$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: s0UQ2YMTyPefb5TwvBMULVomPhqUXICBxhbSP7LFmwE= Subject key identifier: 93:2C:4E:A6:EA:E4:7A:4A:77:4F:E3:EF:B5:B2:A1:E7:19:6E:D9:60 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 5EC08D6DC85906789D3EE15E85666E77B0D45333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 0474 Signing time: Sun 10 Aug 2025 09:42:02 +0000 Manifest this update: Sun 10 Aug 2025 09:37:02 +0000 Manifest next update: Wed 13 Aug 2025 12:05:02 +0000 Files and hashes: 1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=) 3: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: Ascmr6TU4zL7dS/3+sBUW+q4J+cPdS1uXFx+2QmCCNw=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 12:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c0:8d:6d:c8:59:06:78:9d:3e:e1:5e:85:66:6e:77:b0:d4:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Aug 10 09:37:02 2025 GMT Not After : Aug 13 12:05:02 2025 GMT Subject: CN=932C4EA6EAE47A4A774FE3EFB5B2A1E7196ED960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:f0:77:7e:49:38:6f:76:4a:44:ae:7f:8f: 23:66:14:6e:a2:41:c4:cd:2f:5c:95:e5:ab:c8:e7: 5a:69:af:13:e0:53:eb:4a:a3:fb:d8:e4:95:60:30: f0:cc:2b:e2:8a:c3:a3:3a:27:74:41:25:22:61:a1: ca:5d:60:6e:c2:e9:cb:27:3f:8d:c3:b8:cd:87:5b: 4c:b2:45:ab:bb:88:09:34:c3:9b:5c:e9:1b:90:e9: 8e:c0:b5:ef:62:23:be:bb:55:d1:68:75:be:c8:9e: 74:c7:7b:b3:b7:82:5c:da:a7:9a:79:1c:25:87:ef: 11:18:87:13:d0:29:c6:7f:44:d2:9a:d3:d9:e0:b2: 14:58:39:cc:8c:23:7b:56:7e:d8:c0:05:76:eb:bf: b4:ce:bb:d3:03:4a:e0:80:91:07:b0:24:99:db:c4: f5:90:ee:74:c1:3a:4d:6a:bb:95:3f:69:4c:e8:48: 4a:69:b9:26:48:25:9c:61:26:64:dd:60:37:e9:c8: 2a:b4:57:02:b3:7b:70:8d:33:d6:07:f7:73:45:d8: 4a:d5:be:66:97:33:be:87:fd:dc:fb:1c:f1:27:e2: 9b:61:3c:c6:32:af:03:7e:2a:ab:9a:fd:82:f1:c4: 1d:ab:8a:e6:be:74:8b:fe:fd:ee:ec:6e:e2:9d:f8: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2C:4E:A6:EA:E4:7A:4A:77:4F:E3:EF:B5:B2:A1:E7:19:6E:D9:60 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:42:91:7c:ae:a2:7d:3d:e3:08:34:27:3b:fb:39:4a:50:2a: 90:97:d6:96:3e:c7:fe:0f:7d:3f:05:66:4c:e8:54:66:e9:40: a5:d2:73:7b:15:d8:71:48:19:dd:e8:5f:83:42:b8:f2:7e:85: 19:f6:dc:15:f6:98:2f:36:fc:a3:a7:3d:88:ca:91:30:03:92: 61:51:a0:43:68:cc:cd:42:0b:87:54:c3:91:7e:69:b4:bb:37: 29:85:03:84:10:ff:47:3e:bd:69:de:01:6c:a2:49:aa:e4:ef: 0a:3f:db:de:56:ec:f5:17:e8:ff:74:c3:30:49:16:de:b6:2d: db:ba:49:8f:cd:d3:88:dd:0e:70:02:38:39:63:7e:bb:1d:f7: f9:0c:81:e4:3b:64:fb:28:fe:ed:8f:df:28:a3:d9:e0:a4:39: 2c:1b:fa:b9:25:37:b5:d3:02:2d:e8:39:04:ec:cd:c0:1d:cd: 30:41:b2:f6:b3:2b:d6:8b:65:6b:6b:d7:25:74:ab:e0:55:65: c7:e1:ff:8e:b5:ef:6d:5a:5d:3c:aa:5c:07:8f:d5:2b:47:92: c9:74:f8:e9:21:43:d1:16:f0:f6:6e:cc:b1:bd:94:22:5c:ef: db:55:d3:be:03:ab:03:ea:e4:20:45:4d:28:88:a8:e7:56:9e: 36:8d:1c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsCNbchZBnidPuFehWZud7DUUzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTA4MTAwOTM3MDJaFw0yNTA4MTMxMjA1MDJaMDMxMTAvBgNV BAMTKDkzMkM0RUE2RUFFNDdBNEE3NzRGRTNFRkI1QjJBMUU3MTk2RUQ5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBPB3fkk4b3ZKRK5/jyNmFG6i QcTNL1yV5avI51pprxPgU+tKo/vY5JVgMPDMK+KKw6M6J3RBJSJhocpdYG7C6csn P43DuM2HW0yyRau7iAk0w5tc6RuQ6Y7Ate9iI767VdFodb7InnTHe7O3glzap5p5 HCWH7xEYhxPQKcZ/RNKa09ngshRYOcyMI3tWftjABXbrv7TOu9MDSuCAkQewJJnb xPWQ7nTBOk1qu5U/aUzoSEppuSZIJZxhJmTdYDfpyCq0VwKze3CNM9YH93NF2ErV vmaXM76H/dz7HPEn4pthPMYyrwN+Kqua/YLxxB2riua+dIv+/e7sbuKd+EufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkyxOpurkekp3T+PvtbKh5xlu2WAwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9CkXyuon094wg0Jzv7OUpQKpCX1pY+x/4P fT8FZkzoVGbpQKXSc3sV2HFIGd3oX4NCuPJ+hRn23BX2mC82/KOnPYjKkTADkmFR oENozM1CC4dUw5F+abS7NymFA4QQ/0c+vWneAWyiSark7wo/295W7PUX6P90wzBJ Ft62Ldu6SY/N04jdDnACODljfrsd9/kMgeQ7ZPso/u2P3yij2eCkOSwb+rklN7XT Ai3oOQTszcAdzTBBsvazK9aLZWtr1yV0q+BVZcfh/461721aXTyqXAeP1StHksl0 +OkhQ9EW8PZuzLG9lCJc79tV074DqwPq5CBFTSiIqOdWnjaNHHE= -----END CERTIFICATE-----Generated at Mon Aug 11 07:47:04 2025 by rpki-client