$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: owRTSApOmKit2BkYMKegGOChD8WZCmTyrje/2ffsSi4= Subject key identifier: 8E:C9:AD:6C:B2:B8:97:59:B2:8D:E3:87:D3:F1:82:69:2C:80:C4:29 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 3F970C36E31E846EC20CE3E258EC83B89CCB9864 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04D7 Signing time: Tue 17 Mar 2026 16:32:17 +0000 Manifest this update: Tue 17 Mar 2026 16:27:17 +0000 Manifest next update: Fri 20 Mar 2026 22:35:17 +0000 Files and hashes: 1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) 3: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) 4: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: hHpiRV3Lgh6REbH4Dmk+DRTk5DE/+GddNLtES5SHoUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 22:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:97:0c:36:e3:1e:84:6e:c2:0c:e3:e2:58:ec:83:b8:9c:cb:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Mar 17 16:27:17 2026 GMT Not After : Mar 20 22:35:17 2026 GMT Subject: CN=8EC9AD6CB2B89759B28DE387D3F182692C80C429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:ee:93:fa:94:a5:1b:cc:cd:e7:2a:1d:8f: a5:4d:e3:3a:e2:1c:0b:3a:12:bb:f5:c5:1b:fa:0e: bc:61:91:43:f7:56:e3:bb:25:3a:56:c0:41:17:6c: 36:0f:d5:37:6f:d8:91:69:e4:b9:ca:e9:51:b7:66: 0a:0f:45:aa:d7:5c:f3:38:66:66:a1:29:83:2c:02: 2d:ee:2d:42:f3:cb:2f:3e:4d:f6:cf:f2:89:8b:3f: 99:68:2f:38:31:ab:2f:ea:2f:46:43:0b:9a:8d:72: b0:28:7f:56:a6:36:58:8b:3a:2d:e4:c4:6a:a9:34: 1e:38:9e:02:8a:a5:cc:09:c7:1b:7e:dc:ae:47:1d: cf:1a:ec:06:9b:23:e7:b3:e6:4d:d9:a3:4b:f1:e6: 17:1b:4b:52:08:5e:7e:b9:dc:ee:5e:be:90:23:a6: 51:3b:f9:75:d2:42:e7:4f:54:30:18:2c:b0:6d:2f: e5:93:d7:71:22:79:a3:7b:b6:34:a2:b6:87:ec:b3: 0b:dd:f5:29:7b:57:ba:63:6a:f9:f9:08:89:af:e6: 36:49:13:27:74:20:7e:f2:dd:1e:d1:19:e7:80:06: 30:e5:71:5e:c3:1e:8f:8c:16:65:fa:72:01:a6:63: 53:42:22:f2:b8:d3:ad:1a:76:0d:c9:42:c9:e4:18: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C9:AD:6C:B2:B8:97:59:B2:8D:E3:87:D3:F1:82:69:2C:80:C4:29 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:29:ca:f1:f1:62:16:50:a4:f0:5b:3b:0d:ce:61:25:9c:35: 13:32:01:53:8f:fd:91:52:7c:fd:73:ac:f6:fc:a1:02:41:4f: 0e:c6:5b:24:ad:06:87:02:8a:79:85:ba:d8:67:12:3a:b4:71: cb:d9:8a:bd:65:5c:91:03:b5:15:14:4a:83:59:09:14:6d:ca: 46:f3:65:6c:cc:b2:51:59:e5:f8:6d:63:67:09:58:8a:1c:88: 22:41:91:bb:3c:ac:8a:72:7b:ee:b9:5e:54:79:ca:94:12:38: 49:b7:9c:f9:81:76:80:1f:af:6b:16:bf:48:15:fe:a3:7a:f0: 0c:a2:4b:bb:ab:c9:1b:ec:2d:9b:7e:87:94:09:7c:dc:8f:ee: ef:a6:82:bf:a6:75:91:13:77:20:e1:5f:45:96:ac:b6:62:1f: ec:09:be:8d:f8:30:83:73:94:83:0f:1a:1e:2f:95:cb:fb:1c: 74:44:b5:2a:26:ea:db:8a:ef:08:e2:e5:16:6a:17:22:be:97: 7c:9b:a6:f6:a8:cb:92:6e:99:3e:5f:a2:42:54:72:51:82:c2: 88:7b:ec:c3:dd:53:a2:03:73:72:ff:fe:a3:58:a8:b4:c0:c2: 1c:7a:e3:7b:ef:7e:dc:16:91:af:8e:a4:e7:8a:9b:f0:07:7a: f0:9b:3d:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5cMNuMehG7CDOPiWOyDuJzLmGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNjAzMTcxNjI3MTdaFw0yNjAzMjAyMjM1MTdaMDMxMTAvBgNV BAMTKDhFQzlBRDZDQjJCODk3NTlCMjhERTM4N0QzRjE4MjY5MkM4MEM0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9u6T+pSlG8zN5yodj6VN4zri HAs6Erv1xRv6DrxhkUP3VuO7JTpWwEEXbDYP1Tdv2JFp5LnK6VG3ZgoPRarXXPM4 ZmahKYMsAi3uLULzyy8+TfbP8omLP5loLzgxqy/qL0ZDC5qNcrAof1amNliLOi3k xGqpNB44ngKKpcwJxxt+3K5HHc8a7AabI+ez5k3Zo0vx5hcbS1IIXn653O5evpAj plE7+XXSQudPVDAYLLBtL+WT13EieaN7tjSitofsswvd9Sl7V7pjavn5CImv5jZJ Eyd0IH7y3R7RGeeABjDlcV7DHo+MFmX6cgGmY1NCIvK4060adg3JQsnkGIwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjsmtbLK4l1myjeOH0/GCaSyAxCkwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGopyvHxYhZQpPBbOw3OYSWcNRMyAVOP/ZFS fP1zrPb8oQJBTw7GWyStBocCinmFuthnEjq0ccvZir1lXJEDtRUUSoNZCRRtykbz ZWzMslFZ5fhtY2cJWIociCJBkbs8rIpye+65XlR5ypQSOEm3nPmBdoAfr2sWv0gV /qN68AyiS7uryRvsLZt+h5QJfNyP7u+mgr+mdZETdyDhX0WWrLZiH+wJvo34MINz lIMPGh4vlcv7HHREtSom6tuK7wji5RZqFyK+l3ybpvaoy5JumT5fokJUclGCwoh7 7MPdU6IDc3L//qNYqLTAwhx643vvftwWka+OpOeKm/AHevCbPc4= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:25 2026 by rpki-client