$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: HfSsMdu/mjdjgjp0W2c3n0amPNOqSsLQn9Clx+AYBOQ= Subject key identifier: 35:E7:9E:B3:3E:19:08:11:40:33:6C:B7:C7:70:64:94:94:05:92:10 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 74A271C62B24995E28AEA509A94EB6685B538BFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 01DD Signing time: Sat 14 Jun 2025 06:32:16 +0000 Manifest this update: Sat 14 Jun 2025 06:27:16 +0000 Manifest next update: Tue 17 Jun 2025 09:58:16 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) 2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: 6jT0ZBgH0iji4rV8foZmtqeabCalfFAWsLAulQYE+YY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 09:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a2:71:c6:2b:24:99:5e:28:ae:a5:09:a9:4e:b6:68:5b:53:8b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Jun 14 06:27:16 2025 GMT Not After : Jun 17 09:58:16 2025 GMT Subject: CN=35E79EB33E19081140336CB7C770649494059210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:20:e3:53:43:77:75:44:d3:3e:9a:2c:e1:15: d1:b6:ac:9c:2c:8c:76:fa:0d:e3:b6:8a:9f:18:24: 5e:94:a2:07:bc:81:e3:de:76:ce:09:7d:29:ad:38: 3e:6c:dd:f0:5b:d8:c4:03:4c:af:7a:9d:7e:5b:b7: e7:98:29:8d:94:ac:7e:17:7d:08:3e:7a:35:6c:fc: c8:87:4b:89:f4:c4:c3:89:82:f7:87:1e:d6:1f:85: 97:cb:b6:c2:50:8c:ca:68:8e:41:48:e1:0a:28:49: be:44:f5:24:e8:ee:78:d1:d2:2b:80:3f:9a:c4:4c: cc:0e:bd:c6:be:df:05:9b:04:2c:dd:9a:4f:70:72: 9e:bf:f6:7f:25:a4:4c:2a:71:c1:60:b0:27:78:d6: 99:de:b9:cb:39:f0:ad:1a:92:19:75:a4:be:1f:37: 32:a1:db:70:01:e7:cc:e8:2f:e8:f2:a6:c5:8f:97: dd:14:b0:25:51:e7:7c:b0:e1:5b:43:cc:df:0f:81: 31:cb:ea:6d:8b:ce:3a:a5:66:7e:94:0a:34:4b:62: 0b:30:05:a8:da:18:20:99:26:3e:3a:ab:38:fd:b5: 91:f6:bf:67:5f:95:fb:a6:f7:df:24:10:ba:02:87: b8:55:48:17:6f:33:9b:60:93:69:4c:2b:54:f5:59: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:9E:B3:3E:19:08:11:40:33:6C:B7:C7:70:64:94:94:05:92:10 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0a:01:55:c2:78:58:1d:0b:ba:96:51:4b:2b:3b:d7:2e:2e: de:fb:a6:5b:17:1b:0b:93:28:7d:77:a4:6e:c4:f1:ff:e6:67: 3f:aa:60:d3:6f:c3:14:a9:0d:24:7e:0f:42:78:ee:89:4a:70: d9:14:47:e6:1d:28:3d:26:97:0a:eb:20:4b:64:2e:71:4c:8b: fc:1e:72:c1:cc:eb:3a:ac:6a:47:d8:5c:10:b1:6c:cf:c8:dc: 1b:49:a6:e2:ab:c8:1c:16:22:68:af:64:a1:36:df:75:43:e7: 32:99:47:3f:32:d5:dd:20:14:1e:0e:cd:03:4c:a2:21:a5:de: 41:6f:8d:b1:3d:f4:d5:94:6a:a8:1b:f3:24:e2:e7:de:4b:cf: b7:27:7d:07:bc:5b:d9:7c:12:45:23:d3:f5:89:cf:bb:b4:9f: 35:04:ec:fe:df:f0:fc:66:f7:19:7e:fb:23:70:81:80:8e:53: 5b:e0:c7:57:73:03:c1:ef:61:6a:7c:1a:f7:11:fd:6f:ae:8a: ae:af:1b:de:0f:8c:fe:32:e3:cf:7c:7e:80:56:24:28:c4:be: c4:7e:46:4b:78:4e:2e:43:04:8e:33:1e:d6:b9:69:4a:b5:f1: 06:b2:c8:cb:6f:07:1a:49:81:88:ad:43:81:7c:08:96:3b:2f: c7:ea:ed:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKJxxiskmV4orqUJqU62aFtTi/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTA2MTQwNjI3MTZaFw0yNTA2MTcwOTU4MTZaMDMxMTAvBgNV BAMTKDM1RTc5RUIzM0UxOTA4MTE0MDMzNkNCN0M3NzA2NDk0OTQwNTkyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIONTQ3d1RNM+mizhFdG2rJws jHb6DeO2ip8YJF6Uoge8gePeds4JfSmtOD5s3fBb2MQDTK96nX5bt+eYKY2UrH4X fQg+ejVs/MiHS4n0xMOJgveHHtYfhZfLtsJQjMpojkFI4QooSb5E9STo7njR0iuA P5rETMwOvca+3wWbBCzdmk9wcp6/9n8lpEwqccFgsCd41pneucs58K0akhl1pL4f NzKh23AB58zoL+jypsWPl90UsCVR53yw4VtDzN8PgTHL6m2LzjqlZn6UCjRLYgsw BajaGCCZJj46qzj9tZH2v2dflfum998kELoCh7hVSBdvM5tgk2lMK1T1WXIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNeeesz4ZCBFAM2y3x3BklJQFkhAwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMKAVXCeFgdC7qWUUsrO9cuLt77plsXGwuT KH13pG7E8f/mZz+qYNNvwxSpDSR+D0J47olKcNkUR+YdKD0mlwrrIEtkLnFMi/we csHM6zqsakfYXBCxbM/I3BtJpuKryBwWImivZKE233VD5zKZRz8y1d0gFB4OzQNM oiGl3kFvjbE99NWUaqgb8yTi595Lz7cnfQe8W9l8EkUj0/WJz7u0nzUE7P7f8Pxm 9xl++yNwgYCOU1vgx1dzA8HvYWp8GvcR/W+uiq6vG94PjP4y4898foBWJCjEvsR+ Rkt4Ti5DBI4zHta5aUq18QayyMtvBxpJgYitQ4F8CJY7L8fq7Xw= -----END CERTIFICATE-----Generated at Mon Jun 16 03:20:07 2025 by rpki-client