$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: wTaE05wU7RQZ6T84nPmGIHZZ6krNexWi791NXdxi/Y0= Subject key identifier: 7E:0C:24:B7:C9:0E:3E:93:ED:4E:8E:E6:13:6F:FE:25:D4:23:B1:21 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 4876EB3058C6CB753CA941AC629F2D7BF86EE68C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 01F0 Signing time: Sat 14 Jun 2025 11:21:53 +0000 Manifest this update: Sat 14 Jun 2025 11:16:53 +0000 Manifest next update: Tue 17 Jun 2025 22:54:53 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: V/Zm3xEd59ESSLV7hw5STGmguj9jVhR2rAxMWftCtHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:76:eb:30:58:c6:cb:75:3c:a9:41:ac:62:9f:2d:7b:f8:6e:e6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Jun 14 11:16:53 2025 GMT Not After : Jun 17 22:54:53 2025 GMT Subject: CN=7E0C24B7C90E3E93ED4E8EE6136FFE25D423B121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:1e:3e:01:e9:3c:28:99:8a:8a:a3:7b:21: 91:a8:ab:22:c9:44:8a:31:68:67:01:03:17:bb:28: df:ed:4b:cc:ee:1a:c1:16:50:f7:74:10:10:ec:09: 81:33:a0:79:b0:b8:da:ca:d1:d1:00:59:5c:2d:35: 6d:7c:6f:4d:21:ab:0f:3b:66:68:93:0d:76:0e:a2: b1:49:04:1e:78:ba:87:cb:9f:bb:d5:5c:98:e0:7e: 00:b3:a5:fb:e2:66:ae:28:91:6f:1d:32:06:2e:d6: 2f:2c:25:93:e0:24:aa:44:e4:b6:6b:e8:71:3a:ad: 9a:0a:41:5a:3c:2d:10:bb:8b:f8:3e:ef:dc:80:5a: d5:70:ad:a6:f3:c0:90:7c:b2:77:7e:9e:0f:7f:c0: c5:b6:96:eb:ec:c2:aa:ae:fb:bb:6e:ad:09:40:a4: 86:58:0d:42:68:b2:cd:76:7e:6d:13:c3:9e:54:55: 9d:3a:21:61:aa:c5:43:89:5b:a7:59:12:13:b6:ab: bd:4e:4a:92:12:19:4c:bf:c7:64:80:62:03:dc:66: 81:8c:ac:e5:ea:e0:7c:63:88:41:01:2d:de:6d:80: ac:41:7a:ef:0e:dd:50:ab:fb:39:1d:1a:4c:51:ab: 79:3f:3f:03:23:52:a3:50:7e:53:0a:2a:d8:90:22: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0C:24:B7:C9:0E:3E:93:ED:4E:8E:E6:13:6F:FE:25:D4:23:B1:21 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bc:be:61:d5:2f:02:b4:34:ba:09:a1:ac:6b:bb:22:85:43: d0:31:17:98:5d:d5:bb:15:14:f0:15:d0:cb:04:a4:39:f0:88: 30:a5:61:b5:b8:9b:7d:a6:2e:78:c9:3e:12:01:b6:1f:45:a4: ac:5c:a5:a4:5b:d8:fa:8f:3a:2a:8d:37:72:e1:4b:0e:ea:0c: 83:88:ad:15:5f:9f:3e:5a:a5:04:ea:d0:48:d9:38:36:11:2b: b6:10:0c:32:ea:82:43:06:94:84:4f:d6:04:95:85:10:5a:97: 54:10:2f:8d:2c:29:f7:65:3f:dc:26:37:91:e4:d4:5e:24:0e: 03:fe:45:6a:6c:72:47:1d:f4:f9:d3:25:b3:67:d9:a9:49:0f: ae:cb:d0:62:2f:e4:e8:ed:7e:fe:7d:8f:af:c9:ba:94:a7:89: c6:3f:cd:23:26:51:e2:07:a5:8a:94:d8:b9:78:f2:f4:c9:91: 45:1d:56:b1:e2:40:86:4a:14:aa:ab:72:8f:c8:2d:46:10:f4: 1f:de:1e:84:21:32:57:05:ae:dd:bf:ea:e7:01:9d:78:80:47: 62:10:17:8d:b8:97:3c:13:34:41:fe:1a:74:b4:f2:ab:4e:6c: 0f:77:fd:10:80:d5:b7:7f:d7:a9:37:90:a5:7d:8f:8d:dc:9e: 19:ca:d6:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHbrMFjGy3U8qUGsYp8te/hu5owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA2MTQxMTE2NTNaFw0yNTA2MTcyMjU0NTNaMDMxMTAvBgNV BAMTKDdFMEMyNEI3QzkwRTNFOTNFRDRFOEVFNjEzNkZGRTI1RDQyM0IxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABB4+Aek8KJmKiqN7IZGoqyLJ RIoxaGcBAxe7KN/tS8zuGsEWUPd0EBDsCYEzoHmwuNrK0dEAWVwtNW18b00hqw87 ZmiTDXYOorFJBB54uofLn7vVXJjgfgCzpfviZq4okW8dMgYu1i8sJZPgJKpE5LZr 6HE6rZoKQVo8LRC7i/g+79yAWtVwrabzwJB8snd+ng9/wMW2luvswqqu+7turQlA pIZYDUJoss12fm0Tw55UVZ06IWGqxUOJW6dZEhO2q71OSpISGUy/x2SAYgPcZoGM rOXq4HxjiEEBLd5tgKxBeu8O3VCr+zkdGkxRq3k/PwMjUqNQflMKKtiQIp0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfgwkt8kOPpPtTo7mE2/+JdQjsSEwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa8vmHVLwK0NLoJoaxruyKFQ9AxF5hd1bsV FPAV0MsEpDnwiDClYbW4m32mLnjJPhIBth9FpKxcpaRb2PqPOiqNN3LhSw7qDIOI rRVfnz5apQTq0EjZODYRK7YQDDLqgkMGlIRP1gSVhRBal1QQL40sKfdlP9wmN5Hk 1F4kDgP+RWpsckcd9PnTJbNn2alJD67L0GIv5Ojtfv59j6/JupSnicY/zSMmUeIH pYqU2Ll48vTJkUUdVrHiQIZKFKqrco/ILUYQ9B/eHoQhMlcFrt2/6ucBnXiAR2IQ F424lzwTNEH+GnS08qtObA93/RCA1bd/16k3kKV9j43cnhnK1hA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:26:34 2025 by rpki-client