$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: vjgWXxk8pAFKG6vAM7Ig5026+X/g3PJVd0HXNJUWKc8= Subject key identifier: 98:A7:6A:4B:F6:9F:7C:5E:2C:3E:FA:3B:1B:7C:48:8E:3D:23:87:79 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 068E215F8E1E94294940017C343EA7F7383EA979 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 0268 Signing time: Fri 17 Apr 2026 13:02:42 +0000 Manifest this update: Fri 17 Apr 2026 12:57:42 +0000 Manifest next update: Mon 20 Apr 2026 22:04:42 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: pK+4LnOG5JCfDaM0c33RKTCmPQVYIXcMtRF6Cr+mU0Y=) 2: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: XpRl9r9zs9D7Sge9PLx1ExvJmECIH9gHhZAd1weULYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8e:21:5f:8e:1e:94:29:49:40:01:7c:34:3e:a7:f7:38:3e:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Apr 17 12:57:42 2026 GMT Not After : Apr 20 22:04:42 2026 GMT Subject: CN=98A76A4BF69F7C5E2C3EFA3B1B7C488E3D238779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:13:f9:60:ac:f5:38:7d:41:b8:0e:c6:da:33: 0f:1e:2b:84:64:38:79:08:d7:70:be:38:dc:e8:b8: f2:16:af:07:5d:e0:65:56:a9:d3:d0:35:36:73:64: 62:89:ae:d3:cf:77:ce:63:bd:21:a4:db:a9:8d:72: cb:a3:2f:6f:13:dc:3f:49:35:2c:51:a8:2d:dc:27: 5c:00:db:c6:65:d2:a5:4a:0c:30:4a:8a:27:14:b7: 44:7f:a8:18:97:0a:58:90:06:c2:29:90:b1:ff:e7: f6:59:96:49:f5:ed:45:ed:48:98:1d:d0:53:90:fe: fb:63:d0:5b:d4:12:76:aa:60:c8:02:d3:31:1a:78: 35:96:a6:4e:2a:88:5f:e3:38:b8:ab:5d:d4:b5:32: be:f9:8b:0d:dc:6d:54:25:e9:59:89:48:f5:11:ef: 11:5c:33:e9:35:25:3f:15:16:12:39:aa:39:b0:d1: b8:0a:38:3c:81:7e:f3:35:05:00:1b:1b:21:a4:41: 3e:2a:17:15:0f:30:0a:dc:af:af:50:6e:96:63:df: 55:bb:03:eb:f5:10:d4:3f:c0:15:f0:a6:d9:5a:35: 83:02:cf:6f:36:2f:42:f7:2b:fb:e4:c4:12:9b:68: f3:a6:03:60:65:cc:19:0e:4b:a9:30:bd:2b:41:d0: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A7:6A:4B:F6:9F:7C:5E:2C:3E:FA:3B:1B:7C:48:8E:3D:23:87:79 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7b:48:a6:e8:4c:e2:81:4b:47:32:9a:9e:55:c2:e3:16:31: 80:2d:40:b4:1e:fb:1e:5a:f1:08:59:d3:53:a1:00:30:b5:6d: dc:de:ff:aa:9a:7b:2a:b2:a6:1f:a4:f3:1e:58:55:07:4a:74: fb:f5:ce:8c:b4:a9:a6:7d:fc:63:b2:e1:83:11:a6:5b:5f:94: ca:78:5d:c3:72:e3:6e:ed:05:47:e6:ca:88:d2:1e:e6:82:e3: 1a:94:c6:9f:3f:f7:85:31:67:80:e8:b4:ac:ed:56:a4:f6:bd: 51:bd:b7:1d:51:1d:9b:db:39:c2:d9:e7:07:a6:d7:26:ff:a3: 5d:b9:8b:25:4d:55:18:15:1c:2b:44:a9:b9:5d:34:d9:55:ba: 1d:36:87:ef:89:a8:bd:bd:f7:34:ed:e0:4a:0f:04:bc:05:f9: d1:d1:e5:f7:ed:71:fe:21:fc:46:15:78:53:19:6d:fe:91:eb: e9:32:64:97:bd:bf:13:77:2f:ea:f3:41:f6:57:68:2b:23:89: 5b:9b:94:c3:9d:a1:cc:48:d5:d5:cc:a5:ed:9e:86:5d:c4:c6: 51:72:8d:2d:f3:92:d5:a5:53:a3:08:24:9b:8b:a3:45:3e:fe: 10:3b:66:d0:3d:10:17:03:ba:02:19:52:15:2e:c2:3b:fb:35: 78:d7:4a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo4hX44elClJQAF8ND6n9zg+qXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNjA0MTcxMjU3NDJaFw0yNjA0MjAyMjA0NDJaMDMxMTAvBgNV BAMTKDk4QTc2QTRCRjY5RjdDNUUyQzNFRkEzQjFCN0M0ODhFM0QyMzg3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5E/lgrPU4fUG4DsbaMw8eK4Rk OHkI13C+ONzouPIWrwdd4GVWqdPQNTZzZGKJrtPPd85jvSGk26mNcsujL28T3D9J NSxRqC3cJ1wA28Zl0qVKDDBKiicUt0R/qBiXCliQBsIpkLH/5/ZZlkn17UXtSJgd 0FOQ/vtj0FvUEnaqYMgC0zEaeDWWpk4qiF/jOLirXdS1Mr75iw3cbVQl6VmJSPUR 7xFcM+k1JT8VFhI5qjmw0bgKODyBfvM1BQAbGyGkQT4qFxUPMArcr69QbpZj31W7 A+v1ENQ/wBXwptlaNYMCz282L0L3K/vkxBKbaPOmA2BlzBkOS6kwvStB0MAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmKdqS/affF4sPvo7G3xIjj0jh3kwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF7SKboTOKBS0cymp5VwuMWMYAtQLQe+x5a 8QhZ01OhADC1bdze/6qaeyqyph+k8x5YVQdKdPv1zoy0qaZ9/GOy4YMRpltflMp4 XcNy427tBUfmyojSHuaC4xqUxp8/94UxZ4DotKztVqT2vVG9tx1RHZvbOcLZ5wem 1yb/o125iyVNVRgVHCtEqbldNNlVuh02h++JqL299zTt4EoPBLwF+dHR5fftcf4h /EYVeFMZbf6R6+kyZJe9vxN3L+rzQfZXaCsjiVublMOdocxI1dXMpe2ehl3ExlFy jS3zktWlU6MIJJuLo0U+/hA7ZtA9EBcDugIZUhUuwjv7NXjXSsg= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:16 2026 by rpki-client