$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: JEanYMBZYgFihWWEtaUZvYvCmufGGOpQrgaiNx8KfAU= Subject key identifier: EA:67:BA:04:96:B0:73:E5:6A:03:0C:1D:79:2E:00:7E:8E:6B:C7:55 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 1AA3C5B79B0EF2F3F9463B25100B7EFC040EE69B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 0198 Signing time: Wed 07 May 2025 02:50:43 +0000 Manifest this update: Wed 07 May 2025 02:45:43 +0000 Manifest next update: Sat 10 May 2025 03:34:43 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: 5tnQ1gV0QzBUzXyp8jORWb1VT9/ba3TYBu8mjAhj9ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a3:c5:b7:9b:0e:f2:f3:f9:46:3b:25:10:0b:7e:fc:04:0e:e6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: May 7 02:45:43 2025 GMT Not After : May 10 03:34:43 2025 GMT Subject: CN=EA67BA0496B073E56A030C1D792E007E8E6BC755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:07:38:23:8f:b7:01:92:0f:dc:c4:e8:07: 65:93:b7:98:52:7c:10:e6:1f:8b:6b:71:80:e7:32: ac:f6:2d:2b:95:49:82:e3:22:59:a0:2a:ca:cc:06: df:4a:57:86:08:ac:06:e6:a4:ee:d9:24:39:ba:e3: d2:a6:cb:2f:91:0d:d4:4f:61:70:54:fb:02:6a:be: 20:34:04:ad:c8:f7:38:46:f1:30:10:10:72:27:8c: 89:75:16:fe:29:f9:41:5d:09:96:92:a3:32:41:f9: 08:e8:51:11:3e:19:05:be:d3:01:2f:23:5b:ff:52: f1:5f:4e:3b:eb:68:a1:61:9c:27:ae:13:f3:e5:6d: c6:a9:7d:5c:7b:bd:80:70:3b:2f:d2:f8:2c:d8:25: 55:9e:e5:5a:a2:ec:6a:16:1b:f0:4f:aa:00:50:1e: f2:01:db:01:cb:37:33:07:08:ad:63:31:5b:d2:53: 5e:80:86:4f:6e:02:63:ee:68:f6:00:c2:ba:83:b1: aa:9c:3e:8c:28:e1:f4:1a:c6:1a:ac:b7:60:e0:0e: 74:de:8b:44:c2:6f:99:44:c0:0f:1f:5b:77:8c:bb: c6:42:a5:4c:b5:34:b1:2b:ec:3c:1e:05:38:bd:e7: 7e:1e:54:a9:6f:87:c2:0f:00:e0:d9:ba:5d:82:a3: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:67:BA:04:96:B0:73:E5:6A:03:0C:1D:79:2E:00:7E:8E:6B:C7:55 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dc:a6:6e:2c:b1:eb:42:16:6d:85:8a:df:44:47:01:fa:db: 02:54:cd:48:cf:69:6f:be:ba:fa:7a:ea:6d:f6:3f:ef:31:d7: 34:40:0e:52:43:8e:75:2c:5c:6c:7c:c8:30:c8:9b:3c:97:e8: c3:37:35:e9:01:88:57:3a:68:1b:56:75:62:c5:18:fb:f9:b4: 04:0e:73:56:b9:02:97:c4:0b:05:47:b3:19:49:3a:23:df:38: c6:0a:35:67:81:c7:3e:c1:9b:69:ec:d6:5a:fb:51:96:03:81: 5a:8e:e6:07:55:11:21:c8:65:a3:f3:12:76:b6:e1:e7:2d:c6: 73:7c:6c:3f:9b:7a:51:06:9a:a5:99:c2:b2:ff:b9:f7:3b:72: f6:3d:40:53:4b:73:08:78:d5:5c:32:06:82:0d:b8:12:fe:81: 9f:74:76:6d:60:04:23:df:3b:88:4d:88:89:ee:77:dd:91:d4: 38:11:a7:f3:7f:38:9d:c0:97:2d:da:d5:ea:0e:fc:0b:04:19: 68:a4:82:0b:21:61:f1:3e:0c:64:5b:9c:48:32:96:b6:17:c9: c6:02:65:b8:6d:c2:a7:f7:ac:4e:52:15:64:47:0a:75:e3:a0: 4b:c1:58:43:7d:6e:94:a8:f7:bb:89:46:8f:5e:b0:2b:cf:ca: 4d:a5:1b:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqPFt5sO8vP5RjslEAt+/AQO5pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA1MDcwMjQ1NDNaFw0yNTA1MTAwMzM0NDNaMDMxMTAvBgNV BAMTKEVBNjdCQTA0OTZCMDczRTU2QTAzMEMxRDc5MkUwMDdFOEU2QkM3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+Qc4I4+3AZIP3MToB2WTt5hS fBDmH4trcYDnMqz2LSuVSYLjIlmgKsrMBt9KV4YIrAbmpO7ZJDm649Kmyy+RDdRP YXBU+wJqviA0BK3I9zhG8TAQEHInjIl1Fv4p+UFdCZaSozJB+QjoURE+GQW+0wEv I1v/UvFfTjvraKFhnCeuE/PlbcapfVx7vYBwOy/S+CzYJVWe5Vqi7GoWG/BPqgBQ HvIB2wHLNzMHCK1jMVvSU16Ahk9uAmPuaPYAwrqDsaqcPowo4fQaxhqst2DgDnTe i0TCb5lEwA8fW3eMu8ZCpUy1NLEr7DweBTi9534eVKlvh8IPAODZul2Co2GNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6me6BJawc+VqAwwdeS4Afo5rx1UwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrcpm4ssetCFm2Fit9ERwH62wJUzUjPaW++ uvp66m32P+8x1zRADlJDjnUsXGx8yDDImzyX6MM3NekBiFc6aBtWdWLFGPv5tAQO c1a5ApfECwVHsxlJOiPfOMYKNWeBxz7Bm2ns1lr7UZYDgVqO5gdVESHIZaPzEna2 4ectxnN8bD+belEGmqWZwrL/ufc7cvY9QFNLcwh41VwyBoINuBL+gZ90dm1gBCPf O4hNiInud92R1DgRp/N/OJ3Aly3a1eoO/AsEGWikggshYfE+DGRbnEgylrYXycYC Zbhtwqf3rE5SFWRHCnXjoEvBWEN9bpSo97uJRo9esCvPyk2lG+Q= -----END CERTIFICATE-----Generated at Fri May 9 00:07:27 2025 by rpki-client