$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: z+NaSTqZephb1d/gCGNPF+kuoIMGerVBUwnbgbhGvys= Subject key identifier: 1C:9C:47:94:20:26:87:5B:8D:51:4C:D6:26:E0:FF:AB:A6:AB:B6:DF Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 20D7A7668D108558C65019D5BC0BFC3E29F72EA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0367 Signing time: Sat 23 Aug 2025 06:32:06 +0000 Manifest this update: Sat 23 Aug 2025 06:27:06 +0000 Manifest next update: Tue 26 Aug 2025 14:33:06 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: mirPeFgLwSFzToUocur1rBeEfSlWeHW4v725+s/Af4M=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d7:a7:66:8d:10:85:58:c6:50:19:d5:bc:0b:fc:3e:29:f7:2e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Aug 23 06:27:06 2025 GMT Not After : Aug 26 14:33:06 2025 GMT Subject: CN=1C9C47942026875B8D514CD626E0FFABA6ABB6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ab:72:29:f4:c9:9f:78:2e:20:4f:2b:3b:53: 02:8f:d4:06:2d:cc:1c:dc:8a:5d:a3:0b:c5:86:ce: 49:22:ba:02:2e:df:0c:69:02:e1:dd:ae:5a:ed:f6: 21:41:52:f5:71:a5:fa:e3:18:9e:46:17:0a:91:05: 66:51:8a:6b:28:74:13:44:8b:19:e7:5d:17:2f:37: f5:eb:f1:f1:09:d0:e7:04:a5:b5:14:6a:50:1f:11: 9d:6a:ad:30:7f:f5:e9:92:22:0b:ef:f0:fd:b8:9e: 1f:3b:a4:cb:8b:38:8a:41:11:f2:f0:a7:ed:48:2b: fc:c6:d1:e9:e9:bd:1b:8d:10:35:b7:31:af:e1:d0: ff:91:0f:3b:dc:02:0b:c2:d1:92:6c:86:15:4a:e9: ba:1f:8f:36:a6:26:cc:56:74:5f:a8:de:5f:d5:76: 1e:de:cb:3a:be:f8:0a:b7:63:64:f3:7e:af:d9:d9: e6:60:9f:ee:55:97:c8:d0:4e:9a:ee:e0:3b:3f:43: a6:e7:87:67:cf:9d:55:46:f6:fb:ca:4e:91:1d:74: 1e:b3:aa:71:cb:29:78:31:3a:1a:0e:09:e2:8f:93: 60:ff:dd:4b:83:9d:5c:00:31:6a:36:de:96:80:16: f3:f4:65:18:43:70:b3:dc:aa:12:7b:a9:f9:6f:c9: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9C:47:94:20:26:87:5B:8D:51:4C:D6:26:E0:FF:AB:A6:AB:B6:DF X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:33:8d:7c:fc:4d:30:ff:47:91:e6:fe:fd:0f:84:41:8d:d3: 31:2c:bc:68:a8:ec:fe:39:ff:d9:eb:14:39:94:f2:85:9e:06: 0d:68:09:39:af:09:b3:7d:16:76:75:11:2f:cf:ff:c9:2f:e3: dd:d2:66:86:2f:7c:bf:27:1c:6b:b2:cd:40:c5:51:d7:d6:ca: 82:36:ba:7c:33:a4:04:d4:23:6c:25:4f:32:a7:f0:64:8a:20: a9:22:6b:0a:20:e9:aa:dd:15:3c:47:62:95:39:64:a5:9b:eb: ea:ca:a6:e3:aa:63:f3:a8:82:2d:98:04:f7:e1:23:34:59:44: 57:d4:8d:4b:9d:2d:b9:7b:5a:be:7c:b0:d3:a1:7b:f1:0c:2d: f9:ff:9f:d1:39:ed:c8:e0:0f:ec:36:b0:ee:40:8c:1c:84:6d: 5f:99:9f:d4:1c:d9:21:42:23:84:94:bc:74:73:3c:a8:a9:76: 84:15:f6:64:6c:35:73:f4:f2:1e:50:b6:ce:17:91:8d:7a:d5: fb:b8:d8:42:86:d3:95:36:4c:5c:0b:bd:62:04:0f:23:1b:0c: 43:e4:0b:ab:a2:cd:2b:fb:54:eb:64:81:b9:28:9d:3e:0b:09: 12:44:30:50:ed:cf:37:10:55:d1:1e:ac:56:d0:83:06:d9:03: ca:63:bf:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINenZo0QhVjGUBnVvAv8Pin3LqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTA4MjMwNjI3MDZaFw0yNTA4MjYxNDMzMDZaMDMxMTAvBgNV BAMTKDFDOUM0Nzk0MjAyNjg3NUI4RDUxNENENjI2RTBGRkFCQTZBQkI2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpq3Ip9MmfeC4gTys7UwKP1AYt zBzcil2jC8WGzkkiugIu3wxpAuHdrlrt9iFBUvVxpfrjGJ5GFwqRBWZRimsodBNE ixnnXRcvN/Xr8fEJ0OcEpbUUalAfEZ1qrTB/9emSIgvv8P24nh87pMuLOIpBEfLw p+1IK/zG0enpvRuNEDW3Ma/h0P+RDzvcAgvC0ZJshhVK6bofjzamJsxWdF+o3l/V dh7eyzq++Aq3Y2Tzfq/Z2eZgn+5Vl8jQTpru4Ds/Q6bnh2fPnVVG9vvKTpEddB6z qnHLKXgxOhoOCeKPk2D/3UuDnVwAMWo23paAFvP0ZRhDcLPcqhJ7qflvycLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHJxHlCAmh1uNUUzWJuD/q6artt8wHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIzjXz8TTD/R5Hm/v0PhEGN0zEsvGio7P45 /9nrFDmU8oWeBg1oCTmvCbN9FnZ1ES/P/8kv493SZoYvfL8nHGuyzUDFUdfWyoI2 unwzpATUI2wlTzKn8GSKIKkiawog6ardFTxHYpU5ZKWb6+rKpuOqY/Oogi2YBPfh IzRZRFfUjUudLbl7Wr58sNOhe/EMLfn/n9E57cjgD+w2sO5AjByEbV+Zn9Qc2SFC I4SUvHRzPKipdoQV9mRsNXP08h5Qts4XkY161fu42EKG05U2TFwLvWIEDyMbDEPk C6uizSv7VOtkgbkonT4LCRJEMFDtzzcQVdEerFbQgwbZA8pjv6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 10:04:23 2025 by rpki-client