$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: fNoXJVMZdn+/ovjI2kzcSmT4z8cSCdzhemnUntYaLo4= Subject key identifier: A5:93:46:17:F0:77:B9:72:07:99:3D:7A:94:B6:4C:57:7B:B9:C2:F6 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 5EDDDEC70D3F91D82BDE2027ED4BA2B3D6E8E022 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 01D9 Signing time: Thu 05 Jun 2025 02:12:16 +0000 Manifest this update: Thu 05 Jun 2025 02:07:16 +0000 Manifest next update: Sun 08 Jun 2025 02:44:16 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: 9Pd2xGl+sH8dmMGjIhmvxalAp2ppfmxqZ9Hrqqk6Bnk=) 2: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dd:de:c7:0d:3f:91:d8:2b:de:20:27:ed:4b:a2:b3:d6:e8:e0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Jun 5 02:07:16 2025 GMT Not After : Jun 8 02:44:16 2025 GMT Subject: CN=A5934617F077B97207993D7A94B64C577BB9C2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:5b:8f:8f:eb:b0:a4:fd:cb:39:ef:51:fe: 79:a1:ef:22:1a:ca:94:11:7d:ed:15:de:09:1e:53: 7d:a4:29:01:de:d5:4b:f7:3d:b9:b1:9b:6f:1e:a6: e8:7d:38:88:4a:55:54:40:5f:92:13:9a:d5:b2:aa: 60:4a:4e:c0:8b:77:a5:3c:81:1f:67:b8:81:bc:b7: bc:8d:08:d9:cd:e1:c1:f8:d1:32:85:fa:f6:3f:9b: 83:67:05:5a:e6:ba:f7:a8:9d:0c:f9:45:31:02:fa: ae:a9:5e:a8:1b:e1:ad:78:2c:c6:f0:e7:af:6b:7a: 9d:41:e6:7a:e5:2e:7c:9b:9f:f1:52:de:f7:73:a2: b0:00:31:2d:73:75:31:41:dd:6e:1f:32:d1:db:f4: ce:69:0d:70:af:f1:a6:a5:9f:f6:68:5c:f0:4f:35: c5:f5:e9:6a:73:97:ec:be:21:03:a7:1a:cf:dd:3d: 05:71:46:23:0f:af:47:f7:89:74:2f:0e:3a:b0:3e: fc:57:95:78:89:dc:61:d1:b6:55:28:e9:f3:48:39: b1:bd:51:a6:ec:95:d1:26:dc:f6:db:d3:34:d3:87: 00:91:3d:34:5a:fc:6c:d0:e6:07:24:ff:9b:bc:9a: 53:66:f9:0b:d4:02:a1:18:c3:33:a5:40:f8:f8:9c: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:93:46:17:F0:77:B9:72:07:99:3D:7A:94:B6:4C:57:7B:B9:C2:F6 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d1:5b:15:e4:94:5b:16:88:1e:e4:35:d5:ae:bd:de:43:ca: 64:18:fb:60:39:a3:2b:3c:0b:1d:69:ed:5f:0b:aa:d3:b5:43: ce:53:06:0c:6d:57:df:f8:8a:5d:7e:d0:06:f5:24:b4:86:5a: f4:b0:50:a5:6d:ce:e8:58:d6:a9:da:43:29:94:f6:36:ce:28: ca:38:17:30:dd:c5:43:1c:7e:ba:6d:f6:6f:56:54:06:5f:52: d6:2a:f5:36:a2:fe:b4:3b:e1:3a:0d:25:3a:62:72:37:c7:c7: dc:c5:f4:99:60:81:09:11:77:7d:49:7e:de:83:54:d9:7e:6c: c4:7e:e9:92:fe:5a:02:1b:5f:08:7a:68:66:da:f8:7e:26:31: 49:e6:9d:48:db:12:99:b9:4d:ea:a1:42:3e:76:44:98:75:b7: 44:25:54:75:f9:3d:67:51:2a:4f:ee:d9:5e:ce:6f:70:ff:2f: 2e:f2:f8:bc:5e:89:a2:9c:fc:0e:76:83:c4:a3:3b:91:34:8d: 87:30:85:48:36:27:c9:b4:6f:b7:f2:fc:c4:6f:9e:b1:87:78: 21:4f:2f:b8:38:85:18:fd:55:cd:d1:d4:bc:8d:e8:32:63:27: 52:54:95:01:10:39:34:70:60:79:b3:11:31:63:c3:0d:07:f5: 9e:89:ca:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXt3exw0/kdgr3iAn7Uuis9bo4CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTA2MDUwMjA3MTZaFw0yNTA2MDgwMjQ0MTZaMDMxMTAvBgNV BAMTKEE1OTM0NjE3RjA3N0I5NzIwNzk5M0Q3QTk0QjY0QzU3N0JCOUMyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDceFuPj+uwpP3LOe9R/nmh7yIa ypQRfe0V3gkeU32kKQHe1Uv3Pbmxm28epuh9OIhKVVRAX5ITmtWyqmBKTsCLd6U8 gR9nuIG8t7yNCNnN4cH40TKF+vY/m4NnBVrmuveonQz5RTEC+q6pXqgb4a14LMbw 569rep1B5nrlLnybn/FS3vdzorAAMS1zdTFB3W4fMtHb9M5pDXCv8aaln/ZoXPBP NcX16Wpzl+y+IQOnGs/dPQVxRiMPr0f3iXQvDjqwPvxXlXiJ3GHRtlUo6fNIObG9 UabsldEm3Pbb0zTThwCRPTRa/GzQ5gck/5u8mlNm+QvUAqEYwzOlQPj4nGEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZNGF/B3uXIHmT16lLZMV3u5wvYwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzRWxXklFsWiB7kNdWuvd5DymQY+2A5oys8 Cx1p7V8LqtO1Q85TBgxtV9/4il1+0Ab1JLSGWvSwUKVtzuhY1qnaQymU9jbOKMo4 FzDdxUMcfrpt9m9WVAZfUtYq9Tai/rQ74ToNJTpicjfHx9zF9JlggQkRd31Jft6D VNl+bMR+6ZL+WgIbXwh6aGba+H4mMUnmnUjbEpm5TeqhQj52RJh1t0QlVHX5PWdR Kk/u2V7Ob3D/Ly7y+LxeiaKc/A52g8SjO5E0jYcwhUg2J8m0b7fy/MRvnrGHeCFP L7g4hRj9Vc3R1LyN6DJjJ1JUlQEQOTRwYHmzETFjww0H9Z6JynQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:47 2025 by rpki-client