$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: ZPunMSBSWpDIZjfiM8ZBhQOZHdEuVq3rvPTPgocz8Ao= Subject key identifier: FE:D8:12:E4:58:4A:8C:1D:4B:7C:9B:80:80:00:FE:DA:14:4B:76:EC Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 64D5B7D0FA476AF2A2AD6E8E47D705E84D04BFDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01EE Signing time: Sat 15 Nov 2025 08:30:46 +0000 Manifest this update: Sat 15 Nov 2025 08:25:46 +0000 Manifest next update: Tue 18 Nov 2025 17:05:46 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: Hz4Hl2Wb/RSz0LaBR4nuR6MQK2SdAIYT1KbVLuLjtUY=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 16:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d5:b7:d0:fa:47:6a:f2:a2:ad:6e:8e:47:d7:05:e8:4d:04:bf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Nov 15 08:25:46 2025 GMT Not After : Nov 18 17:05:46 2025 GMT Subject: CN=FED812E4584A8C1D4B7C9B808000FEDA144B76EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:c7:10:e3:5f:c8:9c:44:85:ca:aa:60:64: 24:5e:6e:5b:ea:f4:73:1c:67:c8:75:57:9f:c5:97: 14:de:4b:ef:a3:10:5c:0b:0e:09:cb:89:54:58:28: 43:76:ec:5e:2e:2a:1f:f5:28:38:08:34:7e:b9:45: 25:7e:0f:86:cf:d8:3b:a5:d0:49:9a:c4:2d:c5:1c: 42:bf:4a:b7:25:72:74:b5:f6:4c:c9:ba:79:79:76: 16:75:3e:7c:87:d9:74:88:6e:ab:10:fb:5d:f0:3b: ee:cd:08:3a:7a:d0:d6:2e:16:9e:e6:a1:22:7c:fe: bb:19:65:6d:e5:41:a5:49:67:21:70:b9:e8:f2:25: dc:bb:81:62:4d:48:ed:2d:72:bb:ec:fb:af:39:62: a1:05:18:00:66:bd:0d:e7:56:27:67:d6:6d:eb:bd: ec:85:e6:b0:ea:93:f6:a7:2a:e3:c6:83:39:27:64: 37:9d:77:b1:02:5a:07:51:61:ae:4b:36:8d:5a:2c: c3:21:31:fe:81:51:ac:de:f1:a2:cd:b3:dd:ca:50: 71:1d:db:43:74:05:fe:71:4d:de:de:28:84:d3:b4: b4:95:a4:f1:77:7d:85:f5:8e:f9:19:f3:e9:3b:37: b0:51:19:48:98:19:26:f2:8d:e9:11:f6:e1:48:95: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:12:E4:58:4A:8C:1D:4B:7C:9B:80:80:00:FE:DA:14:4B:76:EC X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:13:63:5e:11:70:1d:16:1b:ff:56:f3:a5:1c:77:b7:63:b2: 68:18:f3:b8:6c:09:e0:f5:c8:46:b5:6c:1a:d5:de:44:7f:62: bb:71:7a:45:ee:1b:36:26:fa:85:35:08:76:2a:20:e7:7f:3c: 79:42:b5:01:0c:6f:a7:6e:5d:e0:7c:cf:e3:fc:da:c2:18:fd: 3e:0d:f8:f7:73:bd:2b:d3:b0:ed:8d:25:ee:6c:7f:ac:81:cb: e6:4c:96:52:6d:49:cf:72:90:67:37:a3:92:de:17:b9:9a:2f: 4c:ab:25:bb:4b:55:16:69:8c:25:be:0e:0d:02:61:53:8c:65: f8:c6:9d:03:84:27:37:ee:78:7e:8f:b6:6e:a2:bc:02:ca:5a: c4:65:68:78:08:4f:0c:54:40:c0:1b:f0:6c:31:d1:ca:7d:21: 18:5f:17:ce:88:04:56:47:c1:fe:b2:34:18:8d:b9:96:d3:44: cd:65:60:29:a3:99:4a:3c:28:11:91:12:03:a6:e5:49:7c:43: 51:8c:31:b2:e9:96:5d:6c:4b:f2:b5:e4:99:76:0f:d8:17:0d: 33:7c:00:13:10:2c:5c:7a:16:d6:96:94:df:bb:ff:6a:38:4c: ad:40:2b:4b:db:8f:49:fa:04:77:64:8b:4a:80:af:61:79:b8: 43:32:94:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNW30PpHavKirW6OR9cF6E0Ev94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTExMTUwODI1NDZaFw0yNTExMTgxNzA1NDZaMDMxMTAvBgNV BAMTKEZFRDgxMkU0NTg0QThDMUQ0QjdDOUI4MDgwMDBGRURBMTQ0Qjc2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC028cQ41/InESFyqpgZCReblvq 9HMcZ8h1V5/FlxTeS++jEFwLDgnLiVRYKEN27F4uKh/1KDgINH65RSV+D4bP2Dul 0EmaxC3FHEK/SrclcnS19kzJunl5dhZ1PnyH2XSIbqsQ+13wO+7NCDp60NYuFp7m oSJ8/rsZZW3lQaVJZyFwuejyJdy7gWJNSO0tcrvs+685YqEFGABmvQ3nVidn1m3r veyF5rDqk/anKuPGgzknZDedd7ECWgdRYa5LNo1aLMMhMf6BUaze8aLNs93KUHEd 20N0Bf5xTd7eKITTtLSVpPF3fYX1jvkZ8+k7N7BRGUiYGSbyjekR9uFIlaxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tgS5FhKjB1LfJuAgAD+2hRLduwwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8TY14RcB0WG/9W86Ucd7djsmgY87hsCeD1 yEa1bBrV3kR/YrtxekXuGzYm+oU1CHYqIOd/PHlCtQEMb6duXeB8z+P82sIY/T4N +PdzvSvTsO2NJe5sf6yBy+ZMllJtSc9ykGc3o5LeF7maL0yrJbtLVRZpjCW+Dg0C YVOMZfjGnQOEJzfueH6Ptm6ivALKWsRlaHgITwxUQMAb8Gwx0cp9IRhfF86IBFZH wf6yNBiNuZbTRM1lYCmjmUo8KBGREgOm5Ul8Q1GMMbLpll1sS/K15Jl2D9gXDTN8 ABMQLFx6FtaWlN+7/2o4TK1AK0vbj0n6BHdki0qAr2F5uEMylFc= -----END CERTIFICATE-----Generated at Sun Nov 16 13:21:08 2025 by rpki-client