$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: gOlt1/pTg9suynX+/PcOXbQFweu3yYURl1FqBkRyV8M= Subject key identifier: FC:5E:1C:27:CA:81:64:50:B5:30:F0:6D:80:FB:11:D3:52:03:B2:F2 Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 77D63F71926C4680C8038EC31B7B3053A0437081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: F1 Signing time: Sat 07 Mar 2026 04:01:29 +0000 Manifest this update: Sat 07 Mar 2026 03:56:29 +0000 Manifest next update: Tue 10 Mar 2026 08:45:29 +0000 Files and hashes: 1: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: EGMX0e3fwuRKNVx/1ddILkGVdkzDHiMPqaG3yNyy/X4=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d6:3f:71:92:6c:46:80:c8:03:8e:c3:1b:7b:30:53:a0:43:70:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Mar 7 03:56:29 2026 GMT Not After : Mar 10 08:45:29 2026 GMT Subject: CN=FC5E1C27CA816450B530F06D80FB11D35203B2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:d4:9d:84:56:cf:99:f4:45:98:e1:3e:dc: b4:2e:f9:83:63:74:29:53:4b:92:65:9f:e8:89:96: 7f:1d:4d:cb:12:f2:99:c6:ee:bb:aa:d0:f5:64:ed: 3b:57:79:0d:34:27:32:4e:d7:d0:e0:3b:0e:ce:90: fc:eb:6f:9c:04:58:08:1b:54:71:d2:88:ab:4f:a9: de:1b:b5:ee:87:a3:f7:c5:9e:42:42:e9:4a:47:ce: 03:43:d4:a6:08:44:ec:12:74:97:ba:62:23:db:ed: 05:55:0f:22:4e:b8:d0:d7:14:7e:a4:4b:d1:c7:b9: 8f:8a:07:ad:c4:ad:b5:da:d8:c4:63:dc:30:c8:30: a2:2c:52:8e:5b:d8:7c:40:d4:d8:35:4f:1e:ab:78: ab:b8:bc:1e:08:b3:d4:32:3f:9a:c1:de:0a:dd:1e: 14:03:52:49:06:73:90:1d:c5:6c:16:d9:b4:cb:de: 0f:72:3d:8a:66:08:ff:5c:16:64:30:39:39:ed:99: ce:94:94:37:73:df:46:dd:e7:ec:6a:fb:df:a7:e9: e5:20:0e:52:39:2c:7f:99:b0:63:cc:7a:fd:53:b2: e2:3f:3a:a9:e9:88:64:47:78:b3:1f:59:ba:a7:5b: ab:5c:7c:e4:25:60:0d:fa:32:49:d4:c4:44:2d:7b: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5E:1C:27:CA:81:64:50:B5:30:F0:6D:80:FB:11:D3:52:03:B2:F2 X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5f:43:a0:32:b3:4a:80:57:1b:e7:89:d5:81:2e:91:0a:66: ce:7e:3c:b0:33:c4:83:37:60:ab:04:b7:97:47:d8:a3:32:c4: 84:02:48:71:6a:d3:e9:fb:ea:d3:07:f1:75:49:90:0f:ee:3a: f5:7b:ed:a9:8a:47:ed:98:4c:2a:ba:7d:1f:b1:ef:32:ae:8f: 5d:a7:b8:99:57:23:94:47:36:91:7f:d7:64:4e:0e:a3:43:6e: cf:cd:50:1b:d2:a5:8d:01:bf:3d:c0:da:4c:b4:ad:4c:3d:7c: 09:12:ab:06:90:13:43:67:77:b4:d3:4b:f3:f9:64:07:9d:39: 77:9a:4b:47:32:3a:6c:69:5d:9c:3a:30:20:e3:01:99:08:b9: cc:35:21:02:32:21:13:d6:26:8e:d5:6f:4f:30:05:72:9a:9d: fe:21:8b:1e:31:b5:ab:c2:d8:f7:b5:e8:cc:ff:64:b2:9d:6f: 69:52:d5:05:ed:2e:59:5d:a4:3e:a3:81:f1:69:11:25:cf:61: 53:66:66:76:d1:5d:4f:6c:5e:f0:93:ae:fa:c5:df:16:bc:13: 15:da:65:4a:5c:a6:b9:0c:1e:e6:dc:85:66:9f:9b:16:67:44: ad:f6:71:1c:9e:1f:9e:97:7f:79:84:43:a2:c3:d6:a7:1a:f3: b1:d7:f2:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9Y/cZJsRoDIA47DG3swU6BDcIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNjAzMDcwMzU2MjlaFw0yNjAzMTAwODQ1MjlaMDMxMTAvBgNV BAMTKEZDNUUxQzI3Q0E4MTY0NTBCNTMwRjA2RDgwRkIxMUQzNTIwM0IyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEitSdhFbPmfRFmOE+3LQu+YNj dClTS5Jln+iJln8dTcsS8pnG7ruq0PVk7TtXeQ00JzJO19DgOw7OkPzrb5wEWAgb VHHSiKtPqd4bte6Ho/fFnkJC6UpHzgND1KYIROwSdJe6YiPb7QVVDyJOuNDXFH6k S9HHuY+KB63ErbXa2MRj3DDIMKIsUo5b2HxA1Ng1Tx6reKu4vB4Is9QyP5rB3grd HhQDUkkGc5AdxWwW2bTL3g9yPYpmCP9cFmQwOTntmc6UlDdz30bd5+xq+9+n6eUg DlI5LH+ZsGPMev1TsuI/OqnpiGRHeLMfWbqnW6tcfOQlYA36MknUxEQtexN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/F4cJ8qBZFC1MPBtgPsR01IDsvIwHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1fQ6Ays0qAVxvnidWBLpEKZs5+PLAzxIM3 YKsEt5dH2KMyxIQCSHFq0+n76tMH8XVJkA/uOvV77amKR+2YTCq6fR+x7zKuj12n uJlXI5RHNpF/12RODqNDbs/NUBvSpY0Bvz3A2ky0rUw9fAkSqwaQE0Nnd7TTS/P5 ZAedOXeaS0cyOmxpXZw6MCDjAZkIucw1IQIyIRPWJo7Vb08wBXKanf4hix4xtavC 2Pe16Mz/ZLKdb2lS1QXtLlldpD6jgfFpESXPYVNmZnbRXU9sXvCTrvrF3xa8ExXa ZUpcprkMHubchWafmxZnRK32cRyeH56Xf3mEQ6LD1qca87HX8gA= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:34 2026 by rpki-client