$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: GVQ9jyAjswatbwRAVULPCAebjLA3TwhYgANQG+DTBjw= Subject key identifier: 10:EC:2E:B4:0F:6E:CF:0B:E3:2F:0D:34:80:97:C1:4A:56:49:C0:EA Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 37F86D0C5E8078983819BD4FC021566C7844A653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 01E4 Signing time: Sun 29 Jun 2025 14:22:18 +0000 Manifest this update: Sun 29 Jun 2025 14:17:18 +0000 Manifest next update: Wed 02 Jul 2025 18:39:18 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: jEcEUlY+Cv050duI9ADDSWbrOa+lpqyZ83RaHaz8XF4=) 2: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f8:6d:0c:5e:80:78:98:38:19:bd:4f:c0:21:56:6c:78:44:a6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Jun 29 14:17:18 2025 GMT Not After : Jul 2 18:39:18 2025 GMT Subject: CN=10EC2EB40F6ECF0BE32F0D348097C14A5649C0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:7d:03:4f:81:b9:1c:3a:8d:4a:4f:87:88: 22:82:6e:18:ca:8a:52:98:be:70:f3:25:d8:98:2a: 36:4a:74:6d:29:98:1a:ab:f5:1f:90:e6:51:81:b1: 0a:ec:b6:63:b0:a6:f7:f3:79:f1:a9:a0:d7:f0:c2: 66:0f:9a:44:1d:9a:d0:b7:35:6b:63:d5:14:60:7d: 41:b9:e2:b0:4a:e1:90:4d:8b:ad:a6:03:25:d2:b1: bd:97:d6:13:c3:eb:74:2b:14:8b:ea:50:1a:13:2e: 7b:bf:2e:fe:4a:24:c1:90:10:24:5a:a7:33:11:4e: c2:29:56:52:0e:6f:8d:ee:34:88:4d:fc:86:1f:49: e6:a1:94:e9:76:5b:0f:c7:e9:e4:79:02:0e:99:b2: 12:cc:82:3e:bf:bb:39:c1:13:fd:a5:8f:7a:2f:64: 21:10:39:6a:33:e1:58:11:06:d9:a3:90:b7:50:5c: d2:94:14:0e:51:2c:b4:28:f1:f4:05:c7:c6:b1:04: 90:51:82:3c:b2:81:20:af:ed:a1:3f:92:5a:35:f7: eb:16:7e:86:44:a0:a1:d3:c1:71:a6:1a:30:88:2b: 94:cb:80:98:82:fe:0e:41:c8:f7:62:ec:12:e4:79: 86:9c:ca:53:94:49:d4:4a:02:61:7f:de:e0:11:24: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EC:2E:B4:0F:6E:CF:0B:E3:2F:0D:34:80:97:C1:4A:56:49:C0:EA X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6b:ce:93:6f:82:c6:0e:59:95:e5:ad:66:ed:22:29:84:4f: 95:28:ff:ac:b5:68:db:c6:a7:7f:39:47:c7:b4:f0:41:36:9f: e5:fd:cf:12:4a:89:5f:ce:8d:cf:75:0d:53:9e:51:10:e3:ad: ad:07:df:8b:33:e1:9f:bc:ae:c9:db:4a:89:3e:09:ca:7b:46: 32:3d:00:71:01:8a:ba:f4:74:77:11:57:e6:ae:61:49:5e:be: b1:e8:a4:14:5a:94:a6:4d:a0:4c:4c:c9:8f:d7:5a:3e:1a:19: e9:22:eb:7d:9c:5f:26:f7:93:29:92:9c:9f:c7:94:61:b4:37: d3:25:d5:a5:4a:72:87:5b:e7:0a:47:ca:76:b7:ec:8c:88:c1: 71:c7:a5:10:18:d0:03:63:3f:a0:59:c2:90:c2:39:b1:b9:15: 9b:29:76:40:ad:49:6f:3d:8e:25:0f:27:22:7a:3a:70:19:39: 66:d4:65:a1:d1:b0:62:52:1b:fe:b8:c6:36:19:63:b4:5e:2e: 1a:2e:b1:4d:58:58:ac:bd:75:91:74:8a:32:7c:b0:23:97:b0: f2:f4:18:1b:09:40:9c:e7:84:17:85:d9:73:a8:e6:af:f5:6e: b2:f4:db:d9:00:86:d1:a9:29:4a:8d:62:7d:3c:5e:cc:68:a1: 5b:0f:ba:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/htDF6AeJg4Gb1PwCFWbHhEplMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTA2MjkxNDE3MThaFw0yNTA3MDIxODM5MThaMDMxMTAvBgNV BAMTKDEwRUMyRUI0MEY2RUNGMEJFMzJGMEQzNDgwOTdDMTRBNTY0OUMwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwX0DT4G5HDqNSk+HiCKCbhjK ilKYvnDzJdiYKjZKdG0pmBqr9R+Q5lGBsQrstmOwpvfzefGpoNfwwmYPmkQdmtC3 NWtj1RRgfUG54rBK4ZBNi62mAyXSsb2X1hPD63QrFIvqUBoTLnu/Lv5KJMGQECRa pzMRTsIpVlIOb43uNIhN/IYfSeahlOl2Ww/H6eR5Ag6ZshLMgj6/uznBE/2lj3ov ZCEQOWoz4VgRBtmjkLdQXNKUFA5RLLQo8fQFx8axBJBRgjyygSCv7aE/klo19+sW foZEoKHTwXGmGjCIK5TLgJiC/g5ByPdi7BLkeYacylOUSdRKAmF/3uARJClDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOwutA9uzwvjLw00gJfBSlZJwOowHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9rzpNvgsYOWZXlrWbtIimET5Uo/6y1aNvG p385R8e08EE2n+X9zxJKiV/Ojc91DVOeURDjra0H34sz4Z+8rsnbSok+Ccp7RjI9 AHEBirr0dHcRV+auYUlevrHopBRalKZNoExMyY/XWj4aGeki632cXyb3kymSnJ/H lGG0N9Ml1aVKcodb5wpHyna37IyIwXHHpRAY0ANjP6BZwpDCObG5FZspdkCtSW89 jiUPJyJ6OnAZOWbUZaHRsGJSG/64xjYZY7ReLhousU1YWKy9dZF0ijJ8sCOXsPL0 GBsJQJznhBeF2XOo5q/1brL029kAhtGpKUqNYn08XsxooVsPuhc= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:10 2025 by rpki-client