$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: iZ5aEW+4/giQGGUPVeoijnyklcC1IeF9761s5pIJHv0= Subject key identifier: 47:0B:C2:5E:79:3D:4A:1D:A7:E6:54:5E:EE:59:CA:91:8F:D6:29:D1 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 6D12A232CDF7EF5923C5DDF2F04F0133646BAF74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01A9 Signing time: Fri 13 Jun 2025 22:20:42 +0000 Manifest this update: Fri 13 Jun 2025 22:15:42 +0000 Manifest next update: Tue 17 Jun 2025 09:16:42 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: 5VYYmkBAx1jVkXLwuDJ/XKCgfDSsVrlYfJL9pExTjI4=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 09:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:12:a2:32:cd:f7:ef:59:23:c5:dd:f2:f0:4f:01:33:64:6b:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Jun 13 22:15:42 2025 GMT Not After : Jun 17 09:16:42 2025 GMT Subject: CN=470BC25E793D4A1DA7E6545EEE59CA918FD629D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:d7:d3:f5:de:3f:8b:c1:01:61:b3:e7:fb: 4e:21:40:55:fb:34:df:82:8a:7b:00:b6:20:5d:f1: dd:d9:26:9d:27:6e:41:75:49:ac:38:16:05:c3:61: 23:d8:72:35:9d:15:10:26:a7:63:bc:72:9b:39:91: 32:ab:a5:39:89:6e:61:11:52:f2:38:c9:36:a5:9d: 6b:88:e0:c4:41:8c:c1:f1:6d:3e:e5:e9:7d:bc:ce: 8c:97:a3:6f:04:34:7a:70:86:fb:b8:ac:52:42:a6: c6:09:79:ce:21:ba:e3:8d:2a:9f:1f:9a:f8:fb:5a: cc:a9:c0:6e:25:ff:7d:e8:02:45:fc:42:53:01:6f: b6:6e:18:b2:01:47:23:97:af:db:94:27:54:9b:54: a6:91:af:b5:0f:30:43:ea:a8:0c:98:cc:20:a0:b0: 83:b5:56:4b:61:27:ef:83:8b:c1:76:bc:55:a9:be: 39:11:d2:70:14:b5:17:f0:73:1c:a1:04:e4:a6:c3: 6e:0a:81:fd:72:14:2e:bc:d1:a2:34:c6:a8:46:7c: 15:ca:b1:70:ea:44:fd:10:a1:e4:c7:32:57:79:e6: 9e:0d:0e:7c:1d:78:ea:59:51:92:cd:54:81:d8:49: 37:e8:69:a8:1d:73:c6:9e:87:48:89:33:32:8d:17: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:C2:5E:79:3D:4A:1D:A7:E6:54:5E:EE:59:CA:91:8F:D6:29:D1 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:d1:f9:16:f5:ab:ed:65:1e:ce:5d:e5:87:dd:6e:ef:70:c0: 52:9b:87:c1:bf:4d:18:6b:e7:7b:5f:90:71:33:68:b6:45:be: 0e:4e:e7:4a:c4:51:e8:b9:1c:86:4e:fd:86:f6:1e:48:28:d5: 19:73:c2:c0:e3:ba:27:42:db:15:e2:95:76:95:24:9b:f5:92: 78:03:1a:56:07:cc:14:10:46:49:df:a0:bc:24:b0:5f:2f:a0: bb:93:6d:eb:aa:d1:55:01:ec:52:5f:1b:f1:e9:74:86:2b:81: 14:d6:1b:de:c5:bd:33:ae:bb:f2:a7:8b:de:d1:12:0f:0a:28: 18:e1:1b:fd:a4:f3:a0:49:bf:7d:6d:16:71:bf:a6:d8:e3:4f: 1c:10:54:1c:6f:fa:40:86:27:34:ea:87:d0:39:3e:74:bf:86: 92:c5:e1:36:cf:4f:e4:ff:85:50:fe:99:b6:d4:d7:44:d3:ee: cc:3e:f0:23:75:ec:b7:a7:46:32:d6:9c:6c:be:20:7a:f1:28: 53:db:33:92:28:7a:97:e7:5a:5d:a7:19:21:22:4f:3e:16:42: 38:22:7a:07:a3:e3:50:34:1c:37:16:10:47:bc:d1:ee:d8:a9: e0:15:bd:c7:ad:b0:f4:4e:31:14:ce:4d:74:00:53:ac:6a:4c: a8:e9:32:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRKiMs3371kjxd3y8E8BM2Rrr3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA2MTMyMjE1NDJaFw0yNTA2MTcwOTE2NDJaMDMxMTAvBgNV BAMTKDQ3MEJDMjVFNzkzRDRBMURBN0U2NTQ1RUVFNTlDQTkxOEZENjI5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cdfT9d4/i8EBYbPn+04hQFX7 NN+CinsAtiBd8d3ZJp0nbkF1Saw4FgXDYSPYcjWdFRAmp2O8cps5kTKrpTmJbmER UvI4yTalnWuI4MRBjMHxbT7l6X28zoyXo28ENHpwhvu4rFJCpsYJec4huuONKp8f mvj7WsypwG4l/33oAkX8QlMBb7ZuGLIBRyOXr9uUJ1SbVKaRr7UPMEPqqAyYzCCg sIO1VkthJ++Di8F2vFWpvjkR0nAUtRfwcxyhBOSmw24Kgf1yFC680aI0xqhGfBXK sXDqRP0QoeTHMld55p4NDnwdeOpZUZLNVIHYSTfoaagdc8aeh0iJMzKNF9oZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwvCXnk9Sh2n5lRe7lnKkY/WKdEwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvR+Rb1q+1lHs5d5Yfdbu9wwFKbh8G/TRhr 53tfkHEzaLZFvg5O50rEUei5HIZO/Yb2Hkgo1RlzwsDjuidC2xXilXaVJJv1kngD GlYHzBQQRknfoLwksF8voLuTbeuq0VUB7FJfG/HpdIYrgRTWG97FvTOuu/Kni97R Eg8KKBjhG/2k86BJv31tFnG/ptjjTxwQVBxv+kCGJzTqh9A5PnS/hpLF4TbPT+T/ hVD+mbbU10TT7sw+8CN17LenRjLWnGy+IHrxKFPbM5IoepfnWl2nGSEiTz4WQjgi egej41A0HDcWEEe80e7YqeAVvcetsPROMRTOTXQAU6xqTKjpMho= -----END CERTIFICATE-----Generated at Mon Jun 16 01:26:47 2025 by rpki-client