$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: 7r7WBv89+kQXphLmD57ErJJSRu0P5Abf1TEoDgzNMhs= Subject key identifier: B3:83:5E:8E:21:92:CF:1F:E5:C3:4D:A7:08:36:85:0F:F5:8C:AE:B3 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 0C52B1430A4AE21349CD3351CACAB279275ADC42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 13:12:09 +0000 Manifest this update: Fri 17 Apr 2026 13:07:09 +0000 Manifest next update: Mon 20 Apr 2026 17:32:09 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: +ip0KEZ8cVl45zoG0Q7QQMVeG1ZhjedcgCNSUwX+ASo=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: MiIoYTJBd/MaIc8CFenzeZ7Kco5pQhZQ/L7ZwOtlTL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:52:b1:43:0a:4a:e2:13:49:cd:33:51:ca:ca:b2:79:27:5a:dc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Apr 17 13:07:09 2026 GMT Not After : Apr 20 17:32:09 2026 GMT Subject: CN=B3835E8E2192CF1FE5C34DA70836850FF58CAEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:e9:55:5d:e5:1d:02:4f:69:9c:64:51:fe: 40:ab:7c:57:ba:a2:35:17:83:7a:4f:a8:ce:c0:42: df:7e:05:07:00:72:6b:b9:ef:e6:60:8f:c3:27:5e: 11:ab:e4:b2:bd:da:49:21:fc:e1:c7:02:58:5e:f4: 65:ac:c9:2c:c1:8f:5f:86:38:22:e2:3c:08:38:b7: b0:00:26:0d:2f:17:a9:a3:f0:52:42:af:5f:a1:ba: 0c:66:1c:c7:32:bb:c0:ef:36:b2:f2:76:38:75:35: 07:32:54:95:ad:00:03:bc:07:0e:0c:81:f9:38:7f: ff:67:64:50:44:98:d8:f6:a6:e5:0d:ce:74:16:7c: 6e:58:ff:c0:de:69:f2:4c:b0:ab:1c:e6:7c:f9:91: c9:51:43:9d:39:36:33:7a:92:10:f1:b1:26:cf:78: 93:7e:ff:65:a9:25:5a:67:42:98:e4:c9:6f:2c:bd: f0:98:cc:01:17:f8:12:9d:67:2b:0f:62:70:26:33: 81:9e:55:73:b7:7c:56:cf:0e:85:f9:24:ea:7a:85: 52:8b:24:e7:54:81:48:ef:86:3a:59:a3:d9:af:ce: 33:c3:26:17:91:6e:df:06:14:6e:3e:7f:54:88:a6: 58:72:b3:15:1c:7b:df:68:56:84:1e:a5:ec:0a:3c: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:83:5E:8E:21:92:CF:1F:E5:C3:4D:A7:08:36:85:0F:F5:8C:AE:B3 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:23:a0:70:a6:f3:ab:a1:14:e5:b7:21:77:7e:c4:0f:01:50: 28:18:5a:07:c7:fb:4b:2f:fc:61:77:7b:e0:31:13:2f:86:ab: 5b:61:04:3e:57:29:37:ce:ee:6b:07:95:59:2e:d1:20:bb:96: 38:4c:cd:c9:b0:f6:0d:42:4c:a3:5e:58:42:33:f7:50:5e:d9: 30:64:58:8a:53:c7:bb:82:e9:43:cb:80:75:db:50:6b:2f:0c: eb:b6:1b:6c:d6:0a:84:a3:55:51:92:7f:40:aa:c3:4d:0b:15: 1e:84:91:7e:cc:d0:79:71:74:66:bc:72:32:37:fc:02:2c:55: 2f:5c:be:36:88:f5:4c:b8:b0:a4:fe:ea:bb:79:8d:1c:32:1b: a3:25:54:1e:e5:b8:fb:18:0a:a7:f1:ce:8d:08:96:b7:03:10: e4:84:13:70:76:4f:23:97:3b:15:1a:27:c4:8e:fe:91:20:b1: 35:7c:0c:e9:b8:79:03:2a:95:bd:cb:cb:32:88:db:e9:f0:04: 9d:e9:11:5e:14:5c:3e:3b:51:54:aa:fb:13:fc:fe:bc:f9:e0: e9:cc:fd:ee:aa:30:52:8e:ae:c9:c1:9d:4e:d0:9e:57:c4:31: 34:48:27:65:4e:c8:28:b6:a0:54:1f:20:35:70:7b:1f:3e:dd: 9c:d1:67:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFKxQwpK4hNJzTNRysqyeSda3EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNjA0MTcxMzA3MDlaFw0yNjA0MjAxNzMyMDlaMDMxMTAvBgNV BAMTKEIzODM1RThFMjE5MkNGMUZFNUMzNERBNzA4MzY4NTBGRjU4Q0FFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOelVXeUdAk9pnGRR/kCrfFe6 ojUXg3pPqM7AQt9+BQcAcmu57+Zgj8MnXhGr5LK92kkh/OHHAlhe9GWsySzBj1+G OCLiPAg4t7AAJg0vF6mj8FJCr1+hugxmHMcyu8DvNrLydjh1NQcyVJWtAAO8Bw4M gfk4f/9nZFBEmNj2puUNznQWfG5Y/8DeafJMsKsc5nz5kclRQ505NjN6khDxsSbP eJN+/2WpJVpnQpjkyW8svfCYzAEX+BKdZysPYnAmM4GeVXO3fFbPDoX5JOp6hVKL JOdUgUjvhjpZo9mvzjPDJheRbt8GFG4+f1SIplhysxUce99oVoQepewKPL9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4NejiGSzx/lw02nCDaFD/WMrrMwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgjoHCm86uhFOW3IXd+xA8BUCgYWgfH+0sv /GF3e+AxEy+Gq1thBD5XKTfO7msHlVku0SC7ljhMzcmw9g1CTKNeWEIz91Be2TBk WIpTx7uC6UPLgHXbUGsvDOu2G2zWCoSjVVGSf0Cqw00LFR6EkX7M0HlxdGa8cjI3 /AIsVS9cvjaI9Uy4sKT+6rt5jRwyG6MlVB7luPsYCqfxzo0IlrcDEOSEE3B2TyOX OxUaJ8SO/pEgsTV8DOm4eQMqlb3LyzKI2+nwBJ3pEV4UXD47UVSq+xP8/rz54OnM /e6qMFKOrsnBnU7QnlfEMTRIJ2VOyCi2oFQfIDVwex8+3ZzRZzk= -----END CERTIFICATE-----Generated at Fri Apr 17 18:59:09 2026 by rpki-client