$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: +Q+G2p0Q8YA8iAGHoJ0eYBalmh98istzrta2fKm7XCs= Subject key identifier: E8:5D:19:80:CE:C8:8D:13:D6:75:5F:54:2F:F5:C6:FB:01:D8:F7:6B Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 3188808C9E1C5474D2390F19636E2A648888D44A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: B4 Signing time: Sun 19 Oct 2025 22:21:21 +0000 Manifest this update: Sun 19 Oct 2025 22:16:21 +0000 Manifest next update: Thu 23 Oct 2025 01:47:21 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=) 2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: Ce5yBBqj1UrqOKX4lV/Uj90AP6c690NUCJmgVAvlw6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:88:80:8c:9e:1c:54:74:d2:39:0f:19:63:6e:2a:64:88:88:d4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Oct 19 22:16:21 2025 GMT Not After : Oct 23 01:47:21 2025 GMT Subject: CN=E85D1980CEC88D13D6755F542FF5C6FB01D8F76B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:24:e9:ab:af:aa:c3:c2:d1:14:77:40:dd:19: 7b:a7:85:96:7c:5e:7c:88:f3:8e:0e:10:7d:fe:da: 03:61:89:93:68:c4:51:dd:13:30:60:da:fe:36:40: fe:32:c7:79:92:ef:09:cc:34:07:ed:d1:a1:07:ee: 15:48:5c:18:b4:05:34:59:c9:51:56:37:d4:8e:b2: 94:c9:ae:f0:f3:54:a6:48:af:fa:a3:7c:3d:8f:f9: c7:47:22:bf:ca:aa:be:bb:77:8b:06:8a:e3:93:d1: 30:c5:7c:5f:e8:cb:fe:91:cb:8e:f3:13:78:53:aa: 3b:22:a2:30:bb:40:61:bf:d5:ae:00:bc:4b:27:2d: ce:c0:2f:50:2d:65:d7:b5:88:49:83:e9:32:0f:8b: 03:ea:23:9a:66:54:f8:48:38:27:7e:0e:50:b3:c9: 98:56:7b:1e:1a:58:fd:d0:92:68:58:64:e0:c5:52: 54:81:fa:ed:d9:b3:58:7d:76:25:a9:38:0d:d1:7a: 40:75:93:ce:49:4b:5e:25:99:c1:5b:36:1a:a9:97: 5b:7d:f5:25:b5:cc:9d:86:38:52:ca:6f:5f:80:6c: 94:d0:f0:c3:d1:20:2b:e7:d0:72:60:9f:2f:f3:d9: 70:00:6e:ed:bc:7c:1b:4d:eb:24:1d:79:a6:91:25: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5D:19:80:CE:C8:8D:13:D6:75:5F:54:2F:F5:C6:FB:01:D8:F7:6B X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:56:1f:bd:2b:59:af:e0:c0:3c:49:fc:38:e4:7a:09:38:e7: f0:74:28:ec:ee:53:e6:27:8d:0e:8a:81:e9:f6:2b:45:8c:25: 17:1c:5a:ef:0f:ca:99:78:55:47:ea:4d:b7:c9:ac:40:a0:d6: b7:4d:9c:b2:f3:a8:58:ab:95:90:a9:a4:56:13:85:a0:5a:06: 73:0e:c4:22:ce:14:c6:35:94:35:22:92:94:ee:d6:47:05:b3: 09:1c:47:48:68:6d:86:43:5b:3b:e1:ea:ac:8d:91:88:1a:0b: 72:c7:d6:67:2b:f2:1f:9d:3e:b3:55:6e:59:b6:36:3b:90:aa: 2d:45:dd:01:05:95:ea:c3:48:6f:f6:15:d4:d1:19:aa:2b:cf: 1c:5b:2e:a5:74:97:89:3e:41:20:5e:ec:d8:f6:1e:fa:ad:04: f5:3c:3e:36:98:fb:67:44:bc:b2:32:d7:09:11:54:52:22:71: 5c:96:74:24:5e:b3:7d:a0:de:34:04:74:af:6e:db:1b:31:99: e1:05:da:b6:f2:ac:c1:70:0a:92:5e:27:9b:37:6c:8e:cc:5d: b1:bf:5b:57:54:f2:68:4d:1a:19:05:3c:ad:ac:44:19:fc:e7: eb:84:a7:44:77:3e:12:60:ff:9b:89:80:8d:23:15:e7:dc:81: 28:95:7a:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYiAjJ4cVHTSOQ8ZY24qZIiI1EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTEwMTkyMjE2MjFaFw0yNTEwMjMwMTQ3MjFaMDMxMTAvBgNV BAMTKEU4NUQxOTgwQ0VDODhEMTNENjc1NUY1NDJGRjVDNkZCMDFEOEY3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwJOmrr6rDwtEUd0DdGXunhZZ8 XnyI844OEH3+2gNhiZNoxFHdEzBg2v42QP4yx3mS7wnMNAft0aEH7hVIXBi0BTRZ yVFWN9SOspTJrvDzVKZIr/qjfD2P+cdHIr/Kqr67d4sGiuOT0TDFfF/oy/6Ry47z E3hTqjsiojC7QGG/1a4AvEsnLc7AL1AtZde1iEmD6TIPiwPqI5pmVPhIOCd+DlCz yZhWex4aWP3QkmhYZODFUlSB+u3Zs1h9diWpOA3RekB1k85JS14lmcFbNhqpl1t9 9SW1zJ2GOFLKb1+AbJTQ8MPRICvn0HJgny/z2XAAbu28fBtN6yQdeaaRJXR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6F0ZgM7IjRPWdV9UL/XG+wHY92swHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9WH70rWa/gwDxJ/Djkegk45/B0KOzuU+Yn jQ6Kgen2K0WMJRccWu8Pypl4VUfqTbfJrECg1rdNnLLzqFirlZCppFYThaBaBnMO xCLOFMY1lDUikpTu1kcFswkcR0hobYZDWzvh6qyNkYgaC3LH1mcr8h+dPrNVblm2 NjuQqi1F3QEFlerDSG/2FdTRGaorzxxbLqV0l4k+QSBe7Nj2HvqtBPU8PjaY+2dE vLIy1wkRVFIicVyWdCRes32g3jQEdK9u2xsxmeEF2rbyrMFwCpJeJ5s3bI7MXbG/ W1dU8mhNGhkFPK2sRBn85+uEp0R3PhJg/5uJgI0jFefcgSiVerM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:49 2025 by rpki-client