$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: uo4QOqHv3SqJlti547ZtfdKH4RQnLDnFJIzCR31J2BU= Subject key identifier: 52:D7:A5:AC:69:53:3D:D3:73:1D:8A:F4:B6:A4:8B:BD:B2:48:93:D7 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 6D0DC84AB1FC9BDD51CB61D207DC3B9783673858 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01B9 Signing time: Sun 20 Jul 2025 13:40:43 +0000 Manifest this update: Sun 20 Jul 2025 13:35:43 +0000 Manifest next update: Wed 23 Jul 2025 17:40:43 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: VWk2xWlk9jy/JnGVYNmVcF2PVGihoFiKIAaoQ0CDp8g=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0d:c8:4a:b1:fc:9b:dd:51:cb:61:d2:07:dc:3b:97:83:67:38:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Jul 20 13:35:43 2025 GMT Not After : Jul 23 17:40:43 2025 GMT Subject: CN=52D7A5AC69533DD3731D8AF4B6A48BBDB24893D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:26:a8:48:84:9b:51:4d:67:94:01:f0:3b:72: e2:a7:97:8d:16:3c:3d:05:02:95:b4:f1:24:d9:fd: 97:b3:98:c0:fe:0b:48:20:55:95:92:83:40:a9:6f: 7a:9c:1a:c7:f3:bd:51:d2:bb:ce:98:95:88:86:70: c7:85:c5:3a:9c:77:7e:fd:2a:64:2e:23:57:b7:b2: 8b:ad:4b:ac:66:79:18:7f:73:23:41:ec:60:c3:c5: c1:f6:4c:30:3e:83:86:22:8c:00:21:22:a3:4d:9d: c0:1f:52:be:0c:af:c1:8e:61:2a:b2:ee:5a:b7:c8: 4c:bb:6e:f3:20:cd:d8:f5:d5:43:96:b2:b2:fa:1f: 7e:9b:32:3e:42:91:d7:d4:05:48:dc:e3:2d:d0:b3: 0e:e3:81:71:ce:31:e3:86:53:33:c3:8f:8b:4f:42: cd:b1:1d:40:22:22:a7:43:2a:4c:93:a7:f7:9f:6b: a3:87:fb:7f:5b:bf:1e:24:b8:13:62:44:96:d8:78: ee:1b:cf:90:ca:25:8b:29:b8:75:5d:b6:6c:99:49: e0:db:33:5f:04:c7:45:42:3c:ed:d7:35:95:71:d2: 10:b5:73:97:5a:12:ec:08:75:8e:b8:45:ec:3b:d4: a3:91:84:57:06:6e:2d:0e:05:57:40:1d:62:76:32: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D7:A5:AC:69:53:3D:D3:73:1D:8A:F4:B6:A4:8B:BD:B2:48:93:D7 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:a9:b9:b4:8e:3a:a0:84:02:d0:02:00:1e:38:2a:68:97: 2d:4b:b3:65:42:fe:16:60:0c:be:36:2a:1a:c7:e3:d8:8d:f9: 91:13:81:c7:f0:ec:5a:56:47:c9:5d:5e:3c:85:5b:a1:b9:81: 3b:0a:6c:54:1e:fd:82:38:fd:79:ac:e5:fb:f2:36:02:ad:1e: 14:d8:f2:b9:63:92:fe:08:26:73:4a:16:d9:94:46:1d:e4:7d: 6b:94:2f:f6:f5:26:95:e2:68:c8:a9:84:46:b9:0c:f8:f7:cf: dc:f0:48:e1:25:52:5f:05:41:15:69:e9:0b:c2:f6:57:bf:c9: 48:db:7f:3b:9a:f0:e6:ca:a0:6c:52:84:ef:51:b0:a7:d2:e4: 6c:d9:f7:a2:e0:e4:20:fd:cf:e5:87:10:4f:9d:f7:6f:b1:91: d7:28:b1:ab:75:87:1a:bf:6a:d5:e4:49:59:17:e9:31:a2:c7: 7f:2a:7a:fa:d3:5d:c1:f2:13:44:bc:a4:b7:36:35:4f:cf:c7: ab:a2:65:5c:09:12:f1:b2:40:e6:00:0a:73:bf:85:11:63:8a: 6b:93:70:0e:43:a4:89:5d:4c:d3:ed:0b:83:3f:79:16:46:71: b7:d4:ee:e6:1b:d6:b8:b0:40:43:72:ba:24:9b:69:fd:85:4a: 45:70:81:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQ3ISrH8m91Ry2HSB9w7l4NnOFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA3MjAxMzM1NDNaFw0yNTA3MjMxNzQwNDNaMDMxMTAvBgNV BAMTKDUyRDdBNUFDNjk1MzNERDM3MzFEOEFGNEI2QTQ4QkJEQjI0ODkzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwJqhIhJtRTWeUAfA7cuKnl40W PD0FApW08STZ/ZezmMD+C0ggVZWSg0Cpb3qcGsfzvVHSu86YlYiGcMeFxTqcd379 KmQuI1e3soutS6xmeRh/cyNB7GDDxcH2TDA+g4YijAAhIqNNncAfUr4Mr8GOYSqy 7lq3yEy7bvMgzdj11UOWsrL6H36bMj5CkdfUBUjc4y3Qsw7jgXHOMeOGUzPDj4tP Qs2xHUAiIqdDKkyTp/efa6OH+39bvx4kuBNiRJbYeO4bz5DKJYspuHVdtmyZSeDb M18Ex0VCPO3XNZVx0hC1c5daEuwIdY64Rew71KORhFcGbi0OBVdAHWJ2MgLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtelrGlTPdNzHYr0tqSLvbJIk9cwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyLqbm0jjqghALQAgAeOCpoly1Ls2VC/hZg DL42KhrH49iN+ZETgcfw7FpWR8ldXjyFW6G5gTsKbFQe/YI4/Xms5fvyNgKtHhTY 8rljkv4IJnNKFtmURh3kfWuUL/b1JpXiaMiphEa5DPj3z9zwSOElUl8FQRVp6QvC 9le/yUjbfzua8ObKoGxShO9RsKfS5GzZ96Lg5CD9z+WHEE+d92+xkdcosat1hxq/ atXkSVkX6TGix38qevrTXcHyE0S8pLc2NU/Px6uiZVwJEvGyQOYACnO/hRFjimuT cA5DpIldTNPtC4M/eRZGcbfU7uYb1riwQENyuiSbaf2FSkVwge4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:26 2025 by rpki-client