$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: N8Ge1hbgdfi3IujHw98bh99UCHudechcg6+sQP8Are8= Subject key identifier: D7:01:85:96:EA:78:A0:03:60:21:90:2A:3B:47:A4:D8:4A:46:FC:59 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 73E986A926B7E93D60AEE150267A5B90E4A7CFE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01CF Signing time: Sun 07 Sep 2025 06:20:43 +0000 Manifest this update: Sun 07 Sep 2025 06:15:43 +0000 Manifest next update: Wed 10 Sep 2025 15:05:43 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: fu/VyVxMjsRbtajAF7kEkcQuaOQ6OXfTK0GOhuOsbVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e9:86:a9:26:b7:e9:3d:60:ae:e1:50:26:7a:5b:90:e4:a7:cf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Sep 7 06:15:43 2025 GMT Not After : Sep 10 15:05:43 2025 GMT Subject: CN=D7018596EA78A0036021902A3B47A4D84A46FC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c1:8e:39:d1:bb:0a:02:61:d5:57:31:ca:cd: 1a:f0:e4:f7:5f:57:fb:79:d6:96:82:77:25:c0:be: 3d:6f:37:b2:25:e5:02:a5:50:1b:ee:d5:64:81:ae: 3d:68:35:bc:90:a7:c4:87:72:e5:6f:c8:26:96:f4: 7d:2d:52:27:31:71:44:74:ae:52:03:38:ff:2a:88: f4:3c:f8:31:c9:df:35:93:86:d2:a9:a3:28:75:95: ca:dc:89:48:31:60:c7:0f:08:44:85:71:5c:8b:f5: 7e:8a:d1:8d:04:d1:87:02:1d:1d:e5:e9:1e:20:ad: 36:48:65:51:e6:56:93:a2:7f:e3:dc:d7:73:9f:e6: de:ef:80:1c:02:cd:31:1b:f4:c5:0c:cb:ed:6d:18: bd:04:21:e5:ec:1f:56:2d:47:29:cb:87:46:28:fc: 27:ba:23:86:e3:c1:60:70:7b:98:89:00:24:d4:18: c8:40:32:de:1c:59:92:29:3e:8c:81:4e:40:49:3c: ae:80:ad:70:8d:5e:aa:28:66:9e:eb:78:6b:61:a4: 2f:67:86:ed:cc:2d:82:37:86:0b:98:7e:1e:9f:d7: 3b:61:ff:ce:ed:9c:9b:e4:30:c0:62:fd:fd:70:2f: 2b:e0:ed:5c:15:a8:27:2a:88:78:09:dc:25:85:18: 21:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:01:85:96:EA:78:A0:03:60:21:90:2A:3B:47:A4:D8:4A:46:FC:59 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5d:f3:83:ec:85:94:fb:ea:a1:77:58:8d:1f:03:38:19:dc: b1:11:55:d2:2c:65:73:d6:92:3a:4b:1f:34:70:9c:fd:26:f8: 4d:79:b8:c3:5d:aa:dd:51:ce:83:e5:d5:e8:6b:8f:fe:ec:0e: bd:e6:c7:27:70:e0:3f:e9:39:04:f9:80:15:b1:eb:02:e1:50: 9f:24:10:08:e6:9e:3c:66:31:99:e7:b5:ee:f8:13:14:2d:1e: a2:2f:6e:08:31:96:6c:2f:0c:e8:b2:b8:93:44:c3:07:80:7b: a2:03:ae:e8:ab:de:a6:fb:c7:ba:9e:76:9d:dc:47:b2:b6:f3: be:f0:63:35:a5:01:e8:6c:5f:a1:bc:3b:71:c5:cb:d6:3b:bb: 30:1a:70:6b:7c:d7:ae:0a:ed:f1:e6:c5:1e:b6:bb:b9:26:2a: fd:8b:14:f6:25:2d:fc:48:4e:04:b3:e0:26:90:7a:9a:00:af: cc:f1:80:10:2a:ac:8f:e9:7d:cf:13:ec:74:56:6c:97:23:f4: f5:0f:27:03:af:c4:06:96:43:79:49:2e:8d:ff:f7:95:09:dd: 68:86:63:72:ba:66:31:ab:fd:01:bd:53:4f:6c:c7:16:53:dd: e8:c5:ff:fe:62:8f:f2:db:b8:fd:93:00:27:27:ba:3a:fa:3a: 72:de:1e:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+mGqSa36T1gruFQJnpbkOSnz+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTA5MDcwNjE1NDNaFw0yNTA5MTAxNTA1NDNaMDMxMTAvBgNV BAMTKEQ3MDE4NTk2RUE3OEEwMDM2MDIxOTAyQTNCNDdBNEQ4NEE0NkZDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwY450bsKAmHVVzHKzRrw5Pdf V/t51paCdyXAvj1vN7Il5QKlUBvu1WSBrj1oNbyQp8SHcuVvyCaW9H0tUicxcUR0 rlIDOP8qiPQ8+DHJ3zWThtKpoyh1lcrciUgxYMcPCESFcVyL9X6K0Y0E0YcCHR3l 6R4grTZIZVHmVpOif+Pc13Of5t7vgBwCzTEb9MUMy+1tGL0EIeXsH1YtRynLh0Yo /Ce6I4bjwWBwe5iJACTUGMhAMt4cWZIpPoyBTkBJPK6ArXCNXqooZp7reGthpC9n hu3MLYI3hguYfh6f1zth/87tnJvkMMBi/f1wLyvg7VwVqCcqiHgJ3CWFGCEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wGFlup4oANgIZAqO0ek2EpG/FkwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1d84PshZT76qF3WI0fAzgZ3LERVdIsZXPW kjpLHzRwnP0m+E15uMNdqt1RzoPl1ehrj/7sDr3mxydw4D/pOQT5gBWx6wLhUJ8k EAjmnjxmMZnnte74ExQtHqIvbggxlmwvDOiyuJNEwweAe6IDruir3qb7x7qedp3c R7K2877wYzWlAehsX6G8O3HFy9Y7uzAacGt8164K7fHmxR62u7kmKv2LFPYlLfxI TgSz4CaQepoAr8zxgBAqrI/pfc8T7HRWbJcj9PUPJwOvxAaWQ3lJLo3/95UJ3WiG Y3K6ZjGr/QG9U09sxxZT3ejF//5ij/LbuP2TACcnujr6OnLeHo4= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:47 2025 by rpki-client