$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: NbpPjoNullsk6/TQZhHXWMWlEEciIoSbJSOlBd8b63w= Subject key identifier: 5C:8E:12:88:22:38:6D:49:CD:41:32:CC:78:F9:4E:E6:4A:85:2E:D7 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 1655393159163F829FD14A238106B61A78F6F4DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 02C7 Signing time: Thu 16 Apr 2026 16:52:18 +0000 Manifest this update: Thu 16 Apr 2026 16:47:18 +0000 Manifest next update: Mon 20 Apr 2026 03:15:18 +0000 Files and hashes: 1: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: 0BUvQ2+g2njccG04x7d7/vFpccRzfhruEZ6tCC4TdO8=) 2: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) 3: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) 4: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) 5: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) 6: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:55:39:31:59:16:3f:82:9f:d1:4a:23:81:06:b6:1a:78:f6:f4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Apr 16 16:47:18 2026 GMT Not After : Apr 20 03:15:18 2026 GMT Subject: CN=5C8E128822386D49CD4132CC78F94EE64A852ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:25:8e:28:05:9f:0b:17:e1:c6:50:8d:dd: 91:77:11:e1:c0:1c:29:1d:6a:55:a6:7d:b0:45:43: 3c:58:1e:f0:8a:5e:1a:f7:a5:0c:4f:89:c1:07:11: 25:45:03:41:fa:25:0e:4e:d1:44:30:95:32:43:42: f3:ce:67:83:43:ce:39:86:8f:27:c7:90:38:53:d4: 31:6a:c7:b4:fc:ee:42:80:32:28:ac:4b:75:a1:e5: e1:7f:fb:5c:3a:0c:cd:25:b6:19:b1:8d:32:0c:5f: cb:be:17:35:1d:cd:d5:48:2e:6f:84:33:69:7c:55: 90:62:fe:da:0e:16:86:5c:88:f2:f7:1b:09:94:cf: bf:6f:86:28:04:c6:b9:e9:18:08:2e:c1:e2:4d:e1: b1:3f:5b:4b:51:95:e8:c0:65:5c:01:67:e8:9a:ae: ee:cb:0a:1b:82:30:d9:ff:9c:5b:1b:0d:d9:0d:5d: a9:d9:f0:02:1d:c1:62:ba:be:b6:27:bc:5c:84:c6: 86:88:60:00:f7:e0:75:3d:03:ae:e2:27:99:c4:5f: b2:69:87:49:5a:ad:b6:6f:6c:ae:25:06:b5:04:1e: 48:dd:d2:84:11:62:7b:b5:df:42:68:b1:c2:31:6d: 37:a7:b9:8a:fb:ba:a7:e3:cf:fa:ec:dd:eb:ef:6c: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8E:12:88:22:38:6D:49:CD:41:32:CC:78:F9:4E:E6:4A:85:2E:D7 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1c:06:2b:7b:eb:9c:d8:cd:cd:58:a5:31:91:dc:09:57:8c: 52:cd:c5:20:fe:dd:7f:c7:ab:c1:9a:6c:66:d9:43:92:ee:22: 02:8a:d3:12:cb:8f:1f:3c:b6:ef:18:2a:13:d7:30:ee:b4:10: ed:b5:72:db:26:85:cd:ff:ed:14:3f:87:20:ca:0d:36:a0:94: 41:df:cd:2e:cc:d3:65:59:ab:77:19:53:ad:d2:ea:8a:31:28: cf:ce:b8:9b:ba:c1:ce:f1:9c:3b:b7:08:53:31:d3:71:14:ca: eb:07:32:0a:ef:db:45:6b:96:6d:51:18:3b:76:5f:fe:b8:6e: 9d:43:59:1f:b9:95:5a:23:45:68:5a:d8:32:3c:df:4f:69:3a: e2:00:51:ac:f3:33:81:ac:19:e1:33:1f:d0:18:fa:30:ef:23: 9e:ec:38:ed:d4:23:ae:84:22:65:d2:06:c8:98:8b:fb:8a:78: ad:40:f9:f9:1c:88:71:0f:40:6d:ea:2a:0e:3d:2c:95:5b:cb: 50:77:1e:d2:c0:44:c5:91:44:01:d0:a6:dd:23:44:0a:48:6a: 9f:fb:00:ba:18:36:df:5b:6f:80:70:c2:f1:88:66:78:1d:c4: b3:1c:80:17:e0:d8:2e:68:f1:d5:7d:48:39:80:fc:a2:a4:56: 1a:84:70:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlU5MVkWP4Kf0UojgQa2Gnj29N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNjA0MTYxNjQ3MThaFw0yNjA0MjAwMzE1MThaMDMxMTAvBgNV BAMTKDVDOEUxMjg4MjIzODZENDlDRDQxMzJDQzc4Rjk0RUU2NEE4NTJFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkSWOKAWfCxfhxlCN3ZF3EeHA HCkdalWmfbBFQzxYHvCKXhr3pQxPicEHESVFA0H6JQ5O0UQwlTJDQvPOZ4NDzjmG jyfHkDhT1DFqx7T87kKAMiisS3Wh5eF/+1w6DM0lthmxjTIMX8u+FzUdzdVILm+E M2l8VZBi/toOFoZciPL3GwmUz79vhigExrnpGAguweJN4bE/W0tRlejAZVwBZ+ia ru7LChuCMNn/nFsbDdkNXanZ8AIdwWK6vrYnvFyExoaIYAD34HU9A67iJ5nEX7Jp h0larbZvbK4lBrUEHkjd0oQRYnu130JoscIxbTenuYr7uqfjz/rs3evvbO8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXI4SiCI4bUnNQTLMePlO5kqFLtcwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMcBit765zYzc1YpTGR3AlXjFLNxSD+3X/H q8GabGbZQ5LuIgKK0xLLjx88tu8YKhPXMO60EO21ctsmhc3/7RQ/hyDKDTaglEHf zS7M02VZq3cZU63S6ooxKM/OuJu6wc7xnDu3CFMx03EUyusHMgrv20Vrlm1RGDt2 X/64bp1DWR+5lVojRWha2DI8309pOuIAUazzM4GsGeEzH9AY+jDvI57sOO3UI66E ImXSBsiYi/uKeK1A+fkciHEPQG3qKg49LJVby1B3HtLARMWRRAHQpt0jRApIap/7 ALoYNt9bb4BwwvGIZngdxLMcgBfg2C5o8dV9SDmA/KKkVhqEcMI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:31:12 2026 by rpki-client