$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: 40aTagDby+0IYKSgpQwd9CA3iVMsiuJESGOLnQQiSNk= Subject key identifier: DA:CB:30:47:6D:BD:AC:C1:91:E9:61:FD:15:72:E8:FD:C1:7B:DF:C8 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 441357C7E083467EC4D13294816DA412308F513E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 0253 Signing time: Mon 02 Mar 2026 02:02:37 +0000 Manifest this update: Mon 02 Mar 2026 01:57:37 +0000 Manifest next update: Thu 05 Mar 2026 07:07:37 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: XpRl9r9zs9D7Sge9PLx1ExvJmECIH9gHhZAd1weULYY=) 2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: quIXNACG4gyMWOsSWJvHL+GOHIRh+Cs+kOW+fG6h5KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:13:57:c7:e0:83:46:7e:c4:d1:32:94:81:6d:a4:12:30:8f:51:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Mar 2 01:57:37 2026 GMT Not After : Mar 5 07:07:37 2026 GMT Subject: CN=DACB30476DBDACC191E961FD1572E8FDC17BDFC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:cd:5a:33:bf:b4:e7:b7:01:47:21:9a:92: bc:3e:0c:bb:4c:c8:47:58:9c:d7:a4:75:74:9b:c8: 5c:b1:87:ec:da:6b:8d:51:6a:69:8c:07:8e:20:c0: 48:04:b6:7c:d5:bb:e2:ee:30:db:d2:85:c9:0f:0a: c8:0f:fb:67:13:0c:10:5a:42:66:6b:2a:91:1d:5b: c0:7c:8c:45:42:db:74:0f:03:3e:d0:4f:1a:34:81: 7e:9b:13:8a:d4:d7:b6:db:9e:63:19:2e:4a:60:88: aa:98:6d:a3:0b:8b:d7:66:97:fd:45:1d:b0:e2:dc: a2:f9:5d:03:c1:ba:b5:ba:a6:c5:24:13:ba:df:06: a4:68:c9:9b:13:a4:f7:ea:13:e6:e6:51:90:ec:6f: 7b:c4:34:91:ae:6e:d1:8d:34:6b:a5:8d:08:84:0f: ef:3f:48:e3:75:10:d8:cf:a0:10:25:de:7a:6f:b7: 48:f2:12:03:a6:d9:51:4c:11:60:06:2c:a3:db:5c: de:dd:8e:9c:51:eb:54:37:5d:1d:b1:ef:d4:61:08: c1:44:c7:1b:21:d3:49:3c:5d:70:54:5e:b7:be:c8: f5:0c:ec:2f:ca:08:cc:cf:ea:3a:db:4a:0f:11:e4: b2:c9:af:41:1e:e1:f7:c0:55:06:f3:e3:e9:0f:ea: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:30:47:6D:BD:AC:C1:91:E9:61:FD:15:72:E8:FD:C1:7B:DF:C8 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5f:67:31:23:b8:17:27:ab:fc:be:7e:90:16:40:6e:87:ea: 33:3b:3b:28:bc:79:75:4c:72:be:9a:7e:e9:d8:6d:df:96:ea: 7f:45:8c:a9:a3:b0:18:b0:30:a0:c3:84:c1:bc:1b:36:e7:31: 39:6e:39:24:e8:6a:e4:54:37:a8:36:3a:9a:81:a6:a9:7c:36: ee:c9:eb:5e:69:37:ae:4d:ca:70:81:a8:63:4f:29:b4:f4:8b: 61:c5:38:af:2e:e8:02:ec:78:92:a0:94:40:1c:b7:e6:e1:1a: 22:f8:60:de:ff:4a:ac:b1:66:2f:e7:07:7a:00:73:f5:fb:c9: 1c:ad:85:6e:cd:a0:30:68:5f:75:17:a1:47:28:7b:72:ba:2d: df:db:ea:a4:bf:2f:76:24:3e:6c:25:0b:a5:43:df:40:ea:95: c0:8e:12:f2:38:8e:2f:a1:10:df:de:99:03:08:41:e2:ba:52: df:1c:55:af:01:48:7d:d4:36:d4:1f:4a:38:aa:53:82:c6:c2: 37:fe:fe:24:a3:33:e4:dc:d5:49:f8:83:a0:c8:85:b8:3a:df: c7:93:0c:3e:6a:cc:27:fd:4a:25:64:dc:3d:4d:98:f2:71:17: 39:eb:e4:76:30:45:3b:14:bf:9d:35:45:74:82:d8:61:da:56: d9:fa:ef:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBNXx+CDRn7E0TKUgW2kEjCPUT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNjAzMDIwMTU3MzdaFw0yNjAzMDUwNzA3MzdaMDMxMTAvBgNV BAMTKERBQ0IzMDQ3NkRCREFDQzE5MUU5NjFGRDE1NzJFOEZEQzE3QkRGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8M1aM7+057cBRyGakrw+DLtM yEdYnNekdXSbyFyxh+zaa41RammMB44gwEgEtnzVu+LuMNvShckPCsgP+2cTDBBa QmZrKpEdW8B8jEVC23QPAz7QTxo0gX6bE4rU17bbnmMZLkpgiKqYbaMLi9dml/1F HbDi3KL5XQPBurW6psUkE7rfBqRoyZsTpPfqE+bmUZDsb3vENJGubtGNNGuljQiE D+8/SON1ENjPoBAl3npvt0jyEgOm2VFMEWAGLKPbXN7djpxR61Q3XR2x79RhCMFE xxsh00k8XXBUXre+yPUM7C/KCMzP6jrbSg8R5LLJr0Ee4ffAVQbz4+kP6pvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sswR229rMGR6WH9FXLo/cF738gwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdfZzEjuBcnq/y+fpAWQG6H6jM7Oyi8eXVM cr6afunYbd+W6n9FjKmjsBiwMKDDhMG8GzbnMTluOSToauRUN6g2OpqBpql8Nu7J 615pN65NynCBqGNPKbT0i2HFOK8u6ALseJKglEAct+bhGiL4YN7/SqyxZi/nB3oA c/X7yRythW7NoDBoX3UXoUcoe3K6Ld/b6qS/L3YkPmwlC6VD30DqlcCOEvI4ji+h EN/emQMIQeK6Ut8cVa8BSH3UNtQfSjiqU4LGwjf+/iSjM+Tc1Un4g6DIhbg638eT DD5qzCf9SiVk3D1NmPJxFznr5HYwRTsUv501RXSC2GHaVtn676A= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:38 2026 by rpki-client