$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: gz8TTuH/IlGwmrpD/Y5PS7zAKUctrSTQ2xA6hB44jss= Subject key identifier: AE:22:C0:BC:EC:D4:BF:17:43:FB:3A:A4:47:79:33:61:EB:44:95:94 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 117EAADB1CC55577880FCF585152349F96B6D692 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 020E Signing time: Sat 23 Aug 2025 05:01:54 +0000 Manifest this update: Sat 23 Aug 2025 04:56:54 +0000 Manifest next update: Tue 26 Aug 2025 15:51:54 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: fTmGYQLjKz1Ko+lvHQIo5K1I8RPFL4QNe1YCENTfG7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7e:aa:db:1c:c5:55:77:88:0f:cf:58:51:52:34:9f:96:b6:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Aug 23 04:56:54 2025 GMT Not After : Aug 26 15:51:54 2025 GMT Subject: CN=AE22C0BCECD4BF1743FB3AA447793361EB449594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:e5:2b:32:68:19:4c:67:b6:6f:5a:a7:9e: 2d:ae:c0:08:2c:42:b8:d6:3a:c1:fd:48:4c:f4:e9: 7d:cd:05:60:ae:98:95:03:01:f3:44:38:86:9f:b5: e3:c9:22:69:0d:ce:e8:fd:23:10:bc:9e:62:76:7e: 43:b4:68:04:82:a7:97:bc:69:97:ee:37:e3:21:20: b1:77:b0:8f:89:14:97:ea:2c:45:68:23:0f:a0:25: 37:fe:6c:0d:2f:4a:c8:9d:5b:11:f8:7b:f1:8d:85: 12:b1:38:b3:01:ed:69:1f:1b:3d:2d:fe:92:a3:56: 3c:64:b0:9f:df:34:87:10:6d:29:48:aa:95:7c:a5: 1e:fe:8f:83:b7:9c:bc:34:58:60:83:22:c7:de:dc: 50:6d:93:e3:a4:62:66:08:67:ad:bf:d3:b3:43:20: 51:3f:e0:ea:9a:72:1b:fe:32:be:cf:5e:0f:a5:72: f8:2c:9a:8e:0b:3b:54:b0:52:db:d4:28:ae:bb:7a: f0:1f:cd:d1:6c:fe:8f:2a:b5:94:61:b1:fc:22:8f: cc:5a:71:04:72:1f:82:1a:e5:f8:71:77:75:e9:3f: 11:02:98:3d:ca:45:0c:8e:ff:cc:e1:5e:6c:69:28: 3a:81:38:cf:ba:d4:42:23:b7:a7:86:dd:fa:13:c5: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:22:C0:BC:EC:D4:BF:17:43:FB:3A:A4:47:79:33:61:EB:44:95:94 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:c9:97:8f:32:bd:db:66:33:5d:37:de:52:79:49:7d:76: 8a:23:d2:b0:8b:3d:f2:0a:f1:9a:51:45:0f:fc:04:e2:43:58: ca:62:af:34:8a:bf:f7:97:60:98:ae:f5:aa:90:c7:65:40:34: 1d:da:3c:3c:47:0e:88:0b:83:a5:9d:fb:d6:15:8d:a6:01:41: 8e:fc:05:98:79:ca:31:da:f8:0e:d5:ca:8b:cb:85:1b:fb:6d: 47:6a:e9:35:41:c3:f2:b0:59:83:f5:f6:ee:d2:83:c4:61:d7: 15:e4:9a:31:44:1b:52:7e:16:df:7f:f4:da:5e:3b:39:70:45: da:9c:23:24:6e:dc:d4:8d:2b:c2:3f:a2:07:7e:94:7f:43:4a: 53:2a:78:57:c3:1e:df:c5:34:94:1e:e3:cd:90:b7:fc:88:f4: d6:db:0d:28:2f:02:a3:fa:d8:6c:a6:11:c7:49:72:98:7c:3f: a6:ff:d4:fd:78:52:6c:3a:82:ae:e3:32:b4:7b:8e:15:36:75: aa:2a:c1:2d:e2:ab:2a:5c:30:88:b6:90:8e:a1:8e:25:90:5a: 31:45:2e:18:42:27:78:11:b3:4e:25:7b:e1:52:30:f9:ea:32: 0c:66:de:61:88:2f:9a:46:10:35:b9:b4:90:84:7e:ac:86:39: 43:44:61:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEX6q2xzFVXeID89YUVI0n5a21pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA4MjMwNDU2NTRaFw0yNTA4MjYxNTUxNTRaMDMxMTAvBgNV BAMTKEFFMjJDMEJDRUNENEJGMTc0M0ZCM0FBNDQ3NzkzMzYxRUI0NDk1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNOUrMmgZTGe2b1qnni2uwAgs QrjWOsH9SEz06X3NBWCumJUDAfNEOIaftePJImkNzuj9IxC8nmJ2fkO0aASCp5e8 aZfuN+MhILF3sI+JFJfqLEVoIw+gJTf+bA0vSsidWxH4e/GNhRKxOLMB7WkfGz0t /pKjVjxksJ/fNIcQbSlIqpV8pR7+j4O3nLw0WGCDIsfe3FBtk+OkYmYIZ62/07ND IFE/4Oqachv+Mr7PXg+lcvgsmo4LO1SwUtvUKK67evAfzdFs/o8qtZRhsfwij8xa cQRyH4Ia5fhxd3XpPxECmD3KRQyO/8zhXmxpKDqBOM+61EIjt6eG3foTxYKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUriLAvOzUvxdD+zqkR3kzYetElZQwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWByZePMr3bZjNdN95SeUl9dooj0rCLPfIK 8ZpRRQ/8BOJDWMpirzSKv/eXYJiu9aqQx2VANB3aPDxHDogLg6Wd+9YVjaYBQY78 BZh5yjHa+A7VyovLhRv7bUdq6TVBw/KwWYP19u7Sg8Rh1xXkmjFEG1J+Ft9/9Npe OzlwRdqcIyRu3NSNK8I/ogd+lH9DSlMqeFfDHt/FNJQe482Qt/yI9NbbDSgvAqP6 2GymEcdJcph8P6b/1P14Umw6gq7jMrR7jhU2daoqwS3iqypcMIi2kI6hjiWQWjFF LhhCJ3gRs04le+FSMPnqMgxm3mGIL5pGEDW5tJCEfqyGOUNEYRE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:16 2025 by rpki-client