$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: vnvkA2c2ucH1wZI1TrtJSS5V+AstN4fSu0nMdoWNdJU= Subject key identifier: EE:B6:D5:21:11:94:EC:CE:47:EE:D5:8A:A4:BE:56:30:0B:63:2D:80 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 6F375673B6B0A78D4FA69D7E71425040E07802E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0265 Signing time: Sun 01 Mar 2026 21:42:09 +0000 Manifest this update: Sun 01 Mar 2026 21:37:09 +0000 Manifest next update: Wed 04 Mar 2026 22:27:09 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: JZVrNQ7GZUpi9bd9j9lbsC8anGYQrKuBJMl72byv2hE=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: MiIoYTJBd/MaIc8CFenzeZ7Kco5pQhZQ/L7ZwOtlTL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:37:56:73:b6:b0:a7:8d:4f:a6:9d:7e:71:42:50:40:e0:78:02:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Mar 1 21:37:09 2026 GMT Not After : Mar 4 22:27:09 2026 GMT Subject: CN=EEB6D5211194ECCE47EED58AA4BE56300B632D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:8a:4d:03:1c:a2:fc:9e:6e:e3:e9:1f:c0: b7:5d:21:7c:9b:36:8d:a9:ce:19:ba:57:79:6b:b3: 92:8f:6d:53:38:58:ae:fe:4a:dd:5f:f3:e5:31:f1: e5:e9:b9:07:e8:75:40:23:3c:b0:89:da:f9:98:46: f5:2c:39:64:4c:e3:a7:2e:39:78:40:2b:a8:e4:a3: b0:6c:9c:e9:4b:53:9a:8d:1c:40:7c:a3:15:c7:99: 30:9d:2d:cd:24:d5:03:c2:a3:19:e8:8d:3b:79:18: c4:86:bb:f2:2d:c0:19:b9:8f:fe:1f:5d:49:37:c9: 97:f3:ba:b5:7a:10:51:13:ac:ae:4d:cc:55:5c:84: f8:5a:0c:6f:96:87:ab:78:37:5a:8e:a6:2e:15:00: 57:47:1d:e0:bc:07:17:e3:e9:98:4f:6f:88:09:37: db:5f:67:8c:15:76:4b:76:29:6a:52:6e:1f:d8:f7: 59:7a:78:de:dd:7e:b4:1b:47:4c:3c:78:3b:51:56: 8a:7f:56:ae:df:36:46:d8:af:ec:a7:a5:cc:48:18: 62:1c:9b:08:cb:89:3b:ae:84:3d:ac:b9:ee:ce:9c: 23:be:32:a3:12:f6:ff:ef:ea:fd:af:e6:a9:a2:28: b4:18:e7:bf:5d:2e:c1:23:07:05:b6:ed:1a:9a:2b: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B6:D5:21:11:94:EC:CE:47:EE:D5:8A:A4:BE:56:30:0B:63:2D:80 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e9:18:38:7d:18:59:d6:4d:28:18:02:e2:38:67:3e:a6:f8: c0:13:59:09:6c:51:89:4e:9d:a5:5a:7c:09:7f:c7:d8:1e:01: 96:ec:89:2f:25:a0:f8:8c:99:d6:e8:aa:30:66:88:a2:67:a3: b0:99:c4:f0:4d:8e:61:2b:2c:0d:87:a4:4f:24:00:66:87:0f: a4:27:e4:83:e6:24:59:5a:11:fc:5b:fb:c4:9c:8f:fe:e7:1c: c8:b7:b3:0a:e6:41:d1:7a:8e:a2:3c:5c:ab:07:3b:94:ef:aa: 35:05:e7:7c:c6:70:da:b6:c3:d4:bc:9d:d1:4f:98:7c:f2:0f: 40:90:35:aa:e2:82:c4:8a:fa:25:f0:87:be:9f:c8:20:4d:84: 0f:0a:7b:4c:a0:87:54:07:b3:9a:f2:db:a3:bd:05:fc:d1:ae: e7:e5:bc:66:ba:c1:d2:10:f5:88:9d:10:38:e7:41:1e:93:69: 66:86:69:f6:b0:4a:db:a9:2b:d4:90:f1:34:36:5d:c3:f6:63: 11:27:59:ca:2e:2b:e0:3a:2a:c3:30:e8:23:a9:cc:66:2e:be: c1:1b:7f:7a:eb:f3:9c:ae:76:26:e3:89:67:89:9c:5e:fb:95: 9c:ba:70:ab:c5:ac:8b:7f:d5:11:54:e1:d4:88:3f:bf:e1:2d: b2:20:ee:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzdWc7awp41Ppp1+cUJQQOB4AuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNjAzMDEyMTM3MDlaFw0yNjAzMDQyMjI3MDlaMDMxMTAvBgNV BAMTKEVFQjZENTIxMTE5NEVDQ0U0N0VFRDU4QUE0QkU1NjMwMEI2MzJEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cYpNAxyi/J5u4+kfwLddIXyb No2pzhm6V3lrs5KPbVM4WK7+St1f8+Ux8eXpuQfodUAjPLCJ2vmYRvUsOWRM46cu OXhAK6jko7BsnOlLU5qNHEB8oxXHmTCdLc0k1QPCoxnojTt5GMSGu/ItwBm5j/4f XUk3yZfzurV6EFETrK5NzFVchPhaDG+Wh6t4N1qOpi4VAFdHHeC8Bxfj6ZhPb4gJ N9tfZ4wVdkt2KWpSbh/Y91l6eN7dfrQbR0w8eDtRVop/Vq7fNkbYr+ynpcxIGGIc mwjLiTuuhD2sue7OnCO+MqMS9v/v6v2v5qmiKLQY579dLsEjBwW27RqaK+N1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7rbVIRGU7M5H7tWKpL5WMAtjLYAwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvpGDh9GFnWTSgYAuI4Zz6m+MATWQlsUYlO naVafAl/x9geAZbsiS8loPiMmdboqjBmiKJno7CZxPBNjmErLA2HpE8kAGaHD6Qn 5IPmJFlaEfxb+8Scj/7nHMi3swrmQdF6jqI8XKsHO5TvqjUF53zGcNq2w9S8ndFP mHzyD0CQNarigsSK+iXwh76fyCBNhA8Ke0ygh1QHs5ry26O9BfzRruflvGa6wdIQ 9YidEDjnQR6TaWaGafawStupK9SQ8TQ2XcP2YxEnWcouK+A6KsMw6COpzGYuvsEb f3rr85yudibjiWeJnF77lZy6cKvFrIt/1RFU4dSIP7/hLbIg7pI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:21:21 2026 by rpki-client