$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: Dl7oQSErAYLas1wlNnTeWb2k01A9LUY1EEiRXzO24Q4= Subject key identifier: 79:53:23:D1:C9:62:CE:D6:D1:4A:25:0D:6C:12:F6:26:06:36:94:1C Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 710E77D5F395C94BB79FE131FD6F31CC7311CFAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01C0 Signing time: Tue 05 Aug 2025 02:30:43 +0000 Manifest this update: Tue 05 Aug 2025 02:25:43 +0000 Manifest next update: Fri 08 Aug 2025 05:40:43 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: tuhTkobw/VMDoY1hIxTCgZiM0Q3g2xL0HqpeqHvMAGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0e:77:d5:f3:95:c9:4b:b7:9f:e1:31:fd:6f:31:cc:73:11:cf:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Aug 5 02:25:43 2025 GMT Not After : Aug 8 05:40:43 2025 GMT Subject: CN=795323D1C962CED6D14A250D6C12F6260636941C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:5a:70:9a:1c:de:59:96:ac:d1:17:e1:50: 16:60:b3:fa:4a:17:34:43:55:01:af:cd:ce:23:fd: b9:85:23:75:ed:6c:22:eb:8d:05:dd:5f:8a:96:e7: 72:2c:95:fc:53:15:e1:58:4d:5f:7d:09:2d:a4:42: 67:d3:a1:0a:3a:27:7f:74:3e:b8:d4:06:7a:ad:82: 18:6c:35:f1:a5:db:dd:d0:4c:a7:aa:63:7d:ed:3e: 6a:1e:b5:5b:da:51:c8:a3:8a:99:42:96:18:e1:f8: fa:36:a8:56:1d:7d:27:cc:08:d4:d7:58:d2:e0:44: 06:be:6a:50:a9:b1:b2:73:b0:0e:fb:87:2d:10:2f: 9f:c2:04:48:3b:1c:75:07:28:c8:8a:f5:fc:0e:1c: 39:3e:27:09:44:a4:06:f0:3a:e2:65:68:50:b5:18: 38:0e:91:5b:85:68:7b:1c:8c:aa:2a:79:b9:81:6c: b8:84:c4:c6:e4:e3:11:37:45:17:dc:5b:1a:2a:43: bb:c7:b6:00:7d:65:46:e2:89:fe:8d:8d:e2:02:fd: bd:a6:81:25:f0:13:54:17:6a:d3:20:55:90:98:93: 21:b6:5d:54:57:f5:08:40:66:86:ea:e4:5a:e5:5c: e4:86:51:d5:b0:b3:e7:c3:b6:43:47:e3:6b:a8:54: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:53:23:D1:C9:62:CE:D6:D1:4A:25:0D:6C:12:F6:26:06:36:94:1C X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:7e:90:9d:14:a6:6a:0d:70:ab:5e:86:3d:55:c1:78:93: 1e:ce:17:d3:9e:db:d4:f4:79:29:76:de:46:d0:39:38:67:b8: 0a:a2:8c:a0:5e:46:99:f8:f5:64:5f:00:c9:70:0d:96:71:14: be:d7:19:79:1a:8e:9b:b3:63:b0:62:ab:e3:48:15:85:0c:56: 09:56:b9:fd:b8:e2:d2:62:f8:33:5c:e8:64:18:37:fa:42:3b: 32:bb:45:ca:4d:99:cc:bd:f1:68:46:8b:4b:95:d4:ec:52:43: cb:25:e2:0b:b8:af:50:01:e4:11:97:29:ba:d1:a2:54:14:58: 24:2e:0c:e5:47:60:6d:ea:a0:7f:55:30:ca:2d:c9:f4:40:a4: 80:6b:c9:fd:46:d5:c8:2a:9a:19:bc:65:53:e6:15:8c:7d:97: a0:83:06:ba:ec:b3:21:e7:e9:9b:12:8b:fd:05:85:10:e6:10: 0c:8d:23:42:27:f8:61:05:f6:cf:27:4b:19:95:b4:7e:73:11: 07:b3:98:0d:30:ad:82:c7:8c:78:1e:20:bc:a1:3a:a8:9a:c1: 51:4a:74:c3:bf:59:0b:a3:84:cf:51:4c:cc:e9:ef:ea:7d:c1: ad:e4:30:84:d2:4d:da:9d:36:9a:d5:16:3f:d4:3d:33:71:8f: 8e:a8:c8:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQ531fOVyUu3n+Ex/W8xzHMRz68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA4MDUwMjI1NDNaFw0yNTA4MDgwNTQwNDNaMDMxMTAvBgNV BAMTKDc5NTMyM0QxQzk2MkNFRDZEMTRBMjUwRDZDMTJGNjI2MDYzNjk0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWlpwmhzeWZas0RfhUBZgs/pK FzRDVQGvzc4j/bmFI3XtbCLrjQXdX4qW53IslfxTFeFYTV99CS2kQmfToQo6J390 PrjUBnqtghhsNfGl293QTKeqY33tPmoetVvaUcijiplClhjh+Po2qFYdfSfMCNTX WNLgRAa+alCpsbJzsA77hy0QL5/CBEg7HHUHKMiK9fwOHDk+JwlEpAbwOuJlaFC1 GDgOkVuFaHscjKoqebmBbLiExMbk4xE3RRfcWxoqQ7vHtgB9ZUbiif6NjeIC/b2m gSXwE1QXatMgVZCYkyG2XVRX9QhAZobq5FrlXOSGUdWws+fDtkNH42uoVJCNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVMj0cliztbRSiUNbBL2JgY2lBwwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa3fpCdFKZqDXCrXoY9VcF4kx7OF9Oe29T0 eSl23kbQOThnuAqijKBeRpn49WRfAMlwDZZxFL7XGXkajpuzY7Biq+NIFYUMVglW uf244tJi+DNc6GQYN/pCOzK7RcpNmcy98WhGi0uV1OxSQ8sl4gu4r1AB5BGXKbrR olQUWCQuDOVHYG3qoH9VMMotyfRApIBryf1G1cgqmhm8ZVPmFYx9l6CDBrrssyHn 6ZsSi/0FhRDmEAyNI0In+GEF9s8nSxmVtH5zEQezmA0wrYLHjHgeILyhOqiawVFK dMO/WQujhM9RTMzp7+p9wa3kMITSTdqdNprVFj/UPTNxj46oyDg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:45:59 2025 by rpki-client