$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: sRETd670uia2IyChnAzrVI8b+AHJYaRN+Ot8/054Xkk= Subject key identifier: B4:7B:67:DC:3D:F9:05:76:8C:75:40:EB:9B:C8:0B:41:0C:E8:E0:35 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 7A233431D8208E731473A07300631585398C18C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04D0 Signing time: Sun 01 Mar 2026 21:22:21 +0000 Manifest this update: Sun 01 Mar 2026 21:17:21 +0000 Manifest next update: Thu 05 Mar 2026 06:06:21 +0000 Files and hashes: 1: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: uoQjwaFPQRIKwzd17tpkHJAGtZuo/f3iTpMXW18N4D8=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) 3: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) 4: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:23:34:31:d8:20:8e:73:14:73:a0:73:00:63:15:85:39:8c:18:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Mar 1 21:17:21 2026 GMT Not After : Mar 5 06:06:21 2026 GMT Subject: CN=B47B67DC3DF905768C7540EB9BC80B410CE8E035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a6:9a:6f:3f:8b:35:57:95:3b:7e:ff:7f:e5: 01:e2:31:4b:28:e0:c7:80:97:12:08:c2:bb:14:43: 6a:1c:5d:71:75:41:bb:98:fa:1b:bd:ed:77:c6:7a: f9:11:ed:bb:46:31:75:ae:16:02:03:6a:97:73:1f: 37:54:4f:4a:09:76:d2:9b:48:b5:21:45:9d:58:83: c1:28:f2:31:2a:78:bf:14:ce:09:27:ab:a4:63:c6: 27:a4:4e:83:a7:d6:63:72:c6:8d:cf:d0:30:cb:da: 2b:c8:11:c3:40:d0:da:61:fc:87:af:be:a8:82:00: 71:b5:77:41:a8:2f:56:0f:ea:d8:4e:e8:55:eb:a7: 0a:26:a9:39:fc:0d:e1:92:ad:df:3f:ed:a2:35:f5: 96:8c:8a:5a:97:6c:e2:48:73:32:ba:e8:e2:3f:cc: e6:64:5e:0f:30:27:65:5e:87:a0:81:7c:84:55:30: dd:80:bf:74:80:c8:5b:04:38:1f:60:8b:fd:e3:8c: c2:ab:29:73:91:ae:dd:cd:c1:85:e5:43:fc:e3:fa: 2f:a4:64:89:e0:b1:c4:02:43:43:49:56:89:01:11: 0b:db:b8:aa:5c:d3:9d:81:47:4e:22:23:d5:de:5b: 4e:1e:90:3d:fd:e2:06:f4:b9:45:ab:06:e3:57:25: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7B:67:DC:3D:F9:05:76:8C:75:40:EB:9B:C8:0B:41:0C:E8:E0:35 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:53:ae:5b:94:db:8b:22:5a:2c:16:56:73:2a:ec:47:4a:6a: cb:9d:04:81:b3:4a:50:04:b3:aa:fe:80:ed:3f:c0:e2:3a:e4: 91:3f:b3:f3:87:7f:fd:42:ca:4a:cd:b6:f1:cb:c0:ca:1e:5b: eb:21:0e:74:73:90:90:7d:11:09:3b:dd:84:12:58:df:0f:38: f1:ba:9c:7c:7b:29:ca:bf:06:6f:10:8d:8e:40:13:2a:44:6a: 86:d8:cc:7a:58:86:43:77:a0:e5:56:07:70:d5:38:8b:29:f7: 4c:54:a1:49:5d:35:f1:9f:57:2e:4f:51:29:80:c8:50:83:09: ad:69:5e:9d:9a:0d:c4:16:c6:1b:06:43:cc:50:dc:91:f7:40: 70:56:3d:a5:18:d8:73:9f:ec:db:d7:27:29:d2:f4:a3:b6:20: ac:ec:e4:4c:c4:28:21:d0:50:95:e8:62:ef:46:6a:62:d1:bc: f2:64:a4:e6:ae:c2:43:6d:6a:31:0c:37:52:5e:f9:8b:cb:1e: 56:0a:33:c2:0b:c8:82:6f:7b:8c:d9:40:d9:bf:39:e8:59:00: 4f:b2:ba:f5:eb:78:d6:09:64:36:85:06:8e:79:c1:30:5e:6a: 4c:98:ae:98:c8:55:6d:46:c1:cc:0c:01:c9:1e:08:d0:c8:05: 66:45:d4:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiM0MdggjnMUc6BzAGMVhTmMGMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNjAzMDEyMTE3MjFaFw0yNjAzMDUwNjA2MjFaMDMxMTAvBgNV BAMTKEI0N0I2N0RDM0RGOTA1NzY4Qzc1NDBFQjlCQzgwQjQxMENFOEUwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpppvP4s1V5U7fv9/5QHiMUso 4MeAlxIIwrsUQ2ocXXF1QbuY+hu97XfGevkR7btGMXWuFgIDapdzHzdUT0oJdtKb SLUhRZ1Yg8Eo8jEqeL8Uzgknq6RjxiekToOn1mNyxo3P0DDL2ivIEcNA0Nph/Iev vqiCAHG1d0GoL1YP6thO6FXrpwomqTn8DeGSrd8/7aI19ZaMilqXbOJIczK66OI/ zOZkXg8wJ2Veh6CBfIRVMN2Av3SAyFsEOB9gi/3jjMKrKXORrt3NwYXlQ/zj+i+k ZIngscQCQ0NJVokBEQvbuKpc052BR04iI9XeW04ekD394gb0uUWrBuNXJa3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtHtn3D35BXaMdUDrm8gLQQzo4DUwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClTrluU24siWiwWVnMq7EdKasudBIGzSlAE s6r+gO0/wOI65JE/s/OHf/1CykrNtvHLwMoeW+shDnRzkJB9EQk73YQSWN8POPG6 nHx7Kcq/Bm8QjY5AEypEaobYzHpYhkN3oOVWB3DVOIsp90xUoUldNfGfVy5PUSmA yFCDCa1pXp2aDcQWxhsGQ8xQ3JH3QHBWPaUY2HOf7NvXJynS9KO2IKzs5EzEKCHQ UJXoYu9GamLRvPJkpOauwkNtajEMN1Je+YvLHlYKM8ILyIJve4zZQNm/OehZAE+y uvXreNYJZDaFBo55wTBeakyYrpjIVW1GwcwMAckeCNDIBWZF1NA= -----END CERTIFICATE-----Generated at Mon Mar 2 23:54:57 2026 by rpki-client