$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: I3UDrkcANiyc5e6gD0aIUdBAySsV+NS1OI2IR5aetdU= Subject key identifier: A8:58:A0:C4:4B:E2:98:39:8E:0E:01:75:AC:BB:67:EE:54:18:82:68 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 1224F9147EF76E2C822484283BBF34EA1D2B6DC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0344 Signing time: Thu 05 Jun 2025 03:02:27 +0000 Manifest this update: Thu 05 Jun 2025 02:57:27 +0000 Manifest next update: Sun 08 Jun 2025 04:18:27 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: fgLoGFkK5VsF1THw9nnWQk8W+0ZXQJ72BwlrA32ROK0=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:24:f9:14:7e:f7:6e:2c:82:24:84:28:3b:bf:34:ea:1d:2b:6d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Jun 5 02:57:27 2025 GMT Not After : Jun 8 04:18:27 2025 GMT Subject: CN=A858A0C44BE298398E0E0175ACBB67EE54188268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:1c:7f:87:33:75:5c:d6:ed:7c:b1:dd:6a: e9:6e:5d:c0:8f:e8:04:d9:ca:13:53:42:7d:4e:55: ea:13:f5:0a:07:1d:ab:a9:12:41:ce:2c:14:bc:98: 62:44:62:1d:bb:a4:af:95:91:73:d2:e9:2b:56:27: 0d:19:71:88:9e:2b:9c:ab:3f:06:a1:51:14:2d:b8: 51:34:68:5a:f0:d7:d5:de:fb:e9:69:56:7a:50:f9: fe:03:8e:20:72:24:04:73:a7:d1:bd:ac:f3:89:5c: d0:aa:90:71:30:ad:cb:17:91:f2:81:e2:ba:1d:75: ec:79:a5:b3:76:cf:0b:19:7b:fe:19:c9:c7:46:ce: 54:c4:1a:d8:01:93:7a:6a:90:ac:10:1d:b9:96:6e: d0:05:3a:3c:b4:33:ce:fb:c1:84:8f:40:38:91:38: c1:ef:a8:23:b7:8d:bc:ea:4e:a2:3b:73:a3:87:83: 2a:7d:bc:64:a9:e4:18:ae:94:7c:ee:c9:72:6b:04: 48:f8:d8:5c:ab:2d:d4:7f:e8:c4:01:fe:89:d3:30: 00:ba:96:4b:b8:53:50:4b:ea:77:38:ed:15:7d:b2: 97:b9:36:63:26:21:b1:94:8b:65:d2:44:f2:35:db: 90:01:c2:06:ab:d2:eb:b1:b6:85:9b:7b:76:bf:90: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:A0:C4:4B:E2:98:39:8E:0E:01:75:AC:BB:67:EE:54:18:82:68 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:34:de:94:59:dd:ba:4d:f0:7a:af:28:41:af:9d:58:1b:b9: 86:5f:b4:04:ef:18:40:53:e6:84:04:b1:ed:4a:bb:05:2f:64: f1:fd:66:47:f9:bb:20:44:d4:81:72:30:ff:79:c7:e0:72:05: 0e:8e:a3:44:1e:70:7c:6b:57:3e:dd:9c:04:18:65:12:e6:55: 7a:df:29:d3:4d:a9:5b:4e:dc:06:88:ae:aa:38:4d:ac:3c:16: 01:56:fc:fd:75:59:6f:68:92:31:97:7e:51:5b:a9:a2:c0:1a: 51:c5:d6:a6:45:33:f1:08:92:2d:c2:c9:d9:aa:f4:83:06:82: 33:c2:ce:bc:aa:4f:12:b9:f6:15:a0:41:32:c7:51:6d:87:19: 19:46:03:b0:90:26:da:ed:0a:cb:53:19:ff:ae:5f:7a:3c:b9: f0:e5:ce:3c:ed:57:fc:80:d6:6c:f0:1f:60:b6:22:f5:25:af: 53:a2:26:c0:f2:cb:35:be:78:5e:2b:39:05:e6:10:67:76:e6: ef:a9:4e:61:26:35:3c:49:de:cf:38:7b:fc:7b:6e:5e:ce:58: 4e:b9:ae:dd:68:a3:46:27:f8:d4:df:06:4b:59:0e:28:f1:94: df:55:a7:f2:87:63:7b:e0:32:e8:81:49:42:a5:82:87:bf:6a: 8a:06:02:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiT5FH73biyCJIQoO7806h0rbcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTA2MDUwMjU3MjdaFw0yNTA2MDgwNDE4MjdaMDMxMTAvBgNV BAMTKEE4NThBMEM0NEJFMjk4Mzk4RTBFMDE3NUFDQkI2N0VFNTQxODgyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrhx/hzN1XNbtfLHdauluXcCP 6ATZyhNTQn1OVeoT9QoHHaupEkHOLBS8mGJEYh27pK+VkXPS6StWJw0ZcYieK5yr PwahURQtuFE0aFrw19Xe++lpVnpQ+f4DjiByJARzp9G9rPOJXNCqkHEwrcsXkfKB 4roddex5pbN2zwsZe/4ZycdGzlTEGtgBk3pqkKwQHbmWbtAFOjy0M877wYSPQDiR OMHvqCO3jbzqTqI7c6OHgyp9vGSp5BiulHzuyXJrBEj42FyrLdR/6MQB/onTMAC6 lku4U1BL6nc47RV9spe5NmMmIbGUi2XSRPI125ABwgar0uuxtoWbe3a/kE2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFigxEvimDmODgF1rLtn7lQYgmgwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg03pRZ3bpN8HqvKEGvnVgbuYZftATvGEBT 5oQEse1KuwUvZPH9Zkf5uyBE1IFyMP95x+ByBQ6Oo0QecHxrVz7dnAQYZRLmVXrf KdNNqVtO3AaIrqo4Taw8FgFW/P11WW9okjGXflFbqaLAGlHF1qZFM/EIki3Cydmq 9IMGgjPCzryqTxK59hWgQTLHUW2HGRlGA7CQJtrtCstTGf+uX3o8ufDlzjztV/yA 1mzwH2C2IvUlr1OiJsDyyzW+eF4rOQXmEGd25u+pTmEmNTxJ3s84e/x7bl7OWE65 rt1oo0Yn+NTfBktZDijxlN9Vp/KHY3vgMuiBSUKlgoe/aooGApI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:06 2025 by rpki-client