$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: RA1nz0dYi6laM1QfqdOsxGXjYlXBPnE5D/9JyMmuiOg= Subject key identifier: 5E:11:AC:BC:74:38:5C:D4:A8:89:B8:90:E6:68:93:83:52:A5:CA:FC Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 5659F91FC7016AEFB0CA492794C36F232695FE6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: 9A Signing time: Fri 22 Aug 2025 09:11:23 +0000 Manifest this update: Fri 22 Aug 2025 09:06:23 +0000 Manifest next update: Mon 25 Aug 2025 15:17:23 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=) 2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: yvCuDsyXeA5rtDOKY7+cj9k/hYxw1VlMMRVNDliakrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:f9:1f:c7:01:6a:ef:b0:ca:49:27:94:c3:6f:23:26:95:fe:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Aug 22 09:06:23 2025 GMT Not After : Aug 25 15:17:23 2025 GMT Subject: CN=5E11ACBC74385CD4A889B890E668938352A5CAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:12:c2:46:eb:e3:79:0c:dd:89:27:fe:97: 9d:17:c3:75:c0:ea:b6:90:1b:6c:2d:e8:8e:92:8f: e4:e4:5b:46:e4:76:48:13:68:7f:6a:36:1c:ae:df: 8e:99:b0:9d:cd:ca:db:74:af:af:be:f5:e2:0d:aa: 6c:59:a4:66:37:cf:95:38:27:56:5e:a7:ba:6e:42: dd:71:fb:9b:a8:69:cc:72:a7:d8:ba:27:3e:f4:9e: 9c:be:0a:47:53:c9:06:dc:fe:93:d8:c1:b7:98:a9: 51:ca:99:68:6c:c2:fc:e7:78:6f:23:9e:3b:dc:30: 96:f3:57:89:74:b7:89:f9:c1:b0:08:e3:4c:25:94: e8:2a:ce:58:da:85:ec:e8:00:3a:12:db:ca:41:b3: a2:bb:b8:0c:97:15:d3:15:96:80:0a:8a:41:27:8c: b2:bc:3c:95:b3:13:9f:6d:ad:1b:4b:d8:df:f2:c5: a5:38:85:bf:b4:37:da:17:ce:ac:e5:59:b4:b8:d1: 14:bf:06:38:fd:b1:69:6a:bb:0d:52:54:4a:ef:aa: 9c:0e:b0:2d:c7:25:51:85:aa:cc:58:23:f9:44:63: 06:96:e5:ed:c5:72:9c:bb:23:eb:89:ea:3a:53:9c: 2b:86:dc:d7:90:fd:eb:71:f4:02:b9:43:30:9e:30: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:11:AC:BC:74:38:5C:D4:A8:89:B8:90:E6:68:93:83:52:A5:CA:FC X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:4a:85:f8:3e:e5:8b:21:b9:c4:3f:56:ed:84:c3:33:50: 0f:0b:59:2c:ed:48:b1:e9:ba:8f:fd:7a:7a:78:6a:44:8b:db: bc:6b:c7:22:24:61:52:94:69:5b:ea:d5:05:59:75:cb:ec:8a: 63:f2:d5:27:4b:81:1e:d9:52:40:22:04:d0:da:0f:72:f9:b8: 90:f1:57:5e:68:98:f7:22:60:d1:df:90:a8:bc:c7:8c:4e:06: 12:08:d8:49:f1:c7:e4:27:ff:b8:fb:46:49:ed:4d:37:71:49: 52:68:ba:25:41:06:ef:99:7e:1d:60:6f:85:6e:4e:85:99:99: 6b:4f:94:d2:e5:46:b7:e6:18:c6:28:09:02:46:e2:c7:7b:5c: f9:f8:66:eb:e7:9a:29:ea:a3:b1:37:49:b8:ed:be:7e:e2:1a: 51:9f:5f:65:3d:90:ac:88:c2:e6:e0:a1:39:6b:e4:7b:df:d2: 04:37:11:96:0f:cf:c2:d8:b2:e5:aa:d3:39:97:cb:34:43:60: 27:2c:0d:f2:a2:a0:a0:be:7f:6b:5e:63:c7:ae:6a:87:bb:ae: cd:d1:cb:41:7b:b1:bf:3b:0a:d9:25:85:0e:6a:ec:54:9e:5a: 97:3d:af:a8:f9:96:ef:fa:cb:af:5f:ec:1e:6c:d1:39:eb:be: b8:22:95:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVln5H8cBau+wykknlMNvIyaV/m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTA4MjIwOTA2MjNaFw0yNTA4MjUxNTE3MjNaMDMxMTAvBgNV BAMTKDVFMTFBQ0JDNzQzODVDRDRBODg5Qjg5MEU2Njg5MzgzNTJBNUNBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwRLCRuvjeQzdiSf+l50Xw3XA 6raQG2wt6I6Sj+TkW0bkdkgTaH9qNhyu346ZsJ3Nytt0r6++9eINqmxZpGY3z5U4 J1Zep7puQt1x+5uoacxyp9i6Jz70npy+CkdTyQbc/pPYwbeYqVHKmWhswvzneG8j njvcMJbzV4l0t4n5wbAI40wllOgqzljahezoADoS28pBs6K7uAyXFdMVloAKikEn jLK8PJWzE59trRtL2N/yxaU4hb+0N9oXzqzlWbS40RS/Bjj9sWlquw1SVErvqpwO sC3HJVGFqsxYI/lEYwaW5e3Fcpy7I+uJ6jpTnCuG3NeQ/etx9AK5QzCeMAg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXhGsvHQ4XNSoibiQ5miTg1KlyvwwHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7tSoX4PuWLIbnEP1bthMMzUA8LWSztSLHp uo/9enp4akSL27xrxyIkYVKUaVvq1QVZdcvsimPy1SdLgR7ZUkAiBNDaD3L5uJDx V15omPciYNHfkKi8x4xOBhII2Enxx+Qn/7j7RkntTTdxSVJouiVBBu+Zfh1gb4Vu ToWZmWtPlNLlRrfmGMYoCQJG4sd7XPn4Zuvnminqo7E3Sbjtvn7iGlGfX2U9kKyI wubgoTlr5Hvf0gQ3EZYPz8LYsuWq0zmXyzRDYCcsDfKioKC+f2teY8euaoe7rs3R y0F7sb87CtklhQ5q7FSeWpc9r6j5lu/6y69f7B5s0TnrvrgilTM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:03 2025 by rpki-client