$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: GYgoK4QAwMVHq1QTZMuqe+pkaL1dPsuX95V5kIIdwsI= Subject key identifier: DC:89:12:BB:E0:06:CE:48:19:7B:45:27:02:85:31:0C:E1:93:68:E7 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 44998EF9E93CDC0B53100B2C27946458EAA1A5A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 01BE Signing time: Sat 05 Apr 2025 13:52:13 +0000 Manifest this update: Sat 05 Apr 2025 13:47:13 +0000 Manifest next update: Tue 08 Apr 2025 14:02:13 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: Hd7H6lk1GEtcqXLHjlUnS84T9ngnHKMcTFFS7xPkUFQ=) 2: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: xqSeg2IKk1bhIqDJq/ppeMqqDdTbglDK57PkVnYRRns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:99:8e:f9:e9:3c:dc:0b:53:10:0b:2c:27:94:64:58:ea:a1:a5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Apr 5 13:47:13 2025 GMT Not After : Apr 8 14:02:13 2025 GMT Subject: CN=DC8912BBE006CE48197B45270285310CE19368E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:bb:b6:de:7f:b5:80:a6:c2:03:b1:49:08: 53:08:96:fa:5d:02:14:4d:ae:4e:df:61:2a:a7:b7: 2e:09:70:3f:15:d0:1f:a9:45:8a:e1:a3:97:11:61: d0:64:68:f8:82:0a:d8:cf:95:7b:c4:6a:44:bd:59: 79:dc:f7:50:69:bb:d3:2f:81:a0:22:f2:7a:0a:a2: 29:8d:67:da:4a:c7:34:e1:d8:80:0a:f6:52:3a:2f: 93:d9:8f:12:c8:05:cd:79:50:28:ac:60:83:37:b9: b9:0c:90:ba:b0:a4:0d:5f:1a:4b:d8:b1:1c:fb:ec: 78:d8:3c:f6:f6:6e:72:7e:c8:54:19:3e:78:ed:21: 2e:9f:d1:87:c2:3b:f1:2e:b7:93:16:df:e8:fd:13: 04:5c:55:72:2f:c4:68:3b:db:70:a0:51:49:69:0d: 0e:50:6a:d7:36:66:00:1e:86:87:00:68:6a:02:8a: 6e:7f:ec:2b:cb:64:a0:b1:b9:b7:2e:bd:da:5e:14: 81:df:23:29:7f:8e:05:48:b2:91:8c:d5:31:84:26: ed:5f:c0:a8:c4:af:b4:48:74:88:05:bb:4a:72:dd: 34:99:d6:95:15:c7:d9:1d:23:20:1d:de:c6:34:a2: 30:95:cb:78:ec:5f:15:46:38:ca:a1:14:29:c8:03: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:12:BB:E0:06:CE:48:19:7B:45:27:02:85:31:0C:E1:93:68:E7 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:70:64:00:85:27:92:31:f8:df:f2:f5:04:37:35:61:18:d0: 31:28:5c:3c:65:26:e6:79:0b:7b:c8:46:cb:81:a6:59:bb:d9: 95:03:67:b0:a9:8a:13:2a:9d:92:9a:89:a5:88:5b:6c:60:c8: 18:e5:e5:43:e8:1d:48:76:47:50:6f:ce:22:c0:16:7e:91:a6: e3:33:b4:1e:41:30:5a:e1:55:2d:71:c3:9f:d3:6c:47:fb:9b: c4:c4:fa:12:b2:11:b6:45:34:54:37:8a:0d:49:32:f1:9e:c6: 4b:ba:58:c7:c6:42:65:ed:5f:09:74:97:8c:ac:a5:2a:fd:e5: e3:d7:33:b2:47:5a:0c:75:b2:9e:3b:10:86:65:1a:7e:cf:f3: 30:ef:dc:fc:00:e1:2d:38:25:20:c5:3d:66:f3:39:73:a8:5a: 73:59:02:96:e0:24:4e:e0:4b:d8:d3:96:8d:a2:e0:48:81:f0: 44:39:b9:5d:9b:a0:ed:ff:19:30:3b:c1:b0:6b:72:35:c9:cf: 7f:1a:78:32:3c:7c:97:14:e8:a2:fa:98:68:4d:4a:e6:73:e9: f7:f9:0d:fb:14:ba:78:ae:6e:0c:bc:fc:77:6e:a2:cb:c1:d7: f3:cc:a4:b5:7c:f1:51:69:05:7b:6f:67:03:82:7b:76:4b:c7: 2b:b4:f7:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJmO+ek83AtTEAssJ5RkWOqhpaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTA0MDUxMzQ3MTNaFw0yNTA0MDgxNDAyMTNaMDMxMTAvBgNV BAMTKERDODkxMkJCRTAwNkNFNDgxOTdCNDUyNzAyODUzMTBDRTE5MzY4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlru23n+1gKbCA7FJCFMIlvpd AhRNrk7fYSqnty4JcD8V0B+pRYrho5cRYdBkaPiCCtjPlXvEakS9WXnc91Bpu9Mv gaAi8noKoimNZ9pKxzTh2IAK9lI6L5PZjxLIBc15UCisYIM3ubkMkLqwpA1fGkvY sRz77HjYPPb2bnJ+yFQZPnjtIS6f0YfCO/Eut5MW3+j9EwRcVXIvxGg723CgUUlp DQ5Qatc2ZgAehocAaGoCim5/7CvLZKCxubcuvdpeFIHfIyl/jgVIspGM1TGEJu1f wKjEr7RIdIgFu0py3TSZ1pUVx9kdIyAd3sY0ojCVy3jsXxVGOMqhFCnIAybzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IkSu+AGzkgZe0UnAoUxDOGTaOcwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNwZACFJ5Ix+N/y9QQ3NWEY0DEoXDxlJuZ5 C3vIRsuBplm72ZUDZ7CpihMqnZKaiaWIW2xgyBjl5UPoHUh2R1BvziLAFn6RpuMz tB5BMFrhVS1xw5/TbEf7m8TE+hKyEbZFNFQ3ig1JMvGexku6WMfGQmXtXwl0l4ys pSr95ePXM7JHWgx1sp47EIZlGn7P8zDv3PwA4S04JSDFPWbzOXOoWnNZApbgJE7g S9jTlo2i4EiB8EQ5uV2boO3/GTA7wbBrcjXJz38aeDI8fJcU6KL6mGhNSuZz6ff5 DfsUuniubgy8/HduosvB1/PMpLV88VFpBXtvZwOCe3ZLxyu09zY= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:01 2025 by rpki-client