$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: iKWxGRIPnpBZ2YjSuAlwOSJA83k7ZIs3B5xkq4Z9WU8= Subject key identifier: 5D:44:F4:C6:A4:E8:80:50:C1:95:99:B7:96:3A:07:85:40:BC:64:4E Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 6D42810388472249E5D3E071B182AD81542BCB80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 017F Signing time: Tue 11 Mar 2025 09:00:42 +0000 Manifest this update: Tue 11 Mar 2025 08:55:42 +0000 Manifest next update: Fri 14 Mar 2025 20:03:42 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: SG6deG5zADSC7rHkSQUoQry1liYdVgmj7C/4GY32Vq4=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 20:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:42:81:03:88:47:22:49:e5:d3:e0:71:b1:82:ad:81:54:2b:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Mar 11 08:55:42 2025 GMT Not After : Mar 14 20:03:42 2025 GMT Subject: CN=5D44F4C6A4E88050C19599B7963A078540BC644E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:13:59:cb:ba:61:d5:50:c6:a5:54:28:46: 31:d7:09:4e:d7:85:68:83:64:e7:3b:47:2a:e5:de: d3:10:8d:2d:d4:1b:c3:55:56:66:11:b0:38:50:f6: f2:d8:57:db:6d:60:6c:6b:62:a2:48:3c:e2:fd:e9: ec:3d:bf:b4:68:42:fd:64:6c:d9:0f:a8:3b:ed:80: 8f:38:17:63:54:9a:b3:26:17:d4:c2:36:69:b6:aa: 22:c8:8b:ef:04:c4:04:57:ed:91:e4:b1:1a:f8:41: 4f:d9:f7:bf:d2:86:91:21:7b:d1:ed:7d:88:f2:b2: 3f:f3:1d:7d:32:c2:34:e7:34:e0:20:77:cc:5c:b5: f9:34:cc:e1:50:47:90:ad:01:fe:83:98:74:c2:a7: ac:8c:3e:e1:29:54:25:b5:d9:db:5b:6c:29:be:4d: 0b:b6:97:e8:64:d2:b1:07:10:94:db:2b:1c:e1:13: 5c:e4:9a:81:af:7f:7d:d6:de:ee:78:5b:14:1d:36: 0d:2d:f0:cb:ad:f0:c7:c9:cb:6d:6e:d7:4d:a0:49: de:49:a6:c7:34:ea:60:cb:6b:7e:8f:f9:4f:a2:ad: 9f:cf:9e:0b:f4:d5:bf:5a:8e:91:65:8c:d6:f6:9a: 6f:94:75:bf:eb:98:b7:f3:f0:b4:8b:3e:b1:f5:61: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:F4:C6:A4:E8:80:50:C1:95:99:B7:96:3A:07:85:40:BC:64:4E X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:24:9c:50:ff:3c:57:d5:2d:36:14:dc:31:09:91:5b:b8:16: 9c:26:e9:1f:18:09:4b:0a:d4:b1:39:b4:a7:e2:33:ba:20:f2: c0:3a:e8:96:00:5c:14:dd:65:53:fa:bf:00:5b:c4:10:b7:3b: ec:d9:c8:3a:1c:09:b7:df:55:02:0b:0c:56:89:ca:b2:01:12: 2b:83:c8:91:37:5b:80:61:03:ea:a3:02:08:97:c5:6b:72:62: 70:ae:24:d3:c6:18:1b:04:cc:ef:52:68:d5:9e:b9:11:3f:cb: f5:33:9c:ef:a0:77:c7:6a:7a:f5:13:72:83:9f:c1:96:7a:fa: 88:f4:cf:8d:0d:15:12:41:f8:a6:29:11:14:53:3e:59:33:62: 31:a6:fd:00:56:55:aa:2e:b8:1f:56:73:05:fc:56:ce:5b:34: c1:ae:9e:ba:92:12:e6:d7:5f:39:13:8b:36:51:3d:5b:c0:72: 25:f9:2d:60:80:af:a9:a8:94:e3:79:ca:57:3b:63:3b:11:46: 93:96:8a:b9:5f:4f:e5:60:d9:a3:f8:2b:95:7f:59:4d:84:77: 2e:d9:ae:d0:4c:ce:b6:f3:79:b9:b5:f7:c8:0e:4e:ea:df:fd: 31:2b:0c:4e:f8:05:d8:9b:d9:7c:ff:64:d8:95:63:ce:8b:97: 79:e7:bc:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUKBA4hHIknl0+BxsYKtgVQry4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTAzMTEwODU1NDJaFw0yNTAzMTQyMDAzNDJaMDMxMTAvBgNV BAMTKDVENDRGNEM2QTRFODgwNTBDMTk1OTlCNzk2M0EwNzg1NDBCQzY0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmxNZy7ph1VDGpVQoRjHXCU7X hWiDZOc7Ryrl3tMQjS3UG8NVVmYRsDhQ9vLYV9ttYGxrYqJIPOL96ew9v7RoQv1k bNkPqDvtgI84F2NUmrMmF9TCNmm2qiLIi+8ExARX7ZHksRr4QU/Z97/ShpEhe9Ht fYjysj/zHX0ywjTnNOAgd8xctfk0zOFQR5CtAf6DmHTCp6yMPuEpVCW12dtbbCm+ TQu2l+hk0rEHEJTbKxzhE1zkmoGvf33W3u54WxQdNg0t8Mut8MfJy21u102gSd5J psc06mDLa36P+U+irZ/Pngv01b9ajpFljNb2mm+Udb/rmLfz8LSLPrH1YZtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXUT0xqTogFDBlZm3ljoHhUC8ZE4wHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoknFD/PFfVLTYU3DEJkVu4Fpwm6R8YCUsK 1LE5tKfiM7og8sA66JYAXBTdZVP6vwBbxBC3O+zZyDocCbffVQILDFaJyrIBEiuD yJE3W4BhA+qjAgiXxWtyYnCuJNPGGBsEzO9SaNWeuRE/y/UznO+gd8dqevUTcoOf wZZ6+oj0z40NFRJB+KYpERRTPlkzYjGm/QBWVaouuB9WcwX8Vs5bNMGunrqSEubX XzkTizZRPVvAciX5LWCAr6molON5ylc7YzsRRpOWirlfT+Vg2aP4K5V/WU2Edy7Z rtBMzrbzebm198gOTurf/TErDE74Bdib2Xz/ZNiVY86Ll3nnvAk= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:52 2025 by rpki-client