$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: JDmnhTMVs3FRPCWdPaMTroQkUiZxvgoLJ0mEXvMwTyY= Subject key identifier: 27:8E:98:27:7D:80:E9:D6:1B:E1:0C:3C:92:1F:69:55:4F:C8:06:0C Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 73E3EEA85E2FCB3165A3A663DEBE87F3FD426493 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: 76 Signing time: Wed 04 Jun 2025 19:21:31 +0000 Manifest this update: Wed 04 Jun 2025 19:16:31 +0000 Manifest next update: Sat 07 Jun 2025 21:12:31 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: bRxB1/XYWBuRDsFTyowa+aqFQkf4scGUR4oQ2TVJrXQ=) 2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: rt5q8WmHvQRZJHBNIEVukUJgpsbr2IgrBYpZSrAYEds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:ee:a8:5e:2f:cb:31:65:a3:a6:63:de:be:87:f3:fd:42:64:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Jun 4 19:16:31 2025 GMT Not After : Jun 7 21:12:31 2025 GMT Subject: CN=278E98277D80E9D61BE10C3C921F69554FC8060C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:8b:d3:24:36:22:c1:f7:29:a0:b5:40:4b: e1:15:43:57:1e:68:50:66:52:5c:14:8e:4f:30:17: 27:c8:0d:6f:25:73:02:6c:35:dd:51:73:1b:fb:5e: a6:96:b3:9d:c9:cb:ba:e9:69:74:79:31:ae:9b:24: f1:06:c8:3d:5e:0d:9d:81:35:1b:78:7c:e5:13:b6: 9f:e4:52:95:79:fc:a4:0f:8d:f8:3a:60:6f:e1:fd: eb:88:11:09:2d:a2:62:87:da:d4:95:db:32:11:02: 2d:4c:42:3d:2c:76:3f:45:46:d4:fa:ce:27:d0:12: 5f:a8:88:27:75:b2:42:db:49:15:94:94:15:d5:94: 63:68:24:9f:a7:b9:a6:24:90:29:72:b2:45:42:51: 0f:40:d9:b5:8b:0e:99:b8:8c:03:d9:3f:13:b5:d6: 0d:b6:cf:e1:c9:3d:a1:45:d1:d5:47:6f:33:25:fd: 50:05:fa:66:55:ab:59:73:5a:f1:22:e5:7e:6c:3b: 95:99:f2:55:56:23:39:d0:14:49:02:2c:d2:30:c6: 27:ba:31:a1:a2:8e:d6:0a:65:84:63:6c:d4:96:ba: 96:c2:80:7a:c1:4e:8f:f3:2b:c7:43:28:82:45:f0: 3c:12:70:76:28:75:04:f1:04:fd:92:a9:d8:d4:7b: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:98:27:7D:80:E9:D6:1B:E1:0C:3C:92:1F:69:55:4F:C8:06:0C X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a8:b2:cf:b4:e2:e9:8a:a8:37:f0:70:85:ab:d2:c6:d3:2f: e7:e8:09:19:6f:d7:dc:dd:d7:d9:60:54:ee:1e:2d:f4:44:8e: ce:68:c4:aa:cb:ac:07:5c:fa:c3:c2:77:f2:f4:c6:68:eb:47: 60:21:18:29:12:6e:ea:74:00:28:8b:33:cd:d2:8c:0d:63:5d: 45:4e:40:dd:85:7c:25:85:c3:8d:a9:0d:27:1a:ea:f6:bf:66: 43:f3:ef:1b:f4:a1:50:a2:b1:9b:6f:bb:02:b1:b2:21:78:56: 78:ea:08:61:92:26:d4:2f:ca:73:c2:f0:6c:19:35:ad:f6:0a: 6b:d9:de:cd:11:33:b2:fd:66:c8:5e:63:52:26:2c:18:01:61: 79:cb:aa:4c:a2:b6:10:45:78:cc:4d:dc:96:3a:2f:f9:36:14: de:33:ef:77:19:b5:40:d6:b6:f4:dd:6d:35:0d:8d:45:96:42: 38:60:48:c0:42:19:dc:79:8d:3a:bb:7d:e7:d5:46:8e:a2:9e: 96:6f:36:80:76:a2:86:1f:e5:0f:a2:1a:20:ce:06:f6:58:c0: ac:32:30:41:25:22:30:7e:d6:b8:75:58:37:75:07:40:2c:2c: 37:fc:e8:87:e1:4c:38:ee:c7:3d:b4:21:16:e1:fc:33:aa:cc: 42:f0:ef:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+PuqF4vyzFlo6Zj3r6H8/1CZJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTA2MDQxOTE2MzFaFw0yNTA2MDcyMTEyMzFaMDMxMTAvBgNV BAMTKDI3OEU5ODI3N0Q4MEU5RDYxQkUxMEMzQzkyMUY2OTU1NEZDODA2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrW4vTJDYiwfcpoLVAS+EVQ1ce aFBmUlwUjk8wFyfIDW8lcwJsNd1Rcxv7XqaWs53Jy7rpaXR5Ma6bJPEGyD1eDZ2B NRt4fOUTtp/kUpV5/KQPjfg6YG/h/euIEQktomKH2tSV2zIRAi1MQj0sdj9FRtT6 zifQEl+oiCd1skLbSRWUlBXVlGNoJJ+nuaYkkClyskVCUQ9A2bWLDpm4jAPZPxO1 1g22z+HJPaFF0dVHbzMl/VAF+mZVq1lzWvEi5X5sO5WZ8lVWIznQFEkCLNIwxie6 MaGijtYKZYRjbNSWupbCgHrBTo/zK8dDKIJF8DwScHYodQTxBP2SqdjUe5BfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ46YJ32A6dYb4Qw8kh9pVU/IBgwwHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6oss+04umKqDfwcIWr0sbTL+foCRlv19zd 19lgVO4eLfREjs5oxKrLrAdc+sPCd/L0xmjrR2AhGCkSbup0ACiLM83SjA1jXUVO QN2FfCWFw42pDSca6va/ZkPz7xv0oVCisZtvuwKxsiF4VnjqCGGSJtQvynPC8GwZ Na32CmvZ3s0RM7L9ZsheY1ImLBgBYXnLqkyithBFeMxN3JY6L/k2FN4z73cZtUDW tvTdbTUNjUWWQjhgSMBCGdx5jTq7fefVRo6inpZvNoB2ooYf5Q+iGiDOBvZYwKwy MEElIjB+1rh1WDd1B0AsLDf86IfhTDjuxz20IRbh/DOqzELw7xM= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:41 2025 by rpki-client