$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: WHlJzrzhPcpbcYOwAphF62aS/ijpIRLymuXngT0NS2c= Subject key identifier: D8:1B:30:51:00:26:CD:DC:53:F2:A7:A3:77:15:D6:CD:69:D6:63:FC Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 40E0C24EEA57D237CEE7C23620ED3B7AC861FB62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 021E Signing time: Sun 01 Mar 2026 22:00:51 +0000 Manifest this update: Sun 01 Mar 2026 21:55:51 +0000 Manifest next update: Thu 05 Mar 2026 08:28:51 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: J0NUnU64PuSL69aVY4hfldeTRVwnoVtw4exSFiS2cF8=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e0:c2:4e:ea:57:d2:37:ce:e7:c2:36:20:ed:3b:7a:c8:61:fb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Mar 1 21:55:51 2026 GMT Not After : Mar 5 08:28:51 2026 GMT Subject: CN=D81B30510026CDDC53F2A7A37715D6CD69D663FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:3c:77:07:8b:7b:b9:ec:af:fc:3c:da:dd: dc:26:8e:fe:9f:bb:d7:c2:88:ad:66:bf:25:5b:fa: 90:fb:e9:36:f8:50:7f:87:c7:b5:38:31:4f:c1:f9: 1c:7a:8a:b4:61:55:fb:81:10:a2:2d:5d:fa:c7:1f: e2:c0:47:1a:07:3a:59:2b:4a:f8:72:97:f7:28:1c: 02:c6:bc:f4:ba:c9:cf:c8:ee:2e:93:2b:ca:cc:7a: 92:7c:07:b3:2f:71:6e:57:01:37:1a:e4:e0:54:30: d5:20:d9:99:56:63:bc:c4:cc:0c:ff:f2:42:96:dd: 23:30:d6:98:20:a7:49:ec:3c:16:b1:91:e8:c6:2a: 77:19:08:0f:e2:c0:f5:82:c8:a8:b6:d6:99:15:74: 2c:df:37:11:8e:55:ce:12:eb:ba:6e:cd:3e:50:66: 61:4a:b0:bf:13:8a:3d:b9:e5:1a:70:f2:a3:5a:dd: 64:b0:6a:e5:a3:50:93:64:b9:75:a1:e6:97:cb:0b: 81:23:4c:35:4c:2b:cf:21:6e:da:df:dd:a3:40:2b: 81:82:3f:71:c9:68:e8:52:54:62:34:71:a4:9b:bb: 0a:63:3f:31:cb:60:5f:a6:24:a1:62:02:32:c2:d5: 77:d0:f6:a7:06:b5:2d:fd:ed:b1:1b:12:69:7d:7a: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:30:51:00:26:CD:DC:53:F2:A7:A3:77:15:D6:CD:69:D6:63:FC X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e0:c4:1e:63:b3:c0:6e:9d:42:55:01:72:fe:e7:0c:0b:d7: c1:27:61:47:80:da:e8:bf:69:0a:f6:72:e8:04:85:3f:d5:bf: 88:a5:94:c1:07:20:7a:22:9b:95:14:ff:47:84:95:bc:91:72: 9a:41:af:02:a4:3c:f2:91:36:49:cc:77:ab:f2:c2:f8:95:13: d4:52:60:d5:42:c6:ea:ab:3d:56:1f:e4:7c:e1:64:4e:b5:6e: 16:e5:d2:b0:ca:86:72:87:de:c0:06:6e:7d:d4:42:73:5e:27: d9:d1:55:51:45:1b:dc:2d:28:71:0a:03:f4:89:ec:b2:da:4b: a4:77:4f:f9:4f:de:46:d5:90:e4:ff:52:3a:b2:38:45:51:b7: 8b:56:44:52:ec:96:13:b2:23:06:31:4d:85:82:d3:5b:96:fb: a3:03:14:2f:e7:58:f2:16:a0:5f:5f:fe:ba:43:d3:85:f6:a5: 4a:fa:75:d7:7d:62:d2:34:10:ae:2a:31:f5:4e:32:b9:b9:d7: 97:38:79:76:ce:83:22:3a:b0:23:08:a0:e2:69:c7:c5:c8:f7: 28:00:36:03:f5:58:59:e6:9b:fc:04:bd:c3:68:97:c1:48:ae: 86:13:7c:eb:ca:7d:46:58:c4:86:4a:99:06:bb:d2:7d:f1:f2: f2:a5:53:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQODCTupX0jfO58I2IO07eshh+2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNjAzMDEyMTU1NTFaFw0yNjAzMDUwODI4NTFaMDMxMTAvBgNV BAMTKEQ4MUIzMDUxMDAyNkNEREM1M0YyQTdBMzc3MTVENkNENjlENjYzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWzx3B4t7ueyv/Dza3dwmjv6f u9fCiK1mvyVb+pD76Tb4UH+Hx7U4MU/B+Rx6irRhVfuBEKItXfrHH+LARxoHOlkr Svhyl/coHALGvPS6yc/I7i6TK8rMepJ8B7MvcW5XATca5OBUMNUg2ZlWY7zEzAz/ 8kKW3SMw1pggp0nsPBaxkejGKncZCA/iwPWCyKi21pkVdCzfNxGOVc4S67puzT5Q ZmFKsL8Tij255Rpw8qNa3WSwauWjUJNkuXWh5pfLC4EjTDVMK88hbtrf3aNAK4GC P3HJaOhSVGI0caSbuwpjPzHLYF+mJKFiAjLC1XfQ9qcGtS397bEbEml9eisvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2BswUQAmzdxT8qejdxXWzWnWY/wwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjgxB5js8BunUJVAXL+5wwL18EnYUeA2ui/ aQr2cugEhT/Vv4illMEHIHoim5UU/0eElbyRcppBrwKkPPKRNknMd6vywviVE9RS YNVCxuqrPVYf5HzhZE61bhbl0rDKhnKH3sAGbn3UQnNeJ9nRVVFFG9wtKHEKA/SJ 7LLaS6R3T/lP3kbVkOT/UjqyOEVRt4tWRFLslhOyIwYxTYWC01uW+6MDFC/nWPIW oF9f/rpD04X2pUr6ddd9YtI0EK4qMfVOMrm515c4eXbOgyI6sCMIoOJpx8XI9ygA NgP1WFnmm/wEvcNol8FIroYTfOvKfUZYxIZKmQa70n3x8vKlU/s= -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:20 2026 by rpki-client