$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: hHamwPyPXE6L6QUx80ebX7An9Bo/1XKpvhvd/tCZQC4= Subject key identifier: 6B:C7:74:3F:35:ED:F8:5F:03:FF:25:7B:EA:97:42:F5:97:26:8D:A4 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 21F2BA3A4DDD810582220B7E7ED8CEC2BF40E19E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 01BA Signing time: Tue 11 Mar 2025 20:51:22 +0000 Manifest this update: Tue 11 Mar 2025 20:46:22 +0000 Manifest next update: Sat 15 Mar 2025 02:24:22 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: beyY00a00VBGERsYQlRNcF1U0dKVBEdyWazQu6YOtc8=) 2: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: OoefnohJMduyICBSve5aHawz7k97tVrmPOE11CW9/yw=) 3: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: W9SlEeOl3X8ocbNoZ4DhRgPCmpzG9cK0+5yGb5bLv0Q=) 4: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: /qWK0LcoSyBB17DKdn5S/rBbFGOn/HEahhhfy2Twaq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 02:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f2:ba:3a:4d:dd:81:05:82:22:0b:7e:7e:d8:ce:c2:bf:40:e1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Mar 11 20:46:22 2025 GMT Not After : Mar 15 02:24:22 2025 GMT Subject: CN=6BC7743F35EDF85F03FF257BEA9742F597268DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:1b:41:76:2f:48:9b:30:9b:42:a4:80:0b: 5f:4f:5e:97:3f:a8:68:c4:97:d5:b0:28:19:fe:e7: 96:57:21:e2:03:23:e2:bf:89:06:44:42:ed:40:b7: ba:b0:c5:95:09:6e:1d:6e:4c:f6:d2:4d:1f:46:dd: 89:f4:c1:dd:df:8a:ac:71:12:62:08:16:24:ea:50: ed:6a:d1:22:67:27:05:d2:99:db:02:e3:4f:2b:a6: cf:bc:d1:94:84:8a:7a:65:35:d5:cf:04:09:0e:34: 98:81:09:9d:82:ec:4a:ad:b7:cf:11:53:43:f6:8f: 3e:86:d7:fd:e2:24:eb:73:75:2b:2f:4b:a1:25:f6: b1:96:70:d1:00:f9:c7:df:ee:16:64:3d:50:4f:45: a1:4b:29:07:80:56:e0:ad:5f:9f:6a:7a:07:da:e7: a2:7a:0b:c6:66:bd:6d:db:f9:8b:6d:c8:cb:7c:6e: 69:8f:58:b0:b6:da:99:75:fa:02:bf:12:a0:77:90: ce:7d:7f:e8:92:11:b6:ba:67:45:8b:dc:92:1e:65: d1:e8:7f:dd:4b:a5:2a:ac:a4:0d:63:94:26:1b:0b: 8d:76:68:2e:b6:88:cc:33:ff:d0:09:cd:38:3c:e3: 6c:b0:af:c9:9f:56:30:90:fd:c4:68:37:11:71:79: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:74:3F:35:ED:F8:5F:03:FF:25:7B:EA:97:42:F5:97:26:8D:A4 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:24:51:9c:40:40:4d:2f:f0:ae:4e:79:58:86:66:0f:ac:0b: fe:86:69:98:df:dd:af:ac:02:53:cd:34:dc:34:b2:74:3e:35: 00:58:b9:e0:58:fd:ea:5c:78:11:87:9b:e1:f7:72:6f:e2:69: 29:8c:3f:c0:da:23:66:36:e7:e2:37:a4:76:ee:e9:03:c8:d0: 79:da:ef:11:21:5d:59:3f:f2:05:ae:6f:c2:1b:0d:a9:32:87: c9:e2:4d:e7:66:75:9d:09:41:31:a2:72:c3:17:b2:d3:7f:92: 95:18:5d:f6:95:b6:00:0e:50:37:b1:8a:43:cd:da:da:ee:d3: a2:7c:7b:4b:8b:c2:32:2f:09:71:b3:c7:d4:fb:ae:c1:73:30: ea:e3:12:86:f5:60:c5:76:52:bb:63:6e:0a:5c:ae:c4:b5:17: f1:a8:e1:5f:73:c7:61:da:bf:92:2a:19:81:31:46:8d:80:e1: 0a:f2:c2:49:eb:80:cb:95:49:48:8a:d2:47:7a:ff:ea:92:5a: 66:5a:5d:b3:7c:a3:92:95:75:fa:eb:a2:e7:da:e1:e5:11:aa: 35:4f:1e:49:27:26:04:04:a9:10:9a:07:42:ff:e2:93:89:08: be:ad:00:e0:58:9f:70:dd:53:29:46:68:6c:ed:bc:3c:ef:15: 98:35:e4:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfK6Ok3dgQWCIgt+ftjOwr9A4Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTAzMTEyMDQ2MjJaFw0yNTAzMTUwMjI0MjJaMDMxMTAvBgNV BAMTKDZCQzc3NDNGMzVFREY4NUYwM0ZGMjU3QkVBOTc0MkY1OTcyNjhEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+htBdi9ImzCbQqSAC19PXpc/ qGjEl9WwKBn+55ZXIeIDI+K/iQZEQu1At7qwxZUJbh1uTPbSTR9G3Yn0wd3fiqxx EmIIFiTqUO1q0SJnJwXSmdsC408rps+80ZSEinplNdXPBAkONJiBCZ2C7Eqtt88R U0P2jz6G1/3iJOtzdSsvS6El9rGWcNEA+cff7hZkPVBPRaFLKQeAVuCtX59qegfa 56J6C8ZmvW3b+YttyMt8bmmPWLC22pl1+gK/EqB3kM59f+iSEba6Z0WL3JIeZdHo f91LpSqspA1jlCYbC412aC62iMwz/9AJzTg842ywr8mfVjCQ/cRoNxFxee1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8d0PzXt+F8D/yV76pdC9ZcmjaQwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIkUZxAQE0v8K5OeViGZg+sC/6GaZjf3a+s AlPNNNw0snQ+NQBYueBY/epceBGHm+H3cm/iaSmMP8DaI2Y25+I3pHbu6QPI0Hna 7xEhXVk/8gWub8IbDakyh8niTedmdZ0JQTGicsMXstN/kpUYXfaVtgAOUDexikPN 2tru06J8e0uLwjIvCXGzx9T7rsFzMOrjEob1YMV2UrtjbgpcrsS1F/Go4V9zx2Ha v5IqGYExRo2A4QrywknrgMuVSUiK0kd6/+qSWmZaXbN8o5KVdfrroufa4eURqjVP HkknJgQEqRCaB0L/4pOJCL6tAOBYn3DdUylGaGztvDzvFZg15Gg= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:27 2025 by rpki-client