$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: zFWPsqJ5i423mePqfufMdrVp0trVlVLu2bD52HAl2/k= Subject key identifier: 95:C8:C0:65:37:0F:95:C1:E1:25:D6:80:B3:FF:67:B6:35:CD:97:06 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 2AC3AC49A0985C11C7D8FB5F7A803A23DFEDC37F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 01DF Signing time: Thu 08 May 2025 11:21:52 +0000 Manifest this update: Thu 08 May 2025 11:16:52 +0000 Manifest next update: Sun 11 May 2025 14:19:52 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: AEpQ5OBdcnUmAtntK3GFDyFRv9shVxysB4DBLvWVEtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c3:ac:49:a0:98:5c:11:c7:d8:fb:5f:7a:80:3a:23:df:ed:c3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: May 8 11:16:52 2025 GMT Not After : May 11 14:19:52 2025 GMT Subject: CN=95C8C065370F95C1E125D680B3FF67B635CD9706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:fd:8d:6e:5c:6d:34:a6:d9:3e:d4:34:52: d2:eb:59:f0:4e:56:da:54:99:04:be:08:26:9a:4b: 6a:b7:0e:9f:b7:41:1d:a9:7b:f3:f3:4a:f9:c8:b7: ad:35:59:58:22:53:a9:78:78:d0:ab:a1:6b:a9:d2: 2e:72:8c:24:c0:7a:5c:6a:0f:1f:28:da:c2:c8:a8: b3:11:ec:41:e3:04:1b:f8:2e:cf:93:e9:e5:b5:60: 50:ef:fd:74:17:ce:7a:73:d4:93:19:f7:dc:c3:ad: a6:62:70:55:7b:a1:06:90:9c:8a:29:74:67:39:ca: 4f:5c:2f:a8:32:f1:1f:0e:f8:ba:00:20:b9:ee:ca: a6:6c:b9:d3:2a:a0:ad:15:e6:95:c2:06:2e:95:93: 7b:de:4b:70:07:01:55:86:4a:2d:7d:ad:93:df:8b: a9:86:65:fd:63:80:93:44:9c:79:6a:b1:29:e5:93: aa:d8:0c:60:b7:bf:c7:8b:22:83:a4:49:20:68:3f: 16:f8:b6:86:04:87:7b:c0:2b:7f:28:91:6c:69:be: 2f:4b:85:c1:39:46:97:76:06:10:4b:11:18:f1:8f: 63:44:20:a9:4c:bc:09:8f:fb:07:5f:5c:37:1f:b8: d8:2f:cd:e2:8f:12:52:51:1a:f6:99:bb:47:46:74: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C8:C0:65:37:0F:95:C1:E1:25:D6:80:B3:FF:67:B6:35:CD:97:06 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ba:7f:71:6b:19:9c:88:95:4c:05:20:59:b2:9f:be:07:4f: c3:4c:9f:b2:a3:d8:65:2d:aa:c6:af:03:98:f2:26:33:ba:ea: 67:bd:83:8a:71:7e:c5:fb:b7:cb:22:71:9c:33:0f:ab:65:4b: 20:63:ce:d5:3e:89:4a:c1:1d:bb:b5:9c:cb:b8:95:e3:0c:a3: 3a:1d:1d:a9:e7:c7:ab:e3:f5:9d:c3:71:38:8b:35:7e:45:a9: 7b:1a:2e:71:b6:74:9d:af:b7:55:cb:ee:d8:b9:0d:b5:32:ab: ef:44:5d:b9:3b:a2:02:56:fc:6c:17:e3:b1:07:a3:b9:0c:7d: 93:b1:c1:e7:3a:c0:9e:b6:12:ec:74:80:90:b9:e8:fa:2f:22: 15:21:a7:71:95:14:ad:4d:d2:32:b8:cb:ca:15:1f:37:ec:ef: 72:69:d3:12:b5:4a:af:da:b1:ad:70:69:6a:fc:44:d5:88:8a: 42:8f:fe:05:17:0f:f6:27:bb:e5:f2:35:c1:c2:f7:68:d9:5b: 5d:ae:03:fc:1d:08:f6:4f:35:9a:3f:fc:ac:a5:f7:bc:38:62: d5:55:a6:bf:9b:87:23:7c:de:8b:fb:24:ce:b1:2a:48:e5:e5: 01:fb:4d:3c:54:45:86:c3:7a:de:e7:10:b0:28:7d:67:6b:4d: 41:5a:c5:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsOsSaCYXBHH2PtfeoA6I9/tw38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA1MDgxMTE2NTJaFw0yNTA1MTExNDE5NTJaMDMxMTAvBgNV BAMTKDk1QzhDMDY1MzcwRjk1QzFFMTI1RDY4MEIzRkY2N0I2MzVDRDk3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Mv2NblxtNKbZPtQ0UtLrWfBO VtpUmQS+CCaaS2q3Dp+3QR2pe/PzSvnIt601WVgiU6l4eNCroWup0i5yjCTAelxq Dx8o2sLIqLMR7EHjBBv4Ls+T6eW1YFDv/XQXznpz1JMZ99zDraZicFV7oQaQnIop dGc5yk9cL6gy8R8O+LoAILnuyqZsudMqoK0V5pXCBi6Vk3veS3AHAVWGSi19rZPf i6mGZf1jgJNEnHlqsSnlk6rYDGC3v8eLIoOkSSBoPxb4toYEh3vAK38okWxpvi9L hcE5Rpd2BhBLERjxj2NEIKlMvAmP+wdfXDcfuNgvzeKPElJRGvaZu0dGdAO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcjAZTcPlcHhJdaAs/9ntjXNlwYwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe6f3FrGZyIlUwFIFmyn74HT8NMn7Kj2GUt qsavA5jyJjO66me9g4pxfsX7t8sicZwzD6tlSyBjztU+iUrBHbu1nMu4leMMozod Hannx6vj9Z3DcTiLNX5FqXsaLnG2dJ2vt1XL7ti5DbUyq+9EXbk7ogJW/GwX47EH o7kMfZOxwec6wJ62Eux0gJC56PovIhUhp3GVFK1N0jK4y8oVHzfs73Jp0xK1Sq/a sa1waWr8RNWIikKP/gUXD/Ynu+XyNcHC92jZW12uA/wdCPZPNZo//Kyl97w4YtVV pr+bhyN83ov7JM6xKkjl5QH7TTxURYbDet7nELAofWdrTUFaxdQ= -----END CERTIFICATE-----Generated at Fri May 9 03:37:56 2025 by rpki-client