$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: 4iFH7VUCxBa3tUEiBAJ2/NqFhyS3Ht3uE/XSUld8Vj0= Subject key identifier: 7B:AA:1F:9C:85:97:A6:C8:46:78:ED:89:E4:B7:A2:9B:D5:F5:8C:04 Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 5CBE4136D9256E65B00140D7CEA1AABDD965A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 033A Signing time: Mon 05 May 2025 06:30:49 +0000 Manifest this update: Mon 05 May 2025 06:25:49 +0000 Manifest next update: Thu 08 May 2025 08:18:49 +0000 Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) 2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: 2kisTR8TaxqjXfSxrXTOOXF0kA4Nr9blS+INlWEOCHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 08:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:be:41:36:d9:25:6e:65:b0:01:40:d7:ce:a1:aa:bd:d9:65:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: May 5 06:25:49 2025 GMT Not After : May 8 08:18:49 2025 GMT Subject: CN=7BAA1F9C8597A6C84678ED89E4B7A29BD5F58C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:2d:1a:2d:da:15:fb:9d:4a:2b:35:88:4f: 9b:db:52:5d:db:23:35:d8:1b:6a:f4:c9:8c:d4:37: 65:3f:e5:be:28:18:a0:ab:ac:a9:16:ef:d9:73:7e: 1b:3b:e9:66:ae:55:4c:aa:da:ac:7a:10:38:e2:1b: 64:ad:3a:20:55:57:2b:e9:53:49:ab:7a:7c:55:19: fb:02:b1:39:fe:f4:c1:9d:40:b1:d6:9c:6d:d2:ee: 20:93:b8:c4:2d:85:2d:02:cc:21:de:83:fc:06:99: 31:1a:f9:df:45:8a:f3:db:79:d0:b7:6f:a9:c1:69: 7c:80:0f:77:0a:1a:14:0c:4f:12:46:ff:16:65:a6: d0:15:10:df:e2:fc:61:e7:8e:3f:e3:14:e9:19:fb: 99:64:2e:ab:c0:82:91:1f:b3:5d:af:7d:81:91:cc: 57:d2:ee:86:a6:b1:8a:d5:e5:d8:ae:63:14:63:76: 35:c8:c5:8a:15:ec:d9:f0:af:19:43:01:a4:4c:e5: c2:f0:79:af:84:93:43:a6:ec:fb:c2:e6:0c:9e:b8: 2f:3e:21:9d:68:7f:f0:ae:7e:65:6c:8e:26:48:58: ed:4c:8d:61:05:9c:e4:04:da:d8:6e:48:3b:c4:65: 14:b4:03:d2:39:5a:f1:6a:97:2e:83:88:2e:63:4c: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:1F:9C:85:97:A6:C8:46:78:ED:89:E4:B7:A2:9B:D5:F5:8C:04 X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:13:4b:87:0f:87:e3:10:4e:9b:9c:21:01:c9:1a:4b:4e:b1: 99:d6:39:2e:f7:47:c3:d6:b4:98:7e:42:94:27:d6:d6:1f:52: 1d:14:b0:ca:e0:dc:89:af:f7:15:3d:16:f7:79:e1:1e:44:17: c9:9d:87:77:83:53:03:45:31:f1:08:68:d6:de:b8:0b:5d:86: ef:38:ab:c5:2b:96:4f:4c:a1:86:8a:1d:97:e9:f0:13:32:37: af:f4:09:55:33:60:52:12:55:68:79:6c:47:31:b5:d4:61:54: 85:89:6a:47:cb:ae:a8:19:fc:53:3e:27:44:f8:98:d8:65:ec: a0:d5:d7:02:fa:44:8a:0c:56:94:af:f6:2f:05:95:9d:83:ee: 3c:55:a3:92:9b:4a:6e:d0:19:8c:eb:c0:63:da:2d:af:13:73: a3:23:75:b8:a6:f9:23:bc:78:61:54:a8:81:e6:74:51:43:31: 77:6d:ee:4d:e3:6b:32:06:e9:9e:d3:eb:45:51:f4:60:cf:fa: 55:c9:c1:ca:13:c1:a4:d3:e1:ed:9b:a4:dc:e0:a0:cd:ab:69: d7:53:46:d2:dd:3f:be:99:45:17:d8:be:19:9c:30:94:56:48: 39:c7:00:d9:14:57:67:99:a6:ad:5e:95:0d:e4:95:e3:23:2c: e8:ff:58:7e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITXL5BNtklbmWwAUDXzqGqvdllpjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQTA5MzcwODZEMDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0 MzBDNzZFMB4XDTI1MDUwNTA2MjU0OVoXDTI1MDUwODA4MTg0OVowMzExMC8GA1UE AxMoN0JBQTFGOUM4NTk3QTZDODQ2NzhFRDg5RTRCN0EyOUJENUY1OEMwNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVBLRot2hX7nUorNYhPm9tSXdsj NdgbavTJjNQ3ZT/lvigYoKusqRbv2XN+GzvpZq5VTKrarHoQOOIbZK06IFVXK+lT Sat6fFUZ+wKxOf70wZ1AsdacbdLuIJO4xC2FLQLMId6D/AaZMRr530WK89t50Ldv qcFpfIAPdwoaFAxPEkb/FmWm0BUQ3+L8YeeOP+MU6Rn7mWQuq8CCkR+zXa99gZHM V9LuhqaxitXl2K5jFGN2NcjFihXs2fCvGUMBpEzlwvB5r4STQ6bs+8LmDJ64Lz4h nWh/8K5+ZWyOJkhY7UyNYQWc5ATa2G5IO8RlFLQD0jla8WqXLoOILmNMbVUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBR7qh+chZemyEZ47Ynkt6Kb1fWMBDAfBgNVHSME GDAWgBS6CTcIbQMAnbNCLJgJWW8JxDDHbjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5 ZmVhZDlkLWQ3YTctNDgzYi04ZjE3LTMxYjMyM2Q5N2Q4Zi8wL0JBMDkzNzA4NkQw MzAwOURCMzQyMkM5ODA5NTk2RjA5QzQzMEM3NkUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9CQTA5MzcwODZEMDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBD NzZFLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYx Ny0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZEMDMwMDlEQjM0MjJDOTgwOTU5NkYw OUM0MzBDNzZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAnhNLhw+H4xBOm5whAckaS06xmdY5LvdHw9a0 mH5ClCfW1h9SHRSwyuDcia/3FT0W93nhHkQXyZ2Hd4NTA0Ux8Qho1t64C12G7zir xSuWT0yhhoodl+nwEzI3r/QJVTNgUhJVaHlsRzG11GFUhYlqR8uuqBn8Uz4nRPiY 2GXsoNXXAvpEigxWlK/2LwWVnYPuPFWjkptKbtAZjOvAY9otrxNzoyN1uKb5I7x4 YVSogeZ0UUMxd23uTeNrMgbpntPrRVH0YM/6VcnByhPBpNPh7Zuk3OCgzatp11NG 0t0/vplFF9i+GZwwlFZIOccA2RRXZ5mmrV6VDeSV4yMs6P9Yfg== -----END CERTIFICATE-----Generated at Tue May 6 11:54:37 2025 by rpki-client