$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: KqHoLdTVzWCow5nUN+B8XplzG4/UBCLvcoUtZSVE9B4= Subject key identifier: F1:23:40:47:A1:AF:6F:8E:B6:27:0A:EF:26:CC:5F:EF:56:AC:E4:DE Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 5C41CB6221FE6CD8880C98D2F4B45AA372582B08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04DB Signing time: Thu 26 Mar 2026 12:02:17 +0000 Manifest this update: Thu 26 Mar 2026 11:57:17 +0000 Manifest next update: Sun 29 Mar 2026 18:22:17 +0000 Files and hashes: 1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) 2: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: TbMT9RtfxmDZJ+MI/a6Af9rXVDcD1I8foQfOqiT4BYE=) 3: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:41:cb:62:21:fe:6c:d8:88:0c:98:d2:f4:b4:5a:a3:72:58:2b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Mar 26 11:57:17 2026 GMT Not After : Mar 29 18:22:17 2026 GMT Subject: CN=F1234047A1AF6F8EB6270AEF26CC5FEF56ACE4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:c7:ba:7a:da:4d:f6:4e:1e:2c:18:cb:e4: e5:e8:bc:25:eb:65:c8:61:05:34:b5:77:b6:e8:06: a4:2c:07:d1:ca:56:3a:18:b4:46:9f:68:13:18:c5: 7d:0c:fb:3e:b9:be:f7:ed:5b:95:5b:c7:0e:d0:bc: 7c:b9:9a:76:2d:8b:d6:97:18:3c:45:6d:b8:88:e6: 70:ad:ba:a7:45:85:86:48:e1:94:6b:5c:4b:9c:1b: 0f:37:27:52:ff:30:2f:a9:ae:93:04:9b:48:db:83: f1:69:2e:01:1c:d0:f5:bd:47:81:d7:32:7b:e3:37: c6:28:7f:db:49:e3:ea:e9:3c:a6:dc:68:4a:83:0b: cb:d6:d8:d7:2e:3b:c4:78:8f:38:48:7b:77:15:2e: e8:f1:74:57:70:a9:be:ad:ba:89:8b:25:ef:14:1b: d1:e3:72:a9:3e:1a:e3:1f:16:9d:15:dd:95:9b:d7: 59:ba:23:95:20:4f:b3:fa:42:33:a9:65:30:d7:f5: 31:96:9b:9d:24:e6:09:6c:68:03:da:4e:31:88:01: ab:51:7c:b0:6f:16:f2:59:31:aa:dc:0a:59:b8:0c: ac:9e:04:70:0b:bc:b9:e7:d9:0f:92:89:cc:80:06: c8:a2:5e:82:75:0e:4b:2c:e2:38:89:95:e7:1b:88: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:23:40:47:A1:AF:6F:8E:B6:27:0A:EF:26:CC:5F:EF:56:AC:E4:DE X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5e:52:6f:3e:cb:6b:4e:f5:f5:b1:c6:67:82:66:b6:81:95: 1c:cd:9b:b2:dc:79:d7:40:dc:83:8b:c4:37:3a:66:75:c3:84: f3:b6:c9:d8:3f:0f:d3:38:be:d3:cd:dc:af:e0:c8:13:78:a5: 81:b8:2f:0a:7b:eb:dd:7b:01:95:ec:82:e3:96:5d:f8:a6:50: bf:f0:fa:53:23:16:6b:0e:49:85:37:11:c4:0b:d5:ff:17:3f: e7:79:0f:49:29:8a:52:e1:44:ab:5a:16:06:79:00:a7:e0:4d: 38:68:a2:5d:38:db:1c:42:fb:a7:86:53:d5:90:80:f7:e2:29: bd:6b:9b:b7:67:60:f4:db:a4:52:ee:ce:92:0f:8a:7d:25:27: f7:b6:c9:1e:50:48:7c:be:fc:7c:cd:3d:7e:a5:d4:02:5b:d0: 18:b5:ef:c7:11:06:9f:fb:ac:61:35:30:99:72:3f:8a:1c:87: f5:5c:d3:0f:cd:66:0d:9c:74:4a:db:c1:a1:43:8f:dc:65:0b: f5:72:9f:e1:8f:f6:d5:81:4d:e2:de:69:0f:4c:af:fc:bf:23: 36:c8:30:13:fc:4d:6f:8a:0e:b6:e9:22:e8:2f:fc:bb:37:fa: 95:a7:60:07:2f:a9:01:b7:65:b0:30:c5:e6:2a:05:20:1b:62: b1:c7:2a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEHLYiH+bNiIDJjS9LRao3JYKwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNjAzMjYxMTU3MTdaFw0yNjAzMjkxODIyMTdaMDMxMTAvBgNV BAMTKEYxMjM0MDQ3QTFBRjZGOEVCNjI3MEFFRjI2Q0M1RkVGNTZBQ0U0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bse6etpN9k4eLBjL5OXovCXr ZchhBTS1d7boBqQsB9HKVjoYtEafaBMYxX0M+z65vvftW5Vbxw7QvHy5mnYti9aX GDxFbbiI5nCtuqdFhYZI4ZRrXEucGw83J1L/MC+prpMEm0jbg/FpLgEc0PW9R4HX MnvjN8Yof9tJ4+rpPKbcaEqDC8vW2NcuO8R4jzhIe3cVLujxdFdwqb6tuomLJe8U G9Hjcqk+GuMfFp0V3ZWb11m6I5UgT7P6QjOpZTDX9TGWm50k5glsaAPaTjGIAatR fLBvFvJZMarcClm4DKyeBHALvLnn2Q+SicyABsiiXoJ1Dkss4jiJlecbiL2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8SNAR6Gvb462JwrvJsxf71as5N4wHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5eUm8+y2tO9fWxxmeCZraBlRzNm7LceddA 3IOLxDc6ZnXDhPO2ydg/D9M4vtPN3K/gyBN4pYG4Lwp76917AZXsguOWXfimUL/w +lMjFmsOSYU3EcQL1f8XP+d5D0kpilLhRKtaFgZ5AKfgTThool042xxC+6eGU9WQ gPfiKb1rm7dnYPTbpFLuzpIPin0lJ/e2yR5QSHy+/HzNPX6l1AJb0Bi178cRBp/7 rGE1MJlyP4och/Vc0w/NZg2cdErbwaFDj9xlC/Vyn+GP9tWBTeLeaQ9Mr/y/IzbI MBP8TW+KDrbpIugv/Ls3+pWnYAcvqQG3ZbAwxeYqBSAbYrHHKvk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:51 2026 by rpki-client