$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: Iz4wJxKP6okx0ZdzshzSH+rUVEIgtqihAYUaH+J5zoY= Subject key identifier: CD:70:C7:19:E7:EB:29:0C:D8:C8:8B:8A:9D:74:94:18:95:30:AE:E9 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 59514603BD2EFC8D98FAD02E59ACC6458E6D6E62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 035F Signing time: Tue 05 Aug 2025 10:12:05 +0000 Manifest this update: Tue 05 Aug 2025 10:07:05 +0000 Manifest next update: Fri 08 Aug 2025 12:53:05 +0000 Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) 3: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: j+1I9mOV9mYb1pjCwLu2Mf1rnibvE2s2wXnR7l5ocec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:51:46:03:bd:2e:fc:8d:98:fa:d0:2e:59:ac:c6:45:8e:6d:6e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Aug 5 10:07:05 2025 GMT Not After : Aug 8 12:53:05 2025 GMT Subject: CN=CD70C719E7EB290CD8C88B8A9D7494189530AEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:c2:ec:7c:e9:c7:90:b3:2a:a9:85:79:0e: 69:fb:47:84:94:b3:03:3d:b7:2c:ba:16:4e:50:e7: 26:81:c2:31:3f:52:ba:b6:75:b5:c7:8f:35:0f:3a: ea:00:6f:e2:93:32:7d:b0:e1:34:e9:04:a1:10:51: 1b:91:8a:c3:10:cd:fc:69:ea:fd:7c:e5:f1:c7:d3: 67:95:fd:cc:a2:a3:b3:37:ad:06:c6:35:02:2b:b8: 76:8a:ee:34:1a:8e:74:f3:90:21:e8:31:bd:de:31: 27:a6:4e:b6:f2:6b:07:a2:85:7c:af:a3:39:d2:d6: e5:6b:6f:e4:1d:36:7d:53:09:e2:43:97:88:86:45: 76:0d:06:97:92:d1:dc:e7:d9:e4:b3:04:52:74:1d: 3d:71:6b:0d:b0:ae:7d:17:23:46:83:47:f8:1c:25: fa:44:de:76:9e:d4:1c:1f:ce:f7:cc:f7:2c:b4:bb: e5:05:22:80:8e:8f:bb:60:73:0b:fe:d6:1e:85:87: 66:6e:87:eb:f5:ba:ea:03:dd:69:c8:6f:12:78:ec: 14:5c:7f:67:c0:d6:ab:37:86:1a:fa:1c:16:3d:13: e3:a8:83:19:4f:f2:d1:64:9d:0e:dd:15:5d:6f:8e: 57:7d:97:dd:5f:e3:e1:f2:ca:cb:2c:46:b8:21:f6: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:70:C7:19:E7:EB:29:0C:D8:C8:8B:8A:9D:74:94:18:95:30:AE:E9 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b0:b7:20:b2:db:ce:82:b8:2f:f0:45:18:04:0f:18:2e:b4: f8:78:bf:1f:3e:8b:6b:f6:d3:df:5a:0e:84:80:06:6c:34:d3: 87:00:18:1b:ce:7a:b8:a8:5f:db:ca:e2:7e:4c:69:3e:a4:b0: 07:a4:4e:b5:bd:8f:17:9a:86:e7:aa:a5:0a:33:47:6e:42:6f: 00:1b:08:0a:5c:45:da:c6:0f:9d:4b:6c:ae:e5:5c:b8:8a:2a: 90:d3:f9:c6:e6:a1:6c:39:ff:e4:d4:b4:28:b7:74:90:0c:5d: dc:e2:45:7d:16:af:62:6e:d8:da:b6:38:bc:39:5f:6d:6d:80: 36:61:ab:ef:6f:75:94:79:6d:c0:1c:63:17:9b:17:11:61:b1: 34:8b:ce:19:03:08:97:89:cf:ea:38:7a:e6:a1:1d:83:02:88: 87:fb:4c:22:2d:87:d3:07:ad:8d:1e:6f:53:04:d7:f9:37:c1: 97:35:56:1c:44:64:b1:f5:4b:07:bc:0d:32:a5:04:c5:2f:e1: 54:f4:93:ab:78:b4:27:68:53:43:a1:d2:ea:b0:f4:cc:38:30: 23:5d:f4:f8:6e:f4:0b:72:10:75:c6:c9:1b:18:31:ee:10:58: a6:3d:5c:43:60:96:d3:f3:1f:b8:2b:ac:54:b1:e1:04:94:b0: 97:61:6c:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVFGA70u/I2Y+tAuWazGRY5tbmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTA4MDUxMDA3MDVaFw0yNTA4MDgxMjUzMDVaMDMxMTAvBgNV BAMTKENENzBDNzE5RTdFQjI5MENEOEM4OEI4QTlENzQ5NDE4OTUzMEFFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiz8LsfOnHkLMqqYV5Dmn7R4SU swM9tyy6Fk5Q5yaBwjE/Urq2dbXHjzUPOuoAb+KTMn2w4TTpBKEQURuRisMQzfxp 6v185fHH02eV/cyio7M3rQbGNQIruHaK7jQajnTzkCHoMb3eMSemTrbyaweihXyv oznS1uVrb+QdNn1TCeJDl4iGRXYNBpeS0dzn2eSzBFJ0HT1xaw2wrn0XI0aDR/gc JfpE3nae1BwfzvfM9yy0u+UFIoCOj7tgcwv+1h6Fh2Zuh+v1uuoD3WnIbxJ47BRc f2fA1qs3hhr6HBY9E+OogxlP8tFknQ7dFV1vjld9l91f4+HyysssRrgh9hQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXDHGefrKQzYyIuKnXSUGJUwrukwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWwtyCy286CuC/wRRgEDxgutPh4vx8+i2v2 099aDoSABmw004cAGBvOerioX9vK4n5MaT6ksAekTrW9jxeahueqpQozR25CbwAb CApcRdrGD51LbK7lXLiKKpDT+cbmoWw5/+TUtCi3dJAMXdziRX0Wr2Ju2Nq2OLw5 X21tgDZhq+9vdZR5bcAcYxebFxFhsTSLzhkDCJeJz+o4euahHYMCiIf7TCIth9MH rY0eb1ME1/k3wZc1VhxEZLH1Swe8DTKlBMUv4VT0k6t4tCdoU0Oh0uqw9Mw4MCNd 9Phu9AtyEHXGyRsYMe4QWKY9XENgltPzH7grrFSx4QSUsJdhbP4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:16 2025 by rpki-client