$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: wi3K2oA29L04e9J27h4hqOen/aPArcBozTYYlhbpy9A= Subject key identifier: 7C:78:5A:08:5F:5F:A7:D4:40:D6:CF:D4:2B:7D:66:2B:EC:28:23:A0 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 3864D8F8DE744EBA4536426B4E679CDEA6F4AAF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0228 Signing time: Mon 20 Oct 2025 05:11:55 +0000 Manifest this update: Mon 20 Oct 2025 05:06:55 +0000 Manifest next update: Thu 23 Oct 2025 15:10:55 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: 7LpqKU5WVgVYHoy+WMB61v7IRA1C5QodNGKWsEX5FNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:64:d8:f8:de:74:4e:ba:45:36:42:6b:4e:67:9c:de:a6:f4:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Oct 20 05:06:55 2025 GMT Not After : Oct 23 15:10:55 2025 GMT Subject: CN=7C785A085F5FA7D440D6CFD42B7D662BEC2823A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:4e:34:43:4c:ba:29:6e:d7:a7:bf:9e:a2: f8:d9:c9:56:14:26:eb:99:33:d7:9d:13:4f:d0:18: 4d:9d:69:c9:d0:ad:cc:9c:98:bf:ec:c3:7d:93:e2: b6:e9:8c:f3:12:7c:62:20:e9:e9:a7:80:37:67:c4: bf:c0:5f:32:53:76:cf:8c:71:b2:40:c6:dc:16:02: 9c:6a:ff:6c:80:2a:09:63:d9:95:40:10:be:ea:6b: 53:6c:78:64:0a:97:55:68:1c:56:d7:ec:25:20:0e: 6b:3b:cc:39:0d:4e:68:74:59:d0:76:82:f1:50:88: 13:7d:76:e1:8f:d8:fb:73:17:02:b9:10:5b:8b:84: 9a:2e:91:a2:8e:da:12:ef:06:8f:14:40:61:7b:98: a3:b6:86:8a:40:04:7f:f4:df:31:c0:80:81:72:6d: 9f:1c:43:f3:06:61:cd:d9:d8:71:8b:03:81:90:41: b4:f7:55:09:14:0d:67:ba:ae:15:25:52:78:8b:27: be:cc:28:af:57:d0:a6:b2:90:c5:3a:69:6c:6e:e1: 22:4e:73:9b:59:37:2d:26:83:22:5a:60:79:a3:ab: 85:d2:0a:ae:e1:66:83:92:10:fd:3d:fb:7c:b1:c4: ed:fd:ed:18:d3:c6:f9:09:d3:09:ba:f2:8c:6c:2a: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:5A:08:5F:5F:A7:D4:40:D6:CF:D4:2B:7D:66:2B:EC:28:23:A0 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0e:b4:0c:5e:30:7c:6b:53:e2:0a:b4:e8:40:49:45:4d:cd: 79:99:90:57:1d:67:5f:c2:e6:8a:49:f1:d7:0f:33:c1:69:84: 22:35:68:9f:35:19:b3:12:be:db:14:7a:05:fa:49:ec:80:90: 1e:72:af:a0:36:09:ae:31:55:a1:06:bd:2c:87:99:b9:00:0f: d5:22:94:30:dd:15:77:ac:14:a7:57:e3:65:26:ba:f1:25:ac: 76:e1:88:40:c7:b3:6d:50:7b:44:1f:9c:4f:60:e7:61:be:18: 79:f4:f7:f1:12:91:56:17:80:bf:1c:4f:94:53:73:7f:a4:45: 60:63:ba:58:f2:df:84:32:da:da:78:6e:d8:aa:41:cc:94:f7: c3:e0:b1:1c:fa:f5:d1:0a:7d:af:15:2a:76:89:d4:88:e4:77: 43:41:8f:60:4d:45:6d:cf:a0:e5:fc:a9:c4:d1:93:0a:44:43: 94:d5:9f:e9:e0:58:eb:7d:91:d4:13:60:90:01:19:61:cc:7a: ea:72:c9:77:88:1d:47:77:22:99:bb:8a:16:cb:44:15:ea:99: c0:f0:15:16:69:15:35:81:88:f0:2d:06:f9:ca:63:09:df:47: ec:0c:a3:07:38:d8:8e:ab:c2:a0:a9:31:0d:88:5c:40:d3:f9: a2:a4:b1:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGTY+N50TrpFNkJrTmec3qb0qvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTEwMjAwNTA2NTVaFw0yNTEwMjMxNTEwNTVaMDMxMTAvBgNV BAMTKDdDNzg1QTA4NUY1RkE3RDQ0MEQ2Q0ZENDJCN0Q2NjJCRUMyODIzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Fk40Q0y6KW7Xp7+eovjZyVYU JuuZM9edE0/QGE2dacnQrcycmL/sw32T4rbpjPMSfGIg6emngDdnxL/AXzJTds+M cbJAxtwWApxq/2yAKglj2ZVAEL7qa1NseGQKl1VoHFbX7CUgDms7zDkNTmh0WdB2 gvFQiBN9duGP2PtzFwK5EFuLhJoukaKO2hLvBo8UQGF7mKO2hopABH/03zHAgIFy bZ8cQ/MGYc3Z2HGLA4GQQbT3VQkUDWe6rhUlUniLJ77MKK9X0KaykMU6aWxu4SJO c5tZNy0mgyJaYHmjq4XSCq7hZoOSEP09+3yxxO397RjTxvkJ0wm68oxsKgUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHhaCF9fp9RA1s/UK31mK+woI6AwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwOtAxeMHxrU+IKtOhASUVNzXmZkFcdZ1/C 5opJ8dcPM8FphCI1aJ81GbMSvtsUegX6SeyAkB5yr6A2Ca4xVaEGvSyHmbkAD9Ui lDDdFXesFKdX42UmuvElrHbhiEDHs21Qe0QfnE9g52G+GHn09/ESkVYXgL8cT5RT c3+kRWBjuljy34Qy2tp4btiqQcyU98PgsRz69dEKfa8VKnaJ1Ijkd0NBj2BNRW3P oOX8qcTRkwpEQ5TVn+ngWOt9kdQTYJABGWHMeupyyXeIHUd3Ipm7ihbLRBXqmcDw FRZpFTWBiPAtBvnKYwnfR+wMowc42I6rwqCpMQ2IXEDT+aKksb0= -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:55 2025 by rpki-client