$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: VB4B7+msdZwybsAEi1pRRDZFwliRLd44y+XVUgQdqi0= Subject key identifier: 6D:F3:48:8B:99:9A:86:79:0D:33:30:AC:4C:72:D6:42:A1:D3:D5:28 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 713DBBE6CC322B002CE0D8E6529E7B300AB5730F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 03C8 Signing time: Wed 25 Mar 2026 19:52:17 +0000 Manifest this update: Wed 25 Mar 2026 19:47:17 +0000 Manifest next update: Sun 29 Mar 2026 05:54:17 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: 0vZTzKLsh9mewMvx6s6xs/j4mX5nORRdpulGIJxJiGY=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: ULJuo4JlKwtfWqpN2WxBIIizTww0+8EhBVz/p9sPJ/4=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: hvUXOReMrQ3DCf0Qm4MoQmjjiS09sVCzS98Qs2OkopY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3d:bb:e6:cc:32:2b:00:2c:e0:d8:e6:52:9e:7b:30:0a:b5:73:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Mar 25 19:47:17 2026 GMT Not After : Mar 29 05:54:17 2026 GMT Subject: CN=6DF3488B999A86790D3330AC4C72D642A1D3D528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:87:fe:cf:07:cb:e6:96:a6:7e:32:b8:29: 87:f9:46:68:44:f2:af:29:95:8c:2a:20:36:1d:bd: 84:3f:b6:e4:52:9d:25:39:35:fb:4f:1a:8e:09:81: b5:ff:0b:7c:9e:0e:bd:8a:68:de:dc:be:32:4e:f4: b5:9a:8b:93:87:57:7c:ea:79:a1:a7:fd:18:15:d7: 9f:b9:45:c6:c8:32:27:8b:3b:6b:a0:de:85:20:7a: 64:93:be:a1:99:ab:f1:5e:16:ba:a4:84:16:35:aa: 4f:e3:3b:e1:29:25:96:0d:11:13:db:81:73:e2:d5: 83:81:de:d6:b1:db:e0:e1:74:91:ad:9c:56:00:af: cd:63:36:8c:a2:dd:70:60:e3:c8:7f:bb:94:09:e0: cb:cd:94:b9:ce:f7:d0:60:d4:26:87:f5:c8:cd:60: 8a:20:7a:91:3c:c5:7c:2d:48:f2:b9:ca:70:ed:a9: 0d:fd:ee:cb:19:b9:05:d4:99:7e:f9:c9:8c:fe:b4: ac:16:05:c9:17:0f:61:86:a0:3e:e2:a4:a9:20:3c: 13:c9:0f:63:ba:f3:97:bb:39:51:51:73:38:30:31: a1:e0:86:22:62:f2:dc:25:e5:b8:3a:bc:29:3f:0e: 0c:83:86:c4:e4:dd:74:d5:9c:a5:38:e5:3e:14:74: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F3:48:8B:99:9A:86:79:0D:33:30:AC:4C:72:D6:42:A1:D3:D5:28 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ca:41:79:a3:f3:e5:ac:27:29:dc:79:fc:c7:ee:e2:92:8b: c7:ba:eb:06:88:ac:09:54:1a:0d:c0:5e:74:1c:6a:48:a1:44: b4:b3:2f:52:f5:58:84:2f:aa:c1:8e:d5:8a:f7:e0:4a:fe:ea: ca:8e:51:b9:e9:b3:07:82:b0:41:25:37:e2:82:79:5f:20:45: 4a:b9:24:b6:a8:39:ff:12:44:4c:0a:b3:3a:04:05:c7:88:6e: a9:23:84:ae:f8:d1:bf:42:d9:7a:cc:6d:6b:ec:06:5f:a8:d1: f6:27:c5:c6:21:a0:cf:30:ad:0f:7b:4e:39:0f:89:0c:00:47: 82:ab:b9:5b:57:30:bf:f8:42:63:ca:ad:ed:d5:6e:9d:33:1c: 3a:a9:cc:0e:8e:f0:19:4f:81:df:c0:1e:1f:16:91:ca:a1:10: f7:50:95:e7:cd:06:23:ba:59:74:91:29:31:6f:db:aa:c8:67: 79:16:d1:99:cb:2a:dc:c3:2c:0f:51:73:15:04:c1:a8:6e:e5: 78:2e:3f:6e:a9:32:2b:4c:fb:74:aa:b8:95:27:5b:13:e9:40: 08:8f:c7:7d:65:2f:0d:a1:a0:4f:f1:cd:22:2b:52:fc:e5:46: b1:24:4b:ca:40:33:88:23:51:71:61:f1:63:f3:17:44:d5:1b: 33:42:39:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcT275swyKwAs4NjmUp57MAq1cw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNjAzMjUxOTQ3MTdaFw0yNjAzMjkwNTU0MTdaMDMxMTAvBgNV BAMTKDZERjM0ODhCOTk5QTg2NzkwRDMzMzBBQzRDNzJENjQyQTFEM0Q1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+g4f+zwfL5pamfjK4KYf5RmhE 8q8plYwqIDYdvYQ/tuRSnSU5NftPGo4JgbX/C3yeDr2KaN7cvjJO9LWai5OHV3zq eaGn/RgV15+5RcbIMieLO2ug3oUgemSTvqGZq/FeFrqkhBY1qk/jO+EpJZYNERPb gXPi1YOB3tax2+DhdJGtnFYAr81jNoyi3XBg48h/u5QJ4MvNlLnO99Bg1CaH9cjN YIogepE8xXwtSPK5ynDtqQ397ssZuQXUmX75yYz+tKwWBckXD2GGoD7ipKkgPBPJ D2O685e7OVFRczgwMaHghiJi8twl5bg6vCk/DgyDhsTk3XTVnKU45T4UdIwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbfNIi5mahnkNMzCsTHLWQqHT1SgwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvKQXmj8+WsJyncefzH7uKSi8e66waIrAlU Gg3AXnQcakihRLSzL1L1WIQvqsGO1Yr34Er+6sqOUbnpsweCsEElN+KCeV8gRUq5 JLaoOf8SREwKszoEBceIbqkjhK740b9C2XrMbWvsBl+o0fYnxcYhoM8wrQ97TjkP iQwAR4KruVtXML/4QmPKre3Vbp0zHDqpzA6O8BlPgd/AHh8WkcqhEPdQlefNBiO6 WXSRKTFv26rIZ3kW0ZnLKtzDLA9RcxUEwahu5XguP26pMitM+3SquJUnWxPpQAiP x31lLw2hoE/xzSIrUvzlRrEkS8pAM4gjUXFh8WPzF0TVGzNCObo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:55:38 2026 by rpki-client