$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: 8L0/ugNh3md2fFTRpp63n/XZ4i+SosITEK5Y26r/1Lg= Subject key identifier: FE:83:EA:E5:19:8D:59:0B:B4:63:B2:B3:DD:02:23:45:0D:29:AD:6E Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 396CC9BB235AF9E57685F5339BE3798358F539C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0358 Signing time: Sun 20 Jul 2025 15:41:56 +0000 Manifest this update: Sun 20 Jul 2025 15:36:56 +0000 Manifest next update: Wed 23 Jul 2025 21:49:56 +0000 Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) 2: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: VGugKWNHOv0P/RHqylz3qu4dXBgfvmFUWutWPNYoi7w=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6c:c9:bb:23:5a:f9:e5:76:85:f5:33:9b:e3:79:83:58:f5:39:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Jul 20 15:36:56 2025 GMT Not After : Jul 23 21:49:56 2025 GMT Subject: CN=FE83EAE5198D590BB463B2B3DD0223450D29AD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:e9:b9:93:65:d0:d8:be:80:14:70:98:b2: ec:dc:6f:fd:d2:0c:58:5c:1f:bc:b1:33:08:07:05: 30:9d:34:88:e1:6c:3c:6e:23:da:2b:34:dd:3f:57: 8c:8a:9f:53:70:71:ad:62:58:55:a6:4a:8c:5c:f6: 2d:bd:62:6e:64:0f:24:e6:cd:a5:46:22:b2:2d:f5: ee:7a:c9:63:0b:62:8a:aa:05:b2:06:40:7d:17:34: f6:7b:f4:ae:66:69:4f:fa:c1:6f:58:40:a2:00:62: fe:1b:93:c4:a6:6f:c9:b8:39:8c:15:15:65:d8:e1: d6:bd:69:58:cd:d8:7a:fc:c1:2e:fe:21:e9:7c:67: 74:98:a5:49:4b:81:0d:48:95:6b:d5:62:55:bc:4e: a3:7f:bd:b6:d0:66:1a:8b:59:ca:25:d5:d9:9d:55: 01:e0:18:c1:07:6f:7f:1f:96:5b:e1:07:f7:9e:42: c0:17:21:3a:b4:e7:26:ec:81:89:ca:ba:c0:9a:0a: 85:5c:86:01:ce:56:59:df:dc:f0:13:c3:0e:8b:6c: df:47:f0:c3:f9:87:15:91:f5:75:5b:dc:3f:3e:4d: 4e:be:27:7e:0c:77:ac:e4:4b:15:40:98:b8:a5:cb: 69:b7:15:ad:62:db:9e:11:5c:d1:88:63:83:c8:d3: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:EA:E5:19:8D:59:0B:B4:63:B2:B3:DD:02:23:45:0D:29:AD:6E X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1c:ea:a8:f5:56:93:7d:be:95:6c:e3:89:93:c2:4b:d9:f8: e4:56:c5:8a:43:13:7c:c6:83:f0:e2:25:5d:9a:9d:32:df:a6: d9:57:e0:7d:34:90:b9:1d:47:61:53:8c:cb:e0:a0:29:c2:73: cf:8c:31:c1:86:d9:f9:b7:85:81:01:35:fe:54:48:82:61:72: 6f:ab:ce:62:06:d4:b7:ea:26:c4:fd:ca:9e:4d:8e:c6:46:e4: e1:f9:ed:d2:61:1e:07:af:77:f6:b2:56:d9:d9:5d:23:07:1e: 91:ca:d9:25:16:e2:27:06:8d:e6:12:a4:21:ea:99:7f:2a:0e: d8:bc:ad:8b:ac:46:f1:95:67:bc:be:a9:b1:58:9c:6e:58:5c: 66:38:a3:5e:61:24:d1:0b:50:98:f4:f3:1b:1b:15:ba:42:4e: 47:81:1c:0e:b4:d6:db:46:55:a3:9c:ee:87:4c:0d:73:ff:57: 66:09:49:5f:cd:07:cf:27:b0:fe:63:f0:92:4a:ba:04:35:c1: 59:18:9e:5f:06:42:ba:f8:c9:35:5f:92:0d:5f:a5:5b:df:a0: 06:e7:12:47:3a:3a:0e:f7:c1:02:0e:40:dd:4d:89:85:8a:67: ed:cd:07:b6:06:ea:ae:25:c4:08:62:a5:b4:bf:01:58:79:fc: 9f:24:9c:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWzJuyNa+eV2hfUzm+N5g1j1OccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTA3MjAxNTM2NTZaFw0yNTA3MjMyMTQ5NTZaMDMxMTAvBgNV BAMTKEZFODNFQUU1MTk4RDU5MEJCNDYzQjJCM0REMDIyMzQ1MEQyOUFENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2em5k2XQ2L6AFHCYsuzcb/3S DFhcH7yxMwgHBTCdNIjhbDxuI9orNN0/V4yKn1Nwca1iWFWmSoxc9i29Ym5kDyTm zaVGIrIt9e56yWMLYoqqBbIGQH0XNPZ79K5maU/6wW9YQKIAYv4bk8Smb8m4OYwV FWXY4da9aVjN2Hr8wS7+Iel8Z3SYpUlLgQ1IlWvVYlW8TqN/vbbQZhqLWcol1dmd VQHgGMEHb38fllvhB/eeQsAXITq05ybsgYnKusCaCoVchgHOVlnf3PATww6LbN9H 8MP5hxWR9XVb3D8+TU6+J34Md6zkSxVAmLily2m3Fa1i254RXNGIY4PI01dvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/oPq5RmNWQu0Y7Kz3QIjRQ0prW4wHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0c6qj1VpN9vpVs44mTwkvZ+ORWxYpDE3zG g/DiJV2anTLfptlX4H00kLkdR2FTjMvgoCnCc8+MMcGG2fm3hYEBNf5USIJhcm+r zmIG1LfqJsT9yp5NjsZG5OH57dJhHgevd/ayVtnZXSMHHpHK2SUW4icGjeYSpCHq mX8qDti8rYusRvGVZ7y+qbFYnG5YXGY4o15hJNELUJj08xsbFbpCTkeBHA601ttG VaOc7odMDXP/V2YJSV/NB88nsP5j8JJKugQ1wVkYnl8GQrr4yTVfkg1fpVvfoAbn Ekc6Og73wQIOQN1NiYWKZ+3NB7YG6q4lxAhipbS/AVh5/J8knAw= -----END CERTIFICATE-----Generated at Mon Jul 21 10:28:34 2025 by rpki-client