$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: j9j96EmcXu0CC5EFQSfuuLxu/690hEyU5BsgRgocN0s= Subject key identifier: 4D:60:8A:B0:71:23:C9:E4:80:76:F9:C8:53:EF:1D:8A:33:A7:0E:08 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 07F82FFAEEC758E940931F2B6E209CA96CEC3FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 0203 Signing time: Sun 07 Sep 2025 12:12:19 +0000 Manifest this update: Sun 07 Sep 2025 12:07:19 +0000 Manifest next update: Wed 10 Sep 2025 20:38:19 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: w1ITAD0lQf2g/4qo9IGWfWL6jMPgmpCNrOT9Uqw2TB4=) 2: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f8:2f:fa:ee:c7:58:e9:40:93:1f:2b:6e:20:9c:a9:6c:ec:3f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Sep 7 12:07:19 2025 GMT Not After : Sep 10 20:38:19 2025 GMT Subject: CN=4D608AB07123C9E48076F9C853EF1D8A33A70E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:9a:c0:d5:2f:10:1d:c8:de:1e:ce:9a:2c: da:34:d8:44:cf:4a:ae:ae:f1:ed:9a:1a:ea:4a:93: 46:32:3b:60:d3:45:5f:47:56:97:64:0a:e3:6e:0b: 75:b4:b9:69:9a:b4:e2:0b:05:72:d7:1a:b7:b9:15: a3:f8:2b:02:e7:d0:08:44:df:13:09:24:6d:a3:26: 90:13:e4:85:15:dd:e3:a5:46:27:c4:c0:07:8e:ed: 79:b1:06:4e:d0:3f:82:ad:26:c8:bc:d0:9b:9a:bd: 2d:53:7e:8c:8f:9b:07:6f:76:9e:14:fd:91:6d:8f: 79:cb:f6:9f:aa:5f:6a:a9:d6:19:84:20:9a:0b:2f: ed:2f:f9:b2:16:86:9c:6b:e9:2d:be:d5:5f:e8:c5: 58:97:aa:31:e0:88:c6:e2:cf:f7:62:5b:5b:41:b6: 2a:14:27:2b:22:9c:d7:81:0a:0b:e2:50:4b:d3:b7: cc:3b:2e:ae:5f:65:16:66:49:22:96:9f:a5:ba:4d: 5e:68:5b:bc:a1:fd:9e:cc:92:f5:1f:b5:3c:a5:64: b9:43:11:79:7b:eb:ef:37:40:e5:5f:cb:3b:e2:82: 22:c0:4d:04:13:1d:13:56:1f:79:53:8a:f3:f6:fe: 55:51:5b:e0:32:11:fc:b6:64:81:40:fe:e8:44:06: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:60:8A:B0:71:23:C9:E4:80:76:F9:C8:53:EF:1D:8A:33:A7:0E:08 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3e:1d:57:c0:ca:77:6e:83:a7:67:00:ad:9e:05:16:7f:28: 72:2a:af:5a:98:21:0e:a1:a6:52:70:b0:ce:2d:2a:01:63:ba: f8:fd:04:e3:f4:fa:3c:74:61:16:6e:3f:47:e8:d5:d6:d1:0a: 3b:d8:1f:91:22:ed:0c:0c:da:3b:ce:88:c1:c7:96:6b:57:2e: 96:73:ee:85:46:c6:36:5c:5f:3f:8f:2e:20:ee:e2:d0:ca:cc: 62:68:70:bb:1c:a9:ed:77:1a:37:27:14:ec:39:b9:3c:06:6b: 89:a4:5c:79:bb:b4:52:8f:cd:16:6d:cf:c9:e5:ac:1e:d4:34: 34:55:c2:d2:36:0b:32:f8:9c:cf:a9:0f:e8:13:8f:69:94:f9: 1e:06:62:4c:4e:fc:25:bc:48:48:2a:90:d4:24:af:53:46:29: 9a:33:34:ba:53:e6:f2:a0:9a:48:17:d4:95:bf:aa:2a:a8:65: c9:e6:c8:ae:6e:8f:da:84:09:27:f7:9d:7e:10:97:af:01:36: 78:6f:d4:a4:b4:14:e6:62:96:f6:7a:91:63:55:34:c3:ef:3c: bc:ab:9b:8b:90:9c:3e:f8:47:d3:0b:22:8c:36:27:f9:c9:f6: f3:a6:19:59:86:c0:38:c8:3c:10:c0:00:59:1e:08:75:52:2a: 12:49:18:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/gv+u7HWOlAkx8rbiCcqWzsP8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTA5MDcxMjA3MTlaFw0yNTA5MTAyMDM4MTlaMDMxMTAvBgNV BAMTKDRENjA4QUIwNzEyM0M5RTQ4MDc2RjlDODUzRUYxRDhBMzNBNzBFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiZrA1S8QHcjeHs6aLNo02ETP Sq6u8e2aGupKk0YyO2DTRV9HVpdkCuNuC3W0uWmatOILBXLXGre5FaP4KwLn0AhE 3xMJJG2jJpAT5IUV3eOlRifEwAeO7XmxBk7QP4KtJsi80JuavS1TfoyPmwdvdp4U /ZFtj3nL9p+qX2qp1hmEIJoLL+0v+bIWhpxr6S2+1V/oxViXqjHgiMbiz/diW1tB tioUJysinNeBCgviUEvTt8w7Lq5fZRZmSSKWn6W6TV5oW7yh/Z7MkvUftTylZLlD EXl76+83QOVfyzvigiLATQQTHRNWH3lTivP2/lVRW+AyEfy2ZIFA/uhEBvkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWCKsHEjyeSAdvnIU+8dijOnDggwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI+HVfAyndug6dnAK2eBRZ/KHIqr1qYIQ6h plJwsM4tKgFjuvj9BOP0+jx0YRZuP0fo1dbRCjvYH5Ei7QwM2jvOiMHHlmtXLpZz 7oVGxjZcXz+PLiDu4tDKzGJocLscqe13GjcnFOw5uTwGa4mkXHm7tFKPzRZtz8nl rB7UNDRVwtI2CzL4nM+pD+gTj2mU+R4GYkxO/CW8SEgqkNQkr1NGKZozNLpT5vKg mkgX1JW/qiqoZcnmyK5uj9qECSf3nX4Ql68BNnhv1KS0FOZilvZ6kWNVNMPvPLyr m4uQnD74R9MLIow2J/nJ9vOmGVmGwDjIPBDAAFkeCHVSKhJJGMc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:01 2025 by rpki-client