$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: zhfigoFjo2yPpkc8VN4YPetw9a8x1KUWmJcaoR46vNM= Subject key identifier: 57:29:94:06:44:7D:A0:E0:D3:CA:B4:96:59:55:91:ED:F5:99:C5:B0 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 530C82FE66A84B673772F1717ED757DB91D31B0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01A5 Signing time: Wed 04 Jun 2025 15:40:43 +0000 Manifest this update: Wed 04 Jun 2025 15:35:43 +0000 Manifest next update: Sun 08 Jun 2025 01:16:43 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: d2XO8Hgl4k8egbi2/JZFl0XcSDAmqbkZ9hRf5bj8YYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0c:82:fe:66:a8:4b:67:37:72:f1:71:7e:d7:57:db:91:d3:1b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Jun 4 15:35:43 2025 GMT Not After : Jun 8 01:16:43 2025 GMT Subject: CN=57299406447DA0E0D3CAB496595591EDF599C5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:cb:f0:51:44:96:b4:9b:74:3a:d4:73:96: c3:65:50:46:c1:ab:be:c3:1c:5c:f6:b6:27:44:12: fd:8d:8f:ee:d2:ff:55:8a:fb:42:6a:19:1f:ed:bf: 79:1f:af:01:2a:88:34:34:45:ee:8c:ea:cc:30:30: 8f:05:d5:45:58:b6:d1:fd:56:37:5d:57:63:93:06: 52:7d:23:5a:b6:9c:31:f1:55:33:72:e0:44:32:d6: 58:29:ec:a3:d3:3a:12:6e:96:7a:a6:2c:62:61:5d: 1b:b4:87:34:a5:bc:86:48:89:e5:87:26:fa:46:11: 0e:d7:fb:5e:3e:97:dc:99:f3:0e:1b:e7:6a:d1:3f: d4:b3:7b:d4:1e:bc:11:46:2a:ab:6a:ab:12:92:6d: cf:4a:ef:1d:62:ef:ce:82:bc:6e:b8:00:93:36:bb: 61:66:b8:37:73:2b:16:d8:60:67:f1:7c:c8:17:41: e7:aa:98:5f:84:44:e3:40:70:a1:6a:c3:0e:a0:b8: 3a:6a:89:d6:7b:32:10:be:a1:9b:2b:85:04:97:67: 5d:b3:d3:cb:ef:ce:1a:38:76:dd:98:e5:0e:6a:ac: fa:98:47:32:97:28:ef:78:15:fa:e0:d3:50:40:dc: 1d:4d:5c:90:cc:1c:e8:00:4d:7d:34:ac:7c:3e:0b: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:29:94:06:44:7D:A0:E0:D3:CA:B4:96:59:55:91:ED:F5:99:C5:B0 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:49:67:73:c3:2a:65:44:82:26:1e:4a:c8:87:f2:c8:72:f8: a1:fa:6a:00:b0:76:0b:4e:d5:25:6c:7b:1f:05:20:e4:c1:8b: ec:a4:07:7e:22:93:f0:25:c3:e0:96:ec:6f:47:9e:32:59:02: 0e:76:d2:7e:9f:4f:84:7c:93:ec:f4:08:69:6e:39:43:ed:99: e9:e0:03:4d:fe:75:ef:ab:0c:f9:81:f6:97:d0:76:ae:6a:ee: 70:ce:a7:2a:06:ce:8f:4a:92:91:99:d8:6f:b0:56:3c:64:41: bc:5e:2a:e5:c1:af:44:1d:3c:0c:a8:6b:52:b7:6c:8f:66:13: c6:5e:d9:4d:06:2f:6c:4f:61:2d:ec:69:d2:a0:41:e8:74:be: d8:e6:2a:33:6f:60:e0:51:8c:38:f2:bc:e0:cd:d3:f1:97:f7: ba:f9:e5:3a:0b:fe:3f:95:80:ec:b8:4d:be:52:c7:ba:fe:37: e4:95:dd:cd:9d:36:89:69:fc:83:fe:82:80:3c:27:5b:5c:3a: 45:ef:4b:6c:88:83:bc:9b:22:af:fc:85:b1:dd:7b:d7:de:83: 39:34:35:3c:b1:a1:7e:05:4b:ed:1b:d7:c2:51:d6:9b:49:b4: 8a:4c:41:e3:fe:b2:ae:56:45:b3:0c:be:0e:8f:1a:f6:14:ee: 8f:ad:d7:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwyC/maoS2c3cvFxftdX25HTGwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA2MDQxNTM1NDNaFw0yNTA2MDgwMTE2NDNaMDMxMTAvBgNV BAMTKDU3Mjk5NDA2NDQ3REEwRTBEM0NBQjQ5NjU5NTU5MUVERjU5OUM1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFcvwUUSWtJt0OtRzlsNlUEbB q77DHFz2tidEEv2Nj+7S/1WK+0JqGR/tv3kfrwEqiDQ0Re6M6swwMI8F1UVYttH9 VjddV2OTBlJ9I1q2nDHxVTNy4EQy1lgp7KPTOhJulnqmLGJhXRu0hzSlvIZIieWH JvpGEQ7X+14+l9yZ8w4b52rRP9Sze9QevBFGKqtqqxKSbc9K7x1i786CvG64AJM2 u2FmuDdzKxbYYGfxfMgXQeeqmF+ERONAcKFqww6guDpqidZ7MhC+oZsrhQSXZ12z 08vvzho4dt2Y5Q5qrPqYRzKXKO94Ffrg01BA3B1NXJDMHOgATX00rHw+C6DZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVymUBkR9oODTyrSWWVWR7fWZxbAwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdJZ3PDKmVEgiYeSsiH8shy+KH6agCwdgtO 1SVsex8FIOTBi+ykB34ik/Alw+CW7G9HnjJZAg520n6fT4R8k+z0CGluOUPtmeng A03+de+rDPmB9pfQdq5q7nDOpyoGzo9KkpGZ2G+wVjxkQbxeKuXBr0QdPAyoa1K3 bI9mE8Ze2U0GL2xPYS3sadKgQeh0vtjmKjNvYOBRjDjyvODN0/GX97r55ToL/j+V gOy4Tb5Sx7r+N+SV3c2dNolp/IP+goA8J1tcOkXvS2yIg7ybIq/8hbHde9fegzk0 NTyxoX4FS+0b18JR1ptJtIpMQeP+sq5WRbMMvg6PGvYU7o+t1yg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:36:19 2025 by rpki-client