$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: 77ftUAQNQsX/mxsNjWgRsxB9n3+GzZrc8h7HXmKTWPA= Subject key identifier: 31:4C:6F:54:95:27:ED:6C:78:51:92:BC:83:BD:AE:7F:22:FE:74:BD Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 19AF70B41F4F76BF5AC7B76A0E2A9274B092A4E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 022E Signing time: Sun 02 Nov 2025 18:51:58 +0000 Manifest this update: Sun 02 Nov 2025 18:46:58 +0000 Manifest next update: Thu 06 Nov 2025 00:57:58 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: R7HvwNFGwFLrGQ80ZOk9VrtFSeQZLFgbWqNb9UTjOYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:af:70:b4:1f:4f:76:bf:5a:c7:b7:6a:0e:2a:92:74:b0:92:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Nov 2 18:46:58 2025 GMT Not After : Nov 6 00:57:58 2025 GMT Subject: CN=314C6F549527ED6C785192BC83BDAE7F22FE74BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cf:ca:a6:30:9c:27:13:df:97:28:55:d4:5f: 35:fa:97:02:08:d0:56:93:ec:64:2b:5d:91:8b:b9: 22:a5:06:30:b3:33:85:fb:90:0b:d0:12:a6:84:af: 66:f4:d5:e6:7f:68:62:d9:70:d3:bf:4f:b3:6d:8a: a5:77:ae:f5:e5:80:17:83:b1:a8:df:d4:84:2e:f0: 17:c7:86:ae:3b:c2:d1:b1:ab:62:0f:44:be:f0:57: c7:ae:74:ef:70:4c:75:93:dc:a0:c7:75:e4:a8:ab: 3e:70:71:26:86:3e:e9:5b:5c:48:8c:e5:eb:8b:b6: 57:88:ce:a0:06:9e:da:db:2a:03:a8:2c:27:24:f3: d1:0b:ea:ef:2e:f2:3a:ea:d8:63:f3:4f:68:18:ff: 24:8c:3f:80:47:95:f5:61:ba:54:03:ba:b2:bf:40: ca:72:c4:b0:6a:d9:c5:38:5c:11:26:8a:81:70:5a: 3b:45:10:00:db:b2:9c:3a:7e:c4:8d:84:2c:9e:e5: ec:01:d3:16:a5:63:e4:5e:be:02:a6:7b:84:ea:08: 41:ca:5a:5f:24:ed:ba:f0:3b:52:1a:cd:28:1f:ee: 84:93:f5:47:76:1a:c4:47:b8:e0:9a:55:02:66:0c: ca:c7:91:fd:42:52:93:31:75:18:a7:be:f8:bf:43: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4C:6F:54:95:27:ED:6C:78:51:92:BC:83:BD:AE:7F:22:FE:74:BD X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:8f:22:89:32:6a:4a:66:ff:7e:2a:fd:1c:ed:28:f4:1b: e6:e1:62:5f:bc:7f:cd:c5:32:6f:ee:00:f0:c9:a4:9d:b8:a0: 0f:d5:f8:2a:9b:e3:64:eb:d2:87:51:9b:4e:ca:92:a8:02:d6: b0:f7:b5:d6:3f:ed:70:44:85:ab:e9:72:61:64:da:b4:7e:d2: 03:e9:6b:39:89:af:f9:76:97:df:df:9f:95:e9:63:16:23:1d: ef:fe:92:25:d6:40:01:7b:e4:87:d4:a5:fa:9a:49:29:15:0b: 8b:dc:0f:cc:13:b0:46:ea:d3:cb:66:84:76:20:28:26:9b:2c: 1b:6b:e0:a4:03:9b:b7:ac:44:70:e1:12:a0:a7:2b:de:a2:ea: 60:36:78:f8:0c:5a:40:9c:63:77:d3:9f:d7:93:01:57:b3:ce: 8e:35:0f:03:ab:a2:fa:e1:ac:0e:df:b4:83:79:73:fb:22:25: ee:d4:0f:2e:a4:ec:28:02:66:33:0c:84:51:1b:a3:f9:f5:2a: ee:ed:8d:76:de:9a:cf:18:ae:42:f8:4e:9b:89:68:e4:9a:49: f6:f6:8c:aa:4c:4e:3a:9b:b8:6f:15:1e:a2:41:25:a5:0c:a6: 02:aa:36:d1:3e:c0:8d:c7:1e:6b:94:b5:fe:f3:8a:e8:6e:be: 9a:dd:0c:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGa9wtB9Pdr9ax7dqDiqSdLCSpOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTExMDIxODQ2NThaFw0yNTExMDYwMDU3NThaMDMxMTAvBgNV BAMTKDMxNEM2RjU0OTUyN0VENkM3ODUxOTJCQzgzQkRBRTdGMjJGRTc0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyz8qmMJwnE9+XKFXUXzX6lwII 0FaT7GQrXZGLuSKlBjCzM4X7kAvQEqaEr2b01eZ/aGLZcNO/T7NtiqV3rvXlgBeD sajf1IQu8BfHhq47wtGxq2IPRL7wV8eudO9wTHWT3KDHdeSoqz5wcSaGPulbXEiM 5euLtleIzqAGntrbKgOoLCck89EL6u8u8jrq2GPzT2gY/ySMP4BHlfVhulQDurK/ QMpyxLBq2cU4XBEmioFwWjtFEADbspw6fsSNhCye5ewB0xalY+RevgKme4TqCEHK Wl8k7brwO1IazSgf7oST9Ud2GsRHuOCaVQJmDMrHkf1CUpMxdRinvvi/Q8QpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUxvVJUn7Wx4UZK8g72ufyL+dL0wHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBFjyKJMmpKZv9+Kv0c7Sj0G+bhYl+8f83F Mm/uAPDJpJ24oA/V+Cqb42Tr0odRm07KkqgC1rD3tdY/7XBEhavpcmFk2rR+0gPp azmJr/l2l9/fn5XpYxYjHe/+kiXWQAF75IfUpfqaSSkVC4vcD8wTsEbq08tmhHYg KCabLBtr4KQDm7esRHDhEqCnK96i6mA2ePgMWkCcY3fTn9eTAVezzo41DwOrovrh rA7ftIN5c/siJe7UDy6k7CgCZjMMhFEbo/n1Ku7tjXbems8YrkL4TpuJaOSaSfb2 jKpMTjqbuG8VHqJBJaUMpgKqNtE+wI3HHmuUtf7ziuhuvprdDJQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:37 2025 by rpki-client