$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: PMJiLX/arV2XcJFy2oj12YCdDedqUPh0WjzTPPU4pW4= Subject key identifier: CE:9A:C7:A1:BB:11:B0:E7:DA:23:56:8C:96:F2:56:96:6C:B4:5F:C5 Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 112935E745031C000841503C70465C9F7FFA4D4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 038B Signing time: Sun 02 Nov 2025 23:30:51 +0000 Manifest this update: Sun 02 Nov 2025 23:25:51 +0000 Manifest next update: Thu 06 Nov 2025 01:43:51 +0000 Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) 2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: Nce9W+a+BCEN7CbhoiY8VP6mzBWa8MWbLBpBdDKb0s0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:29:35:e7:45:03:1c:00:08:41:50:3c:70:46:5c:9f:7f:fa:4d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Nov 2 23:25:51 2025 GMT Not After : Nov 6 01:43:51 2025 GMT Subject: CN=CE9AC7A1BB11B0E7DA23568C96F256966CB45FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:50:d8:3e:b9:f7:5f:f2:47:d0:c5:55:c8: 10:96:15:07:66:c7:13:3c:ae:a0:96:ea:5f:a3:49: 69:50:1e:dd:bd:9c:42:38:6f:82:2f:10:c3:68:a2: e9:04:62:55:f1:f0:d4:8b:77:2b:e5:fa:b6:84:a0: 5f:15:05:d0:b4:1e:b2:d7:aa:7f:e6:34:e7:95:fc: 0c:06:20:96:e4:10:b7:28:f9:91:8e:c0:2d:89:03: 48:ca:6e:c0:af:f8:69:73:d5:2a:94:bb:40:4b:38: 8f:bf:02:9c:65:59:57:32:60:f9:7e:29:0e:e9:c3: 3b:1b:3b:76:ef:e0:65:27:8b:a6:e2:59:37:10:9e: e9:44:13:10:1c:0e:09:fa:75:b3:4e:34:48:97:73: 39:4a:02:85:f4:04:3c:be:f2:50:98:44:b2:97:17: 43:92:2f:df:40:88:35:54:08:da:ea:b0:89:f9:5d: 4d:33:0f:41:ec:05:11:cb:a1:71:08:33:d3:2b:bc: fd:5f:75:e7:04:63:48:94:20:45:cb:0b:7c:eb:4c: cd:b7:84:e4:b2:7b:bb:b1:6f:6a:a7:4f:6d:bb:10: 9f:4a:f2:c3:2b:44:52:d1:f9:13:12:16:7b:38:9d: ce:e8:3b:a6:77:89:48:5f:a9:e9:a8:25:39:23:1d: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9A:C7:A1:BB:11:B0:E7:DA:23:56:8C:96:F2:56:96:6C:B4:5F:C5 X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:41:b6:4d:3b:42:f0:2e:7f:93:8a:fa:fa:c4:82:0c:d1:e2: c2:e2:21:1e:27:f9:59:09:25:e6:ff:21:1c:ac:6f:86:9e:e3: ca:e7:ca:64:54:c3:47:45:8f:41:7e:09:27:be:a3:35:cf:ed: 65:b8:3b:ac:57:cf:ce:cf:66:11:35:94:66:d4:75:1b:00:0f: 3a:cc:38:74:96:10:4c:42:d5:4e:c0:ec:28:8d:b9:b9:91:c1: 81:dc:7c:e2:d1:ce:ff:17:8e:ac:bd:a5:d0:56:24:6d:97:89: b6:22:49:7c:12:df:28:11:83:c5:8e:de:3f:ce:9c:42:98:ef: b6:40:bf:7e:5c:65:4a:06:79:3a:ac:c8:2d:ff:1d:ec:40:eb: 2d:31:95:f0:65:15:b2:8e:19:ff:d8:98:63:8c:4e:2b:bf:52: 67:ab:16:e3:04:e3:c8:35:10:31:78:7d:6d:b9:a6:cc:57:68: c1:56:49:19:80:5c:22:b9:81:5a:48:41:74:7d:81:9b:9c:6e: 28:3c:23:3c:c3:9b:01:8a:ae:61:04:07:cd:11:d3:4e:90:61: 66:a2:82:70:3b:c1:5a:6d:61:35:40:5a:af:3d:f8:ac:1a:3e: 89:2c:8c:95:b2:c7:c8:29:80:17:c0:21:9b:93:55:4e:91:36: 6b:ca:73:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESk150UDHAAIQVA8cEZcn3/6TU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNTExMDIyMzI1NTFaFw0yNTExMDYwMTQzNTFaMDMxMTAvBgNV BAMTKENFOUFDN0ExQkIxMUIwRTdEQTIzNTY4Qzk2RjI1Njk2NkNCNDVGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGlDYPrn3X/JH0MVVyBCWFQdm xxM8rqCW6l+jSWlQHt29nEI4b4IvEMNooukEYlXx8NSLdyvl+raEoF8VBdC0HrLX qn/mNOeV/AwGIJbkELco+ZGOwC2JA0jKbsCv+Glz1SqUu0BLOI+/ApxlWVcyYPl+ KQ7pwzsbO3bv4GUni6biWTcQnulEExAcDgn6dbNONEiXczlKAoX0BDy+8lCYRLKX F0OSL99AiDVUCNrqsIn5XU0zD0HsBRHLoXEIM9MrvP1fdecEY0iUIEXLC3zrTM23 hOSye7uxb2qnT227EJ9K8sMrRFLR+RMSFns4nc7oO6Z3iUhfqemoJTkjHXTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzprHobsRsOfaI1aMlvJWlmy0X8UwHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1Btk07QvAuf5OK+vrEggzR4sLiIR4n+VkJ Jeb/IRysb4ae48rnymRUw0dFj0F+CSe+ozXP7WW4O6xXz87PZhE1lGbUdRsADzrM OHSWEExC1U7A7CiNubmRwYHcfOLRzv8Xjqy9pdBWJG2XibYiSXwS3ygRg8WO3j/O nEKY77ZAv35cZUoGeTqsyC3/HexA6y0xlfBlFbKOGf/YmGOMTiu/UmerFuME48g1 EDF4fW25psxXaMFWSRmAXCK5gVpIQXR9gZucbig8IzzDmwGKrmEEB80R006QYWai gnA7wVptYTVAWq89+KwaPoksjJWyx8gpgBfAIZuTVU6RNmvKc/4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:39 2025 by rpki-client