$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: +twFnGvOmW2LxpGyakAKFL2IJSSCSZyFXQ+XkwaVzXs= Subject key identifier: ED:60:E3:00:6F:CE:89:C5:F2:DF:ED:8F:BD:8F:36:D9:51:FD:3C:B2 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 309743B8D493A5F6FDB3E82EF08B712929EF3FC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 03C3 Signing time: Sat 14 Mar 2026 17:42:19 +0000 Manifest this update: Sat 14 Mar 2026 17:37:19 +0000 Manifest next update: Tue 17 Mar 2026 18:26:19 +0000 Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: hvUXOReMrQ3DCf0Qm4MoQmjjiS09sVCzS98Qs2OkopY=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: ULJuo4JlKwtfWqpN2WxBIIizTww0+8EhBVz/p9sPJ/4=) 3: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: T2FC4GUgBOOvn8cfLX5FBNrBgts6VDkhoHZAmzMq3ZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 18:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:97:43:b8:d4:93:a5:f6:fd:b3:e8:2e:f0:8b:71:29:29:ef:3f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Mar 14 17:37:19 2026 GMT Not After : Mar 17 18:26:19 2026 GMT Subject: CN=ED60E3006FCE89C5F2DFED8FBD8F36D951FD3CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:1e:e9:ab:e9:97:ba:bd:6c:d0:44:18:22: 14:53:f0:ce:34:c1:99:eb:5f:2f:21:88:6e:0d:d1: df:b3:6d:47:41:d1:9d:fa:b2:4f:36:e5:62:d8:c6: 03:02:8b:2c:58:9f:50:51:2f:e0:db:ff:99:e7:75: 55:a2:78:d2:41:b7:4f:5d:00:aa:78:3a:2b:72:4d: 1e:f9:e3:63:c3:1f:74:e8:7d:54:78:bf:96:61:e1: 09:ee:47:76:b0:b2:b7:9f:9e:05:fb:46:87:2b:ad: 99:d4:bd:e9:59:9f:a9:ff:60:d6:67:22:30:9d:97: ef:41:61:38:9c:f7:a1:9e:4b:54:cf:3d:95:56:fc: ec:42:c8:d3:cb:e6:0d:98:07:e1:24:22:d9:cc:0e: 9e:5d:1b:a6:34:5a:84:9a:b7:56:f2:e6:b8:0c:99: e8:a9:f8:97:50:78:d2:49:22:8b:2f:9c:f8:8a:8e: 05:10:b6:e4:ad:e5:79:49:25:ea:ce:ec:b1:1e:bc: ad:f2:97:42:f3:c5:a4:1d:79:5b:42:71:0f:b6:83: ab:41:d8:ec:4a:14:96:ac:13:bf:29:ad:f3:2c:e7: 45:ed:a7:53:fe:49:f5:00:ce:82:c4:a8:09:f8:4d: 5b:3a:b5:67:a5:1d:86:ce:12:22:53:1d:82:44:31: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:E3:00:6F:CE:89:C5:F2:DF:ED:8F:BD:8F:36:D9:51:FD:3C:B2 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:67:c6:98:6b:7c:5f:53:ad:07:c3:b0:11:ae:be:fa:cc:56: f4:51:fd:fc:f5:23:11:96:ce:bf:93:8b:93:64:27:ab:46:84: 2c:c8:d3:d4:bc:23:a2:dc:60:de:b7:d9:4c:de:44:5f:c3:22: d8:ef:90:38:8d:c8:2f:a6:f4:98:af:a4:86:74:59:66:b3:00: 8d:ad:66:98:54:a7:7a:70:4d:f0:31:6d:84:17:8f:e6:8e:bb: bc:0b:55:16:06:3a:50:c1:17:da:d1:30:bb:6b:2b:b7:e2:b6: 23:29:be:12:e7:c3:fd:88:a2:c6:26:2e:00:87:e6:51:28:87: 65:18:03:18:92:15:3a:5b:65:44:f9:97:3b:36:25:fc:11:f8: c0:0f:35:5e:82:be:66:84:1d:0a:2a:ef:39:bf:01:1a:af:79: 90:58:7a:ba:77:1f:75:4d:70:20:20:1c:b6:02:dc:77:b3:76: 26:b5:b5:84:22:3f:8d:3a:91:68:05:b6:96:c7:1f:0a:83:a9: c7:07:1a:f6:bb:2d:96:2b:c5:4f:f6:4f:f1:3c:cf:4f:26:a7: 15:c3:5f:e6:1c:86:fe:3f:30:08:2e:ee:06:5d:cf:80:fa:2e: 4b:4f:94:b7:62:0e:06:4e:1b:77:0c:7f:df:12:91:52:52:ca: 24:cc:f5:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJdDuNSTpfb9s+gu8ItxKSnvP8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNjAzMTQxNzM3MTlaFw0yNjAzMTcxODI2MTlaMDMxMTAvBgNV BAMTKEVENjBFMzAwNkZDRTg5QzVGMkRGRUQ4RkJEOEYzNkQ5NTFGRDNDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6h7pq+mXur1s0EQYIhRT8M40 wZnrXy8hiG4N0d+zbUdB0Z36sk825WLYxgMCiyxYn1BRL+Db/5nndVWieNJBt09d AKp4OityTR7542PDH3TofVR4v5Zh4QnuR3awsrefngX7RocrrZnUvelZn6n/YNZn IjCdl+9BYTic96GeS1TPPZVW/OxCyNPL5g2YB+EkItnMDp5dG6Y0WoSat1by5rgM meip+JdQeNJJIosvnPiKjgUQtuSt5XlJJerO7LEevK3yl0LzxaQdeVtCcQ+2g6tB 2OxKFJasE78prfMs50Xtp1P+SfUAzoLEqAn4TVs6tWelHYbOEiJTHYJEMQT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7WDjAG/OicXy3+2PvY822VH9PLIwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpnxphrfF9TrQfDsBGuvvrMVvRR/fz1IxGW zr+Ti5NkJ6tGhCzI09S8I6LcYN632UzeRF/DItjvkDiNyC+m9JivpIZ0WWazAI2t ZphUp3pwTfAxbYQXj+aOu7wLVRYGOlDBF9rRMLtrK7fitiMpvhLnw/2IosYmLgCH 5lEoh2UYAxiSFTpbZUT5lzs2JfwR+MAPNV6CvmaEHQoq7zm/ARqveZBYerp3H3VN cCAgHLYC3Hezdia1tYQiP406kWgFtpbHHwqDqccHGva7LZYrxU/2T/E8z08mpxXD X+Ychv4/MAgu7gZdz4D6LktPlLdiDgZOG3cMf98SkVJSyiTM9c8= -----END CERTIFICATE-----Generated at Sat Mar 14 21:56:19 2026 by rpki-client