$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: f6jTMr8HcddICcWMJ0vuEruXXwGtWw5zkJQcOCWHn84= Subject key identifier: 57:00:E3:49:E4:23:98:77:B2:4E:E3:F3:D9:2B:33:B9:F0:24:35:24 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 0596D2D757C0E18F80D9A99AA4852BD7A605C8B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 036D Signing time: Sat 06 Sep 2025 02:11:57 +0000 Manifest this update: Sat 06 Sep 2025 02:06:57 +0000 Manifest next update: Tue 09 Sep 2025 08:54:57 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: a7k2VrSxQMxjPhTFXxBbQV6dwlixptZ8v36nOjVj2+o=) 2: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:96:d2:d7:57:c0:e1:8f:80:d9:a9:9a:a4:85:2b:d7:a6:05:c8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Sep 6 02:06:57 2025 GMT Not After : Sep 9 08:54:57 2025 GMT Subject: CN=5700E349E4239877B24EE3F3D92B33B9F0243524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:49:b8:51:6a:d1:95:83:fb:48:80:00:bd: 9f:b5:1a:16:f0:3e:73:ed:73:ce:74:3b:d3:f8:b6: 4e:e3:6a:93:12:a5:0a:67:62:8a:5e:af:27:5e:28: 17:b5:f3:5b:fb:2e:f7:81:e4:7f:e6:25:83:85:57: 02:e9:6e:81:67:de:a1:e8:1e:28:da:33:1a:be:bb: c5:d1:44:c0:b4:57:11:97:4d:9f:2f:f5:ba:96:48: 1d:cf:c5:c7:2d:89:9e:db:d8:95:9a:f5:70:b5:14: 70:69:5f:dd:d7:5d:ad:37:95:85:5d:8a:db:f5:5f: 82:2a:fd:a8:54:44:52:7a:46:84:15:64:94:cf:41: 34:c7:ae:c3:a9:5b:65:0b:d6:58:25:97:a2:37:d1: 12:dc:f3:6c:b9:c3:8f:4f:4a:3e:42:a6:cc:0f:60: 18:c8:48:30:f1:7b:29:53:2f:70:46:6a:10:96:e0: d8:96:36:7f:24:7f:88:2f:d7:eb:02:4a:fd:3a:fd: 88:f8:8b:54:db:19:73:de:ab:11:94:cc:27:3e:69: cb:de:4d:ca:cc:12:75:46:31:74:7c:ab:58:a9:24: ce:1d:22:79:4f:8f:92:17:b1:6b:d6:bc:62:74:58: 26:d0:af:3b:9a:b2:2b:83:25:f7:04:0e:f7:b2:e2: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:00:E3:49:E4:23:98:77:B2:4E:E3:F3:D9:2B:33:B9:F0:24:35:24 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d6:8f:d9:f9:5d:4d:b5:6d:28:bf:f6:ca:d6:11:e7:f0:a5: 16:d6:57:e0:ce:a6:f1:ae:f4:c9:66:67:b8:e9:bc:96:6e:d3: f3:fd:8d:eb:c5:cc:da:e4:18:b9:a5:9a:df:4e:4a:d0:4a:c3: dd:fb:ff:80:4b:ce:03:79:d4:72:9f:ee:c5:fc:63:b5:32:28: 76:f8:7f:5e:da:aa:2d:48:e3:4a:11:6b:c8:9b:cb:89:4a:bb: 3f:5e:45:0f:5c:2d:f4:4f:6a:af:19:77:77:4b:ca:c8:7b:69: 46:60:2a:c7:eb:20:4c:ab:81:ec:a4:af:12:84:1a:ef:b0:56: 88:97:93:8e:03:d6:fc:87:69:19:b0:56:9a:06:d7:b8:b0:de: a7:51:0a:a9:59:5a:01:d3:d8:e6:42:b4:a7:2b:9b:25:ef:41: 2d:ec:43:35:39:69:36:18:b1:c7:74:93:92:74:98:c1:d4:11: 99:31:2b:53:ab:fd:c2:cc:76:27:44:4b:cf:05:05:1c:64:e4: 96:2e:5e:6a:2c:14:f3:66:87:bb:19:c4:c2:59:0a:c3:8b:2f: 91:71:23:8f:d2:0d:ba:41:ca:4f:ee:22:34:68:9e:10:c3:2c: 64:87:7a:6f:f7:e0:d5:03:2d:12:fe:80:e7:d8:81:11:9e:39: a3:84:c5:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZbS11fA4Y+A2amapIUr16YFyLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTA5MDYwMjA2NTdaFw0yNTA5MDkwODU0NTdaMDMxMTAvBgNV BAMTKDU3MDBFMzQ5RTQyMzk4NzdCMjRFRTNGM0Q5MkIzM0I5RjAyNDM1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1skm4UWrRlYP7SIAAvZ+1Ghbw PnPtc850O9P4tk7japMSpQpnYoperydeKBe181v7LveB5H/mJYOFVwLpboFn3qHo HijaMxq+u8XRRMC0VxGXTZ8v9bqWSB3PxcctiZ7b2JWa9XC1FHBpX93XXa03lYVd itv1X4Iq/ahURFJ6RoQVZJTPQTTHrsOpW2UL1lgll6I30RLc82y5w49PSj5CpswP YBjISDDxeylTL3BGahCW4NiWNn8kf4gv1+sCSv06/Yj4i1TbGXPeqxGUzCc+acve TcrMEnVGMXR8q1ipJM4dInlPj5IXsWvWvGJ0WCbQrzuasiuDJfcEDvey4r6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwDjSeQjmHeyTuPz2SszufAkNSQwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHWj9n5XU21bSi/9srWEefwpRbWV+DOpvGu 9MlmZ7jpvJZu0/P9jevFzNrkGLmlmt9OStBKw937/4BLzgN51HKf7sX8Y7UyKHb4 f17aqi1I40oRa8iby4lKuz9eRQ9cLfRPaq8Zd3dLysh7aUZgKsfrIEyrgeykrxKE Gu+wVoiXk44D1vyHaRmwVpoG17iw3qdRCqlZWgHT2OZCtKcrmyXvQS3sQzU5aTYY scd0k5J0mMHUEZkxK1Or/cLMdidES88FBRxk5JYuXmosFPNmh7sZxMJZCsOLL5Fx I4/SDbpByk/uIjRonhDDLGSHem/34NUDLRL+gOfYgRGeOaOExRs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:10 2025 by rpki-client