$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: wPnWTKYaQyv7h0COoZ+jHCLzSEMMie3fCvYZzXJWAck= Subject key identifier: 33:22:18:08:3F:09:B1:43:13:73:27:2D:9C:F8:48:9F:E5:49:56:88 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 17E6DD8890B9137F4EB728AD4F83BBD506CE3937 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 01F6 Signing time: Sat 28 Jun 2025 10:31:51 +0000 Manifest this update: Sat 28 Jun 2025 10:26:51 +0000 Manifest next update: Tue 01 Jul 2025 22:01:51 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: N3QJZXtGGYtwBowlSj/HhDKDnWg4Mos7P4+lxT8hQ6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e6:dd:88:90:b9:13:7f:4e:b7:28:ad:4f:83:bb:d5:06:ce:39:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Jun 28 10:26:51 2025 GMT Not After : Jul 1 22:01:51 2025 GMT Subject: CN=332218083F09B1431373272D9CF8489FE5495688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:e1:97:1c:ce:c0:d5:78:3c:27:d3:70:88: 68:53:2c:f8:61:91:28:54:f0:d0:c6:a2:df:20:8b: cb:5a:e3:0a:0e:41:05:b4:10:d9:30:01:27:4b:dd: c2:b6:bf:9f:24:85:7e:f7:12:b4:f7:23:31:15:f1: d1:d5:9b:81:0d:5c:8e:2d:cd:95:57:21:0c:ad:bf: 16:c2:6d:8f:3b:25:9d:3d:a8:ab:36:51:c8:71:ea: de:4e:66:5f:50:88:37:ad:7c:4f:59:ca:5c:e3:c6: 44:0a:18:62:93:c5:a6:dc:43:cf:7b:05:44:63:f1: 8c:3d:4c:7f:d9:15:d1:64:b4:df:78:28:81:24:14: ee:b5:37:b8:f3:8d:2c:a1:24:c1:79:af:76:79:7e: 66:18:d2:2d:da:54:bf:1f:08:14:3a:f1:48:fa:69: 6d:0b:da:70:45:be:8f:cd:98:1f:b9:53:9f:ae:0c: 43:43:c5:97:50:76:03:1f:7e:c7:28:bc:85:1d:a6: 5c:63:47:1c:63:13:c4:a6:6e:8e:d1:ac:f4:18:ce: b7:64:9a:d9:51:2c:d4:0a:09:6d:51:69:63:2b:39: 3a:cd:cd:d4:c6:16:0a:76:e9:3a:43:31:cd:98:3b: 1f:db:10:3d:d3:91:6e:42:af:e8:27:88:94:98:61: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:18:08:3F:09:B1:43:13:73:27:2D:9C:F8:48:9F:E5:49:56:88 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1b:78:a7:9d:b3:45:ba:58:6c:d0:5b:6f:aa:1a:2b:cd:cd: 38:e7:aa:19:97:7e:54:14:f3:4e:a9:5c:6d:77:dc:d1:13:e6: b2:96:34:af:6a:15:01:93:b4:dd:0d:cb:34:80:48:d5:7c:0b: 64:4f:82:29:5a:51:f9:fc:34:05:b7:54:e5:7d:19:e4:42:af: 05:96:44:99:a9:74:7f:48:2c:46:d2:c6:f3:cc:db:45:78:b2: ae:70:60:80:e4:30:76:b2:0c:44:e8:34:4e:9c:13:de:8f:82: bf:05:41:72:b8:d1:90:38:fb:63:a4:6c:d7:48:43:00:6f:20: 61:9f:62:0a:17:6f:a0:41:66:eb:a2:86:94:1c:3e:1c:82:55: ec:8f:42:9d:dc:50:55:3e:7e:32:2c:d6:e5:4e:75:7f:ce:6d: 42:26:71:c7:03:85:d1:d0:a0:cb:05:56:87:07:7d:8f:e6:1c: 6c:ac:f4:54:02:a5:4c:80:cd:04:e3:ad:da:e0:15:e4:2b:f9: 24:df:f6:32:50:88:1a:09:3c:f3:c8:e7:ff:78:5f:59:61:c0: f2:ed:17:e0:28:b6:34:af:f3:d1:97:97:e1:1a:8a:e3:8b:a0: 4d:19:08:8b:aa:7b:c9:72:b3:a3:ce:0e:a8:3b:0c:24:7e:46: 18:4a:5b:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+bdiJC5E39OtyitT4O71QbOOTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA2MjgxMDI2NTFaFw0yNTA3MDEyMjAxNTFaMDMxMTAvBgNV BAMTKDMzMjIxODA4M0YwOUIxNDMxMzczMjcyRDlDRjg0ODlGRTU0OTU2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdX+GXHM7A1Xg8J9NwiGhTLPhh kShU8NDGot8gi8ta4woOQQW0ENkwASdL3cK2v58khX73ErT3IzEV8dHVm4ENXI4t zZVXIQytvxbCbY87JZ09qKs2Uchx6t5OZl9QiDetfE9ZylzjxkQKGGKTxabcQ897 BURj8Yw9TH/ZFdFktN94KIEkFO61N7jzjSyhJMF5r3Z5fmYY0i3aVL8fCBQ68Uj6 aW0L2nBFvo/NmB+5U5+uDENDxZdQdgMffscovIUdplxjRxxjE8Smbo7RrPQYzrdk mtlRLNQKCW1RaWMrOTrNzdTGFgp26TpDMc2YOx/bED3TkW5Cr+gniJSYYbnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMyIYCD8JsUMTcyctnPhIn+VJVogwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYbeKeds0W6WGzQW2+qGivNzTjnqhmXflQU 806pXG133NET5rKWNK9qFQGTtN0NyzSASNV8C2RPgilaUfn8NAW3VOV9GeRCrwWW RJmpdH9ILEbSxvPM20V4sq5wYIDkMHayDEToNE6cE96Pgr8FQXK40ZA4+2OkbNdI QwBvIGGfYgoXb6BBZuuihpQcPhyCVeyPQp3cUFU+fjIs1uVOdX/ObUImcccDhdHQ oMsFVocHfY/mHGys9FQCpUyAzQTjrdrgFeQr+STf9jJQiBoJPPPI5/94X1lhwPLt F+AotjSv89GXl+EaiuOLoE0ZCIuqe8lys6PODqg7DCR+RhhKW88= -----END CERTIFICATE-----Generated at Mon Jun 30 01:09:38 2025 by rpki-client