$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: ccolUweXNgX7HXAc3cTVXlL1yCCqnZ0ob0UQgYe0+Gk= Subject key identifier: 24:01:34:8A:FC:51:11:E7:B5:91:C8:A3:4A:84:C1:DD:2A:C0:35:92 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 36F0D8282E248BBFBB77CE22978ACB4A7F4469DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 0215 Signing time: Sat 18 Oct 2025 07:32:21 +0000 Manifest this update: Sat 18 Oct 2025 07:27:21 +0000 Manifest next update: Tue 21 Oct 2025 10:56:21 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) 2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: ylsHFPHDeTWjd0nIps8BuNN53WHdVy2mE2O40lOnuMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f0:d8:28:2e:24:8b:bf:bb:77:ce:22:97:8a:cb:4a:7f:44:69:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Oct 18 07:27:21 2025 GMT Not After : Oct 21 10:56:21 2025 GMT Subject: CN=2401348AFC5111E7B591C8A34A84C1DD2AC03592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:7d:c5:0d:30:91:62:98:b5:d8:75:a4:94: 6a:ec:a5:20:1e:80:34:2b:fc:53:fa:bc:15:a9:69: d6:79:53:9b:d3:c5:41:04:77:73:7e:bc:98:8f:b6: 71:60:c1:ff:b9:cf:7d:36:5d:5a:72:47:cf:72:71: 31:53:d8:99:4f:36:d3:f4:e5:ee:bd:4f:d9:22:2e: 48:bb:1e:2a:d7:6b:d9:af:bc:13:15:60:e4:bc:eb: 32:be:1a:52:75:a4:97:f8:69:28:24:e2:0c:7a:ef: 0e:ce:ee:b8:7b:73:d5:fc:e6:73:e7:08:81:94:53: 48:de:e7:d1:aa:2b:92:e9:9e:0e:cd:fd:c5:c9:8d: 12:db:21:5c:d9:83:3d:54:08:e9:e7:5a:38:de:c1: 95:92:d1:a5:4f:bc:c5:d2:c6:8c:15:cf:4e:14:ba: f1:df:7b:66:2b:b9:7e:84:53:d0:5a:e7:f4:7d:80: d5:1e:2b:59:a4:2e:63:62:d5:e7:86:2d:30:c6:7a: 44:fa:06:f8:64:ce:d4:0c:48:30:1d:42:30:f2:c2: 98:64:75:40:6d:64:20:92:2f:86:6f:a1:93:b2:d4: 53:60:0f:86:f3:17:a6:6f:e7:3a:34:ac:9f:a4:00: e6:cb:dc:45:d2:f2:05:f8:91:9a:55:44:b5:44:0e: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:01:34:8A:FC:51:11:E7:B5:91:C8:A3:4A:84:C1:DD:2A:C0:35:92 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f9:ae:aa:6c:6d:75:bf:92:6e:bb:60:53:54:af:fa:c5:9a: 2b:f8:37:2d:d0:42:ac:be:f6:75:48:b7:a9:e4:b1:b0:43:c1: 9e:22:13:66:6e:96:e0:af:96:da:87:28:2a:83:de:90:8a:e7: 47:26:77:c2:d4:0c:fb:6e:d3:79:d0:27:74:0e:37:ab:bd:78: 0e:8e:a6:dc:2a:8d:21:c9:eb:31:48:56:a2:93:94:d5:f8:15: 8b:4a:da:e8:13:61:4f:f1:c2:f9:11:ef:f1:bf:fb:bf:01:84: d5:b3:7f:dc:7b:f2:fc:8e:92:94:3c:ff:47:ca:c7:6f:9f:22: f2:2d:14:ce:2a:95:d3:fa:cc:02:a6:06:86:22:69:7f:4d:77: f7:f6:3d:b6:4c:ae:a1:97:20:63:65:fc:9f:5a:0d:15:f5:2f: 65:91:58:2c:29:b2:17:be:dd:44:2c:44:6a:60:e2:8b:87:29: af:2d:b7:71:77:4a:66:64:21:d7:60:c9:f8:56:be:e2:23:d3: c8:26:62:e7:b0:6a:79:8e:80:64:e1:fd:90:60:6b:76:83:b3: 18:57:a0:62:1b:ca:be:3c:08:d9:bb:3b:fa:2a:62:f4:22:88: 42:f1:50:a5:f4:79:02:b7:52:59:50:cf:37:e9:d0:90:cb:9d: 5e:de:57:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvDYKC4ki7+7d84il4rLSn9Ead8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTEwMTgwNzI3MjFaFw0yNTEwMjExMDU2MjFaMDMxMTAvBgNV BAMTKDI0MDEzNDhBRkM1MTExRTdCNTkxQzhBMzRBODRDMUREMkFDMDM1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrn3FDTCRYpi12HWklGrspSAe gDQr/FP6vBWpadZ5U5vTxUEEd3N+vJiPtnFgwf+5z302XVpyR89ycTFT2JlPNtP0 5e69T9kiLki7HirXa9mvvBMVYOS86zK+GlJ1pJf4aSgk4gx67w7O7rh7c9X85nPn CIGUU0je59GqK5Lpng7N/cXJjRLbIVzZgz1UCOnnWjjewZWS0aVPvMXSxowVz04U uvHfe2YruX6EU9Ba5/R9gNUeK1mkLmNi1eeGLTDGekT6BvhkztQMSDAdQjDywphk dUBtZCCSL4ZvoZOy1FNgD4bzF6Zv5zo0rJ+kAObL3EXS8gX4kZpVRLVEDgejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAE0ivxREee1kcijSoTB3SrANZIwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/5rqpsbXW/km67YFNUr/rFmiv4Ny3QQqy+ 9nVIt6nksbBDwZ4iE2ZuluCvltqHKCqD3pCK50cmd8LUDPtu03nQJ3QON6u9eA6O ptwqjSHJ6zFIVqKTlNX4FYtK2ugTYU/xwvkR7/G/+78BhNWzf9x78vyOkpQ8/0fK x2+fIvItFM4qldP6zAKmBoYiaX9Nd/f2PbZMrqGXIGNl/J9aDRX1L2WRWCwpshe+ 3UQsRGpg4ouHKa8tt3F3SmZkIddgyfhWvuIj08gmYuewanmOgGTh/ZBga3aDsxhX oGIbyr48CNm7O/oqYvQiiELxUKX0eQK3UllQzzfp0JDLnV7eV6U= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:34 2025 by rpki-client