1mbIRx//6kYHHvF20fDhD0p 4KJDvmz6YZ5z3WGp57sUqjgouYE5FZuYFuD8C2rF4VjCmJTIYuWtNJ5qKvV77bqL OSjaad6UKIoapK92ZpQCeOLIATDdoqfBrVkULi0MFP0hTuFyDRqvtlHQ03hcp4w9 724/g/tTqQPE5g0s2xIM4LsXmLB4OGHnMUvv56FbMA2YvwOoiBHf43GjhmWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxBBNiWAAajElTOGb9UscTxJBDtcwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL14dU3qytn8sW20PjYrznAE1bKF2q9Rrvl Fc8cMHRoDLS0dklBwMLRxuAw2EQrO5P4kiAInlQ7VH67G0eKA0kIrAklc6DwcSFz cUi694Bww+yIRWgKq8hUQpQYdMjrH5opG1HkcTdBa8zk3ghtWWonmNJ0qbv1wQp/ 8Zt6MmDRvGmQguWOUiAvpzUR6MKP/pablq3LV0XRwDp/n1dVx8RnUkJGPEOVkSXV KiiqzmoqcZkPEwO+bvbNhs38psi6IR8PuVLuoZzK2tKrjBHIaAzov+jrfasWRZWf QlVm3fcRR37+W7/xGjcKx/hhdicw0cfUQPhkvVv+FBLDcPaV2sY= -----END CERTIFICATE-----Generated at Sun Nov 15 18:16:46 2026 by rpki-client