$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: RugVWCracxC/O5zDi6XOlj6CGBXKRNTLMfvveaNkgns= Subject key identifier: C5:C8:11:BA:F2:BA:5B:35:A0:3C:ED:1C:4C:35:01:8B:B8:D3:C8:C9 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 39885BA06A0AF7AE827AA0BA915D69B2DA0BB5F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 025D Signing time: Tue 24 Mar 2026 04:12:37 +0000 Manifest this update: Tue 24 Mar 2026 04:07:37 +0000 Manifest next update: Fri 27 Mar 2026 11:50:37 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: 63yafMp2yvme073EDM4y0S8TrzUUVMlolbFpfsHwA70=) 2: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: XpRl9r9zs9D7Sge9PLx1ExvJmECIH9gHhZAd1weULYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:88:5b:a0:6a:0a:f7:ae:82:7a:a0:ba:91:5d:69:b2:da:0b:b5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Mar 24 04:07:37 2026 GMT Not After : Mar 27 11:50:37 2026 GMT Subject: CN=C5C811BAF2BA5B35A03CED1C4C35018BB8D3C8C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:0e:b0:63:33:4a:59:e9:9b:c0:48:a8:30: b4:6d:98:20:c5:95:05:ed:a3:a3:b2:99:ce:d7:b3: 7c:f6:27:c3:9a:d2:92:c1:ce:ba:10:da:a8:dd:43: 83:e0:64:a6:13:d0:cc:bb:76:f7:19:ed:df:df:41: dd:af:46:8d:bf:49:14:98:ff:3a:44:8e:a4:fd:72: 9b:6e:f5:21:81:2c:21:96:ad:ce:21:3b:52:24:2b: d2:d3:48:22:69:3d:16:77:b7:7c:37:1b:97:45:63: 57:c8:f5:b9:5a:ab:3e:25:68:f2:b7:b6:1d:71:e0: 82:82:bc:58:3a:67:f0:95:b4:9d:6a:ab:b0:56:4c: c0:d0:b5:a5:69:4f:39:bb:71:3d:18:71:a7:14:a0: 36:65:3f:9a:f5:3c:ab:b7:31:46:b3:79:17:85:5c: 03:a7:1b:33:ab:aa:8c:81:2f:a0:ba:3b:9a:2d:e8: 6d:9f:3f:77:66:33:d9:10:4d:65:00:01:17:d9:03: 93:1a:56:58:64:cc:4d:a6:cd:00:94:1a:7a:6d:91: d2:b7:7e:aa:12:5b:10:ff:eb:d7:31:e1:e3:19:3d: c5:89:bc:2b:11:f7:3b:58:67:50:76:10:27:f5:2b: 41:cc:92:46:52:89:89:ae:e0:5e:e3:10:e0:1b:47: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:11:BA:F2:BA:5B:35:A0:3C:ED:1C:4C:35:01:8B:B8:D3:C8:C9 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d2:ff:a3:3a:7a:92:f9:57:cd:b6:b6:21:0e:de:c5:52:38: 13:6f:df:af:90:2d:00:5c:60:87:32:37:21:20:a9:ed:d2:64: 53:4f:0b:95:61:6f:73:4e:19:cf:4b:ae:83:4b:44:9a:07:f4: 67:1d:a3:ac:ad:f1:3a:fb:1c:fb:dd:19:4c:46:90:22:b9:cd: 53:b1:65:40:f7:36:90:c8:2a:ee:07:69:57:60:32:a6:70:0f: a6:81:23:0a:85:01:7d:a0:12:f7:d3:07:38:4e:1a:80:a9:3e: 30:9a:e0:35:0e:bc:b3:06:05:45:bb:f8:5a:1f:07:d9:a5:83: 54:31:61:00:65:6f:f0:4f:d2:28:1e:99:45:41:b3:00:fe:f5: 1c:74:5a:b8:87:d6:76:46:e6:19:00:1e:f3:20:3a:4d:e7:72: eb:b9:f3:79:25:0d:b5:f9:49:83:60:57:e9:ba:93:ec:88:7f: 47:40:a7:91:51:93:4b:6c:38:b8:a6:3a:4e:5d:63:36:52:ac: 62:a7:31:b9:70:32:7e:c1:64:f6:36:61:fc:3f:e0:fa:c1:7c: 63:2f:98:ef:82:c8:4c:30:12:82:9e:b2:45:66:50:9b:25:74: 4b:c4:59:c5:41:28:20:ab:7c:8e:94:09:29:12:cd:9f:ba:98: 9a:b5:64:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYhboGoK966CeqC6kV1pstoLtfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNjAzMjQwNDA3MzdaFw0yNjAzMjcxMTUwMzdaMDMxMTAvBgNV BAMTKEM1QzgxMUJBRjJCQTVCMzVBMDNDRUQxQzRDMzUwMThCQjhEM0M4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VA6wYzNKWembwEioMLRtmCDF lQXto6Oymc7Xs3z2J8Oa0pLBzroQ2qjdQ4PgZKYT0My7dvcZ7d/fQd2vRo2/SRSY /zpEjqT9cptu9SGBLCGWrc4hO1IkK9LTSCJpPRZ3t3w3G5dFY1fI9blaqz4laPK3 th1x4IKCvFg6Z/CVtJ1qq7BWTMDQtaVpTzm7cT0YcacUoDZlP5r1PKu3MUazeReF XAOnGzOrqoyBL6C6O5ot6G2fP3dmM9kQTWUAARfZA5MaVlhkzE2mzQCUGnptkdK3 fqoSWxD/69cx4eMZPcWJvCsR9ztYZ1B2ECf1K0HMkkZSiYmu4F7jEOAbR2ODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcgRuvK6WzWgPO0cTDUBi7jTyMkwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDS/6M6epL5V822tiEO3sVSOBNv36+QLQBc YIcyNyEgqe3SZFNPC5Vhb3NOGc9LroNLRJoH9Gcdo6yt8Tr7HPvdGUxGkCK5zVOx ZUD3NpDIKu4HaVdgMqZwD6aBIwqFAX2gEvfTBzhOGoCpPjCa4DUOvLMGBUW7+Fof B9mlg1QxYQBlb/BP0igemUVBswD+9Rx0WriH1nZG5hkAHvMgOk3ncuu583klDbX5 SYNgV+m6k+yIf0dAp5FRk0tsOLimOk5dYzZSrGKnMblwMn7BZPY2Yfw/4PrBfGMv mO+CyEwwEoKeskVmUJsldEvEWcVBKCCrfI6UCSkSzZ+6mJq1ZDM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:10 2026 by rpki-client