$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: 2nzcSs2kb0gff/AV7/zH7zdfuV0MAJhn+W0UKd97e2c= Subject key identifier: F8:87:61:41:04:C0:3F:77:64:12:91:BC:3C:57:71:93:09:51:20:5D Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 2B18DC929ED949140760CA94AEDA119EE9FD8868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 03BD Signing time: Sun 01 Mar 2026 04:43:41 +0000 Manifest this update: Sun 01 Mar 2026 04:38:41 +0000 Manifest next update: Wed 04 Mar 2026 10:15:41 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: Ls+czOzFxFqFqRxItcNuE5SQHHKxffElwC8c0rR62ts=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: ULJuo4JlKwtfWqpN2WxBIIizTww0+8EhBVz/p9sPJ/4=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: hvUXOReMrQ3DCf0Qm4MoQmjjiS09sVCzS98Qs2OkopY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:18:dc:92:9e:d9:49:14:07:60:ca:94:ae:da:11:9e:e9:fd:88:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Mar 1 04:38:41 2026 GMT Not After : Mar 4 10:15:41 2026 GMT Subject: CN=F887614104C03F77641291BC3C5771930951205D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:55:2e:cf:f1:a1:46:1a:d0:16:7f:fe:08: db:a3:a2:dd:75:82:ca:4c:f4:e0:15:66:6b:96:7b: d9:3a:cd:e9:47:47:1b:e1:81:e2:9b:f8:5a:02:ae: 44:33:36:84:d8:87:70:48:06:f1:69:da:21:15:51: 5e:79:4b:84:f0:0f:7d:bd:ff:e7:db:ff:c5:f6:25: fe:e2:31:38:97:97:24:a0:f7:81:16:98:7f:44:b6: b7:9f:55:f7:d8:99:1a:ef:c7:11:7b:3e:0c:43:c7: 21:af:e1:9c:ae:77:ff:08:0e:4a:4a:f9:ff:95:d9: a5:71:2b:4e:9a:27:81:0b:4b:63:b1:bf:bd:9e:88: 99:79:ac:92:36:9f:32:e7:2e:21:d8:bb:2c:33:49: 38:1d:45:e5:bb:fd:e4:d7:63:41:2f:38:03:a6:34: 14:6e:e2:03:5e:40:a5:35:59:8a:38:ce:2d:1e:13: d9:6d:07:68:c8:f1:cd:97:6f:6c:a2:3f:99:b1:6e: 16:04:23:62:cd:25:88:68:82:6c:ff:2d:7d:93:4c: 08:c0:2c:82:f9:a1:41:31:b7:cd:8c:92:c8:9c:4b: 93:a0:df:ee:2b:69:01:fe:a0:5f:4a:1c:07:70:b3: 5d:f0:0a:56:57:81:ad:ca:44:79:57:5e:9b:6b:e3: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:61:41:04:C0:3F:77:64:12:91:BC:3C:57:71:93:09:51:20:5D X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:da:ac:eb:3b:d0:49:f7:47:2b:f1:ca:a7:2a:c4:90:bb:4c: 0c:7b:77:6e:12:5f:29:ef:6d:64:3a:ab:db:f1:c4:ae:f0:fe: f8:ce:43:30:72:62:ff:21:c0:e5:a6:65:5f:19:50:cc:9d:53: 06:95:e8:48:5e:d0:af:4d:e8:18:e8:7d:95:0d:ac:27:ad:c5: f8:95:42:ce:37:69:b0:c6:29:84:d0:c4:78:be:c8:af:c4:4e: ab:96:55:d2:2a:f7:9a:22:96:ec:00:f4:51:14:55:52:6c:59: 66:a1:6d:bc:5a:46:2c:b8:fe:3c:98:1c:42:73:53:c3:cf:ee: 63:1a:bd:d4:8f:29:74:98:26:44:25:4c:1a:13:ad:82:ec:b4: 40:2b:13:0e:21:f6:55:74:6a:e9:2b:e9:80:18:47:16:70:da: b8:fc:e5:bb:16:12:6d:e2:d7:53:71:e0:7b:51:39:2d:f5:c6: c4:87:98:0b:c9:85:ec:32:ec:fd:d0:d2:fc:9e:da:44:29:16: 57:29:f9:30:31:60:d2:d6:d7:25:d2:c7:71:e2:c1:4e:9e:9e: de:18:fc:a4:82:67:bf:e1:fe:c5:ec:da:fa:9d:a3:a6:66:aa: ef:45:3c:7b:3a:bb:f1:c5:11:1e:f5:b0:d5:c3:3a:12:81:db: 50:41:e8:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxjckp7ZSRQHYMqUrtoRnun9iGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNjAzMDEwNDM4NDFaFw0yNjAzMDQxMDE1NDFaMDMxMTAvBgNV BAMTKEY4ODc2MTQxMDRDMDNGNzc2NDEyOTFCQzNDNTc3MTkzMDk1MTIwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GVUuz/GhRhrQFn/+CNujot11 gspM9OAVZmuWe9k6zelHRxvhgeKb+FoCrkQzNoTYh3BIBvFp2iEVUV55S4TwD329 /+fb/8X2Jf7iMTiXlySg94EWmH9EtrefVffYmRrvxxF7PgxDxyGv4Zyud/8IDkpK +f+V2aVxK06aJ4ELS2Oxv72eiJl5rJI2nzLnLiHYuywzSTgdReW7/eTXY0EvOAOm NBRu4gNeQKU1WYo4zi0eE9ltB2jI8c2Xb2yiP5mxbhYEI2LNJYhogmz/LX2TTAjA LIL5oUExt82MksicS5Og3+4raQH+oF9KHAdws13wClZXga3KRHlXXptr47wJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IdhQQTAP3dkEpG8PFdxkwlRIF0wHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbarOs70En3RyvxyqcqxJC7TAx7d24SXynv bWQ6q9vxxK7w/vjOQzByYv8hwOWmZV8ZUMydUwaV6Ehe0K9N6BjofZUNrCetxfiV Qs43abDGKYTQxHi+yK/ETquWVdIq95oiluwA9FEUVVJsWWahbbxaRiy4/jyYHEJz U8PP7mMavdSPKXSYJkQlTBoTrYLstEArEw4h9lV0aukr6YAYRxZw2rj85bsWEm3i 11Nx4HtROS31xsSHmAvJhewy7P3Q0vye2kQpFlcp+TAxYNLW1yXSx3HiwU6ent4Y /KSCZ7/h/sXs2vqdo6Zmqu9FPHs6u/HFER71sNXDOhKB21BB6Ew= -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:26 2026 by rpki-client