$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: 3UTaE5eU9uYHwtdecbjiGmNI+BR1j+pszcieWUrJC7w= Subject key identifier: 18:4B:2E:F8:5B:E5:2F:6D:CE:D8:CB:2E:BD:77:79:48:8A:27:FA:10 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 0C1D1A87B10B7B49674833D50C6637FB40FD2F86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0213 Signing time: Wed 03 Sep 2025 21:31:55 +0000 Manifest this update: Wed 03 Sep 2025 21:26:55 +0000 Manifest next update: Sat 06 Sep 2025 23:56:55 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: WyufY7dgqm+LnJn8LO0ddk9sd6xb0pzUEK0H6/7iDqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1d:1a:87:b1:0b:7b:49:67:48:33:d5:0c:66:37:fb:40:fd:2f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Sep 3 21:26:55 2025 GMT Not After : Sep 6 23:56:55 2025 GMT Subject: CN=184B2EF85BE52F6DCED8CB2EBD7779488A27FA10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:b2:da:9e:e5:6c:2f:2e:6e:4b:2d:08:3d: f9:25:c6:56:da:1c:eb:2c:db:b2:82:fb:28:19:73: 31:cc:dd:f3:35:88:0b:0b:99:fe:aa:bf:c0:81:8d: d6:29:39:ae:37:6e:33:c7:04:37:d8:32:5f:7f:3e: f4:45:a6:4d:bb:58:06:91:dd:55:ad:2b:c6:ef:7d: 28:a6:b6:48:29:a5:c7:a5:22:fb:b7:72:76:b5:67: 0d:c3:33:a1:ca:a8:85:ed:36:9d:4d:87:f8:ca:0f: 85:20:60:54:94:a9:84:2c:ec:5b:03:6f:68:2c:1f: b3:28:64:7d:cd:32:c8:25:b2:66:1f:0f:56:f8:e4: b0:f9:0d:63:0e:90:c5:af:c0:47:e0:82:1c:aa:dc: b5:ad:0e:35:4d:9c:95:f0:7c:14:dd:35:8c:4e:0b: 80:c0:57:10:97:1d:b0:b0:4e:0c:ee:2a:dd:ec:f1: 29:78:0f:d0:89:2c:93:c1:f2:54:85:02:4c:e6:26: aa:b9:b3:e3:a5:af:54:f5:ec:a1:a4:f5:ca:99:96: 2c:49:ef:14:e2:23:7b:9d:29:fa:f7:17:ee:3c:59: 81:00:82:0f:33:a2:1a:aa:fe:1d:08:95:bf:15:e5: be:5c:f8:04:0d:16:51:8f:02:03:02:85:80:09:85: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4B:2E:F8:5B:E5:2F:6D:CE:D8:CB:2E:BD:77:79:48:8A:27:FA:10 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1a:f7:b8:90:a3:91:32:20:89:3c:35:4e:a8:fe:e0:9b:49: c6:9b:01:79:7d:88:34:68:81:69:d4:75:77:fb:41:36:7f:2c: a9:09:6d:c2:0d:32:bc:27:48:08:28:54:ba:05:8c:7b:95:b5: e6:3e:57:9c:b2:22:bc:ef:cb:99:4b:cf:84:ea:40:3b:7d:79: 86:e1:39:a4:d5:d1:d2:f2:4e:90:54:49:b3:13:fd:8a:cd:a6: 96:d3:43:eb:95:43:61:4e:c9:5c:03:41:3e:83:22:77:8c:13: 31:36:92:3f:e1:2d:5d:f4:ec:15:6d:da:f2:52:4f:02:80:e6: 08:41:8e:2f:bb:51:12:6d:0f:35:c1:f3:b6:62:4d:44:a6:1c: 5f:53:2b:24:d4:ba:de:ad:9c:cd:a7:10:b3:11:07:aa:59:86: 90:43:97:70:2e:0f:0e:2d:3c:9a:92:91:10:68:7c:84:ef:1d: 6f:16:44:7b:22:8b:fe:a1:c2:f0:bf:4c:91:74:f3:a9:a5:a9: 86:64:b4:c0:58:17:7f:fb:46:03:48:26:5a:4a:99:55:8f:b8: 31:25:4e:44:dc:20:a7:9a:df:f2:b0:ff:a6:dc:86:53:fc:f0: a0:32:33:14:f3:8c:a2:9f:dc:d5:5d:d6:f3:68:69:a7:29:55: 32:c4:8a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDB0ah7ELe0lnSDPVDGY3+0D9L4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA5MDMyMTI2NTVaFw0yNTA5MDYyMzU2NTVaMDMxMTAvBgNV BAMTKDE4NEIyRUY4NUJFNTJGNkRDRUQ4Q0IyRUJENzc3OTQ4OEEyN0ZBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+trLanuVsLy5uSy0IPfklxlba HOss27KC+ygZczHM3fM1iAsLmf6qv8CBjdYpOa43bjPHBDfYMl9/PvRFpk27WAaR 3VWtK8bvfSimtkgppcelIvu3cna1Zw3DM6HKqIXtNp1Nh/jKD4UgYFSUqYQs7FsD b2gsH7MoZH3NMsglsmYfD1b45LD5DWMOkMWvwEfgghyq3LWtDjVNnJXwfBTdNYxO C4DAVxCXHbCwTgzuKt3s8Sl4D9CJLJPB8lSFAkzmJqq5s+Olr1T17KGk9cqZlixJ 7xTiI3udKfr3F+48WYEAgg8zohqq/h0Ilb8V5b5c+AQNFlGPAgMChYAJhb1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEsu+FvlL23O2MsuvXd5SIon+hAwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQa97iQo5EyIIk8NU6o/uCbScabAXl9iDRo gWnUdXf7QTZ/LKkJbcINMrwnSAgoVLoFjHuVteY+V5yyIrzvy5lLz4TqQDt9eYbh OaTV0dLyTpBUSbMT/YrNppbTQ+uVQ2FOyVwDQT6DIneMEzE2kj/hLV307BVt2vJS TwKA5ghBji+7URJtDzXB87ZiTUSmHF9TKyTUut6tnM2nELMRB6pZhpBDl3AuDw4t PJqSkRBofITvHW8WRHsii/6hwvC/TJF086mlqYZktMBYF3/7RgNIJlpKmVWPuDEl TkTcIKea3/Kw/6bchlP88KAyMxTzjKKf3NVd1vNoaacpVTLEisI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:21 2025 by rpki-client