$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: DHOnV6N0ub4xWilrnfglFFb9Id1iz0Qz5tCHtRDXF7w= Subject key identifier: DF:C2:6F:6C:AE:1B:D9:F0:7A:03:CE:F1:78:62:BD:98:79:07:69:F3 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 7E16617B9C2AC2358F21ADA5F7BD0BC04509830F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 0257 Signing time: Fri 27 Feb 2026 20:11:34 +0000 Manifest this update: Fri 27 Feb 2026 20:06:34 +0000 Manifest next update: Tue 03 Mar 2026 06:33:34 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) 2: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 3: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 4: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: vwvzLtrhN2C59VQRcVi7uzTKbnq90dSSh7dGYjxlv3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:16:61:7b:9c:2a:c2:35:8f:21:ad:a5:f7:bd:0b:c0:45:09:83:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Feb 27 20:06:34 2026 GMT Not After : Mar 3 06:33:34 2026 GMT Subject: CN=DFC26F6CAE1BD9F07A03CEF17862BD98790769F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:97:5b:c5:25:32:45:24:b0:04:1a:04:b7: df:62:16:1c:bd:80:08:8c:3c:9e:85:8d:a6:81:3c: 85:e6:dc:77:10:f8:82:98:56:74:81:3f:84:b0:53: 5b:78:0b:ad:ef:5a:61:58:1d:55:a5:ad:a8:0e:0a: b3:ab:bc:f9:08:56:fd:d0:0f:f3:ff:55:82:27:f3: cc:74:37:8a:41:13:c8:4b:18:f7:97:8d:ce:ce:13: e2:9a:b5:34:f8:3a:36:a1:6f:f5:1e:d6:bb:2c:40: 60:5d:53:5e:ca:9c:c3:e8:0a:4e:bd:d0:e8:bd:6d: 16:01:14:44:db:ea:43:f5:8a:5c:fb:ee:db:ac:c1: fe:d7:df:f8:0c:8d:83:5f:c4:4f:39:8d:4c:15:37: 64:d1:51:19:9e:e4:43:c6:2e:de:8f:83:aa:4a:86: 28:d9:7d:24:db:3f:c7:bd:b6:38:bb:c5:dc:2c:ee: 33:3f:11:47:6d:b3:c1:e7:85:76:37:11:61:30:ce: 5a:10:c7:1e:63:b9:a8:81:17:d7:02:f0:2c:71:a8: 4b:72:43:8b:16:0a:0a:07:bf:a7:90:c4:5e:0a:6d: 63:d3:7c:a0:7f:5d:23:69:0a:ae:f6:ae:1c:4e:f4: 06:b1:39:b5:b1:a5:ef:9c:ad:2c:b6:7a:f0:70:96: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C2:6F:6C:AE:1B:D9:F0:7A:03:CE:F1:78:62:BD:98:79:07:69:F3 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:24:87:de:fa:b6:56:dd:e0:69:85:6b:75:05:cc:d3:77:f4: 82:8f:d2:84:51:10:ae:8a:f3:09:35:c0:96:bf:7b:4f:38:37: b5:e6:ef:1b:7f:ce:e9:4a:ee:84:23:31:b1:22:92:4d:2d:68: c6:b7:9e:30:a1:ad:16:7a:38:c0:5a:b0:ad:e6:d5:64:95:f2: 68:a5:41:b1:99:26:21:40:8e:7a:ed:71:ff:ed:99:2d:49:b4: 3a:8f:6f:11:4e:e6:f2:e3:cc:57:f0:6d:71:87:26:ed:13:34: 5e:51:0b:aa:5d:c3:fc:19:4f:32:6e:0e:15:a8:42:e3:ce:88: 26:dd:02:27:d5:45:37:f7:27:78:9d:6a:41:1f:9f:b2:97:f7: fd:af:cd:e3:76:1c:a1:b2:cb:51:e4:ab:57:cd:eb:bb:af:1c: da:33:e3:cf:53:24:26:7b:6a:e7:80:34:1c:46:af:0d:85:f5: 96:99:e1:02:c7:12:79:7b:66:4f:6e:18:27:2d:9f:96:70:39: 99:96:78:e5:a7:99:8d:90:96:8f:e3:c2:48:51:ff:1f:55:91: 7d:46:d5:d2:0c:79:9b:07:65:fb:e9:49:b6:b5:b0:4a:f1:7f: 80:7f:c4:1c:32:d8:7c:f0:38:32:53:98:d3:2f:f1:d2:f4:b6: 35:15:55:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhZhe5wqwjWPIa2l970LwEUJgw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNjAyMjcyMDA2MzRaFw0yNjAzMDMwNjMzMzRaMDMxMTAvBgNV BAMTKERGQzI2RjZDQUUxQkQ5RjA3QTAzQ0VGMTc4NjJCRDk4NzkwNzY5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtZdbxSUyRSSwBBoEt99iFhy9 gAiMPJ6FjaaBPIXm3HcQ+IKYVnSBP4SwU1t4C63vWmFYHVWlragOCrOrvPkIVv3Q D/P/VYIn88x0N4pBE8hLGPeXjc7OE+KatTT4Ojahb/Ue1rssQGBdU17KnMPoCk69 0Oi9bRYBFETb6kP1ilz77tuswf7X3/gMjYNfxE85jUwVN2TRURme5EPGLt6Pg6pK hijZfSTbP8e9tji7xdws7jM/EUdts8HnhXY3EWEwzloQxx5juaiBF9cC8CxxqEty Q4sWCgoHv6eQxF4KbWPTfKB/XSNpCq72rhxO9AaxObWxpe+crSy2evBwlorfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38JvbK4b2fB6A87xeGK9mHkHafMwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFokh976tlbd4GmFa3UFzNN39IKP0oRREK6K 8wk1wJa/e084N7Xm7xt/zulK7oQjMbEikk0taMa3njChrRZ6OMBasK3m1WSV8mil QbGZJiFAjnrtcf/tmS1JtDqPbxFO5vLjzFfwbXGHJu0TNF5RC6pdw/wZTzJuDhWo QuPOiCbdAifVRTf3J3idakEfn7KX9/2vzeN2HKGyy1Hkq1fN67uvHNoz489TJCZ7 aueANBxGrw2F9ZaZ4QLHEnl7Zk9uGCctn5ZwOZmWeOWnmY2Qlo/jwkhR/x9VkX1G 1dIMeZsHZfvpSba1sErxf4B/xBwy2HzwODJTmNMv8dL0tjUVVQU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:36:22 2026 by rpki-client