$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: /oR/0SAem+wse7TuzXG7+9MnCyIjdTzrA8KN1KDtyYA= Subject key identifier: 5F:77:14:18:9F:DC:76:B1:29:E9:27:08:84:47:C9:42:99:38:62:94 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 459B0D45B78B327E4FA083198102066CA8836D55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 0232 Signing time: Wed 15 Apr 2026 23:50:52 +0000 Manifest this update: Wed 15 Apr 2026 23:45:52 +0000 Manifest next update: Sun 19 Apr 2026 08:42:52 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: 1rV440OrPvaHgpT7zhWbI5Ps2lj9e2pTEV6wY4T1u34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9b:0d:45:b7:8b:32:7e:4f:a0:83:19:81:02:06:6c:a8:83:6d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Apr 15 23:45:52 2026 GMT Not After : Apr 19 08:42:52 2026 GMT Subject: CN=5F7714189FDC76B129E927088447C94299386294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:ae:ad:f5:02:97:fc:be:48:90:51:04:67: 11:ff:09:40:b1:42:20:b0:48:d3:39:8f:9e:3e:5b: b8:21:54:b5:8b:c0:9e:9d:96:8f:e2:43:93:4e:f2: e8:5b:01:2d:9d:dd:7a:c8:79:af:b4:f3:78:86:2e: 19:b7:c7:e8:84:9f:59:8b:77:e2:de:4a:aa:83:e5: b2:3b:31:9f:35:fe:6a:3a:2c:4f:a2:6f:bd:87:d9: b2:8c:ab:87:b1:2d:4f:d0:31:9b:88:1b:3c:ac:03: e2:5a:b9:07:8f:3d:e3:92:bc:ba:b4:1e:71:da:73: df:4d:49:bb:db:d9:5c:0a:8a:54:1b:11:9b:75:d5: c4:7f:11:e8:12:24:4e:14:b0:e4:01:3a:3d:df:67: 18:59:06:05:cf:21:be:a2:61:ca:07:16:4b:af:d4: b2:52:e7:c4:cf:50:57:8b:ed:07:e4:cc:8f:0d:cd: 62:ca:58:2a:76:4a:16:d2:e1:bc:07:b0:3a:42:b5: 72:8e:79:cb:24:ff:c1:22:fd:34:07:c3:f1:22:4b: f2:54:c2:5b:48:c3:2e:a3:55:42:b2:47:fc:64:1c: 3a:80:30:b9:af:32:0f:7c:50:fc:10:e5:52:3d:6e: c1:fa:35:f1:af:45:2d:2b:79:4e:5e:97:e5:97:2c: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:77:14:18:9F:DC:76:B1:29:E9:27:08:84:47:C9:42:99:38:62:94 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a7:e2:bb:bd:84:d3:4a:48:ba:36:6e:24:10:92:4c:cf:9d: 9d:92:b9:4a:cf:ec:36:ef:ff:2d:c5:6b:a9:2b:47:1d:29:52: 39:62:03:e8:d3:13:99:fc:e4:0b:91:c3:59:01:98:ba:eb:b1: 09:1a:e2:ce:df:95:8e:c6:04:cf:4b:81:7d:4e:a8:9a:e9:a8: b7:d3:c2:4d:13:1c:52:09:90:57:b6:4f:8b:a5:06:8b:71:7f: 89:d5:02:cc:2c:da:04:1a:ec:60:39:1a:52:af:d7:a2:54:fe: f5:bc:b2:66:2f:4f:1a:fb:a3:a5:01:3e:51:43:2e:6b:da:91: a6:1f:45:77:ca:32:a8:71:7e:03:88:7e:bd:8b:ad:8a:f8:ca: bc:20:f6:5b:88:0f:2f:80:a5:8b:35:35:f0:17:69:74:8d:a2: 8a:d2:2c:e1:71:be:03:3e:40:35:42:5d:9d:c4:28:ef:70:a3: 58:9a:96:6a:1d:3f:38:3a:76:87:08:a8:67:e1:52:9d:32:ff: db:7f:9a:ef:e2:58:af:54:ab:56:d4:85:bd:63:52:bd:bf:04: 16:07:e8:83:0a:0d:86:6e:89:eb:1d:50:a0:ee:99:9d:69:a6: 83:8e:fd:9e:bd:9e:22:4e:f8:29:e9:1d:50:64:1d:c5:55:cf: 9c:ce:d6:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZsNRbeLMn5PoIMZgQIGbKiDbVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNjA0MTUyMzQ1NTJaFw0yNjA0MTkwODQyNTJaMDMxMTAvBgNV BAMTKDVGNzcxNDE4OUZEQzc2QjEyOUU5MjcwODg0NDdDOTQyOTkzODYyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cq6t9QKX/L5IkFEEZxH/CUCx QiCwSNM5j54+W7ghVLWLwJ6dlo/iQ5NO8uhbAS2d3XrIea+083iGLhm3x+iEn1mL d+LeSqqD5bI7MZ81/mo6LE+ib72H2bKMq4exLU/QMZuIGzysA+JauQePPeOSvLq0 HnHac99NSbvb2VwKilQbEZt11cR/EegSJE4UsOQBOj3fZxhZBgXPIb6iYcoHFkuv 1LJS58TPUFeL7QfkzI8NzWLKWCp2ShbS4bwHsDpCtXKOecsk/8Ei/TQHw/EiS/JU wltIwy6jVUKyR/xkHDqAMLmvMg98UPwQ5VI9bsH6NfGvRS0reU5el+WXLKyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX3cUGJ/cdrEp6ScIhEfJQpk4YpQwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKn4ru9hNNKSLo2biQQkkzPnZ2SuUrP7Dbv /y3Fa6krRx0pUjliA+jTE5n85AuRw1kBmLrrsQka4s7flY7GBM9LgX1OqJrpqLfT wk0THFIJkFe2T4ulBotxf4nVAsws2gQa7GA5GlKv16JU/vW8smYvTxr7o6UBPlFD LmvakaYfRXfKMqhxfgOIfr2LrYr4yrwg9luIDy+ApYs1NfAXaXSNoorSLOFxvgM+ QDVCXZ3EKO9wo1ialmodPzg6docIqGfhUp0y/9t/mu/iWK9Uq1bUhb1jUr2/BBYH 6IMKDYZuiesdUKDumZ1ppoOO/Z69niJO+CnpHVBkHcVVz5zO1oY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:53:17 2026 by rpki-client