$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: MXsYulhZMnIZmp9pHyr4vXo5ZMINlCSjCn+1cIFTyTQ= Subject key identifier: 25:0C:66:DA:5F:4F:41:DA:3E:9E:4E:6F:CA:8D:A3:D0:3C:28:91:9D Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 758E81113BEE18CF26202F89A9D3E0C018269228 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: 81 Signing time: Sat 28 Jun 2025 21:41:19 +0000 Manifest this update: Sat 28 Jun 2025 21:36:19 +0000 Manifest next update: Wed 02 Jul 2025 07:55:19 +0000 Files and hashes: 1: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: D7HjYUPS/TLrFg7/DQTWxGi0MLrTB43+5SjCJ86ZP1c=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: bRxB1/XYWBuRDsFTyowa+aqFQkf4scGUR4oQ2TVJrXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8e:81:11:3b:ee:18:cf:26:20:2f:89:a9:d3:e0:c0:18:26:92:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Jun 28 21:36:19 2025 GMT Not After : Jul 2 07:55:19 2025 GMT Subject: CN=250C66DA5F4F41DA3E9E4E6FCA8DA3D03C28919D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:ce:b2:40:dc:cb:0b:3d:1f:4c:9e:4d:57: 1c:93:e5:c0:84:d0:83:c9:b3:c9:bb:43:0a:16:8e: d6:8e:e2:4e:de:66:7e:2f:e0:5f:c8:7d:5d:dc:8d: a0:79:b4:23:5f:33:ac:a0:09:f0:03:39:77:64:91: 82:28:20:24:42:04:e4:21:06:12:80:46:f4:b7:36: e1:24:95:be:81:ec:28:a5:3c:d0:26:ef:21:19:74: a9:fb:b3:a5:1f:02:70:cf:90:d9:d6:17:eb:35:dd: 2d:08:9a:85:22:1a:53:7e:3f:22:59:d7:9d:fe:25: 8a:e4:c2:e0:e8:01:cb:1f:00:58:ec:8f:a5:8d:db: e4:48:e4:1e:be:39:27:f6:bc:a8:35:52:a1:5d:91: f8:4e:bd:54:e5:8a:56:d5:9a:95:e5:e7:22:9a:c5: a2:96:19:5a:d4:91:a8:3a:f8:7e:f0:06:75:cf:a4: 81:8d:80:62:e0:36:32:4e:c4:71:3a:e0:50:21:ac: 1b:85:43:e3:c4:1b:53:54:2a:bf:70:53:ab:94:7b: f3:92:f0:97:12:7d:9f:dd:35:93:6a:03:b9:c6:c3: 07:6b:5c:cc:fc:0e:fd:51:ce:86:f0:25:86:a7:ae: 85:1a:96:87:ee:2e:10:fd:86:06:19:52:65:e0:48: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:66:DA:5F:4F:41:DA:3E:9E:4E:6F:CA:8D:A3:D0:3C:28:91:9D X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b9:45:fe:da:21:eb:69:09:8d:0c:54:c6:05:89:39:6d:91: 70:c5:69:94:68:1a:1e:28:b8:56:a3:11:3d:aa:b5:bc:3d:a0: 31:13:99:60:32:0f:39:c8:f3:08:3d:a3:36:5e:61:65:f2:20: 68:9f:f5:96:2d:12:96:8f:a6:ed:c8:3d:00:f2:c4:83:8b:b1: be:8f:96:82:04:bb:80:25:62:07:c0:bd:45:96:d8:e3:78:da: c0:60:42:a1:fb:26:a7:e1:0d:dd:f5:1d:21:13:1f:45:9a:79: 9c:b9:17:af:23:05:03:b8:39:73:b9:b2:31:98:29:f3:c5:a8: 56:92:c1:90:ba:92:b5:3a:5b:de:04:01:81:67:18:05:ff:56: ee:95:d6:4c:8e:29:fc:d6:0a:08:ad:14:1e:66:15:4a:8f:6c: d9:27:13:70:a4:94:00:3d:06:47:ad:c2:39:04:52:d6:a8:5c: df:b1:80:45:09:a7:17:a0:36:10:0e:a8:25:f7:4f:12:2b:2a: e2:4c:fc:e4:34:76:e5:e8:c8:6e:9a:fe:41:c4:a2:91:05:33: 3e:68:cd:14:2e:ad:79:c8:56:4a:f3:fc:16:1b:c8:ec:03:b6: ff:0f:c3:37:3d:77:a7:b6:d3:45:8d:0b:7d:01:ac:57:13:a9: 62:09:8f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdY6BETvuGM8mIC+JqdPgwBgmkigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTA2MjgyMTM2MTlaFw0yNTA3MDIwNzU1MTlaMDMxMTAvBgNV BAMTKDI1MEM2NkRBNUY0RjQxREEzRTlFNEU2RkNBOERBM0QwM0MyODkxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK86yQNzLCz0fTJ5NVxyT5cCE 0IPJs8m7QwoWjtaO4k7eZn4v4F/IfV3cjaB5tCNfM6ygCfADOXdkkYIoICRCBOQh BhKARvS3NuEklb6B7CilPNAm7yEZdKn7s6UfAnDPkNnWF+s13S0ImoUiGlN+PyJZ 153+JYrkwuDoAcsfAFjsj6WN2+RI5B6+OSf2vKg1UqFdkfhOvVTlilbVmpXl5yKa xaKWGVrUkag6+H7wBnXPpIGNgGLgNjJOxHE64FAhrBuFQ+PEG1NUKr9wU6uUe/OS 8JcSfZ/dNZNqA7nGwwdrXMz8Dv1RzobwJYanroUalofuLhD9hgYZUmXgSE6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJQxm2l9PQdo+nk5vyo2j0DwokZ0wHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA65Rf7aIetpCY0MVMYFiTltkXDFaZRoGh4o uFajET2qtbw9oDETmWAyDznI8wg9ozZeYWXyIGif9ZYtEpaPpu3IPQDyxIOLsb6P loIEu4AlYgfAvUWW2ON42sBgQqH7JqfhDd31HSETH0WaeZy5F68jBQO4OXO5sjGY KfPFqFaSwZC6krU6W94EAYFnGAX/Vu6V1kyOKfzWCgitFB5mFUqPbNknE3CklAA9 BketwjkEUtaoXN+xgEUJpxegNhAOqCX3TxIrKuJM/OQ0duXoyG6a/kHEopEFMz5o zRQurXnIVkrz/BYbyOwDtv8Pwzc9d6e200WNC30BrFcTqWIJj4k= -----END CERTIFICATE-----Generated at Mon Jun 30 07:18:00 2025 by rpki-client