$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: qpsRaqxvXG7m+48n9ze2IWXQ9M5VCREK4kqrxG6vJiU= Subject key identifier: B6:D7:F6:93:D7:07:57:8A:19:66:62:A7:EF:DD:91:E0:C6:D8:54:8B Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 1D3D146F4E36B98D0DCC1B1D6F7B3B2C602F43C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 0385 Signing time: Mon 20 Oct 2025 03:20:51 +0000 Manifest this update: Mon 20 Oct 2025 03:15:51 +0000 Manifest next update: Thu 23 Oct 2025 08:44:51 +0000 Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) 2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: QxCqe6IkPH03OFr04qdyw7RsXHdPCr5qvXbCqilt7es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3d:14:6f:4e:36:b9:8d:0d:cc:1b:1d:6f:7b:3b:2c:60:2f:43:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Oct 20 03:15:51 2025 GMT Not After : Oct 23 08:44:51 2025 GMT Subject: CN=B6D7F693D707578A196662A7EFDD91E0C6D8548B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:d8:92:e5:b5:f3:a1:c1:f2:cd:08:86:77: b8:a1:7e:87:58:05:fe:7e:a1:b4:56:2b:98:07:24: 2c:41:94:6c:02:36:38:d4:97:07:69:2e:42:5b:3c: 45:2c:11:52:74:f8:a6:9b:f6:73:33:1b:ee:b0:24: 31:23:eb:fe:64:45:ce:da:1a:c8:3d:f4:94:2e:d7: 25:69:78:d3:c3:5c:2a:32:23:2a:e5:dd:43:9a:b1: 25:77:ea:1e:da:cc:9e:bb:9e:67:d2:6a:8b:18:70: 78:98:a9:bb:17:69:2a:9d:ae:22:01:b8:50:b5:ea: a5:f6:d2:43:5e:1d:96:6d:7b:dd:cb:0b:3c:e6:0f: d7:0b:4d:93:6d:73:a1:2a:33:70:4f:44:6a:13:df: c4:17:9e:7c:ef:36:0b:c6:a8:96:bb:4d:cb:a2:a6: 16:76:85:a8:e3:10:e0:1c:47:fa:93:40:c0:94:e1: 27:4a:65:43:09:b1:8d:9e:1f:13:11:f5:ec:94:f0: 75:80:ec:49:17:31:61:48:9e:e6:28:23:c3:14:45: 2d:67:4a:d7:f4:e8:98:46:e1:8d:a2:68:40:45:31: 52:4d:dd:94:bc:ae:19:4b:77:09:dc:ac:06:59:5c: 7a:82:c7:87:bc:a4:35:c8:a8:b5:31:cb:35:9b:52: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D7:F6:93:D7:07:57:8A:19:66:62:A7:EF:DD:91:E0:C6:D8:54:8B X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:5f:39:aa:95:31:a6:20:20:ca:e8:3e:f3:3d:9c:b5:80:f0: 2a:ab:7f:8a:5f:52:08:7d:c1:8b:1a:32:0a:b6:85:01:ad:6f: f0:9b:b8:a5:2a:da:94:1e:7f:04:6a:51:02:9d:99:5a:1c:8f: 8b:6f:cf:d0:e7:c3:b4:94:6a:a3:b9:a7:b2:4b:d0:e1:e2:bb: 2c:06:32:41:d0:b3:fa:79:5a:c2:80:2a:fd:25:d5:12:c6:42: 04:2b:78:d7:92:19:43:2c:88:81:51:42:49:f1:6a:5f:2e:fa: c7:e2:80:55:f2:39:47:fc:dd:cb:cc:01:23:a5:a2:ff:19:9d: 2b:cc:7a:64:e4:6f:f9:68:67:b5:93:75:4b:f0:14:4a:26:e8: 24:eb:59:d6:36:e0:ea:5f:4f:3a:c7:2a:9d:76:1b:e0:cc:19: df:81:46:8c:69:a3:01:b7:b0:23:cd:8a:7e:94:c7:61:1c:06: 73:cb:2d:56:f5:26:da:f0:87:88:95:f2:40:eb:3b:31:d2:97: 3e:6c:ce:9f:f8:af:82:1a:41:10:52:2d:b0:42:42:d4:33:1c: 9b:ed:64:5a:d3:eb:81:6c:5f:65:87:01:18:c1:12:11:0a:01: 01:88:40:4c:6e:56:87:b1:8f:44:d0:fd:e7:14:df:8c:43:60: ab:f9:2a:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHT0Ub042uY0NzBsdb3s7LGAvQ8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNTEwMjAwMzE1NTFaFw0yNTEwMjMwODQ0NTFaMDMxMTAvBgNV BAMTKEI2RDdGNjkzRDcwNzU3OEExOTY2NjJBN0VGREQ5MUUwQzZEODU0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTV9iS5bXzocHyzQiGd7ihfodY Bf5+obRWK5gHJCxBlGwCNjjUlwdpLkJbPEUsEVJ0+Kab9nMzG+6wJDEj6/5kRc7a Gsg99JQu1yVpeNPDXCoyIyrl3UOasSV36h7azJ67nmfSaosYcHiYqbsXaSqdriIB uFC16qX20kNeHZZte93LCzzmD9cLTZNtc6EqM3BPRGoT38QXnnzvNgvGqJa7Tcui phZ2hajjEOAcR/qTQMCU4SdKZUMJsY2eHxMR9eyU8HWA7EkXMWFInuYoI8MURS1n Stf06JhG4Y2iaEBFMVJN3ZS8rhlLdwncrAZZXHqCx4e8pDXIqLUxyzWbUiz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttf2k9cHV4oZZmKn792R4MbYVIswHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARfOaqVMaYgIMroPvM9nLWA8Cqrf4pfUgh9 wYsaMgq2hQGtb/CbuKUq2pQefwRqUQKdmVocj4tvz9Dnw7SUaqO5p7JL0OHiuywG MkHQs/p5WsKAKv0l1RLGQgQreNeSGUMsiIFRQknxal8u+sfigFXyOUf83cvMASOl ov8ZnSvMemTkb/loZ7WTdUvwFEom6CTrWdY24OpfTzrHKp12G+DMGd+BRoxpowG3 sCPNin6Ux2EcBnPLLVb1Jtrwh4iV8kDrOzHSlz5szp/4r4IaQRBSLbBCQtQzHJvt ZFrT64FsX2WHARjBEhEKAQGIQExuVoexj0TQ/ecU34xDYKv5KhM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:39 2025 by rpki-client