$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: 3SYd955iP9z1QCXvylwW+mXcQkF6OL63JWQ/6x8weqY= Subject key identifier: FC:AF:2A:8D:2F:C1:08:F1:10:84:28:D3:5C:CA:17:7F:A6:5F:74:E0 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 6AF5FF68666342CAFF778B4EF1C1FBC2D5954631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 026D Signing time: Sat 18 Apr 2026 05:21:38 +0000 Manifest this update: Sat 18 Apr 2026 05:16:38 +0000 Manifest next update: Tue 21 Apr 2026 13:43:38 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: e33YXJarw+fJxTOmNaxpPalumfeJZb90xM3JG5JPWGQ=) 2: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: K5ov+qZ1d7VojT1N88046hPVEfFxt5LgxmJweOEnn9A=) 3: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: mkN2Di1lXcAcvFZosL2o50JJ0lMMeW14mF//8K93nec=) 4: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f5:ff:68:66:63:42:ca:ff:77:8b:4e:f1:c1:fb:c2:d5:95:46:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Apr 18 05:16:38 2026 GMT Not After : Apr 21 13:43:38 2026 GMT Subject: CN=FCAF2A8D2FC108F1108428D35CCA177FA65F74E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:47:7a:2c:ca:60:e4:ee:61:84:23:b8:dd: ed:0a:71:07:98:94:50:be:31:3f:c4:c6:94:bb:e8: 09:c7:c5:91:06:86:0d:4b:07:b5:c0:fd:f5:96:c1: 5c:6e:ce:9e:84:11:09:c6:2f:19:31:df:84:61:9b: 65:7a:e7:26:bf:90:f3:ae:9c:5d:3e:0d:9d:cc:9a: 1d:c5:57:b2:77:d5:7b:39:00:cb:6f:a9:1b:cc:a9: e2:21:3d:db:f5:f9:2e:75:c5:53:4a:44:34:e1:28: bb:79:88:d5:32:29:4b:27:b0:df:1d:eb:81:c3:b1: c2:00:13:8d:83:9d:d2:0e:c2:28:f8:3c:03:9a:76: 84:8d:08:5e:fd:ef:ed:4c:bc:12:7d:14:fa:02:b5: b6:57:03:25:26:c5:46:2d:c5:ab:ac:35:60:d8:95: 98:b0:ba:4c:7d:e2:40:ca:39:34:46:c3:69:8f:84: cb:a0:c0:16:ad:b9:63:f7:dd:cc:bb:56:b3:63:36: b4:88:cc:57:b5:48:96:4b:30:54:63:aa:07:52:cc: 0f:3f:3a:f1:e4:0f:7d:c7:01:11:66:7b:a5:61:83: 36:33:cf:6b:c1:94:57:a3:e8:6a:a8:06:09:53:00: ec:75:d0:c6:44:78:b4:3e:e4:88:9b:3b:e3:e4:91: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AF:2A:8D:2F:C1:08:F1:10:84:28:D3:5C:CA:17:7F:A6:5F:74:E0 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:12:b7:d9:ea:f1:0a:01:1e:f5:28:e5:66:0b:9d:64:ff:d8: a8:c9:28:7b:dc:28:95:be:79:a2:34:0a:7b:1d:ab:a0:a6:e4: d7:95:5b:32:70:f7:e9:1e:d2:4e:a7:6e:39:96:91:4d:33:c1: 4c:e7:0c:cb:41:41:6f:77:8d:52:8a:87:2c:df:35:16:1a:2b: d3:94:14:d2:5b:88:39:5c:1b:86:ca:ba:f8:4e:06:09:16:6f: 13:c0:95:40:be:55:e1:ab:83:04:8f:cd:b7:3e:eb:7d:87:a8: e6:ab:12:f7:94:3c:c9:44:4a:16:f9:99:ab:05:e8:c0:ee:e9: 64:ee:51:b6:70:03:bc:59:c1:43:a3:c4:9a:3f:90:cf:c2:14: d5:73:d2:21:65:9a:d0:91:4d:bb:77:0c:44:c6:19:ff:1c:9d: 35:0f:9f:91:22:20:f8:9b:7d:26:c0:d2:a9:b5:6c:7d:22:1a: a5:6a:30:64:4e:b0:7d:20:33:47:55:90:da:48:64:f3:a5:f3: 40:9f:d7:22:f0:58:fe:95:2e:a9:ce:92:f4:36:ed:08:de:33: b4:ff:61:f1:94:0e:d4:46:bc:98:c9:53:3b:8b:d6:89:a9:b1: 24:32:4a:2a:fc:11:01:75:31:22:5e:df:13:4d:c6:60:f9:0f: b7:50:75:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavX/aGZjQsr/d4tO8cH7wtWVRjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNjA0MTgwNTE2MzhaFw0yNjA0MjExMzQzMzhaMDMxMTAvBgNV BAMTKEZDQUYyQThEMkZDMTA4RjExMDg0MjhEMzVDQ0ExNzdGQTY1Rjc0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41Ud6LMpg5O5hhCO43e0KcQeY lFC+MT/ExpS76AnHxZEGhg1LB7XA/fWWwVxuzp6EEQnGLxkx34Rhm2V65ya/kPOu nF0+DZ3Mmh3FV7J31Xs5AMtvqRvMqeIhPdv1+S51xVNKRDThKLt5iNUyKUsnsN8d 64HDscIAE42DndIOwij4PAOadoSNCF797+1MvBJ9FPoCtbZXAyUmxUYtxausNWDY lZiwukx94kDKOTRGw2mPhMugwBatuWP33cy7VrNjNrSIzFe1SJZLMFRjqgdSzA8/ OvHkD33HARFme6VhgzYzz2vBlFej6GqoBglTAOx10MZEeLQ+5IibO+PkkdfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/K8qjS/BCPEQhCjTXMoXf6ZfdOAwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcSt9nq8QoBHvUo5WYLnWT/2KjJKHvcKJW+ eaI0Cnsdq6Cm5NeVWzJw9+ke0k6nbjmWkU0zwUznDMtBQW93jVKKhyzfNRYaK9OU FNJbiDlcG4bKuvhOBgkWbxPAlUC+VeGrgwSPzbc+632HqOarEveUPMlEShb5masF 6MDu6WTuUbZwA7xZwUOjxJo/kM/CFNVz0iFlmtCRTbt3DETGGf8cnTUPn5EiIPib fSbA0qm1bH0iGqVqMGROsH0gM0dVkNpIZPOl80Cf1yLwWP6VLqnOkvQ27QjeM7T/ YfGUDtRGvJjJUzuL1ompsSQySir8EQF1MSJe3xNNxmD5D7dQdbU= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:57 2026 by rpki-client