$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: DZdEWfjGvkH9hvFS3iJqrIcsiO/UIEm/3QJfZfLgEiY= Subject key identifier: 01:F5:21:CF:64:6C:58:42:9A:8A:E9:20:F9:F0:D7:9F:57:07:2F:A8 Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 1C6420A181376C3975D25DF5C590B8EB587B78A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 03CA Signing time: Tue 24 Mar 2026 08:30:57 +0000 Manifest this update: Tue 24 Mar 2026 08:25:57 +0000 Manifest next update: Fri 27 Mar 2026 09:43:57 +0000 Files and hashes: 1: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: RLG7D4oTNkWsg62uoL+SvE7BzhSurrlkmzeY2AVC9n0=) 2: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: R8X143yfbaXKUXHLJV/lqOf4AKY5dTtB+7zp9CImTLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:64:20:a1:81:37:6c:39:75:d2:5d:f5:c5:90:b8:eb:58:7b:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Mar 24 08:25:57 2026 GMT Not After : Mar 27 09:43:57 2026 GMT Subject: CN=01F521CF646C58429A8AE920F9F0D79F57072FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:5b:49:9f:02:bc:f5:3e:76:7f:9d:dc:2b: 35:09:26:72:84:c2:fb:d5:25:d4:35:be:4b:aa:53: ed:54:ef:73:ff:18:55:bb:4c:83:d8:1a:8f:34:12: 9b:10:e6:f4:24:48:a2:d0:43:18:3d:25:f4:3e:e3: 1b:ca:9f:1d:63:f3:3d:41:db:eb:44:51:f3:f3:d9: d5:e5:01:f1:aa:39:f3:b2:10:19:f9:f9:e0:85:07: 25:eb:c1:3c:f5:9b:70:f0:d5:5e:84:56:a4:d2:38: f4:db:44:81:95:21:9f:ee:32:28:53:9d:e0:6c:b7: 44:d2:de:36:11:2c:bf:a9:54:10:3f:6f:9c:10:1f: aa:89:7e:50:a7:19:f6:3e:a8:1e:49:d4:b2:c9:6d: 45:25:6c:88:69:2d:2b:a0:1b:1e:dc:21:c7:37:93: d3:76:d3:7b:f6:46:70:8f:ea:7d:9e:e7:c8:f9:f9: 34:a9:e9:38:b0:20:c8:71:0a:94:e5:ed:30:a6:a3: 8c:f1:88:b2:b8:d7:a8:30:5f:8a:df:47:81:0a:5c: fb:bc:3b:5b:af:c2:24:00:9a:3f:a1:09:95:69:ed: c6:3d:88:41:8a:54:c5:6c:72:58:d7:81:fa:34:87: aa:70:54:fc:04:d8:f4:d9:17:ca:69:dd:15:57:ca: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F5:21:CF:64:6C:58:42:9A:8A:E9:20:F9:F0:D7:9F:57:07:2F:A8 X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:57:36:c9:9a:d8:9f:4e:a5:88:1b:4b:fe:da:55:c8:7a:3c: 64:54:a2:b8:89:1d:98:85:c7:3e:0d:de:47:7c:7b:b6:38:4c: 6f:e5:e5:ba:f4:9e:3e:8c:7d:22:64:a7:86:98:b2:28:d5:c0: 0e:f3:9d:c2:9e:bf:74:ff:11:89:b3:bb:c5:6f:7f:ac:ef:13: e1:ed:89:1c:09:21:0f:6c:52:e7:46:57:ce:b7:f7:7d:9a:ca: 22:c1:2e:54:e3:75:60:1f:5d:98:80:ee:0b:7d:c5:cc:a9:a4: f6:18:e9:c0:1c:c8:ab:63:27:76:cc:e5:49:1b:5d:9b:67:2c: 5e:44:66:72:52:3a:11:da:d9:e9:d5:68:82:f0:16:54:ae:64: 60:b3:a6:4f:3e:0a:4e:fe:17:64:ab:4d:a3:1b:28:a7:60:fe: ba:d4:b4:34:de:11:82:c3:bb:68:7e:3a:36:f2:73:16:6f:df: ee:10:30:2b:e9:7e:31:5d:8e:67:dc:08:e3:51:ee:5e:ee:c7: 60:e0:c8:1e:29:68:03:08:4d:7d:25:47:c0:63:41:63:63:9d: df:18:f5:c7:fe:e8:42:3e:ac:3a:80:92:0e:c8:5e:8d:58:7a: ab:33:30:77:4e:53:db:c1:4c:c6:fc:83:a2:7a:c0:3c:fd:9e: 24:4b:ca:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGQgoYE3bDl10l31xZC461h7eKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNjAzMjQwODI1NTdaFw0yNjAzMjcwOTQzNTdaMDMxMTAvBgNV BAMTKDAxRjUyMUNGNjQ2QzU4NDI5QThBRTkyMEY5RjBENzlGNTcwNzJGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M1tJnwK89T52f53cKzUJJnKE wvvVJdQ1vkuqU+1U73P/GFW7TIPYGo80EpsQ5vQkSKLQQxg9JfQ+4xvKnx1j8z1B 2+tEUfPz2dXlAfGqOfOyEBn5+eCFByXrwTz1m3Dw1V6EVqTSOPTbRIGVIZ/uMihT neBst0TS3jYRLL+pVBA/b5wQH6qJflCnGfY+qB5J1LLJbUUlbIhpLSugGx7cIcc3 k9N203v2RnCP6n2e58j5+TSp6TiwIMhxCpTl7TCmo4zxiLK416gwX4rfR4EKXPu8 O1uvwiQAmj+hCZVp7cY9iEGKVMVscljXgfo0h6pwVPwE2PTZF8pp3RVXypN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfUhz2RsWEKaiukg+fDXn1cHL6gwHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtXNsma2J9OpYgbS/7aVch6PGRUoriJHZiF xz4N3kd8e7Y4TG/l5br0nj6MfSJkp4aYsijVwA7zncKev3T/EYmzu8Vvf6zvE+Ht iRwJIQ9sUudGV863932ayiLBLlTjdWAfXZiA7gt9xcyppPYY6cAcyKtjJ3bM5Ukb XZtnLF5EZnJSOhHa2enVaILwFlSuZGCzpk8+Ck7+F2SrTaMbKKdg/rrUtDTeEYLD u2h+OjbycxZv3+4QMCvpfjFdjmfcCONR7l7ux2DgyB4paAMITX0lR8BjQWNjnd8Y 9cf+6EI+rDqAkg7IXo1YeqszMHdOU9vBTMb8g6J6wDz9niRLyvk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:41 2026 by rpki-client