$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: S+r3HQvUCy8h+Xdtz98ocj3MqYymy+N5U/L4PcfUwq4= Subject key identifier: 5E:14:AC:80:93:B9:F3:23:60:2D:89:D1:6B:C3:EB:D2:B0:9C:7F:C4 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 2CE982E52666079E3E948C8A1FA936A780D1CD68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 01FC Signing time: Fri 22 Aug 2025 13:12:22 +0000 Manifest this update: Fri 22 Aug 2025 13:07:22 +0000 Manifest next update: Mon 25 Aug 2025 16:12:22 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) 2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: LNE/iET4m1xR0oydwAr++NZPsMZNst3mAjKKHN9yMYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e9:82:e5:26:66:07:9e:3e:94:8c:8a:1f:a9:36:a7:80:d1:cd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Aug 22 13:07:22 2025 GMT Not After : Aug 25 16:12:22 2025 GMT Subject: CN=5E14AC8093B9F323602D89D16BC3EBD2B09C7FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:5a:16:57:4d:73:c4:f7:58:ce:bd:84:10: 1a:c1:70:ea:f8:b7:7e:80:e6:18:10:e2:17:bb:ec: 81:e9:cc:88:98:69:b3:12:3e:dc:b7:32:8e:77:b1: 1f:0e:0c:47:62:a2:24:e8:50:e0:5a:51:15:68:0e: 81:e0:69:ed:9e:be:88:c4:f6:b8:c7:d9:ac:da:fc: 22:67:15:db:7f:64:73:d1:81:a6:8b:af:53:00:37: 9d:53:93:87:ca:ed:1d:b6:a0:57:eb:b0:6a:69:8f: 2c:0c:c9:0c:3e:27:0c:32:00:cf:1d:35:d9:c2:90: 4a:76:51:09:a4:70:1a:30:61:5c:9f:0c:d8:7e:ef: 93:56:bf:ea:4f:a4:64:26:09:e9:7a:c9:f8:5e:0c: 3d:c3:ff:f8:81:09:cd:84:2a:a2:9c:21:e1:6e:26: a9:58:3b:c8:fe:65:6a:8a:67:63:d7:bc:75:01:20: ac:cf:12:d1:da:51:45:30:45:6f:c6:69:2d:13:2a: c2:ec:94:76:2e:dc:07:ef:55:59:d0:a8:f9:db:13: 84:58:dc:71:be:b6:6c:e3:68:06:a9:f9:e8:38:3c: d5:46:ba:06:6f:1e:c5:3f:70:4b:b4:5e:93:96:84: a7:6f:89:b4:b8:71:92:0b:94:21:df:74:92:7a:cb: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:14:AC:80:93:B9:F3:23:60:2D:89:D1:6B:C3:EB:D2:B0:9C:7F:C4 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:dc:a6:a6:e8:55:fb:16:a1:03:46:19:df:68:c9:ba:c9:09: e3:98:0f:3b:bb:ec:e1:0b:b7:cb:97:69:fb:0f:5b:c3:99:0c: 3d:70:9f:d9:c6:d7:95:17:f1:cd:03:f7:16:fe:2e:d2:6a:19: 56:82:a8:4b:99:4d:c3:ab:12:ee:e0:32:2e:34:ff:cb:2d:dc: c4:c7:4f:63:af:4d:e8:09:1c:21:30:44:b2:67:90:bb:6c:23: bd:e0:5d:1c:77:86:2f:b0:04:cb:1e:dd:ab:2b:20:e0:8b:23: ad:4f:61:4b:45:34:4d:e1:f1:48:0a:cc:be:9d:d4:92:52:ed: 14:73:27:51:84:e4:65:4b:9d:bb:51:d8:7d:3d:41:f4:b8:e7: be:c0:b5:05:6e:eb:27:8a:62:f9:fc:3f:75:55:cf:f1:78:31: 60:d4:e4:23:75:39:75:fe:81:0a:0d:fe:f2:c8:ea:5a:f4:99: be:3e:a8:06:d0:0b:04:db:0f:bb:a1:d1:cf:f9:fe:30:48:ef: a1:16:fe:12:46:f6:8a:b4:ed:0f:92:60:e6:a8:7a:d6:02:ef: 28:a9:f4:cc:80:d0:a8:11:c5:e8:78:74:d4:12:9e:2e:35:27: d7:c0:b4:29:52:15:a0:db:74:88:89:7f:02:d8:e2:6f:84:3a: c9:fb:a1:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOmC5SZmB54+lIyKH6k2p4DRzWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTA4MjIxMzA3MjJaFw0yNTA4MjUxNjEyMjJaMDMxMTAvBgNV BAMTKDVFMTRBQzgwOTNCOUYzMjM2MDJEODlEMTZCQzNFQkQyQjA5QzdGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2FoWV01zxPdYzr2EEBrBcOr4 t36A5hgQ4he77IHpzIiYabMSPty3Mo53sR8ODEdioiToUOBaURVoDoHgae2evojE 9rjH2aza/CJnFdt/ZHPRgaaLr1MAN51Tk4fK7R22oFfrsGppjywMyQw+JwwyAM8d NdnCkEp2UQmkcBowYVyfDNh+75NWv+pPpGQmCel6yfheDD3D//iBCc2EKqKcIeFu JqlYO8j+ZWqKZ2PXvHUBIKzPEtHaUUUwRW/GaS0TKsLslHYu3AfvVVnQqPnbE4RY 3HG+tmzjaAap+eg4PNVGugZvHsU/cEu0XpOWhKdvibS4cZILlCHfdJJ6y0Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXhSsgJO58yNgLYnRa8Pr0rCcf8QwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/cpqboVfsWoQNGGd9oybrJCeOYDzu77OEL t8uXafsPW8OZDD1wn9nG15UX8c0D9xb+LtJqGVaCqEuZTcOrEu7gMi40/8st3MTH T2OvTegJHCEwRLJnkLtsI73gXRx3hi+wBMse3asrIOCLI61PYUtFNE3h8UgKzL6d 1JJS7RRzJ1GE5GVLnbtR2H09QfS4577AtQVu6yeKYvn8P3VVz/F4MWDU5CN1OXX+ gQoN/vLI6lr0mb4+qAbQCwTbD7uh0c/5/jBI76EW/hJG9oq07Q+SYOaoetYC7yip 9MyA0KgRxeh4dNQSni41J9fAtClSFaDbdIiJfwLY4m+EOsn7oUA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:26 2025 by rpki-client