$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: HAg/ObfWdFRs1x6g6qccb0vXeDgWs0ZjeZc96Fd2uxk= Subject key identifier: 69:D9:9D:CB:30:37:CF:40:56:8B:E9:1D:25:08:8D:CE:DA:C8:DB:87 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 5AE4061E13C9FC667A825EE6B928FE43AE7611CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 047F Signing time: Wed 03 Sep 2025 23:52:02 +0000 Manifest this update: Wed 03 Sep 2025 23:47:02 +0000 Manifest next update: Sun 07 Sep 2025 09:47:02 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=) 2: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=) 3: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: JbF0nGkvd/WWBjFVSi+xR9r6awmKvCinpShIaZe7BRs=) 4: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e4:06:1e:13:c9:fc:66:7a:82:5e:e6:b9:28:fe:43:ae:76:11:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Sep 3 23:47:02 2025 GMT Not After : Sep 7 09:47:02 2025 GMT Subject: CN=69D99DCB3037CF40568BE91D25088DCEDAC8DB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:2a:39:d7:13:0c:5d:6c:32:80:7c:53:a5: 8b:90:90:f6:d3:52:9d:90:21:50:c8:81:6f:2e:29: 04:06:06:6b:62:a3:f5:fc:11:08:73:88:b8:b3:6a: aa:a1:8c:4b:5d:69:e9:4d:52:06:fd:c9:bc:de:15: a1:61:62:f1:0c:89:c5:ea:1e:d6:55:54:25:dd:26: 3b:5f:53:8e:72:d9:99:71:ea:02:e0:39:c9:5d:4b: db:af:fb:1d:d0:ca:17:2d:0d:28:bf:56:2d:ee:75: 48:3c:3a:9e:01:08:10:6d:35:0f:a2:5b:5b:cc:25: e6:b1:0d:07:de:f0:12:2b:46:b3:45:1c:46:72:d0: 6d:c1:99:01:62:9e:00:48:17:b1:de:db:59:8b:ba: 3d:6e:59:27:47:d1:c4:15:96:5c:d8:ab:91:46:4a: cd:22:83:a3:aa:97:c8:c3:eb:71:9d:76:19:b1:5c: 7e:ce:1b:43:e7:66:04:b6:3e:70:3e:23:bd:98:c4: d9:eb:c5:e8:1a:17:42:51:0f:40:a7:b3:60:64:5e: d7:99:bf:8f:f8:f4:82:f0:01:47:1a:e8:76:8d:6a: 80:b8:7e:39:8e:80:74:78:a3:95:08:6b:99:2d:1b: d2:1b:6a:ee:fd:be:ab:0d:50:cf:ae:a7:55:c5:38: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:9D:CB:30:37:CF:40:56:8B:E9:1D:25:08:8D:CE:DA:C8:DB:87 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ed:e5:af:69:ad:4b:ea:e6:0e:55:ca:55:76:dc:b8:cb:1b: 31:ec:ca:47:d4:42:f9:d6:df:fa:6e:0e:de:16:6c:95:1e:8f: fa:c8:95:c3:40:27:29:ea:3f:a4:c5:2a:aa:ca:71:2b:f2:bb: 6a:2f:8a:2b:ab:3f:e5:74:16:f2:9e:16:42:ac:31:22:b9:6e: bb:23:a6:3b:3a:3b:88:b8:6b:b6:21:5d:e9:1f:03:12:9a:95: 3a:99:99:b0:4e:39:f5:81:4a:a6:6c:17:99:69:50:e1:ac:21: ac:f9:f1:86:23:db:b8:a5:96:a6:05:2b:89:8a:73:dd:c4:13: cf:a0:0d:35:88:91:24:a6:93:ff:3d:15:bd:9d:c3:a5:90:ef: a3:10:ff:bf:0e:28:07:ce:1c:bb:95:34:f1:7c:f9:df:f3:50: 3f:88:f5:c5:23:59:e7:0a:79:8f:26:9a:ff:2f:a4:44:5f:1e: cd:c2:15:e9:8b:c0:b9:53:b2:ea:38:2d:92:62:c0:b5:f0:0e: a7:7f:7c:c0:6a:7f:a8:35:8c:ff:10:ea:f3:8c:5f:61:2a:13: 00:3e:a9:e8:1b:c6:56:7c:ec:ba:42:63:d6:d2:df:15:13:60: 91:27:c5:ac:2e:2c:3a:e7:f5:32:1f:7d:0f:95:43:b0:16:6b: 55:5c:be:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuQGHhPJ/GZ6gl7muSj+Q652EcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTA5MDMyMzQ3MDJaFw0yNTA5MDcwOTQ3MDJaMDMxMTAvBgNV BAMTKDY5RDk5RENCMzAzN0NGNDA1NjhCRTkxRDI1MDg4RENFREFDOERCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfRio51xMMXWwygHxTpYuQkPbT Up2QIVDIgW8uKQQGBmtio/X8EQhziLizaqqhjEtdaelNUgb9ybzeFaFhYvEMicXq HtZVVCXdJjtfU45y2Zlx6gLgOcldS9uv+x3QyhctDSi/Vi3udUg8Op4BCBBtNQ+i W1vMJeaxDQfe8BIrRrNFHEZy0G3BmQFingBIF7He21mLuj1uWSdH0cQVllzYq5FG Ss0ig6Oql8jD63GddhmxXH7OG0PnZgS2PnA+I72YxNnrxegaF0JRD0Cns2BkXteZ v4/49ILwAUca6HaNaoC4fjmOgHR4o5UIa5ktG9Ibau79vqsNUM+up1XFOETJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadmdyzA3z0BWi+kdJQiNztrI24cwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzt5a9prUvq5g5VylV23LjLGzHsykfUQvnW 3/puDt4WbJUej/rIlcNAJynqP6TFKqrKcSvyu2oviiurP+V0FvKeFkKsMSK5brsj pjs6O4i4a7YhXekfAxKalTqZmbBOOfWBSqZsF5lpUOGsIaz58YYj27illqYFK4mK c93EE8+gDTWIkSSmk/89Fb2dw6WQ76MQ/78OKAfOHLuVNPF8+d/zUD+I9cUjWecK eY8mmv8vpERfHs3CFemLwLlTsuo4LZJiwLXwDqd/fMBqf6g1jP8Q6vOMX2EqEwA+ qegbxlZ87LpCY9bS3xUTYJEnxawuLDrn9TIffQ+VQ7AWa1Vcvno= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:33 2025 by rpki-client