$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: GxqVt1HAyobP4ErGsKQ0YfuUFxch4F3fe34gLaY53KU= Subject key identifier: 3A:55:35:D0:D8:74:BA:C4:1C:58:30:1D:3F:38:3E:AF:56:BB:34:25 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 2069D6CFF3585D9862F075E21762B9400B674742 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0206 Signing time: Mon 04 Aug 2025 16:11:55 +0000 Manifest this update: Mon 04 Aug 2025 16:06:55 +0000 Manifest next update: Fri 08 Aug 2025 02:19:55 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: asMTTswyB86nD432KYb/8zcpDg6icI1FvmY5158C8eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:69:d6:cf:f3:58:5d:98:62:f0:75:e2:17:62:b9:40:0b:67:47:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Aug 4 16:06:55 2025 GMT Not After : Aug 8 02:19:55 2025 GMT Subject: CN=3A5535D0D874BAC41C58301D3F383EAF56BB3425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:19:21:a7:e1:68:ec:04:4b:f2:e7:a8:8c: 34:28:9b:77:a7:b6:42:3a:30:f9:ba:0b:94:c5:a0: 85:b8:24:d1:4a:5c:5f:3b:40:a6:c8:bd:1a:2e:77: 12:de:07:22:98:06:04:84:d7:9f:53:0f:a9:6a:3e: f3:e9:d2:4a:55:ff:1f:28:7a:6a:de:30:f1:b4:82: 87:29:e1:b3:53:48:5b:d4:13:e5:8c:59:37:20:6f: 06:5b:bd:74:65:ec:98:1a:3f:11:d2:11:71:f9:af: 28:0c:92:55:37:72:cd:fb:1e:60:9b:25:da:1a:cc: 8c:e2:39:c3:76:20:8f:c5:76:f6:8c:88:c5:b5:fa: e0:60:14:a5:0d:73:f0:d8:ea:67:b8:6d:f8:f9:65: 1a:dc:8f:5f:70:23:c5:2e:19:b1:d6:d7:49:45:9b: 79:2f:cf:47:b0:6c:78:76:48:2c:2c:9b:62:88:e6: e0:3b:53:c5:86:65:1c:b7:2c:3c:ad:ab:4e:e1:b5: 39:4e:29:f5:84:49:4f:3e:63:da:04:7c:af:0f:89: e3:b2:c2:09:72:bd:ec:d0:0e:e3:5a:3e:c1:48:51: 91:3d:5e:f3:51:5d:e4:c8:bf:e0:c9:19:4c:78:fa: 8f:40:94:73:a5:57:44:bf:0e:7a:28:65:35:43:ab: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:35:D0:D8:74:BA:C4:1C:58:30:1D:3F:38:3E:AF:56:BB:34:25 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0f:9d:ca:47:09:7d:e5:05:ed:81:87:ac:05:63:a2:f3:bd: 9b:b5:ab:f3:2d:27:01:74:4b:a7:4e:39:a4:c2:d4:a4:02:4a: fb:4e:e7:8f:3a:e5:0b:bf:7d:75:5f:e6:3a:d7:c3:68:68:3d: 17:4a:de:29:1b:86:1d:8b:38:bf:23:f1:e1:c4:b0:74:94:b6: 96:90:b1:33:c0:72:75:11:d4:e2:e3:13:47:9e:de:f9:2a:fc: 83:ad:e6:f1:00:a7:7b:f1:05:33:0c:7a:b9:99:4f:8b:29:15: cd:7d:f2:14:8f:17:3c:f9:68:44:87:e5:ea:f5:f6:57:62:f9: 51:b5:78:7b:b7:11:2f:82:b6:e7:fe:8b:73:dc:71:99:6d:db: 30:bc:2e:92:95:f8:84:a8:3b:c7:e7:7a:e7:2b:a4:da:86:88: dc:45:a0:9b:ec:79:12:4c:39:1f:38:d2:fe:82:22:a1:10:5c: c8:2c:1b:c3:99:10:e0:64:d3:01:60:55:7f:bf:e0:17:a0:f2: 82:5c:5a:6b:5b:dc:36:75:26:7d:09:fd:70:66:a1:10:fd:95: 00:0f:38:78:d4:e1:ef:dd:e6:79:0b:b9:85:91:6f:a6:e0:fc: 90:e6:4a:10:e5:cf:de:4f:a3:39:a0:77:1e:e3:18:90:c6:79: ec:6d:55:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGnWz/NYXZhi8HXiF2K5QAtnR0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA4MDQxNjA2NTVaFw0yNTA4MDgwMjE5NTVaMDMxMTAvBgNV BAMTKDNBNTUzNUQwRDg3NEJBQzQxQzU4MzAxRDNGMzgzRUFGNTZCQjM0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4hkhp+Fo7ARL8ueojDQom3en tkI6MPm6C5TFoIW4JNFKXF87QKbIvRoudxLeByKYBgSE159TD6lqPvPp0kpV/x8o emreMPG0gocp4bNTSFvUE+WMWTcgbwZbvXRl7JgaPxHSEXH5rygMklU3cs37HmCb JdoazIziOcN2II/FdvaMiMW1+uBgFKUNc/DY6me4bfj5ZRrcj19wI8UuGbHW10lF m3kvz0ewbHh2SCwsm2KI5uA7U8WGZRy3LDytq07htTlOKfWESU8+Y9oEfK8PieOy wglyvezQDuNaPsFIUZE9XvNRXeTIv+DJGUx4+o9AlHOlV0S/DnooZTVDqz3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlU10Nh0usQcWDAdPzg+r1a7NCUwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsPncpHCX3lBe2Bh6wFY6LzvZu1q/MtJwF0 S6dOOaTC1KQCSvtO54865Qu/fXVf5jrXw2hoPRdK3ikbhh2LOL8j8eHEsHSUtpaQ sTPAcnUR1OLjE0ee3vkq/IOt5vEAp3vxBTMMermZT4spFc198hSPFzz5aESH5er1 9ldi+VG1eHu3ES+Ctuf+i3PccZlt2zC8LpKV+ISoO8fneucrpNqGiNxFoJvseRJM OR840v6CIqEQXMgsG8OZEOBk0wFgVX+/4Beg8oJcWmtb3DZ1Jn0J/XBmoRD9lQAP OHjU4e/d5nkLuYWRb6bg/JDmShDlz95Pozmgdx7jGJDGeextVQc= -----END CERTIFICATE-----Generated at Wed Aug 6 12:30:03 2025 by rpki-client