$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: twf0SoDSChJbDrF4eG17lEzhA+riKH/BcS1J31LqTjs= Subject key identifier: 79:54:E5:CE:3F:9F:30:CD:CF:68:E5:51:18:B2:A9:8C:07:FC:B1:FF Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 0D63B9D26FFCFB284C538827911865D8BC7CD8BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 02BD Signing time: Wed 25 Mar 2026 13:42:14 +0000 Manifest this update: Wed 25 Mar 2026 13:37:14 +0000 Manifest next update: Sat 28 Mar 2026 23:47:14 +0000 Files and hashes: 1: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: aVXSvRMc8ZuAeV3dAuoPwCK+HuCX23t6QIjygnPjFDU=) 2: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) 3: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) 4: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) 5: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) 6: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:63:b9:d2:6f:fc:fb:28:4c:53:88:27:91:18:65:d8:bc:7c:d8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Mar 25 13:37:14 2026 GMT Not After : Mar 28 23:47:14 2026 GMT Subject: CN=7954E5CE3F9F30CDCF68E55118B2A98C07FCB1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a0:6a:9f:7e:b4:ae:44:c9:16:3a:b5:94:d5: 5e:bc:6b:87:39:e7:10:ee:fd:29:3b:62:2a:20:7f: 03:37:b8:9d:73:92:3b:c8:71:7b:b7:09:55:03:bc: 73:59:ce:a7:5d:eb:17:2c:c9:4b:97:72:97:41:d5: d8:4b:da:cc:55:08:f8:45:57:d7:68:5b:cf:bf:14: 88:90:18:41:b1:b0:ae:ea:f2:ef:6a:35:c3:e9:0b: 7d:07:66:de:2e:0c:20:f1:ff:a3:0a:49:3e:94:c9: 7e:b6:8e:ce:9f:e3:7c:27:e7:02:6a:ce:f6:f5:d7: 02:7b:1f:86:f0:3a:c9:eb:02:9b:d7:bb:24:25:f2: a1:02:33:b5:e5:e4:6b:2d:47:ef:e4:13:76:75:03: be:1e:75:30:20:20:1b:2f:55:db:4e:e1:ff:4d:fd: 81:c3:fe:02:f4:23:b2:ef:2f:ed:e5:2d:3b:19:28: 92:8f:31:fc:20:be:8a:59:d8:19:3f:a5:e1:23:cc: 05:7e:87:7d:d1:ae:2c:ea:82:e8:9e:20:a9:0f:e2: 67:1e:0d:4b:eb:5c:a1:a5:dd:d2:bc:13:30:ef:83: 5b:f0:11:12:08:f6:56:bb:ef:46:03:5b:42:e9:74: 6f:08:cb:d1:0a:aa:7c:84:58:57:9a:f0:68:a3:fc: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:54:E5:CE:3F:9F:30:CD:CF:68:E5:51:18:B2:A9:8C:07:FC:B1:FF X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ad:a1:66:09:3b:ea:f4:43:53:51:af:ba:94:f9:f3:5e:1f: b9:40:65:86:08:45:c0:d4:3a:fa:c0:f0:16:c1:37:74:6f:a2: 7e:c4:e1:74:0f:74:01:37:dd:27:65:98:c5:73:c4:ad:ed:3e: d6:00:69:4e:2b:7e:9a:fd:6f:f3:9e:59:fc:a5:af:93:86:b1: 79:7a:d2:22:ce:3c:b6:51:e5:7f:16:86:b1:05:08:98:55:21: c0:55:79:b9:6f:9b:fd:8f:53:94:e2:3f:be:88:dc:28:8e:ff: 53:ce:33:79:29:24:96:29:27:30:49:0a:63:11:46:a0:3d:f2: 86:11:43:f1:52:b4:04:cc:df:7f:e7:25:28:6b:50:59:c2:2e: 6e:03:06:3f:8b:6c:0a:a9:df:89:8a:5a:2f:fb:71:42:9e:d7: 12:40:6c:49:6e:5a:c1:8f:90:2d:98:91:6c:f4:f8:3b:90:e0: d7:07:64:9a:90:ad:c8:c3:3a:ca:68:06:af:f7:1e:c7:0a:51: 44:a5:39:20:4d:8b:42:00:f2:ce:c5:f5:91:e2:87:39:3b:e7: 7f:00:39:eb:95:8a:d5:1a:73:f7:cb:c3:fa:33:96:50:95:d4: 21:75:38:b3:a5:14:fe:27:16:3c:bf:99:85:cc:f0:27:3f:ec: ac:61:1e:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWO50m/8+yhMU4gnkRhl2Lx82L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNjAzMjUxMzM3MTRaFw0yNjAzMjgyMzQ3MTRaMDMxMTAvBgNV BAMTKDc5NTRFNUNFM0Y5RjMwQ0RDRjY4RTU1MTE4QjJBOThDMDdGQ0IxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoGqffrSuRMkWOrWU1V68a4c5 5xDu/Sk7YiogfwM3uJ1zkjvIcXu3CVUDvHNZzqdd6xcsyUuXcpdB1dhL2sxVCPhF V9doW8+/FIiQGEGxsK7q8u9qNcPpC30HZt4uDCDx/6MKST6UyX62js6f43wn5wJq zvb11wJ7H4bwOsnrApvXuyQl8qECM7Xl5GstR+/kE3Z1A74edTAgIBsvVdtO4f9N /YHD/gL0I7LvL+3lLTsZKJKPMfwgvopZ2Bk/peEjzAV+h33RrizqguieIKkP4mce DUvrXKGl3dK8EzDvg1vwERII9la770YDW0LpdG8Iy9EKqnyEWFea8Gij/DB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVTlzj+fMM3PaOVRGLKpjAf8sf8wHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOtoWYJO+r0Q1NRr7qU+fNeH7lAZYYIRcDU OvrA8BbBN3Rvon7E4XQPdAE33SdlmMVzxK3tPtYAaU4rfpr9b/OeWfylr5OGsXl6 0iLOPLZR5X8WhrEFCJhVIcBVeblvm/2PU5TiP76I3CiO/1POM3kpJJYpJzBJCmMR RqA98oYRQ/FStATM33/nJShrUFnCLm4DBj+LbAqp34mKWi/7cUKe1xJAbEluWsGP kC2YkWz0+DuQ4NcHZJqQrcjDOspoBq/3HscKUUSlOSBNi0IA8s7F9ZHihzk7538A OeuVitUac/fLw/ozllCV1CF1OLOlFP4nFjy/mYXM8Cc/7KxhHvM= -----END CERTIFICATE-----Generated at Fri Mar 27 03:09:30 2026 by rpki-client