$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: PDnjixwAGqddjXiIMpDnpv7PbqgS4Wtdj93W2gwQU8s= Subject key identifier: D7:11:D6:A5:50:AB:D7:54:A3:6F:55:C2:31:7F:E7:5B:A6:C4:2C:44 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 012D07778149E78D22689857B8C0EBFC7C287BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 021C Signing time: Mon 03 Nov 2025 00:12:19 +0000 Manifest this update: Mon 03 Nov 2025 00:07:19 +0000 Manifest next update: Thu 06 Nov 2025 01:19:19 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) 2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: SohGxogimnkEZbepjIt6B+8kTQk/ABrVUvqgeooskTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2d:07:77:81:49:e7:8d:22:68:98:57:b8:c0:eb:fc:7c:28:7b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Nov 3 00:07:19 2025 GMT Not After : Nov 6 01:19:19 2025 GMT Subject: CN=D711D6A550ABD754A36F55C2317FE75BA6C42C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:8d:f0:2e:c1:96:8e:dc:73:f7:49:23:83: 1c:8c:ff:a8:d2:fc:37:a9:0f:1c:58:fb:bb:9f:e4: 00:34:4e:1d:da:f8:fa:e2:ea:a5:17:2a:d6:49:5d: 27:ae:b1:5a:a3:fc:7a:4e:af:0c:f5:52:ec:7c:f2: 6e:7d:47:36:9b:7b:27:03:d8:89:46:2d:99:b0:93: 5a:a4:0b:dc:65:91:9a:f4:a2:3d:4a:25:c9:e4:c2: 36:8d:44:9b:40:8a:2b:78:15:5a:ce:b8:7b:48:03: 4a:07:bc:e6:bc:8f:08:d4:c8:f8:84:f4:70:64:e4: 83:05:79:43:c9:d3:13:82:d3:5f:75:32:98:02:9a: 4e:c6:9a:91:7b:4e:f3:5d:69:84:6b:b4:04:e7:c9: d6:75:05:68:99:a8:52:c4:b6:ec:0a:37:af:d4:87: 85:09:52:8e:fa:59:fe:ac:ef:32:fc:cd:da:fb:a1: f3:c4:eb:a8:9f:ef:36:6d:a9:c5:2c:19:1a:af:d6: 22:98:61:76:ae:db:a7:17:60:03:bf:90:a0:10:81: 15:46:71:0f:4c:1a:30:ec:bb:67:50:ed:5c:42:4f: 4e:e1:b4:e7:ad:13:09:89:22:64:58:6c:90:ca:36: 48:cd:cc:b3:f4:8b:e9:79:2f:5a:70:0f:98:a2:a3: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:11:D6:A5:50:AB:D7:54:A3:6F:55:C2:31:7F:E7:5B:A6:C4:2C:44 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ca:12:93:6c:10:e3:cf:e7:68:62:6e:d8:72:fa:a1:d8:f6: 92:4e:a5:ec:2d:90:28:dc:e6:e9:3d:14:45:fc:63:64:5e:94: c0:94:72:7c:49:14:c1:e1:9a:c5:bf:51:2b:0c:8c:1d:26:76: 7a:09:ad:49:70:13:0d:c8:04:27:2d:85:bb:a7:e4:77:05:ad: 86:40:69:87:03:ac:f9:d3:d5:9d:31:eb:6e:e3:92:c7:af:2c: 25:2a:85:e3:20:fa:fb:c6:5b:18:72:b5:b8:7d:24:fd:28:e5: 95:48:c4:f0:ed:04:6a:ff:ba:b5:97:26:01:0f:9a:37:a2:ec: e2:a2:43:ef:ab:55:42:62:0b:55:f4:e1:a7:fa:69:39:67:df: 4b:cb:ca:31:bd:0e:3c:fb:e3:38:bc:b3:01:a5:1b:03:d6:3a: 9f:f0:58:d8:4b:92:ce:f9:1c:70:f0:56:5e:c1:b9:f0:f0:72: 73:bc:e9:30:55:35:75:88:86:fd:a6:37:3a:e7:24:31:e2:d7: 1a:c7:f6:b3:f7:4c:dc:78:42:8e:19:a2:f4:26:27:84:db:09: af:87:0f:3a:86:ba:80:8e:ce:07:2c:ee:4c:b0:57:f9:4e:c8: e2:6b:c4:28:f1:f4:69:fb:50:5f:71:f5:14:9a:4c:fb:74:6b: 23:1f:eb:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAS0Hd4FJ540iaJhXuMDr/Hwoe70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTExMDMwMDA3MTlaFw0yNTExMDYwMTE5MTlaMDMxMTAvBgNV BAMTKEQ3MTFENkE1NTBBQkQ3NTRBMzZGNTVDMjMxN0ZFNzVCQTZDNDJDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/o3wLsGWjtxz90kjgxyM/6jS /DepDxxY+7uf5AA0Th3a+Pri6qUXKtZJXSeusVqj/HpOrwz1Uux88m59RzabeycD 2IlGLZmwk1qkC9xlkZr0oj1KJcnkwjaNRJtAiit4FVrOuHtIA0oHvOa8jwjUyPiE 9HBk5IMFeUPJ0xOC0191MpgCmk7GmpF7TvNdaYRrtATnydZ1BWiZqFLEtuwKN6/U h4UJUo76Wf6s7zL8zdr7ofPE66if7zZtqcUsGRqv1iKYYXau26cXYAO/kKAQgRVG cQ9MGjDsu2dQ7VxCT07htOetEwmJImRYbJDKNkjNzLP0i+l5L1pwD5iio6kjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xHWpVCr11Sjb1XCMX/nW6bELEQwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7KEpNsEOPP52hibthy+qHY9pJOpewtkCjc 5uk9FEX8Y2RelMCUcnxJFMHhmsW/USsMjB0mdnoJrUlwEw3IBCcthbun5HcFrYZA aYcDrPnT1Z0x627jksevLCUqheMg+vvGWxhytbh9JP0o5ZVIxPDtBGr/urWXJgEP mjei7OKiQ++rVUJiC1X04af6aTln30vLyjG9Djz74zi8swGlGwPWOp/wWNhLks75 HHDwVl7BufDwcnO86TBVNXWIhv2mNzrnJDHi1xrH9rP3TNx4Qo4ZovQmJ4TbCa+H DzqGuoCOzgcs7kywV/lOyOJrxCjx9Gn7UF9x9RSaTPt0ayMf6yc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:43 2025 by rpki-client