$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: FbD0GYVeInwy+UAytVwfJ6OY5H+OAkzmze+E2HcnFiY= Subject key identifier: 6E:C9:1B:63:71:BB:20:FF:CD:F0:AD:65:11:EA:86:FE:3B:08:D2:C5 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 0AD73E9A191475A1B774CE7D4832E9474CBEC9A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01E2 Signing time: Sun 19 Oct 2025 20:30:46 +0000 Manifest this update: Sun 19 Oct 2025 20:25:46 +0000 Manifest next update: Thu 23 Oct 2025 05:19:46 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: C36atzM3Bn3nB6M54Y5JXzoRKR7dojk9nQSYYflnKS8=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d7:3e:9a:19:14:75:a1:b7:74:ce:7d:48:32:e9:47:4c:be:c9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Oct 19 20:25:46 2025 GMT Not After : Oct 23 05:19:46 2025 GMT Subject: CN=6EC91B6371BB20FFCDF0AD6511EA86FE3B08D2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:09:9d:32:12:5e:34:5d:d4:46:ff:28:f4: 60:74:7b:5a:17:49:38:7d:02:a2:cf:aa:74:08:65: 32:3b:d3:b3:40:74:2b:9a:e5:77:9f:a8:8f:4b:4f: 48:46:b4:5c:02:9f:d7:50:ed:77:c2:a2:f1:33:11: 10:1c:f5:b0:90:97:61:f3:e7:6e:bd:f3:d4:f3:66: 66:9b:60:d0:ef:4e:b3:14:55:90:5b:7e:c2:16:a5: a8:bb:7c:8e:65:f2:5e:c7:0f:db:06:7d:19:8f:e5: 0c:16:a3:c7:6c:d2:88:21:21:6b:a4:2f:30:ff:51: 96:94:22:60:c1:7d:61:9d:3b:2d:df:bc:b2:c3:42: 51:1c:11:ba:78:ba:6b:e7:2f:82:ad:ef:23:ec:4a: a4:6b:7b:dc:4d:95:d7:95:62:38:bf:9d:8d:da:99: 44:de:c4:7d:a1:bb:30:92:94:39:f1:be:22:f0:53: 0c:b7:6c:9a:85:6c:9c:2b:55:72:58:d1:e9:5d:e7: 84:17:b2:cf:66:5a:d9:78:29:f6:7a:b0:aa:df:9d: d7:48:aa:c6:e1:52:bb:cb:f6:ff:8c:ea:b0:e8:9c: 0c:ba:11:7b:a6:ea:e4:75:b6:c7:6c:50:14:f0:24: 37:c5:bc:01:c4:84:6d:26:0f:f6:5b:2e:dd:0f:98: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:1B:63:71:BB:20:FF:CD:F0:AD:65:11:EA:86:FE:3B:08:D2:C5 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7f:9b:ba:9a:f9:5d:8e:60:a0:21:bc:5c:74:92:8b:d3:f1: 7f:a2:28:3b:cd:21:21:9a:7f:47:63:21:3c:67:1c:e0:d7:62: 8e:66:ec:33:e9:21:2a:0f:54:69:9a:f2:cc:0e:4d:71:ff:4c: 19:9f:74:b5:31:aa:5e:53:73:c8:98:fe:09:e8:9c:99:c3:e5: ca:22:f4:ed:44:c2:b6:56:46:96:0c:2c:36:69:3f:06:92:87: 8b:fb:03:60:7b:5c:69:51:ac:49:96:13:b5:44:ad:31:a5:a7: cc:49:20:fa:aa:cb:a4:fb:fa:1b:97:a2:3c:a5:28:3e:ba:90: 40:41:41:e2:96:f1:ad:79:36:8e:a7:92:df:dd:64:6c:b6:4d: 9f:61:95:29:61:23:d6:e4:d1:f8:52:1b:92:15:30:0f:87:5e: 8e:f4:a9:43:a4:8c:e7:11:2d:57:17:b0:41:7f:3b:62:ee:76: d9:d1:99:14:df:23:74:7b:c2:6a:14:fa:57:d2:61:94:2b:1d: cd:e0:90:bd:0f:4c:26:3e:e1:d3:b4:dc:1f:93:cd:31:12:0e: c7:17:f2:8b:c5:e2:fa:f0:d4:f0:31:d0:20:4d:57:33:87:69: 7a:bc:2e:0c:ce:e4:be:ea:9a:f3:08:e5:8c:8b:cb:51:26:8b: a1:96:f7:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtc+mhkUdaG3dM59SDLpR0y+yaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTEwMTkyMDI1NDZaFw0yNTEwMjMwNTE5NDZaMDMxMTAvBgNV BAMTKDZFQzkxQjYzNzFCQjIwRkZDREYwQUQ2NTExRUE4NkZFM0IwOEQyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8AmdMhJeNF3URv8o9GB0e1oX STh9AqLPqnQIZTI707NAdCua5XefqI9LT0hGtFwCn9dQ7XfCovEzERAc9bCQl2Hz 526989TzZmabYNDvTrMUVZBbfsIWpai7fI5l8l7HD9sGfRmP5QwWo8ds0oghIWuk LzD/UZaUImDBfWGdOy3fvLLDQlEcEbp4umvnL4Kt7yPsSqRre9xNldeVYji/nY3a mUTexH2huzCSlDnxviLwUwy3bJqFbJwrVXJY0eld54QXss9mWtl4KfZ6sKrfnddI qsbhUrvL9v+M6rDonAy6EXum6uR1tsdsUBTwJDfFvAHEhG0mD/ZbLt0PmCUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbskbY3G7IP/N8K1lEeqG/jsI0sUwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl/m7qa+V2OYKAhvFx0kovT8X+iKDvNISGa f0djITxnHODXYo5m7DPpISoPVGma8swOTXH/TBmfdLUxql5Tc8iY/gnonJnD5coi 9O1EwrZWRpYMLDZpPwaSh4v7A2B7XGlRrEmWE7VErTGlp8xJIPqqy6T7+huXojyl KD66kEBBQeKW8a15No6nkt/dZGy2TZ9hlSlhI9bk0fhSG5IVMA+HXo70qUOkjOcR LVcXsEF/O2LudtnRmRTfI3R7wmoU+lfSYZQrHc3gkL0PTCY+4dO03B+TzTESDscX 8ovF4vrw1PAx0CBNVzOHaXq8LgzO5L7qmvMI5YyLy1Emi6GW9xE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:18 2025 by rpki-client