$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: Y5w5q1wppk1w4VMlXIykU7j6pIuHW/75PsuLx5lKPVg= Subject key identifier: 87:06:97:CD:E9:B9:02:F0:57:77:FE:10:96:51:3A:CB:A9:F3:AB:77 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 20EDA46CCAD82F651641DB5BFA2B64CAE3AD128D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01AF Signing time: Fri 27 Jun 2025 17:10:43 +0000 Manifest this update: Fri 27 Jun 2025 17:05:43 +0000 Manifest next update: Tue 01 Jul 2025 04:44:43 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: +D+0w0iBgx70IIYvbi0b7rVDt3KVbwVIHFk6avQBYUI=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 04:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:a4:6c:ca:d8:2f:65:16:41:db:5b:fa:2b:64:ca:e3:ad:12:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Jun 27 17:05:43 2025 GMT Not After : Jul 1 04:44:43 2025 GMT Subject: CN=870697CDE9B902F05777FE1096513ACBA9F3AB77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ea:1a:cf:25:46:30:2a:57:e6:f2:23:66:6c: 35:5d:c5:1c:0a:92:6f:51:41:ff:1f:be:eb:91:b9: 51:0b:42:d3:fc:01:b2:77:d9:a0:76:c5:12:ea:01: 7c:b1:b8:a6:d2:cf:3a:f4:56:2a:f7:a9:a9:3d:e2: 89:f9:1f:8a:dc:69:9a:1e:20:4b:b4:26:b5:cb:20: 72:17:e7:2e:da:6b:20:3c:b0:e6:c3:b2:e8:ba:e2: eb:d4:2e:4c:71:27:11:05:aa:d3:3c:76:5a:f7:ee: 11:7f:e0:88:84:bb:c3:82:5d:53:a5:17:21:06:fe: 32:91:c4:2c:56:31:fb:43:ba:ea:78:74:42:fa:8a: b9:d6:91:3d:ae:d5:66:9e:65:61:d0:6a:5c:5d:fc: 58:f1:4e:86:a1:0b:cf:dd:23:d8:1d:a9:51:d1:17: 2c:1c:71:a6:4a:b8:3b:d7:98:70:2c:b6:04:8a:75: 40:f9:c4:c2:ad:66:1a:67:ac:18:03:43:44:a3:e9: e4:b5:8f:10:96:f1:b2:b4:10:32:8e:30:30:9a:6c: 31:be:6a:a4:5a:61:de:82:92:0e:1f:14:f8:92:33: a8:b9:26:de:20:28:c1:7d:6a:c6:4d:98:84:d6:7e: 39:e2:a6:cf:30:2d:66:c5:29:4d:c8:e5:e4:90:25: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:06:97:CD:E9:B9:02:F0:57:77:FE:10:96:51:3A:CB:A9:F3:AB:77 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:74:26:db:e2:48:5e:13:af:96:f0:fa:f4:bb:6e:47:02: 0f:74:bb:f6:d3:da:39:22:32:48:c8:a9:4a:e3:52:54:2d:2b: 57:dc:fc:a1:0a:a1:46:e2:a5:b2:ad:7f:6e:9a:e1:e0:9d:a2: b2:e7:f8:f2:79:61:75:ec:f1:d4:6a:99:a7:c0:54:90:f3:9d: ed:13:0e:3a:79:41:2a:e2:3a:82:3d:c3:38:17:bc:55:c2:4b: 82:1a:fb:49:06:ab:ae:28:90:35:77:28:1a:6d:d0:ee:46:e4: ed:a2:02:fc:cd:f5:1b:70:64:82:90:46:78:63:c0:1d:2b:74: 1f:3d:33:db:29:e9:69:24:25:e5:ee:b3:8f:bf:73:0d:f0:b7: 04:c6:9b:9f:a9:17:29:c8:cf:59:28:5c:f6:34:1a:2a:d9:34: 6d:a6:e1:70:50:d5:47:05:04:6f:20:e9:05:9f:26:96:84:31: c9:55:73:fa:6d:52:e9:41:2a:ee:51:50:e4:3a:cc:0f:7e:5a: 67:0f:d9:e9:91:ca:49:df:59:4d:fd:2d:89:c0:b2:9c:ca:c5: d4:6b:3a:ec:a6:06:f5:ba:24:1b:8a:b5:a1:fc:ab:8a:38:03: 9d:a9:ad:d0:e1:b2:c4:17:80:4d:82:5a:a7:69:08:2f:21:b8: 65:48:90:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIO2kbMrYL2UWQdtb+itkyuOtEo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA2MjcxNzA1NDNaFw0yNTA3MDEwNDQ0NDNaMDMxMTAvBgNV BAMTKDg3MDY5N0NERTlCOTAyRjA1Nzc3RkUxMDk2NTEzQUNCQTlGM0FCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw6hrPJUYwKlfm8iNmbDVdxRwK km9RQf8fvuuRuVELQtP8AbJ32aB2xRLqAXyxuKbSzzr0Vir3qak94on5H4rcaZoe IEu0JrXLIHIX5y7aayA8sObDsui64uvULkxxJxEFqtM8dlr37hF/4IiEu8OCXVOl FyEG/jKRxCxWMftDuup4dEL6irnWkT2u1WaeZWHQalxd/FjxToahC8/dI9gdqVHR FywccaZKuDvXmHAstgSKdUD5xMKtZhpnrBgDQ0Sj6eS1jxCW8bK0EDKOMDCabDG+ aqRaYd6Ckg4fFPiSM6i5Jt4gKMF9asZNmITWfjnips8wLWbFKU3I5eSQJVEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhwaXzem5AvBXd/4QllE6y6nzq3cwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiadCbb4kheE6+W8Pr0u25HAg90u/bT2jki MkjIqUrjUlQtK1fc/KEKoUbipbKtf26a4eCdorLn+PJ5YXXs8dRqmafAVJDzne0T Djp5QSriOoI9wzgXvFXCS4Ia+0kGq64okDV3KBpt0O5G5O2iAvzN9RtwZIKQRnhj wB0rdB89M9sp6WkkJeXus4+/cw3wtwTGm5+pFynIz1koXPY0GirZNG2m4XBQ1UcF BG8g6QWfJpaEMclVc/ptUulBKu5RUOQ6zA9+WmcP2emRyknfWU39LYnAspzKxdRr OuymBvW6JBuKtaH8q4o4A52prdDhssQXgE2CWqdpCC8huGVIkG8= -----END CERTIFICATE-----Generated at Sun Jun 29 19:58:40 2025 by rpki-client