$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: RE1hzai6Ne+HXuK1orCrDsEGWDn2zX4R1yx0vU5H7xM= Subject key identifier: 94:13:AA:7D:68:8E:93:E0:46:DE:27:23:DC:22:F0:32:A5:09:D3:DF Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 0AA9E5D9729AAC78B56EE0C24CE4B0A8859F5B10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 0228 Signing time: Wed 25 Mar 2026 02:10:50 +0000 Manifest this update: Wed 25 Mar 2026 02:05:50 +0000 Manifest next update: Sat 28 Mar 2026 08:17:50 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: 6tfMgf++Z7eY4U1MyA2fm8emRkoeOGFCbZ7iSaHg3g4=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a9:e5:d9:72:9a:ac:78:b5:6e:e0:c2:4c:e4:b0:a8:85:9f:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Mar 25 02:05:50 2026 GMT Not After : Mar 28 08:17:50 2026 GMT Subject: CN=9413AA7D688E93E046DE2723DC22F032A509D3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:ae:e2:f8:e8:13:b8:49:e9:6f:38:50:40: d5:44:04:88:fc:ba:b8:cd:35:ef:80:d0:9f:69:97: 7d:e2:4b:12:b0:d6:9e:c5:e2:f0:85:90:d1:5e:89: 26:21:bd:f5:b6:a5:6e:5f:2c:08:5a:74:15:34:40: e6:5d:46:be:7e:44:a6:87:e4:07:d0:0a:42:bb:5f: 83:93:f8:9f:15:6f:48:d4:95:6b:55:3f:1c:93:19: e7:05:69:25:28:89:42:ca:a9:c7:25:c7:d8:98:5f: eb:d6:68:ad:45:66:77:74:c6:89:55:f8:72:9f:bb: 63:f9:04:03:68:a9:8f:7c:1a:4e:dc:54:eb:5b:44: 54:d7:a2:dc:99:1a:b8:0e:6e:83:16:c0:0e:bc:b2: bc:43:70:f7:cf:f7:ff:a5:f2:49:21:d0:65:b8:05: c1:fb:52:eb:7a:7c:28:ee:01:97:02:16:36:41:51: e4:72:77:32:8e:f0:f4:af:70:fe:32:cc:e6:0f:20: ee:54:cf:65:5e:aa:fb:e1:e7:42:c4:c8:6c:89:17: 4e:2d:d6:0d:6b:d8:d3:ed:09:8d:3d:ad:c3:25:b6: 6c:b3:09:ef:c2:0e:fd:b3:80:eb:9a:a3:b8:a6:2f: 41:7b:c8:c2:c2:5d:e4:ea:21:34:ab:a0:6f:96:bf: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:13:AA:7D:68:8E:93:E0:46:DE:27:23:DC:22:F0:32:A5:09:D3:DF X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:33:f8:3a:8a:7c:97:c3:18:b5:b5:0d:1c:c7:5e:47:1b:25: 14:ff:e5:b7:f9:3d:2d:28:62:83:12:53:f4:2f:f8:75:46:4d: 5d:73:59:be:b9:d3:7c:47:a2:20:24:4e:6b:60:c7:1c:3b:3b: 0c:d3:79:92:59:df:1a:17:25:f2:79:c3:d3:ec:b9:45:ac:0d: b6:75:a3:dd:40:db:08:b7:f0:5b:74:9e:a8:e8:b1:51:02:73: 7f:a7:3b:91:b4:8a:55:23:70:7e:d6:a2:10:cb:7f:5a:95:bf: 85:6f:ac:c2:5c:3c:05:7c:87:90:de:3f:8e:e4:6b:4d:68:2a: 70:e2:3b:9c:d4:ef:21:99:17:49:02:b8:e2:98:dc:8e:ec:89: d7:3e:d8:37:a7:9e:5a:66:ee:e5:20:ef:79:e4:c4:80:e7:56: 25:09:1b:5a:ba:44:c5:40:81:2a:fb:0e:d8:ed:3e:da:d7:a8: c4:62:a3:d4:13:1b:eb:e2:5f:2c:80:da:67:99:87:94:5d:46: 88:66:14:80:a4:65:d4:c4:09:75:9b:14:8c:f8:c2:17:a1:96: bd:57:be:8b:b5:d1:a8:ce:a5:39:46:5e:45:bc:4d:bd:75:5f: 14:a4:ed:e2:7f:21:3a:bf:5d:9b:7a:b4:21:b1:8a:6c:17:16: d3:73:e3:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqnl2XKarHi1buDCTOSwqIWfWxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNjAzMjUwMjA1NTBaFw0yNjAzMjgwODE3NTBaMDMxMTAvBgNV BAMTKDk0MTNBQTdENjg4RTkzRTA0NkRFMjcyM0RDMjJGMDMyQTUwOUQzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLq7i+OgTuEnpbzhQQNVEBIj8 urjNNe+A0J9pl33iSxKw1p7F4vCFkNFeiSYhvfW2pW5fLAhadBU0QOZdRr5+RKaH 5AfQCkK7X4OT+J8Vb0jUlWtVPxyTGecFaSUoiULKqcclx9iYX+vWaK1FZnd0xolV +HKfu2P5BANoqY98Gk7cVOtbRFTXotyZGrgOboMWwA68srxDcPfP9/+l8kkh0GW4 BcH7Uut6fCjuAZcCFjZBUeRydzKO8PSvcP4yzOYPIO5Uz2Veqvvh50LEyGyJF04t 1g1r2NPtCY09rcMltmyzCe/CDv2zgOuao7imL0F7yMLCXeTqITSroG+Wvz/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBOqfWiOk+BG3icj3CLwMqUJ098wHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsz+DqKfJfDGLW1DRzHXkcbJRT/5bf5PS0o YoMSU/Qv+HVGTV1zWb6503xHoiAkTmtgxxw7OwzTeZJZ3xoXJfJ5w9PsuUWsDbZ1 o91A2wi38Ft0nqjosVECc3+nO5G0ilUjcH7WohDLf1qVv4VvrMJcPAV8h5DeP47k a01oKnDiO5zU7yGZF0kCuOKY3I7sidc+2Dennlpm7uUg73nkxIDnViUJG1q6RMVA gSr7DtjtPtrXqMRio9QTG+viXyyA2meZh5RdRohmFICkZdTECXWbFIz4whehlr1X vou10ajOpTlGXkW8Tb11XxSk7eJ/ITq/XZt6tCGximwXFtNz4wM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:48 2026 by rpki-client