$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: ZfaMQM5SEls/1qSbdGirSPt47XK0KO17uqCigV54ZIw= Subject key identifier: CC:08:2F:14:92:C7:BD:7A:3B:F2:38:D3:CF:39:1B:5E:65:D8:FD:DD Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 555273A5E6947E9B5E32EA68BDF82266DAE8E8E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 0225 Signing time: Wed 18 Mar 2026 14:20:51 +0000 Manifest this update: Wed 18 Mar 2026 14:15:51 +0000 Manifest next update: Sat 21 Mar 2026 18:38:51 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: v7Bl5cyknM0Q7A9XXxyr4tvcgpIjEW7GjowmEh+5aWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 18:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:52:73:a5:e6:94:7e:9b:5e:32:ea:68:bd:f8:22:66:da:e8:e8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Mar 18 14:15:51 2026 GMT Not After : Mar 21 18:38:51 2026 GMT Subject: CN=CC082F1492C7BD7A3BF238D3CF391B5E65D8FDDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:2c:8e:30:c2:e3:db:cb:09:c9:a5:e8:a6: c6:84:2e:03:46:20:5c:64:d6:ba:d6:65:76:9c:3e: 15:ec:78:07:e8:f7:65:e6:b4:89:99:52:00:c2:c9: 8e:e0:6d:11:16:8c:49:73:de:5c:da:10:88:c4:91: fd:8e:a4:ab:57:bf:ac:08:3c:4b:7b:d9:e3:ee:45: cb:71:6e:d7:17:78:2d:c0:5d:d0:9b:63:d4:fe:97: fb:d3:09:58:32:92:a7:66:1a:ed:c7:a1:6f:11:b3: 4a:ca:b1:d1:50:93:ed:80:82:dc:a1:24:bf:c8:87: 54:91:a4:86:4d:db:9f:a0:21:10:cb:65:99:22:a5: a2:3f:d5:0d:77:63:c9:80:1e:99:c2:dc:e6:95:5b: 53:88:8b:90:a7:ab:30:d6:37:2b:48:2a:2e:35:a0: 82:8d:28:43:9d:8a:f2:fe:83:ff:3d:69:ab:47:ef: b2:0e:17:3a:ed:02:9c:4e:df:08:c5:a2:c5:58:5d: 86:64:b9:e9:fc:1a:b1:31:9a:eb:e2:1b:88:cc:eb: bc:e6:19:f3:41:d5:fd:99:4d:eb:c3:11:56:74:1b: f5:68:5b:bf:a2:ff:75:40:82:3a:f8:8d:a2:c3:10: 3e:b6:a9:4d:c9:dc:aa:a1:df:60:af:74:c0:b7:8d: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:08:2F:14:92:C7:BD:7A:3B:F2:38:D3:CF:39:1B:5E:65:D8:FD:DD X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:48:c4:04:14:f0:eb:d3:f1:d1:c2:5b:ad:11:67:d1:2b:d2: c2:75:d0:8e:92:81:a1:d6:ec:cb:00:be:54:7a:de:a9:de:c9: 24:00:55:75:66:76:e4:cf:c8:90:f9:30:fd:5d:d6:7b:80:c1: 18:ea:7a:67:2d:28:37:ee:3a:4b:13:16:b4:08:7b:91:8f:a3: e6:ea:c0:52:f3:9a:92:d0:c9:01:3b:18:f7:fc:cd:e7:e1:3c: 99:cc:3c:ba:57:88:86:d9:c5:62:fe:4a:43:a7:80:0e:8d:94: b3:0a:e4:78:8a:ce:9f:77:72:60:ff:cf:ea:a3:a1:63:7c:1e: ec:0e:a9:c0:6c:af:23:42:c9:eb:ea:15:05:db:19:7e:c3:9f: 76:f1:2e:b8:89:34:97:cd:0d:44:ab:67:c4:05:5b:60:91:05: 86:84:75:d3:b5:56:ac:79:a5:80:e9:8e:e2:52:4d:01:72:14: a0:d9:52:0a:74:0a:ba:4d:c8:e6:1b:cb:37:8b:c1:10:68:5a: bf:f6:58:95:9b:a1:66:7c:9f:42:00:39:60:24:6a:ba:f1:01: b9:db:02:9e:e2:bd:40:14:c0:8c:75:2d:41:e4:50:e2:9b:83: 68:f1:e4:a8:b5:98:a0:8f:cf:f9:c3:51:31:13:e4:37:9f:be: 1b:e3:d7:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVJzpeaUfpteMupovfgiZtro6OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNjAzMTgxNDE1NTFaFw0yNjAzMjExODM4NTFaMDMxMTAvBgNV BAMTKENDMDgyRjE0OTJDN0JEN0EzQkYyMzhEM0NGMzkxQjVFNjVEOEZEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKSyOMMLj28sJyaXopsaELgNG IFxk1rrWZXacPhXseAfo92XmtImZUgDCyY7gbREWjElz3lzaEIjEkf2OpKtXv6wI PEt72ePuRctxbtcXeC3AXdCbY9T+l/vTCVgykqdmGu3HoW8Rs0rKsdFQk+2Agtyh JL/Ih1SRpIZN25+gIRDLZZkipaI/1Q13Y8mAHpnC3OaVW1OIi5CnqzDWNytIKi41 oIKNKEOdivL+g/89aatH77IOFzrtApxO3wjFosVYXYZkuen8GrExmuviG4jM67zm GfNB1f2ZTevDEVZ0G/VoW7+i/3VAgjr4jaLDED62qU3J3Kqh32CvdMC3jciNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzAgvFJLHvXo78jjTzzkbXmXY/d0wHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlIxAQU8OvT8dHCW60RZ9Er0sJ10I6SgaHW 7MsAvlR63qneySQAVXVmduTPyJD5MP1d1nuAwRjqemctKDfuOksTFrQIe5GPo+bq wFLzmpLQyQE7GPf8zefhPJnMPLpXiIbZxWL+SkOngA6NlLMK5HiKzp93cmD/z+qj oWN8HuwOqcBsryNCyevqFQXbGX7Dn3bxLriJNJfNDUSrZ8QFW2CRBYaEddO1Vqx5 pYDpjuJSTQFyFKDZUgp0CrpNyOYbyzeLwRBoWr/2WJWboWZ8n0IAOWAkarrxAbnb Ap7ivUAUwIx1LUHkUOKbg2jx5Ki1mKCPz/nDUTET5Defvhvj1/8= -----END CERTIFICATE-----Generated at Thu Mar 19 03:13:39 2026 by rpki-client