$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: M9vmd2ibiZ3yyUg1lkbeGRHMhPGyiyFvHHhKsQFSXEs= Subject key identifier: 0E:68:45:32:14:24:39:4E:0F:70:E8:0A:2A:4D:2D:D9:9D:94:3D:EF Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 7D7EBD545B6588D77CD66E6EF82491B9B7D79D71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 03D6 Signing time: Sun 26 Apr 2026 20:52:16 +0000 Manifest this update: Sun 26 Apr 2026 20:47:16 +0000 Manifest next update: Thu 30 Apr 2026 07:18:16 +0000 Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: hvUXOReMrQ3DCf0Qm4MoQmjjiS09sVCzS98Qs2OkopY=) 2: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: DZinlZ9zLC2hZYIWpwQLi5mcN6pARGrPqy2z22yDQm4=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: ULJuo4JlKwtfWqpN2WxBIIizTww0+8EhBVz/p9sPJ/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 07:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7e:bd:54:5b:65:88:d7:7c:d6:6e:6e:f8:24:91:b9:b7:d7:9d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Apr 26 20:47:16 2026 GMT Not After : Apr 30 07:18:16 2026 GMT Subject: CN=0E6845321424394E0F70E80A2A4D2DD99D943DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:81:34:69:73:b9:17:f5:74:8b:e1:9b:0b: 2a:25:d1:c6:c6:8a:a7:a7:ae:22:89:ae:95:75:a9: 54:bf:66:ef:74:31:d0:ad:3d:19:ec:61:f9:98:8e: 5a:69:b2:66:7c:af:7b:94:30:ec:a0:78:76:4d:a5: a1:17:ca:1e:e6:6d:5a:bd:ac:f0:5d:56:32:10:00: c6:2e:69:92:5f:9e:89:f7:3f:56:64:e5:a3:56:da: 89:2b:be:cc:51:a1:a3:b6:70:5d:33:fc:e2:63:5a: 1f:0e:e4:1b:94:d0:ae:0e:0b:e6:3e:b0:08:2d:3e: 1e:d8:16:0a:db:d6:ef:48:07:b1:35:b9:b1:e6:57: 18:bd:f3:73:49:e8:ea:d7:6f:7a:8f:7d:0c:6f:d5: 11:3a:ab:ad:c7:7c:63:95:1c:46:69:82:7f:24:c6: d8:6b:6c:17:4e:1e:43:fe:13:4d:83:30:0e:a7:9d: 54:ed:60:7b:1d:ad:17:9b:ae:f9:18:ae:74:80:b5: 77:32:b9:37:0b:da:54:b0:56:dd:c0:57:a6:f1:69: 56:35:b5:0b:82:ea:12:38:c6:32:8d:0d:92:47:71: f9:3c:5b:60:2a:0b:f8:df:65:f2:17:59:69:6a:02: 31:22:03:b8:4f:ff:dd:fe:b5:61:14:8d:10:f6:b7: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:45:32:14:24:39:4E:0F:70:E8:0A:2A:4D:2D:D9:9D:94:3D:EF X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:94:28:37:61:20:4f:6c:37:61:c1:7f:08:7c:8e:fa:67:d8: 36:2f:a5:0a:4c:1d:c8:af:bb:b9:cf:38:68:e7:15:e6:8e:6b: ca:22:20:e0:d4:5d:df:d8:cd:05:74:db:ab:b6:94:25:5f:9e: ca:0b:99:86:2a:da:a9:e9:d9:36:41:38:57:ab:c6:0b:14:c0: e0:51:08:93:51:04:fc:c1:c0:a6:9a:a5:ca:8c:b1:ed:ef:28: 97:32:26:48:72:13:56:99:ff:28:10:63:e2:e4:ce:97:e3:e0: c5:e3:99:bb:67:bd:47:52:10:ea:ff:85:fd:49:93:d1:97:f0: 69:aa:43:c3:21:45:74:c5:ce:12:04:94:59:87:42:6d:23:41: 2a:55:ca:93:4d:b5:65:39:65:57:58:11:ea:76:7a:94:fc:b1: bb:36:31:25:92:fa:df:e7:76:f3:3e:df:98:3d:99:62:46:6c: 92:b2:1f:90:8f:cf:2e:97:21:a7:ee:a5:81:c1:4d:86:e5:ff: 39:58:4e:44:40:7a:ea:07:d2:d5:23:61:82:2d:51:29:53:16: a4:78:6d:6a:8a:57:8b:0e:0c:9b:b9:42:35:67:81:e1:a7:cc: d4:31:4b:14:99:bc:3d:bd:24:c8:fe:2d:b3:84:da:6f:21:0a: 42:31:4c:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfX69VFtliNd81m5u+CSRubfXnXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNjA0MjYyMDQ3MTZaFw0yNjA0MzAwNzE4MTZaMDMxMTAvBgNV BAMTKDBFNjg0NTMyMTQyNDM5NEUwRjcwRTgwQTJBNEQyREQ5OUQ5NDNERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aIE0aXO5F/V0i+GbCyol0cbG iqenriKJrpV1qVS/Zu90MdCtPRnsYfmYjlppsmZ8r3uUMOygeHZNpaEXyh7mbVq9 rPBdVjIQAMYuaZJfnon3P1Zk5aNW2okrvsxRoaO2cF0z/OJjWh8O5BuU0K4OC+Y+ sAgtPh7YFgrb1u9IB7E1ubHmVxi983NJ6OrXb3qPfQxv1RE6q63HfGOVHEZpgn8k xthrbBdOHkP+E02DMA6nnVTtYHsdrRebrvkYrnSAtXcyuTcL2lSwVt3AV6bxaVY1 tQuC6hI4xjKNDZJHcfk8W2AqC/jfZfIXWWlqAjEiA7hP/93+tWEUjRD2t/iRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmhFMhQkOU4PcOgKKk0t2Z2UPe8wHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiUKDdhIE9sN2HBfwh8jvpn2DYvpQpMHciv u7nPOGjnFeaOa8oiIODUXd/YzQV026u2lCVfnsoLmYYq2qnp2TZBOFerxgsUwOBR CJNRBPzBwKaapcqMse3vKJcyJkhyE1aZ/ygQY+Lkzpfj4MXjmbtnvUdSEOr/hf1J k9GX8GmqQ8MhRXTFzhIElFmHQm0jQSpVypNNtWU5ZVdYEep2epT8sbs2MSWS+t/n dvM+35g9mWJGbJKyH5CPzy6XIafupYHBTYbl/zlYTkRAeuoH0tUjYYItUSlTFqR4 bWqKV4sODJu5QjVngeGnzNQxSxSZvD29JMj+LbOE2m8hCkIxTIg= -----END CERTIFICATE-----Generated at Wed Apr 29 00:03:11 2026 by rpki-client