$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: 347hv8/DS8D/jFTdytUNyNtTWopKUu4K1dYd+ItozVY= Subject key identifier: 85:CC:03:61:27:AF:00:4D:5D:32:0C:81:87:F5:D5:22:BA:53:FD:93 Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 2254D7CBB28464FD2E7AA808ADA598612ECACFAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 0352 Signing time: Fri 27 Jun 2025 09:10:48 +0000 Manifest this update: Fri 27 Jun 2025 09:05:48 +0000 Manifest next update: Mon 30 Jun 2025 20:24:48 +0000 Files and hashes: 1: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: /0v+y6eHU9vzHyeraqBk92kp27zL2JkgEGQ5zhbr53s=) 2: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 20:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:54:d7:cb:b2:84:64:fd:2e:7a:a8:08:ad:a5:98:61:2e:ca:cf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Jun 27 09:05:48 2025 GMT Not After : Jun 30 20:24:48 2025 GMT Subject: CN=85CC036127AF004D5D320C8187F5D522BA53FD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:7f:72:db:ae:77:13:2f:bf:44:34:39:33: 0c:63:30:cd:85:7a:5a:48:85:51:a2:51:5f:55:df: 67:da:35:d9:78:07:15:e6:9c:58:09:89:f0:8d:d5: 80:b9:bf:78:7e:88:6d:66:33:8e:4e:28:11:9c:db: be:0e:58:45:ba:7d:be:fd:0b:05:6f:02:f7:69:20: 9e:69:f7:d8:e2:29:cc:a4:d4:7a:d8:84:93:aa:66: 72:10:7c:4e:20:9d:ef:7d:23:5f:f8:6d:d5:df:e4: 1a:d9:4b:7a:7a:04:ef:90:a2:8a:69:f1:a7:95:fe: 92:ae:e8:74:49:c4:20:2b:a0:9c:a0:7b:51:e4:15: cb:ce:dc:c9:1b:06:c3:84:8e:66:27:a7:97:40:f7: cc:a8:30:f0:7e:88:73:4a:b4:cb:c5:5e:b6:0e:1b: 1f:2b:dc:e4:64:15:da:46:8e:69:9c:2c:fa:23:a5: 7d:55:20:b2:2c:b4:6c:4c:72:40:5f:5d:a7:3d:90: 0c:34:9f:dc:94:d8:22:4d:7f:49:77:98:47:21:ee: aa:71:8b:91:db:00:e0:a7:f9:77:8f:0b:43:4b:5a: 9c:2a:f5:15:fb:ec:ed:6b:7b:b9:0a:43:62:27:96: 72:8f:bd:bd:51:ec:47:a9:73:a8:85:13:64:7d:5d: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CC:03:61:27:AF:00:4D:5D:32:0C:81:87:F5:D5:22:BA:53:FD:93 X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0a:b9:99:3a:cc:0d:44:fe:e6:7c:14:33:d3:8d:68:45:30: 6f:27:d3:f3:05:c9:6f:09:56:c3:1a:df:79:4d:e6:6d:0c:5d: 5e:e6:16:05:37:47:9b:53:dc:27:7e:b2:06:d4:6f:59:71:45: e2:0d:e4:e8:a3:11:b3:84:4f:bd:73:c3:0a:27:73:66:3a:d2: 17:76:ac:ac:83:cc:5d:03:eb:24:81:31:6d:99:f1:52:bf:fb: 08:f6:02:fb:be:e5:b1:b5:ad:76:fe:58:10:82:74:9a:9b:5b: e9:87:a0:1c:67:c3:b9:73:ab:44:c9:6d:3d:11:ac:bc:be:0d: b3:0c:05:6a:1e:ff:0d:24:ea:15:9e:72:34:71:24:fa:6d:9e: 0c:c6:be:1e:d7:25:7f:a9:57:5c:cc:5e:b7:69:1b:38:a3:e9: 7b:88:bd:2d:42:c1:19:34:c6:96:d8:22:c7:33:21:f0:20:67: 6f:9e:b1:b9:fb:46:f0:89:88:d1:15:34:7e:f9:bf:f5:66:1f: d0:bf:ec:cf:c0:6f:fc:46:ae:2b:04:69:1a:5f:16:29:b5:c0: 94:38:8b:ea:03:66:72:7e:8d:c7:2f:72:64:17:4d:c1:35:26: 94:df:aa:1f:bd:bf:6d:50:49:f5:e7:a0:fa:0d:bc:3e:93:26: e4:f2:bb:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlTXy7KEZP0ueqgIraWYYS7Kz60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNTA2MjcwOTA1NDhaFw0yNTA2MzAyMDI0NDhaMDMxMTAvBgNV BAMTKDg1Q0MwMzYxMjdBRjAwNEQ1RDMyMEM4MTg3RjVENTIyQkE1M0ZEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7y39y2653Ey+/RDQ5MwxjMM2F elpIhVGiUV9V32faNdl4BxXmnFgJifCN1YC5v3h+iG1mM45OKBGc274OWEW6fb79 CwVvAvdpIJ5p99jiKcyk1HrYhJOqZnIQfE4gne99I1/4bdXf5BrZS3p6BO+Qoopp 8aeV/pKu6HRJxCAroJyge1HkFcvO3MkbBsOEjmYnp5dA98yoMPB+iHNKtMvFXrYO Gx8r3ORkFdpGjmmcLPojpX1VILIstGxMckBfXac9kAw0n9yU2CJNf0l3mEch7qpx i5HbAOCn+XePC0NLWpwq9RX77O1re7kKQ2InlnKPvb1R7Eepc6iFE2R9XdNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhcwDYSevAE1dMgyBh/XVIrpT/ZMwHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4KuZk6zA1E/uZ8FDPTjWhFMG8n0/MFyW8J VsMa33lN5m0MXV7mFgU3R5tT3Cd+sgbUb1lxReIN5OijEbOET71zwwonc2Y60hd2 rKyDzF0D6ySBMW2Z8VK/+wj2Avu+5bG1rXb+WBCCdJqbW+mHoBxnw7lzq0TJbT0R rLy+DbMMBWoe/w0k6hWecjRxJPptngzGvh7XJX+pV1zMXrdpGzij6XuIvS1CwRk0 xpbYIsczIfAgZ2+esbn7RvCJiNEVNH75v/VmH9C/7M/Ab/xGrisEaRpfFim1wJQ4 i+oDZnJ+jccvcmQXTcE1JpTfqh+9v21QSfXnoPoNvD6TJuTyu4o= -----END CERTIFICATE-----Generated at Sun Jun 29 18:20:47 2025 by rpki-client