$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: djdl1AAQSq/RZGgAmKfsCbRD3+sBYC9H+wtcA5Qy8nc= Subject key identifier: 9E:4F:21:15:8D:16:2A:EC:A7:98:1B:EB:B9:68:33:94:2E:40:C3:4A Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 7BD8B91DB8155F9AB8A14A23CC76226160B4058B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: F9 Signing time: Wed 25 Mar 2026 04:21:31 +0000 Manifest this update: Wed 25 Mar 2026 04:16:31 +0000 Manifest next update: Sat 28 Mar 2026 15:46:31 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=) 2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: e12vwRnDSm1FDAJip+iDESazPj+zROZ+GaHhRi2B6pY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d8:b9:1d:b8:15:5f:9a:b8:a1:4a:23:cc:76:22:61:60:b4:05:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Mar 25 04:16:31 2026 GMT Not After : Mar 28 15:46:31 2026 GMT Subject: CN=9E4F21158D162AECA7981BEBB96833942E40C34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:04:38:79:1b:6d:9d:d5:e8:a4:97:77:8e: 44:ac:ad:33:6f:22:e9:e8:e0:86:9a:4f:c0:3c:95: 37:e2:df:a9:00:2d:ac:fd:61:27:8c:97:15:ae:fe: 6e:c1:1a:a2:e8:42:8b:34:94:1a:b2:2f:bc:64:9b: 58:72:ee:5e:1a:13:ca:0b:d8:80:fc:5f:2e:fe:91: ff:25:34:cc:16:92:56:f5:cf:f6:45:5a:17:12:36: 8b:23:12:ef:a6:dd:7b:26:06:b1:6a:55:95:45:7b: 7c:52:ed:f6:93:fc:e7:fc:dd:3f:15:72:ee:e0:00: 91:50:c0:c6:2a:2c:b9:cb:c4:3b:a0:bc:f6:95:0a: a4:cd:23:f6:15:19:84:c1:9a:56:9f:53:b4:b4:71: 87:e6:77:bf:cc:d7:76:ff:aa:db:2c:1f:13:b6:19: db:36:75:f1:21:27:a5:5c:4e:56:d7:79:3d:6c:74: b4:4f:a9:ad:75:98:35:8f:f0:5e:a6:f9:b7:ea:f6: 46:2a:c5:81:44:b5:0f:ce:ee:4d:f6:4e:4b:b8:dd: 58:00:94:82:fb:f5:a9:8b:a6:d2:2a:f3:38:86:51: b0:58:9d:ba:8a:0f:f3:d8:ca:71:05:a5:66:57:3c: a5:b4:44:13:8f:d0:37:6f:a4:8d:5d:66:b1:e8:44: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4F:21:15:8D:16:2A:EC:A7:98:1B:EB:B9:68:33:94:2E:40:C3:4A X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:8b:4d:88:88:1a:ef:35:a2:4a:92:27:09:a9:23:de:34:9e: 3f:6a:0c:13:a9:51:4e:ee:05:43:c1:c5:be:ca:e1:0c:92:da: dc:37:7c:0b:cb:1c:9c:a0:77:ce:44:0f:87:b0:35:7b:df:ca: d7:22:61:9b:9d:a1:c3:01:73:2a:a3:f3:c4:91:06:96:cd:54: 04:91:e6:9b:e2:41:e9:fd:a8:cb:ed:cc:2a:91:f3:f9:97:26: b6:b1:5d:a4:0e:09:9a:f4:1a:a7:a6:43:ed:65:6e:a5:ac:64: 2c:32:73:98:b4:ce:ad:6d:e9:ec:e8:7e:54:4c:1b:b6:4b:76: 03:cf:6f:81:5c:e2:d7:88:96:28:04:e1:28:f0:bf:51:0d:85: 67:20:f1:70:98:98:f1:a0:14:07:c4:0c:88:9b:48:43:8e:14: 3c:ed:b6:54:97:a6:66:5a:21:8e:f0:bc:84:79:67:d9:b4:df: e0:2b:0c:d5:47:b2:bd:de:3e:2c:8c:ca:91:cf:b4:b4:ac:9c: a4:b7:e9:7e:91:6b:4e:84:d2:cc:47:cf:f2:28:38:6e:93:e1: 01:87:6a:6e:75:3d:74:00:a2:3a:47:42:4d:e8:a3:e6:e2:1d: 95:2d:a0:40:6a:95:0b:0f:f1:14:ef:b1:f4:35:eb:c5:77:23: db:35:ab:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9i5HbgVX5q4oUojzHYiYWC0BYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNjAzMjUwNDE2MzFaFw0yNjAzMjgxNTQ2MzFaMDMxMTAvBgNV BAMTKDlFNEYyMTE1OEQxNjJBRUNBNzk4MUJFQkI5NjgzMzk0MkU0MEMzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MwQ4eRttndXopJd3jkSsrTNv Iuno4IaaT8A8lTfi36kALaz9YSeMlxWu/m7BGqLoQos0lBqyL7xkm1hy7l4aE8oL 2ID8Xy7+kf8lNMwWklb1z/ZFWhcSNosjEu+m3XsmBrFqVZVFe3xS7faT/Of83T8V cu7gAJFQwMYqLLnLxDugvPaVCqTNI/YVGYTBmlafU7S0cYfmd7/M13b/qtssHxO2 Gds2dfEhJ6VcTlbXeT1sdLRPqa11mDWP8F6m+bfq9kYqxYFEtQ/O7k32Tku43VgA lIL79amLptIq8ziGUbBYnbqKD/PYynEFpWZXPKW0RBOP0DdvpI1dZrHoRBfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnk8hFY0WKuynmBvruWgzlC5Aw0owHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOLTYiIGu81okqSJwmpI940nj9qDBOpUU7u BUPBxb7K4QyS2tw3fAvLHJygd85ED4ewNXvfytciYZudocMBcyqj88SRBpbNVASR 5pviQen9qMvtzCqR8/mXJraxXaQOCZr0GqemQ+1lbqWsZCwyc5i0zq1t6ezoflRM G7ZLdgPPb4Fc4teIligE4Sjwv1ENhWcg8XCYmPGgFAfEDIibSEOOFDzttlSXpmZa IY7wvIR5Z9m03+ArDNVHsr3ePiyMypHPtLSsnKS36X6Ra06E0sxHz/IoOG6T4QGH am51PXQAojpHQk3oo+biHZUtoEBqlQsP8RTvsfQ168V3I9s1q0I= -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:07 2026 by rpki-client