$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: qdqBpAxLp/27dxLhwyJFXCxZlM5BTNyxBlKiNKBRhg0= Subject key identifier: 91:47:79:65:CA:F9:37:CC:CB:3C:25:F0:31:7E:1D:46:A6:F5:B7:AA Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 12B56FC017AC99ACF9FA65E1EE2635DBE7DB2992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01C8 Signing time: Thu 21 Aug 2025 21:10:44 +0000 Manifest this update: Thu 21 Aug 2025 21:05:44 +0000 Manifest next update: Mon 25 Aug 2025 08:15:44 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: uiGZxqrMT10grJQB1/otStKRiMQeifyOg8jViGM9dfw=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b5:6f:c0:17:ac:99:ac:f9:fa:65:e1:ee:26:35:db:e7:db:29:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Aug 21 21:05:44 2025 GMT Not After : Aug 25 08:15:44 2025 GMT Subject: CN=91477965CAF937CCCB3C25F0317E1D46A6F5B7AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:1f:82:7b:7f:5b:0f:75:4f:6b:c6:4a:fc: 60:d4:fa:9a:73:b7:fe:52:41:ff:e8:64:89:aa:87: 7a:70:8a:1c:5a:1e:be:5a:19:d3:60:42:c1:04:c0: 3f:29:27:6e:1f:17:2a:f3:5f:c0:4e:b0:a9:23:76: bc:ff:11:14:ae:eb:2e:36:92:09:2b:a6:fc:20:96: f4:79:c1:05:b3:b2:13:a6:8b:d6:46:f5:88:a3:77: c5:bf:a0:94:dc:1e:18:56:91:c9:dd:16:ce:12:ea: a3:7f:48:61:08:6f:7d:09:17:bc:dd:5c:86:a3:0f: 68:6b:40:3f:59:c9:e7:fb:f5:8d:0e:f8:1b:d4:89: 3b:02:00:5e:00:cd:d8:95:2a:a3:72:ef:f0:f5:eb: 8b:e5:83:af:fe:92:d7:07:18:7b:32:ab:2e:2a:b1: 20:75:9b:01:21:6f:4c:39:20:5a:c0:ec:ba:42:64: 14:79:56:d2:0d:b0:d0:0e:6c:43:dc:22:7f:d6:a5: ac:21:51:c7:d6:a3:df:e3:32:92:f6:15:e5:78:1f: 39:09:f7:53:97:dc:43:b1:63:4e:49:b5:01:eb:01: 94:d4:75:19:b0:42:31:c7:5d:a9:00:67:2b:57:ef: 49:85:68:39:14:1f:d6:86:57:8b:91:0c:9d:a6:fe: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:79:65:CA:F9:37:CC:CB:3C:25:F0:31:7E:1D:46:A6:F5:B7:AA X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:89:65:c7:ae:14:e2:25:ff:36:07:fe:73:4d:7b:e2:c7: 33:9d:d4:c3:ab:29:98:9b:d7:da:4e:6a:97:e5:0f:a4:bb:3b: 64:e2:21:ba:99:e6:48:31:dd:ed:32:1b:59:77:02:b9:07:e6: 6f:7f:a5:af:2f:2c:4f:52:27:61:3e:3e:61:cb:79:6f:c9:08: 6b:35:03:6f:b1:17:84:72:f3:08:43:21:a3:3b:71:5c:b9:41: 60:00:df:8a:58:67:68:f1:5e:e7:e7:af:48:27:e9:2d:33:28: 6e:cd:6d:d7:84:35:c4:5a:33:a8:f4:73:72:c7:9e:65:de:95: 2c:2c:dd:10:2d:59:16:18:4e:f0:6f:9f:7e:47:f3:61:1c:7a: 1e:0b:08:74:f1:49:14:37:5a:11:27:75:d1:32:c7:c0:2f:98: fd:1d:07:22:dd:bc:27:c6:80:1d:9b:ec:e7:9c:15:8f:0b:10: 69:1e:1f:9b:ae:fd:a5:71:8b:68:73:41:7e:ee:f1:22:36:d7: e3:66:f9:20:31:8f:ad:f6:4a:08:dd:01:c7:fa:41:72:6c:8a: 48:df:95:fe:0e:98:33:c2:95:26:10:89:b9:e2:2d:ff:ef:fc: 1f:79:31:11:96:a0:1a:1d:d2:0a:b1:64:43:1e:6f:ac:bb:69: 92:0d:44:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErVvwBesmaz5+mXh7iY12+fbKZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA4MjEyMTA1NDRaFw0yNTA4MjUwODE1NDRaMDMxMTAvBgNV BAMTKDkxNDc3OTY1Q0FGOTM3Q0NDQjNDMjVGMDMxN0UxRDQ2QTZGNUI3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtR+Ce39bD3VPa8ZK/GDU+ppz t/5SQf/oZImqh3pwihxaHr5aGdNgQsEEwD8pJ24fFyrzX8BOsKkjdrz/ERSu6y42 kgkrpvwglvR5wQWzshOmi9ZG9Yijd8W/oJTcHhhWkcndFs4S6qN/SGEIb30JF7zd XIajD2hrQD9Zyef79Y0O+BvUiTsCAF4AzdiVKqNy7/D164vlg6/+ktcHGHsyqy4q sSB1mwEhb0w5IFrA7LpCZBR5VtINsNAObEPcIn/WpawhUcfWo9/jMpL2FeV4HzkJ 91OX3EOxY05JtQHrAZTUdRmwQjHHXakAZytX70mFaDkUH9aGV4uRDJ2m/nolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUd5Zcr5N8zLPCXwMX4dRqb1t6owHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBJiWXHrhTiJf82B/5zTXvixzOd1MOrKZib 19pOapflD6S7O2TiIbqZ5kgx3e0yG1l3ArkH5m9/pa8vLE9SJ2E+PmHLeW/JCGs1 A2+xF4Ry8whDIaM7cVy5QWAA34pYZ2jxXufnr0gn6S0zKG7NbdeENcRaM6j0c3LH nmXelSws3RAtWRYYTvBvn35H82Eceh4LCHTxSRQ3WhEnddEyx8AvmP0dByLdvCfG gB2b7OecFY8LEGkeH5uu/aVxi2hzQX7u8SI21+Nm+SAxj632SgjdAcf6QXJsikjf lf4OmDPClSYQibniLf/v/B95MRGWoBod0gqxZEMeb6y7aZINRD8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:25 2025 by rpki-client