$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: XO+RCeufsbkfzQZxFvHvff42tMuBcgffJiE8nW2J5gw= Subject key identifier: A4:9C:C1:B1:52:50:50:93:A1:B7:C8:72:7E:6A:D2:34:7D:36:BA:5F Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 7B8E235406D18760F770989091840C397D071065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 0457 Signing time: Sat 07 Jun 2025 02:41:58 +0000 Manifest this update: Sat 07 Jun 2025 02:36:58 +0000 Manifest next update: Tue 10 Jun 2025 14:26:58 +0000 Files and hashes: 1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=) 2: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: RgwpNcNvvAZKsym6l1D113IYvk4CiwXCyAcXNNaWOKc=) 3: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 14:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8e:23:54:06:d1:87:60:f7:70:98:90:91:84:0c:39:7d:07:10:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Jun 7 02:36:58 2025 GMT Not After : Jun 10 14:26:58 2025 GMT Subject: CN=A49CC1B152505093A1B7C8727E6AD2347D36BA5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:9c:6b:f8:84:eb:8e:56:87:06:ae:82:2f: 8d:49:84:da:0d:40:cb:60:ab:eb:03:df:48:22:4e: d0:c6:6d:a8:72:fd:8d:e7:80:76:0b:8b:44:2a:d1: df:86:47:1b:e5:b6:30:5d:db:72:3d:3c:cd:62:da: b8:59:e4:d6:87:92:5a:c8:ee:a7:c1:de:94:85:76: 5a:4f:37:22:5c:03:c8:42:d4:34:37:37:8b:60:15: 64:e0:16:ed:79:a1:24:89:d2:9a:7d:df:35:9f:ba: e5:6b:68:eb:05:b5:bb:74:d5:1d:66:69:e5:4a:07: 91:5f:23:e3:c4:a9:bc:9c:69:3f:74:2b:ca:a1:6f: 9f:67:b9:61:8f:8e:62:01:12:21:d6:c7:c8:fe:36: f0:a6:30:92:06:98:fc:48:cc:b9:21:a5:56:d2:9c: a9:a0:79:88:34:26:9f:4d:e5:05:6d:e6:18:ee:b2: 29:7c:51:59:b1:7e:9b:b1:bf:50:de:20:86:ec:9f: ec:0b:f2:f6:a1:e7:35:99:49:95:5b:34:3d:08:fb: e4:46:8f:2d:86:4a:c5:0b:8d:ca:32:8e:fd:96:60: 49:32:67:c8:c1:7e:05:90:11:e1:88:7f:45:29:02: ab:97:8f:4f:10:f9:7c:4a:43:cf:ee:c4:76:78:1e: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:C1:B1:52:50:50:93:A1:B7:C8:72:7E:6A:D2:34:7D:36:BA:5F X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5b:b3:db:52:ca:e1:d1:dd:95:c4:88:3a:56:5a:be:e3:11: d3:86:41:4a:80:53:8a:ed:22:22:52:52:b3:af:27:88:19:d5: f5:15:3d:46:17:5b:c4:88:06:50:98:01:48:d1:c7:be:1a:4f: 3d:00:35:93:9f:d6:a0:37:04:bc:9c:ec:47:6c:e9:54:90:e0: 36:46:9e:a2:ea:62:5e:92:ee:28:51:45:8d:63:bd:bf:9e:91: f1:f2:51:d7:e5:30:d8:a9:89:51:94:ee:ea:fb:82:64:19:9f: 0d:df:bd:92:13:d6:e4:bf:e4:7e:65:07:85:1e:3e:a4:d1:f2: a5:d0:fb:fd:66:be:61:e7:43:ab:c6:b3:62:5a:c1:9d:1d:74: e9:e8:c2:22:46:60:b1:20:01:9d:eb:05:a8:21:3b:c0:27:ec: 27:71:84:09:1d:bf:5c:ae:bd:77:cc:ad:a8:03:84:98:ce:54: b1:42:c2:9e:1c:15:e4:3a:81:63:59:3e:ad:a8:8a:9a:e0:fa: 8a:a6:2e:ea:98:c2:fe:eb:1b:3e:03:a3:0b:9b:ec:6e:b6:59: 06:b4:d2:88:0f:9a:c4:db:b9:1a:ee:d7:34:26:b0:fa:04:8f: d3:57:d9:54:d4:cc:5f:a1:09:0f:b4:af:6e:6b:de:cb:ce:b8: 0a:fb:2f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe44jVAbRh2D3cJiQkYQMOX0HEGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTA2MDcwMjM2NThaFw0yNTA2MTAxNDI2NThaMDMxMTAvBgNV BAMTKEE0OUNDMUIxNTI1MDUwOTNBMUI3Qzg3MjdFNkFEMjM0N0QzNkJBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCju5xr+ITrjlaHBq6CL41JhNoN QMtgq+sD30giTtDGbahy/Y3ngHYLi0Qq0d+GRxvltjBd23I9PM1i2rhZ5NaHklrI 7qfB3pSFdlpPNyJcA8hC1DQ3N4tgFWTgFu15oSSJ0pp93zWfuuVraOsFtbt01R1m aeVKB5FfI+PEqbycaT90K8qhb59nuWGPjmIBEiHWx8j+NvCmMJIGmPxIzLkhpVbS nKmgeYg0Jp9N5QVt5hjusil8UVmxfpuxv1DeIIbsn+wL8vah5zWZSZVbND0I++RG jy2GSsULjcoyjv2WYEkyZ8jBfgWQEeGIf0UpAquXj08Q+XxKQ8/uxHZ4HhEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJzBsVJQUJOht8hyfmrSNH02ul8wHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNbs9tSyuHR3ZXEiDpWWr7jEdOGQUqAU4rt IiJSUrOvJ4gZ1fUVPUYXW8SIBlCYAUjRx74aTz0ANZOf1qA3BLyc7Eds6VSQ4DZG nqLqYl6S7ihRRY1jvb+ekfHyUdflMNipiVGU7ur7gmQZnw3fvZIT1uS/5H5lB4Ue PqTR8qXQ+/1mvmHnQ6vGs2JawZ0ddOnowiJGYLEgAZ3rBaghO8An7CdxhAkdv1yu vXfMragDhJjOVLFCwp4cFeQ6gWNZPq2oiprg+oqmLuqYwv7rGz4Dowub7G62WQa0 0ogPmsTbuRru1zQmsPoEj9NX2VTUzF+hCQ+0r25r3svOuAr7L+A= -----END CERTIFICATE-----Generated at Sun Jun 8 06:26:46 2025 by rpki-client