$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: 2QBvlL8pdjBGsgiBaegWTy6q/wu44TxfgcOKKV0n7ZU= Subject key identifier: 0E:BA:DE:71:C8:16:FB:1B:D6:30:04:BF:E9:66:D6:65:4F:F6:57:4A Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 1FEA5EAB05DED52A0E65D48F1E013510F61D53F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 021D Signing time: Wed 05 Nov 2025 01:22:18 +0000 Manifest this update: Wed 05 Nov 2025 01:17:18 +0000 Manifest next update: Sat 08 Nov 2025 07:07:18 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: JpPMpqqWAC3Yy6KrW5QbmBUVBouJhQAu5rQuZlOlYj8=) 2: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 07:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ea:5e:ab:05:de:d5:2a:0e:65:d4:8f:1e:01:35:10:f6:1d:53:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Nov 5 01:17:18 2025 GMT Not After : Nov 8 07:07:18 2025 GMT Subject: CN=0EBADE71C816FB1BD63004BFE966D6654FF6574A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:b9:00:e0:c7:99:84:a3:e4:3c:87:38:72: 8d:90:09:09:e8:69:64:ba:1e:6b:53:e4:15:25:55: 6e:56:69:8e:bc:e7:06:71:b1:73:75:08:20:10:9d: 5b:ed:7e:a8:3a:49:78:12:4b:38:68:21:45:32:fa: 59:f9:84:ff:ab:a5:3f:2e:6b:ce:2a:29:8b:85:33: 3a:6e:9e:0f:07:33:36:34:b7:ee:6a:3d:b6:90:a8: 90:d5:b4:ea:b7:51:c9:f7:6b:ff:f9:b6:1d:cd:b0: 44:31:88:99:88:91:ed:0d:b8:8e:0d:74:c1:72:ce: 82:21:b0:a6:ee:d2:59:bc:1c:4d:63:e2:06:e7:07: a9:d2:2b:44:7c:79:db:41:05:75:a8:2b:11:4e:8f: b9:6d:1a:74:88:6e:fa:c6:b5:93:5c:d2:6c:a7:a3: 93:c0:39:c0:dc:9d:e1:51:ef:bf:3c:e6:ab:fe:91: e1:b1:3a:fb:4c:9a:6f:49:b7:81:9b:9e:ad:ad:cb: c3:14:ab:a5:d1:3b:78:9d:d1:b3:07:55:a2:29:74: c6:ee:29:30:a2:91:29:ad:5e:d0:7d:a7:49:dc:18: 3f:c0:82:91:79:b9:fc:03:0e:ba:2b:80:27:19:34: f3:09:76:21:1d:ea:fe:5b:42:e8:98:15:86:b5:03: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:DE:71:C8:16:FB:1B:D6:30:04:BF:E9:66:D6:65:4F:F6:57:4A X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6c:6c:9c:e3:bf:32:47:6e:9f:8f:9e:d5:0c:7e:c1:19:b0: 63:32:17:1d:a4:f1:4c:5b:bd:45:95:10:81:eb:25:f1:b5:10: 21:31:05:60:f5:2f:4c:94:f2:86:6e:1b:5c:86:dd:81:38:31: b5:9d:44:61:b5:05:7d:90:5f:30:34:72:68:a7:85:ba:79:7e: 04:bb:09:21:4c:19:88:07:b7:53:14:bb:f6:f3:ce:66:10:0a: 51:84:bd:c3:ff:87:fa:9d:55:7a:04:e4:56:14:22:4c:f8:34: 48:96:e9:c7:77:b3:25:c7:95:aa:03:70:46:76:8c:a8:1e:18: e9:ff:13:ad:3a:0f:c9:f5:23:18:65:f8:cb:cd:0e:98:3d:c8: 40:64:0b:5e:b9:8f:6f:6f:09:1f:51:5c:8a:54:9a:ea:3b:a9: 9f:f5:d9:c9:14:8d:a7:ae:57:8b:06:f9:17:bc:62:ab:cc:67: 8d:5c:6b:b5:3f:2b:aa:85:7d:1a:4f:8e:b8:6c:a1:4f:6a:d9: c9:44:2d:39:04:0a:f3:77:15:be:9f:b4:8b:24:22:e4:76:f1: ed:ed:2c:74:f1:2d:1c:63:88:2d:df:a3:61:ee:47:59:0c:a0: ae:12:5f:c6:7b:5c:64:0b:d8:73:ee:93:6e:58:5c:4f:66:fb: 8e:bb:96:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+peqwXe1SoOZdSPHgE1EPYdU/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTExMDUwMTE3MThaFw0yNTExMDgwNzA3MThaMDMxMTAvBgNV BAMTKDBFQkFERTcxQzgxNkZCMUJENjMwMDRCRkU5NjZENjY1NEZGNjU3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1rkA4MeZhKPkPIc4co2QCQno aWS6HmtT5BUlVW5WaY685wZxsXN1CCAQnVvtfqg6SXgSSzhoIUUy+ln5hP+rpT8u a84qKYuFMzpung8HMzY0t+5qPbaQqJDVtOq3Ucn3a//5th3NsEQxiJmIke0NuI4N dMFyzoIhsKbu0lm8HE1j4gbnB6nSK0R8edtBBXWoKxFOj7ltGnSIbvrGtZNc0myn o5PAOcDcneFR77885qv+keGxOvtMmm9Jt4Gbnq2ty8MUq6XRO3id0bMHVaIpdMbu KTCikSmtXtB9p0ncGD/AgpF5ufwDDrorgCcZNPMJdiEd6v5bQuiYFYa1AzGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrreccgW+xvWMAS/6WbWZU/2V0owHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVsbJzjvzJHbp+PntUMfsEZsGMyFx2k8Uxb vUWVEIHrJfG1ECExBWD1L0yU8oZuG1yG3YE4MbWdRGG1BX2QXzA0cminhbp5fgS7 CSFMGYgHt1MUu/bzzmYQClGEvcP/h/qdVXoE5FYUIkz4NEiW6cd3syXHlaoDcEZ2 jKgeGOn/E606D8n1Ixhl+MvNDpg9yEBkC165j29vCR9RXIpUmuo7qZ/12ckUjaeu V4sG+Re8YqvMZ41ca7U/K6qFfRpPjrhsoU9q2clELTkECvN3Fb6ftIskIuR28e3t LHTxLRxjiC3fo2HuR1kMoK4SX8Z7XGQL2HPuk25YXE9m+467lqA= -----END CERTIFICATE-----Generated at Thu Nov 6 01:50:14 2025 by rpki-client