$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: Hxks4vAe8E88v+M7gzgHObTuJxrxdikp3teNyRY8ebI= Subject key identifier: D2:A2:61:03:26:81:CD:5A:67:A1:81:47:70:DA:E4:DA:C3:6B:55:5E Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 0D87E70378BD2ACE3407BF1094B971027EB42F05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 01ED Signing time: Sat 07 Jun 2025 22:31:53 +0000 Manifest this update: Sat 07 Jun 2025 22:26:53 +0000 Manifest next update: Wed 11 Jun 2025 04:15:53 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: h+mbVvVH0jewSxDY97dm2JbNEtzfbwP2OavKVjib68Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:87:e7:03:78:bd:2a:ce:34:07:bf:10:94:b9:71:02:7e:b4:2f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Jun 7 22:26:53 2025 GMT Not After : Jun 11 04:15:53 2025 GMT Subject: CN=D2A261032681CD5A67A1814770DAE4DAC36B555E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:6a:49:15:f7:8b:4e:3e:d0:4f:78:77:88: ee:f0:7b:d6:fb:82:b3:2a:69:4c:1c:f8:32:fc:2d: 60:56:ec:2e:31:12:16:3c:d4:68:02:4a:ea:d5:96: f6:05:70:f5:11:83:0f:ce:f2:65:c1:de:3e:af:c3: ba:45:e1:83:6c:55:0a:60:cf:79:80:a6:7c:da:f5: c5:e8:f3:69:db:a9:4d:20:07:1f:9c:63:20:a0:15: d7:62:a9:09:b7:93:68:f5:e0:2e:bb:64:76:1e:c8: db:ee:64:6d:8a:e2:54:6f:71:e6:b9:34:2b:08:89: 16:d0:38:5f:6a:57:8e:53:81:87:9c:e0:fb:b0:02: 97:44:08:3a:36:e4:71:45:df:8a:85:dc:55:ca:c3: 2c:e0:a9:cd:db:04:df:98:25:c3:e1:49:f4:5c:c2: 95:f0:14:53:d6:83:87:3e:89:22:cf:67:e2:8f:99: d1:8d:c8:f9:c1:f6:b8:9d:1e:d3:9e:b0:ba:55:5f: 7b:f2:ff:a7:66:be:9d:39:9d:8e:70:3f:80:14:71: 86:21:d4:f8:8c:e9:51:d3:a3:df:4a:0e:b4:51:8b: 3d:8c:cd:9f:01:b6:60:04:df:7e:aa:a0:95:68:9c: 98:54:2d:27:b4:6d:25:5b:cb:34:31:b7:e9:05:8c: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A2:61:03:26:81:CD:5A:67:A1:81:47:70:DA:E4:DA:C3:6B:55:5E X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:18:71:74:17:18:a3:37:e1:ee:bb:03:c6:a4:49:3a:3f:a5: c4:01:88:93:a1:12:10:32:4d:c8:e3:1b:4b:af:b6:34:ad:74: 1f:35:e7:35:62:a3:8f:33:a5:49:f3:70:2d:79:25:61:9f:94: 9c:c8:db:2a:01:e6:fe:83:2c:25:f1:54:18:0b:32:68:12:eb: 06:f4:94:74:45:c1:c5:89:10:93:f3:89:2e:42:0b:7b:00:3a: 5a:b0:e1:7f:76:b7:f1:18:5f:eb:93:97:9a:f8:d4:38:74:a2: a2:66:2d:05:cc:03:30:93:06:92:cb:81:38:d1:bb:9b:47:ee: a3:df:91:bd:c9:35:07:0b:c5:1c:85:ff:7d:14:dd:db:bf:12: 7b:62:fe:d2:44:57:b7:55:1a:bb:56:ce:68:57:59:15:d1:a4: af:c1:34:73:97:2f:37:54:d4:0f:0d:7c:88:67:42:a8:24:16: 11:63:d2:90:35:8c:09:c3:1f:e8:28:ff:29:a8:96:ec:d6:94: cf:2f:5b:9b:c9:02:38:5d:ff:3c:39:ca:17:55:1c:2f:ac:72: 2b:ea:5e:75:9a:1c:35:9f:14:7e:d3:e0:7d:82:e2:ce:20:b7: e0:20:8a:61:fd:16:38:31:43:f3:58:14:b9:c6:28:bb:f5:b4: 06:b7:24:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYfnA3i9Ks40B78QlLlxAn60LwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA2MDcyMjI2NTNaFw0yNTA2MTEwNDE1NTNaMDMxMTAvBgNV BAMTKEQyQTI2MTAzMjY4MUNENUE2N0ExODE0NzcwREFFNERBQzM2QjU1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszGpJFfeLTj7QT3h3iO7we9b7 grMqaUwc+DL8LWBW7C4xEhY81GgCSurVlvYFcPURgw/O8mXB3j6vw7pF4YNsVQpg z3mApnza9cXo82nbqU0gBx+cYyCgFddiqQm3k2j14C67ZHYeyNvuZG2K4lRvcea5 NCsIiRbQOF9qV45TgYec4PuwApdECDo25HFF34qF3FXKwyzgqc3bBN+YJcPhSfRc wpXwFFPWg4c+iSLPZ+KPmdGNyPnB9ridHtOesLpVX3vy/6dmvp05nY5wP4AUcYYh 1PiM6VHTo99KDrRRiz2MzZ8BtmAE336qoJVonJhULSe0bSVbyzQxt+kFjIgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0qJhAyaBzVpnoYFHcNrk2sNrVV4wHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEYcXQXGKM34e67A8akSTo/pcQBiJOhEhAy TcjjG0uvtjStdB815zVio48zpUnzcC15JWGflJzI2yoB5v6DLCXxVBgLMmgS6wb0 lHRFwcWJEJPziS5CC3sAOlqw4X92t/EYX+uTl5r41Dh0oqJmLQXMAzCTBpLLgTjR u5tH7qPfkb3JNQcLxRyF/30U3du/Enti/tJEV7dVGrtWzmhXWRXRpK/BNHOXLzdU 1A8NfIhnQqgkFhFj0pA1jAnDH+go/ymoluzWlM8vW5vJAjhd/zw5yhdVHC+scivq XnWaHDWfFH7T4H2C4s4gt+AgimH9FjgxQ/NYFLnGKLv1tAa3JKA= -----END CERTIFICATE-----Generated at Sun Jun 8 02:03:38 2025 by rpki-client