$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: Cp4DjRDuJO0uQnu12quCNmJ0DZ+rgHUAZlFRxPIVglk= Subject key identifier: 1B:B6:AC:FF:AD:1B:60:06:9C:38:4D:28:28:11:AC:8D:2A:A6:7D:69 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 48284602A35E09DF4C8336BF2B20A10589CE400D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 034E Signing time: Fri 27 Jun 2025 15:21:57 +0000 Manifest this update: Fri 27 Jun 2025 15:16:57 +0000 Manifest next update: Mon 30 Jun 2025 22:46:57 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: dFKimwa628fU695UUqnZFciTQSIXCe1QiGk2eAr9jA0=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 22:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:28:46:02:a3:5e:09:df:4c:83:36:bf:2b:20:a1:05:89:ce:40:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Jun 27 15:16:57 2025 GMT Not After : Jun 30 22:46:57 2025 GMT Subject: CN=1BB6ACFFAD1B60069C384D282811AC8D2AA67D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:eb:30:d6:4a:aa:37:87:b8:d1:70:ac:f8:63: 57:5d:ed:88:98:61:a8:cd:bb:b5:54:8c:a0:33:92: be:2b:6c:f2:76:c5:fc:f2:33:0b:a0:81:d9:c9:14: d8:b3:e6:a6:84:50:22:db:5f:5b:cf:32:d9:58:1d: 7a:3d:31:ae:91:33:01:c3:ca:5a:32:98:1d:59:4f: 5e:27:c2:47:97:b7:8c:2e:c0:fa:e0:2b:03:dd:69: 5e:db:65:92:d1:f3:b4:14:5f:c5:6c:69:14:23:d1: 66:e3:b0:8a:ac:b0:a6:d2:87:54:57:25:8e:78:59: 17:5e:fe:99:e8:25:c5:ba:79:e0:66:b6:57:5b:f6: cf:08:6d:22:88:1c:93:58:9f:02:6b:92:6e:99:00: b1:88:51:ce:96:a8:1f:31:79:10:9d:5c:af:a5:01: 61:a9:31:22:ee:fb:e2:4f:5a:53:3f:09:37:79:c6: 96:4a:f7:62:42:36:59:d7:4b:c1:d8:40:c4:1f:47: f6:c8:d9:dd:c9:e1:3c:05:ba:d1:37:51:a1:07:26: 03:32:bd:02:18:68:42:ea:ec:dc:de:b9:1c:46:73: c8:b7:88:2b:68:ca:6a:16:25:85:8f:76:51:87:23: ef:8b:b2:b0:fa:fa:fc:e6:2a:5f:3e:42:48:f6:df: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B6:AC:FF:AD:1B:60:06:9C:38:4D:28:28:11:AC:8D:2A:A6:7D:69 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:16:ee:3c:db:2d:10:1c:da:ff:33:1d:15:83:5c:38:d6: b8:e1:bb:e3:51:7c:81:67:a2:9b:ab:c5:d7:13:92:8a:10:f7: dd:27:5a:07:0e:7b:d9:6a:da:3b:b9:90:05:4d:e1:c9:70:7a: f0:06:16:ee:ae:a4:d1:52:2e:29:06:5b:04:9e:11:ce:04:40: 19:04:a4:97:71:a3:cb:f0:72:37:a9:50:70:70:70:73:9e:41: af:c1:24:2d:66:98:60:3c:7c:81:ea:65:b7:95:c8:c5:a9:fc: c3:c8:a7:76:55:00:08:09:c1:ed:01:55:ee:9a:89:c6:3c:42: 0d:ef:36:9b:f3:b6:21:07:54:a2:d3:8b:af:1d:d2:62:8d:e7: f3:4f:0c:75:1f:96:bd:48:d8:39:8d:c3:64:d8:e4:ad:91:a7: 00:1d:d7:e8:ab:89:50:12:66:14:21:00:86:5d:08:fa:26:11: 00:d5:75:76:18:a4:11:3f:0d:5b:95:6a:41:a4:3e:1c:92:a3: d8:68:fa:7d:8f:c1:6c:6c:31:48:ab:38:9f:d5:1a:e6:e0:8b: 00:09:00:0b:82:a3:d5:12:fa:3c:14:ff:e1:0d:7d:79:6b:9f: 81:99:2e:cf:bb:69:af:3e:18:c3:b8:91:81:62:49:07:a2:8f: 77:fa:87:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSChGAqNeCd9Mgza/KyChBYnOQA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTA2MjcxNTE2NTdaFw0yNTA2MzAyMjQ2NTdaMDMxMTAvBgNV BAMTKDFCQjZBQ0ZGQUQxQjYwMDY5QzM4NEQyODI4MTFBQzhEMkFBNjdENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6zDWSqo3h7jRcKz4Y1dd7YiY YajNu7VUjKAzkr4rbPJ2xfzyMwuggdnJFNiz5qaEUCLbX1vPMtlYHXo9Ma6RMwHD yloymB1ZT14nwkeXt4wuwPrgKwPdaV7bZZLR87QUX8VsaRQj0WbjsIqssKbSh1RX JY54WRde/pnoJcW6eeBmtldb9s8IbSKIHJNYnwJrkm6ZALGIUc6WqB8xeRCdXK+l AWGpMSLu++JPWlM/CTd5xpZK92JCNlnXS8HYQMQfR/bI2d3J4TwFutE3UaEHJgMy vQIYaELq7NzeuRxGc8i3iCtoymoWJYWPdlGHI++LsrD6+vzmKl8+Qkj23xYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG7as/60bYAacOE0oKBGsjSqmfWkwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOZFu482y0QHNr/Mx0Vg1w41rjhu+NRfIFn opurxdcTkooQ990nWgcOe9lq2ju5kAVN4clwevAGFu6upNFSLikGWwSeEc4EQBkE pJdxo8vwcjepUHBwcHOeQa/BJC1mmGA8fIHqZbeVyMWp/MPIp3ZVAAgJwe0BVe6a icY8Qg3vNpvztiEHVKLTi68d0mKN5/NPDHUflr1I2DmNw2TY5K2RpwAd1+iriVAS ZhQhAIZdCPomEQDVdXYYpBE/DVuVakGkPhySo9ho+n2PwWxsMUirOJ/VGubgiwAJ AAuCo9US+jwU/+ENfXlrn4GZLs+7aa8+GMO4kYFiSQeij3f6hyI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:00 2025 by rpki-client