$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: /WKJmDJLzDe/hyhXijsoutWunpgs3uhi0oFrX9K3noo= Subject key identifier: 27:CB:1E:2C:BB:8A:A6:7A:BF:6A:48:9F:1E:39:E5:69:76:3F:BA:53 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 392C00991059CC9366EFFDC0E0019291BDB13345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 0462 Signing time: Wed 02 Jul 2025 10:51:57 +0000 Manifest this update: Wed 02 Jul 2025 10:46:57 +0000 Manifest next update: Sat 05 Jul 2025 11:22:57 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=) 2: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=) 3: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=) 4: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: R/8dgSZO1WlzdhzdEvSTDAGtPJT1tkbluWnB3S3tMnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2c:00:99:10:59:cc:93:66:ef:fd:c0:e0:01:92:91:bd:b1:33:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Jul 2 10:46:57 2025 GMT Not After : Jul 5 11:22:57 2025 GMT Subject: CN=27CB1E2CBB8AA67ABF6A489F1E39E569763FBA53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:ec:74:cf:df:c7:63:a8:48:b5:ab:b5:e7: db:dd:18:48:43:51:f8:ab:c5:31:d4:5c:97:55:a0: d5:70:32:18:34:96:c7:d5:90:f7:e1:b3:64:0c:9a: f2:d4:1e:0e:bf:27:03:f1:7f:29:47:d9:8d:b4:d9: 54:c2:70:8b:fb:5f:30:5f:a7:d9:d1:3c:86:43:b7: e9:5a:9f:bb:f9:e8:5b:87:f5:e1:50:9e:de:de:77: 6b:8a:b8:23:8d:c8:9c:d7:2d:91:7b:78:14:6e:68: 7c:9f:03:c4:04:15:e4:55:45:b3:98:ac:7c:3a:a5: 19:66:80:c8:25:6c:7d:95:ea:f9:c5:01:63:52:8a: d5:52:cf:8a:4b:ca:c9:ea:49:dc:02:ee:5b:df:d9: 60:86:e5:f0:23:ae:e3:57:c7:8c:ea:3f:24:97:43: 6c:36:f6:dd:3d:75:ed:cc:2e:43:dd:fb:81:db:47: 31:f8:3d:7b:ce:bf:45:01:c3:4a:a0:ba:c3:8c:d5: 8d:36:2c:c9:36:89:08:6a:70:86:59:65:d5:f2:da: 5d:9a:ca:dd:64:c7:5d:a0:e5:9a:f8:ec:1f:24:9a: 9b:b4:97:c5:b3:76:0e:d7:22:85:d6:8c:06:e3:38: b6:4b:c2:07:32:a4:df:46:96:d1:6d:1c:f8:a5:e2: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CB:1E:2C:BB:8A:A6:7A:BF:6A:48:9F:1E:39:E5:69:76:3F:BA:53 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d5:05:bf:11:df:c8:9c:14:12:ff:c8:cb:db:36:2d:ee:61: d4:4f:9a:63:1b:c5:34:68:89:97:ed:cb:ba:03:85:f0:28:fb: bc:23:85:8c:32:52:c5:7d:c7:e0:c6:f0:c1:2a:41:03:ae:a3: e2:38:3b:23:d0:a2:cc:be:bd:b3:a2:c4:b8:89:de:3d:02:e3: ab:63:3e:9e:a5:ee:54:02:cb:9b:5c:7b:28:36:d5:57:51:be: ba:74:10:50:66:2d:b7:73:79:2f:bc:93:2f:cb:a9:ac:67:92: ed:f4:80:66:82:07:c2:d1:86:7f:7d:4f:29:51:4b:dd:86:53: 38:d3:00:8e:f5:dc:38:4e:54:4d:63:cb:d7:12:8e:da:07:8c: 5a:80:be:74:64:d8:bb:0e:b3:90:fd:db:72:61:33:53:56:3d: e8:3b:fc:fa:8b:99:47:2a:df:42:32:6d:ae:ac:da:e7:17:db: 43:18:e7:60:b0:30:14:aa:0d:30:67:ac:ac:cf:5c:67:7d:8c: d5:2b:56:e1:bc:55:af:a9:e1:bd:04:06:84:2a:66:87:2a:eb: e5:f0:e5:82:0a:36:e4:74:25:81:77:81:d3:d1:47:e0:33:44: c3:6e:21:d5:fe:e5:86:b9:f4:d1:80:d8:2c:a1:ed:93:44:05: ab:6e:24:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSwAmRBZzJNm7/3A4AGSkb2xM0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTA3MDIxMDQ2NTdaFw0yNTA3MDUxMTIyNTdaMDMxMTAvBgNV BAMTKDI3Q0IxRTJDQkI4QUE2N0FCRjZBNDg5RjFFMzlFNTY5NzYzRkJBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxOx0z9/HY6hItau159vdGEhD UfirxTHUXJdVoNVwMhg0lsfVkPfhs2QMmvLUHg6/JwPxfylH2Y202VTCcIv7XzBf p9nRPIZDt+lan7v56FuH9eFQnt7ed2uKuCONyJzXLZF7eBRuaHyfA8QEFeRVRbOY rHw6pRlmgMglbH2V6vnFAWNSitVSz4pLysnqSdwC7lvf2WCG5fAjruNXx4zqPySX Q2w29t09de3MLkPd+4HbRzH4PXvOv0UBw0qgusOM1Y02LMk2iQhqcIZZZdXy2l2a yt1kx12g5Zr47B8kmpu0l8Wzdg7XIoXWjAbjOLZLwgcypN9GltFtHPil4njlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8seLLuKpnq/akifHjnlaXY/ulMwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLVBb8R38icFBL/yMvbNi3uYdRPmmMbxTRo iZfty7oDhfAo+7wjhYwyUsV9x+DG8MEqQQOuo+I4OyPQosy+vbOixLiJ3j0C46tj Pp6l7lQCy5tceyg21VdRvrp0EFBmLbdzeS+8ky/Lqaxnku30gGaCB8LRhn99TylR S92GUzjTAI713DhOVE1jy9cSjtoHjFqAvnRk2LsOs5D923JhM1NWPeg7/PqLmUcq 30Iyba6s2ucX20MY52CwMBSqDTBnrKzPXGd9jNUrVuG8Va+p4b0EBoQqZocq6+Xw 5YIKNuR0JYF3gdPRR+AzRMNuIdX+5Ya59NGA2Cyh7ZNEBatuJCs= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:23 2025 by rpki-client