$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: 8CZrsbHu9lQ7DrmxfZwXZEIAThNr81X5t05ETqaZTAA= Subject key identifier: 34:FD:36:D7:91:27:0C:30:9A:33:31:BE:6A:D8:C2:DE:5E:E4:97:69 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 6F58FCA3EE4A3135EBF0171DC7A618CCA1D9724C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 01E0 Signing time: Tue 03 Jun 2025 21:53:16 +0000 Manifest this update: Tue 03 Jun 2025 21:48:16 +0000 Manifest next update: Sat 07 Jun 2025 03:24:16 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) 2: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 3: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: N737DQc+hQet0iS+832W2N3ZYSZ2y+ghQvMoZO5chGw=) 4: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:58:fc:a3:ee:4a:31:35:eb:f0:17:1d:c7:a6:18:cc:a1:d9:72:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Jun 3 21:48:16 2025 GMT Not After : Jun 7 03:24:16 2025 GMT Subject: CN=34FD36D791270C309A3331BE6AD8C2DE5EE49769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:f0:fd:49:54:07:47:c7:a0:98:c6:ba:52: 8f:96:27:16:76:f2:e7:d2:27:12:66:43:b2:0f:eb: 4b:eb:ed:c7:10:7a:19:de:81:f5:a6:62:e0:b8:7c: 91:04:47:18:41:d2:86:ec:e1:dd:46:28:3b:e7:4c: 5b:a4:6b:66:cc:60:08:bc:df:65:be:8a:41:e0:05: 5d:ef:1c:8e:27:44:fb:a5:83:c2:95:86:8b:08:94: f7:31:fd:54:fd:f4:83:f5:d9:61:d9:f3:63:dd:2e: a5:68:85:00:91:1b:a2:14:7f:94:a6:99:5c:2a:4f: ef:aa:4f:45:cb:5f:4b:29:21:ce:93:33:41:25:5c: e5:2b:c1:e9:28:44:69:7b:10:5f:5b:e1:e1:9a:ad: 65:cb:f3:14:f0:c0:5b:0b:92:76:59:62:33:29:29: 86:f1:80:15:47:75:38:33:79:18:81:b7:17:2c:3a: 42:66:f0:71:7e:1a:88:b4:49:6a:e2:f6:b4:c6:12: c8:ac:27:52:64:e3:f3:35:bc:52:b7:c2:62:cd:17: f9:fe:c0:f5:49:07:cf:59:ff:b5:41:b9:bb:77:a3: e0:49:ca:47:0b:87:90:d4:a1:98:e0:49:8a:11:0d: 17:2d:c7:71:2e:1e:28:68:d0:49:c7:11:84:32:e0: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:36:D7:91:27:0C:30:9A:33:31:BE:6A:D8:C2:DE:5E:E4:97:69 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:32:21:5d:fb:42:d5:54:25:45:79:d6:94:9a:00:78:d7:09: 85:8d:3b:29:a6:ce:77:99:3d:99:75:8a:12:dd:2f:f1:94:d7: 30:14:fb:8b:13:87:bc:2c:23:fc:0e:e0:a4:55:95:93:28:d5: d8:04:e3:98:a7:64:31:3d:13:e4:58:4a:a5:6c:77:c5:74:9c: 66:23:19:1a:0f:26:84:19:f4:1f:db:25:48:f3:9c:7c:7a:10: 23:45:6e:cf:d7:e5:08:42:f3:3a:2b:82:30:3d:50:b5:cc:ed: 5a:d0:fb:64:1b:6b:db:2f:cd:8e:59:dc:07:0e:07:a5:ed:bf: 33:61:1d:29:1a:5b:69:7a:8b:cd:97:d9:36:25:d4:a7:5e:e5: 2e:98:44:27:7f:86:23:41:9d:56:93:3e:23:97:21:c3:c5:84: ca:ff:de:c5:cd:ef:83:63:af:33:35:9c:73:2b:54:43:a8:3e: 90:20:27:40:5d:5c:34:77:85:29:76:36:49:b5:aa:ab:62:77: 2f:db:37:53:f5:3f:ea:28:1a:13:9c:8d:41:dd:b1:aa:a6:fd: 68:e6:e9:d4:7b:e4:c7:8c:d9:e3:5d:35:08:0b:11:74:e9:d2: 42:16:5d:7b:2e:82:40:cd:c0:d4:b7:da:c6:49:ab:0e:47:c4: 6b:1d:0b:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1j8o+5KMTXr8Bcdx6YYzKHZckwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTA2MDMyMTQ4MTZaFw0yNTA2MDcwMzI0MTZaMDMxMTAvBgNV BAMTKDM0RkQzNkQ3OTEyNzBDMzA5QTMzMzFCRTZBRDhDMkRFNUVFNDk3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGPD9SVQHR8egmMa6Uo+WJxZ2 8ufSJxJmQ7IP60vr7ccQehnegfWmYuC4fJEERxhB0obs4d1GKDvnTFuka2bMYAi8 32W+ikHgBV3vHI4nRPulg8KVhosIlPcx/VT99IP12WHZ82PdLqVohQCRG6IUf5Sm mVwqT++qT0XLX0spIc6TM0ElXOUrwekoRGl7EF9b4eGarWXL8xTwwFsLknZZYjMp KYbxgBVHdTgzeRiBtxcsOkJm8HF+Goi0SWri9rTGEsisJ1Jk4/M1vFK3wmLNF/n+ wPVJB89Z/7VBubt3o+BJykcLh5DUoZjgSYoRDRctx3EuHiho0EnHEYQy4HSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNP0215EnDDCaMzG+atjC3l7kl2kwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcyIV37QtVUJUV51pSaAHjXCYWNOymmzneZ PZl1ihLdL/GU1zAU+4sTh7wsI/wO4KRVlZMo1dgE45inZDE9E+RYSqVsd8V0nGYj GRoPJoQZ9B/bJUjznHx6ECNFbs/X5QhC8zorgjA9ULXM7VrQ+2Qba9svzY5Z3AcO B6XtvzNhHSkaW2l6i82X2TYl1Kde5S6YRCd/hiNBnVaTPiOXIcPFhMr/3sXN74Nj rzM1nHMrVEOoPpAgJ0BdXDR3hSl2Nkm1qqtidy/bN1P1P+ooGhOcjUHdsaqm/Wjm 6dR75MeM2eNdNQgLEXTp0kIWXXsugkDNwNS32sZJqw5HxGsdC5Q= -----END CERTIFICATE-----Generated at Thu Jun 5 19:46:11 2025 by rpki-client