$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: AarWuuj6ScNs5a5Z7lShvKT1tt9BRkueDH/MfMGYYV4= Subject key identifier: 57:3B:80:59:1C:D8:4C:2C:9E:C8:79:D6:07:F4:54:01:1A:17:98:CE Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 244993A6E5EED27802DA90AF024C83916D0A74DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 03D1 Signing time: Wed 15 Apr 2026 19:12:15 +0000 Manifest this update: Wed 15 Apr 2026 19:07:15 +0000 Manifest next update: Sat 18 Apr 2026 21:16:15 +0000 Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: hvUXOReMrQ3DCf0Qm4MoQmjjiS09sVCzS98Qs2OkopY=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: ULJuo4JlKwtfWqpN2WxBIIizTww0+8EhBVz/p9sPJ/4=) 3: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: 0WPmH4eNvngbCpcKlpjvW1SeLm7igvO99upT4wOSXLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:49:93:a6:e5:ee:d2:78:02:da:90:af:02:4c:83:91:6d:0a:74:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Apr 15 19:07:15 2026 GMT Not After : Apr 18 21:16:15 2026 GMT Subject: CN=573B80591CD84C2C9EC879D607F454011A1798CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:69:8d:f1:df:e5:36:90:8d:ca:7a:b3:48: 74:3d:f0:6a:fb:46:d5:4d:19:11:43:ca:d0:81:88: 2e:3f:8e:5e:d7:1e:25:d4:8c:1b:0e:8b:26:be:47: ad:7a:22:f5:6c:0b:09:0c:09:a1:ed:0a:2c:fc:2d: 63:0f:5b:56:db:ed:b1:04:9c:0a:90:34:68:91:db: 48:0b:4a:58:e2:8e:41:31:ae:5e:06:df:59:80:52: b3:c7:03:e1:ae:09:3a:1a:86:ba:ff:72:99:3a:6b: 49:c7:21:bc:ea:81:f5:fb:2b:79:71:c3:23:b9:2c: 85:b8:a0:df:0b:9c:af:dd:66:ea:97:33:b1:97:10: f3:27:a0:36:b5:bd:d8:1f:b6:ea:56:e2:84:9c:c7: 65:4c:e5:fa:f8:e7:ed:b1:b2:4f:91:20:fb:1a:b4: ec:e2:95:7f:d3:3e:b1:1d:3f:7f:50:2b:4e:be:7d: 6d:75:42:03:dc:bc:8c:92:7e:bb:81:39:ea:ed:91: 5c:2d:1b:93:cf:6a:14:d9:17:37:e8:5b:1c:8b:82: 61:21:b4:c0:69:f2:a0:37:f6:59:19:6e:25:6d:88: e5:ea:37:b0:93:c0:39:5a:55:77:c5:54:f5:1c:b0: ba:c2:a0:15:f2:d6:3a:b9:c1:40:18:13:60:6b:e3: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3B:80:59:1C:D8:4C:2C:9E:C8:79:D6:07:F4:54:01:1A:17:98:CE X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:27:d8:5e:d7:45:85:cd:da:04:11:cb:e1:ef:32:6f:9c:47: 87:69:50:a5:0a:f8:09:90:ce:2e:e4:e5:6a:11:51:88:11:94: b7:a0:64:78:f6:c0:41:2c:72:f5:6e:67:cd:74:3a:0b:e0:96: 3d:cd:f8:ab:4f:aa:04:3f:4f:39:72:78:95:31:db:c6:3c:18: e3:07:90:c5:dd:18:6f:e6:12:6f:48:9b:f1:cc:16:da:9c:7c: 36:de:5c:50:5d:05:b1:79:0a:56:ba:55:ce:9d:df:00:fd:77: b0:b0:42:f5:36:4a:06:6d:b3:b0:ff:b0:4d:fe:88:a8:99:e9: e6:75:d9:aa:65:64:00:90:81:a7:6f:86:68:f5:2f:b3:84:93: 2e:16:0c:df:9b:2f:20:09:8f:4e:cb:8d:88:9d:0f:87:d4:f5: 39:ea:f9:21:58:db:53:ed:70:c0:e8:cf:ab:2f:a0:02:82:c1: 3e:65:e1:c2:5e:ae:bb:1f:85:2e:42:82:a2:a9:43:d9:e3:cf: 2b:fd:fd:50:f2:c6:4f:c8:8e:13:7b:29:a6:75:7e:56:d4:07: 7c:e0:40:63:91:c4:c6:17:ff:c2:32:6a:19:c0:ce:8a:b5:3d: e5:0c:10:5e:b2:30:fb:28:37:3b:1e:6e:ce:74:f4:ca:b7:44: 37:55:d2:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEmTpuXu0ngC2pCvAkyDkW0KdNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNjA0MTUxOTA3MTVaFw0yNjA0MTgyMTE2MTVaMDMxMTAvBgNV BAMTKDU3M0I4MDU5MUNEODRDMkM5RUM4NzlENjA3RjQ1NDAxMUExNzk4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYWmN8d/lNpCNynqzSHQ98Gr7 RtVNGRFDytCBiC4/jl7XHiXUjBsOiya+R616IvVsCwkMCaHtCiz8LWMPW1bb7bEE nAqQNGiR20gLSljijkExrl4G31mAUrPHA+GuCToahrr/cpk6a0nHIbzqgfX7K3lx wyO5LIW4oN8LnK/dZuqXM7GXEPMnoDa1vdgftupW4oScx2VM5fr45+2xsk+RIPsa tOzilX/TPrEdP39QK06+fW11QgPcvIySfruBOertkVwtG5PPahTZFzfoWxyLgmEh tMBp8qA39lkZbiVtiOXqN7CTwDlaVXfFVPUcsLrCoBXy1jq5wUAYE2Br4/WFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVzuAWRzYTCyeyHnWB/RUARoXmM4wHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkn2F7XRYXN2gQRy+HvMm+cR4dpUKUK+AmQ zi7k5WoRUYgRlLegZHj2wEEscvVuZ810Ogvglj3N+KtPqgQ/TzlyeJUx28Y8GOMH kMXdGG/mEm9Im/HMFtqcfDbeXFBdBbF5Cla6Vc6d3wD9d7CwQvU2SgZts7D/sE3+ iKiZ6eZ12aplZACQgadvhmj1L7OEky4WDN+bLyAJj07LjYidD4fU9Tnq+SFY21Pt cMDoz6svoAKCwT5l4cJerrsfhS5CgqKpQ9njzyv9/VDyxk/IjhN7KaZ1flbUB3zg QGORxMYX/8IyahnAzoq1PeUMEF6yMPsoNzsebs509Mq3RDdV0gA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:23 2026 by rpki-client