$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: esD56b5JcoiNuiYKxTozTdVjNslWYtrc5w/N1d8N640= Subject key identifier: B5:32:7F:29:24:A1:21:EB:FA:C9:CF:3C:9C:B7:2C:67:14:89:2E:BC Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 04B94CD00A73AD94FBB86B0D248B3DEE6AA0B5CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0381 Signing time: Mon 20 Oct 2025 15:32:02 +0000 Manifest this update: Mon 20 Oct 2025 15:27:02 +0000 Manifest next update: Fri 24 Oct 2025 00:12:02 +0000 Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) 2: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) 3: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: lswV83FUCMyAKaDGZIELIufGYxCAXBT6ZK33UKHy3Ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b9:4c:d0:0a:73:ad:94:fb:b8:6b:0d:24:8b:3d:ee:6a:a0:b5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Oct 20 15:27:02 2025 GMT Not After : Oct 24 00:12:02 2025 GMT Subject: CN=B5327F2924A121EBFAC9CF3C9CB72C6714892EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:3f:a9:b5:24:1a:dc:a7:b5:e4:16:5e:16: 81:3d:dc:04:c1:ae:41:b0:b5:25:a2:0c:a5:84:20: 46:ea:c4:58:78:99:49:40:e2:9f:d5:79:73:a5:1b: 75:4f:63:5d:58:e6:b7:ec:63:07:3b:ad:99:3d:39: c6:69:fd:85:72:51:de:fb:05:bd:73:85:64:a5:f9: 89:08:21:13:48:28:b9:b9:56:f2:0a:74:46:cb:3a: ac:3e:ea:68:af:cb:39:79:1b:2d:3e:0b:ab:10:7d: c6:c2:9f:f9:b0:47:68:95:25:b9:a4:01:ba:e9:82: 05:4c:10:38:ca:cc:8d:c5:1b:73:60:9c:74:64:f1: 15:b8:f4:98:12:bf:c8:14:6c:19:71:58:1f:9b:2b: fd:ef:b4:1c:8f:9a:0e:df:79:4d:e7:53:2d:b6:d9: 34:e1:c3:0e:99:e5:bd:71:9c:51:6c:f0:a2:d0:13: 61:7b:5f:3d:d5:46:ce:c5:a8:53:44:a8:15:8b:b3: 00:2d:c1:21:5d:e7:79:ef:22:66:22:ed:bc:67:8a: 37:41:64:7b:c8:8c:8a:05:90:b6:f0:72:dd:14:98: 8e:85:b8:50:87:16:25:ca:d2:6e:5f:cb:8c:01:c2: 73:88:f2:8b:58:49:e8:ab:af:d2:4f:91:85:c5:e3: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:7F:29:24:A1:21:EB:FA:C9:CF:3C:9C:B7:2C:67:14:89:2E:BC X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:11:37:cc:70:5c:b0:80:06:db:e6:1c:08:90:a1:86:fb:77: ac:b3:51:e2:78:00:64:fb:e5:e3:89:5c:f1:84:75:36:1c:10: 88:59:74:d0:70:fa:c0:83:e1:4e:0d:b0:b8:1a:9d:6e:99:57: 0f:7b:7e:6c:94:62:90:4a:ac:09:ab:46:4d:7a:58:37:d5:78: 89:8a:d2:ab:16:5c:74:ce:28:9b:4b:f8:96:3b:a7:eb:1f:10: d6:6a:df:31:4f:bb:3d:a1:2f:f4:35:dd:82:d6:b5:66:49:02: c9:4d:9f:d8:92:d7:e4:99:71:98:05:be:9f:b0:9f:9f:0e:d0: a9:ed:98:76:ba:e6:b1:f2:b8:2b:7b:b3:b4:4f:06:12:91:77: 89:af:eb:50:ad:8e:db:31:fa:61:01:8e:2e:09:a7:71:ac:04: 48:ed:0d:f2:9b:a1:eb:ce:f9:55:78:fe:2d:1b:b8:66:70:45: f7:30:45:9f:d7:cc:eb:13:c4:e1:72:41:cc:a8:b3:10:d3:c7: f6:de:0a:e8:14:bd:bf:66:48:e4:92:34:ec:af:78:7b:1b:00: ba:a9:da:11:e1:e3:25:02:a3:28:6e:db:9d:9a:72:a3:c9:68: d0:7e:97:82:8d:a4:93:d5:fb:28:1f:da:e8:51:20:54:52:2e: 57:94:3f:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLlM0ApzrZT7uGsNJIs97mqgtcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTEwMjAxNTI3MDJaFw0yNTEwMjQwMDEyMDJaMDMxMTAvBgNV BAMTKEI1MzI3RjI5MjRBMTIxRUJGQUM5Q0YzQzlDQjcyQzY3MTQ4OTJFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lj+ptSQa3Ke15BZeFoE93ATB rkGwtSWiDKWEIEbqxFh4mUlA4p/VeXOlG3VPY11Y5rfsYwc7rZk9OcZp/YVyUd77 Bb1zhWSl+YkIIRNIKLm5VvIKdEbLOqw+6mivyzl5Gy0+C6sQfcbCn/mwR2iVJbmk AbrpggVMEDjKzI3FG3NgnHRk8RW49JgSv8gUbBlxWB+bK/3vtByPmg7feU3nUy22 2TThww6Z5b1xnFFs8KLQE2F7Xz3VRs7FqFNEqBWLswAtwSFd53nvImYi7bxnijdB ZHvIjIoFkLbwct0UmI6FuFCHFiXK0m5fy4wBwnOI8otYSeirr9JPkYXF477lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTJ/KSShIev6yc88nLcsZxSJLrwwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMRN8xwXLCABtvmHAiQoYb7d6yzUeJ4AGT7 5eOJXPGEdTYcEIhZdNBw+sCD4U4NsLganW6ZVw97fmyUYpBKrAmrRk16WDfVeImK 0qsWXHTOKJtL+JY7p+sfENZq3zFPuz2hL/Q13YLWtWZJAslNn9iS1+SZcZgFvp+w n58O0KntmHa65rHyuCt7s7RPBhKRd4mv61Ctjtsx+mEBji4Jp3GsBEjtDfKboevO +VV4/i0buGZwRfcwRZ/XzOsTxOFyQcyosxDTx/beCugUvb9mSOSSNOyveHsbALqp 2hHh4yUCoyhu252acqPJaNB+l4KNpJPV+ygf2uhRIFRSLleUP4Q= -----END CERTIFICATE-----Generated at Tue Oct 21 03:11:35 2025 by rpki-client