$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: TkbIm0PXxrgD/YGWH5UbtaWTrcnxIg4MEIKSHT47mFc= Subject key identifier: D5:7A:15:7A:BE:9F:F2:6B:05:9D:1E:79:92:07:13:1A:A4:27:37:DB Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 73B5ADCA05B55395EFE309AF296679E15583D459 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 01F5 Signing time: Mon 21 Jul 2025 11:51:23 +0000 Manifest this update: Mon 21 Jul 2025 11:46:23 +0000 Manifest next update: Thu 24 Jul 2025 21:08:23 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 2: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: HYPIL0Dxxd7APMejTR37TNFug5AGDWlO5+XUkX5dmTI=) 3: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 4: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b5:ad:ca:05:b5:53:95:ef:e3:09:af:29:66:79:e1:55:83:d4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Jul 21 11:46:23 2025 GMT Not After : Jul 24 21:08:23 2025 GMT Subject: CN=D57A157ABE9FF26B059D1E799207131AA42737DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:7c:7f:a0:2d:e3:ec:38:5e:91:9f:68:b6: e4:46:e7:36:f7:86:99:d1:3c:b8:7a:5c:bc:a2:46: c9:fd:7d:0a:76:08:8d:fd:02:ef:2d:52:8b:f6:32: 9e:15:00:59:6a:3c:62:dd:1f:c3:a1:9c:61:23:95: 12:2e:52:70:ee:8b:c9:df:64:b7:a9:71:3d:cc:f9: f3:2d:6e:8e:f9:ab:ea:6d:4f:0f:f2:8a:7b:18:d1: c2:8e:8c:f0:3a:ab:88:be:c7:92:8c:8b:e5:98:87: 11:64:45:0c:14:5b:f4:a4:e0:45:44:3e:44:39:e3: 48:fc:90:f6:16:50:58:db:de:83:b2:e5:c3:34:93: d4:ac:56:6a:64:a3:42:56:71:9d:0e:83:20:7e:a9: 89:a7:01:9b:cb:4b:e6:f1:97:a1:a0:d8:7b:90:0a: 27:94:82:c5:cb:02:35:7c:ac:a0:b6:0b:b6:d6:0b: 41:2e:da:33:b8:af:8a:6d:b3:d5:1a:c7:1a:1d:d0: 6a:fe:d0:0f:a6:68:1d:12:e3:d2:97:00:91:0d:59: 58:6f:2f:0d:21:61:72:91:76:6e:aa:9d:6a:7e:7c: 5d:7a:69:64:a9:56:90:af:1c:09:e1:93:69:e2:c7: 2b:6e:6e:47:2f:2f:c5:6a:aa:a0:af:2a:05:86:85: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:15:7A:BE:9F:F2:6B:05:9D:1E:79:92:07:13:1A:A4:27:37:DB X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:15:5b:f6:85:68:c2:32:f6:5b:99:23:a1:af:ed:df:8c: e6:d4:67:c7:2c:c5:4f:df:72:33:b4:01:c8:67:eb:4e:28:6e: 8a:14:ca:ca:f3:c8:14:41:05:e1:fc:04:25:3f:69:44:17:db: 63:0b:b4:13:93:4d:d4:3b:73:dc:3c:7e:5e:ef:cf:2f:91:db: da:e2:e5:75:ab:9a:18:09:13:59:5c:2e:5c:ec:88:ad:a1:63: 8b:b0:c8:6b:cd:e4:30:4d:57:2d:bc:11:72:5b:d2:02:af:6e: 3b:27:15:d8:f4:39:6b:bf:a7:16:e2:f1:db:9e:18:51:0c:e3: 8d:a8:0f:00:ac:b7:9a:22:f7:5a:ec:10:2f:25:df:cd:e8:e2: ec:a2:aa:1f:73:44:d7:c8:fc:90:83:6f:ac:66:1e:e5:3f:1b: 8f:43:53:b5:aa:c8:2e:91:0a:b5:da:9e:d8:8a:39:c6:42:2f: 2c:90:06:43:a7:39:30:45:fb:70:73:1d:0c:86:96:8f:70:d8: b9:7e:ec:17:07:f5:e0:af:9b:ed:dc:1d:3a:06:df:0a:49:7e: 3c:45:78:f0:1a:b5:b3:37:41:53:3e:cc:af:8e:c2:35:82:0c: 30:5d:62:19:7e:2c:d6:71:6e:c2:df:b3:0c:de:94:68:73:5a: fd:9f:3e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7WtygW1U5Xv4wmvKWZ54VWD1FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTA3MjExMTQ2MjNaFw0yNTA3MjQyMTA4MjNaMDMxMTAvBgNV BAMTKEQ1N0ExNTdBQkU5RkYyNkIwNTlEMUU3OTkyMDcxMzFBQTQyNzM3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEHx/oC3j7DhekZ9otuRG5zb3 hpnRPLh6XLyiRsn9fQp2CI39Au8tUov2Mp4VAFlqPGLdH8OhnGEjlRIuUnDui8nf ZLepcT3M+fMtbo75q+ptTw/yinsY0cKOjPA6q4i+x5KMi+WYhxFkRQwUW/Sk4EVE PkQ540j8kPYWUFjb3oOy5cM0k9SsVmpko0JWcZ0OgyB+qYmnAZvLS+bxl6Gg2HuQ CieUgsXLAjV8rKC2C7bWC0Eu2jO4r4pts9Uaxxod0Gr+0A+maB0S49KXAJENWVhv Lw0hYXKRdm6qnWp+fF16aWSpVpCvHAnhk2nixytubkcvL8VqqqCvKgWGhR4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XoVer6f8msFnR55kgcTGqQnN9swHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+PFVv2hWjCMvZbmSOhr+3fjObUZ8csxU/f cjO0Achn604obooUysrzyBRBBeH8BCU/aUQX22MLtBOTTdQ7c9w8fl7vzy+R29ri 5XWrmhgJE1lcLlzsiK2hY4uwyGvN5DBNVy28EXJb0gKvbjsnFdj0OWu/pxbi8due GFEM442oDwCst5oi91rsEC8l383o4uyiqh9zRNfI/JCDb6xmHuU/G49DU7WqyC6R CrXantiKOcZCLyyQBkOnOTBF+3BzHQyGlo9w2Ll+7BcH9eCvm+3cHToG3wpJfjxF ePAatbM3QVM+zK+OwjWCDDBdYhl+LNZxbsLfswzelGhzWv2fPpA= -----END CERTIFICATE-----Generated at Wed Jul 23 12:14:24 2025 by rpki-client