$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: jwxRwbZntQjopAzrJ0kxaglyZm6c7ZX22K6DQlm4/+U= Subject key identifier: 8A:C5:1E:1B:DD:37:73:B7:3B:0B:B3:4F:67:06:63:30:56:BC:29:29 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 4F534A9A00367556242E16CA44E8D7BEA6A46009 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 01D6 Signing time: Fri 18 Apr 2025 04:31:51 +0000 Manifest this update: Fri 18 Apr 2025 04:26:51 +0000 Manifest next update: Mon 21 Apr 2025 10:58:51 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: bVEro+Iqlb1by3HEedH8IUmcrdof+4iDXk7o0mDuZXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 10:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:53:4a:9a:00:36:75:56:24:2e:16:ca:44:e8:d7:be:a6:a4:60:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Apr 18 04:26:51 2025 GMT Not After : Apr 21 10:58:51 2025 GMT Subject: CN=8AC51E1BDD3773B73B0BB34F6706633056BC2929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:c9:d7:17:2a:d9:90:44:5a:5c:ef:90:61: df:72:ae:71:ef:0d:18:8f:9c:5f:3f:49:96:8d:c7: be:f3:78:92:25:2b:72:9a:1f:65:a6:b1:7d:3b:b5: 42:f3:72:de:08:f7:30:6e:59:c4:8b:6d:c1:8e:08: d7:0d:54:1f:92:ce:39:42:8e:51:22:66:00:76:9d: 87:b4:c7:ad:02:c9:42:d9:9d:bb:92:ae:90:dc:8f: 15:9d:bb:e5:b8:02:3a:a3:f6:2b:5c:ad:ba:70:1f: a9:5d:0d:3e:33:8c:5a:35:1e:20:26:7e:3a:df:41: cf:8a:e1:d5:81:54:3c:db:1c:78:ef:93:38:3b:91: 16:13:80:1e:eb:54:40:cb:8a:c8:30:34:c0:48:79: c8:f0:6d:fd:66:a8:4e:b5:e3:3d:16:9d:c8:b0:85: 3c:d2:91:cd:f3:cd:84:40:03:63:ee:02:b7:7e:e5: e6:08:e0:4f:1f:51:fe:db:36:7d:db:93:93:90:92: 12:d8:37:26:40:d2:b4:06:47:97:ad:73:9d:78:c3: 7d:b5:c3:7a:a7:80:f4:61:01:0a:9b:28:2a:19:45: 61:d9:8f:a8:b2:af:97:64:eb:61:e6:03:c3:08:8e: 9f:8a:85:9e:51:b2:d1:96:2f:cd:e2:f1:f3:f9:9a: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:1E:1B:DD:37:73:B7:3B:0B:B3:4F:67:06:63:30:56:BC:29:29 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d2:de:ab:07:8f:2b:0d:bd:bf:8a:29:9e:fa:02:46:7e:e4: 8d:fe:3d:4e:58:3c:39:ee:d3:d0:ba:b1:81:63:72:aa:c5:41: fd:22:ca:18:b0:4b:28:06:31:d4:24:b1:4b:bc:99:64:3a:05: ff:1f:9d:30:16:63:a0:4b:09:5a:fd:2b:f2:66:96:7e:36:2e: 32:01:95:27:04:81:1d:71:cc:d8:36:36:91:6e:8e:79:59:ef: 50:13:59:56:34:c3:b8:eb:5d:19:3c:c2:56:ae:62:a7:09:29: 0a:40:9f:d0:40:1c:ba:1d:b3:0c:49:dd:33:7c:b1:50:5a:0d: 7d:9f:d9:56:5b:b2:58:9b:81:86:f6:23:92:24:7e:ea:ce:3d: c5:44:95:6d:0c:07:11:19:30:8c:01:a3:fe:4a:4a:58:3e:da: 72:66:23:8e:35:89:7c:c7:e0:b7:fd:5b:e1:fe:b6:26:64:54: 0a:df:22:ab:84:31:84:fb:aa:7b:e8:a9:23:c0:52:1f:6f:15: da:b9:d6:38:6c:a6:e8:da:3f:80:e1:26:95:31:3c:f8:4e:3c: 97:ed:ef:b9:d4:6d:eb:69:a6:3a:c5:18:66:fa:e8:66:57:8f: 8a:38:a0:02:b4:d1:ad:92:c2:a5:9f:91:ac:cd:1d:5d:04:6c: 06:d5:58:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1NKmgA2dVYkLhbKROjXvqakYAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTA0MTgwNDI2NTFaFw0yNTA0MjExMDU4NTFaMDMxMTAvBgNV BAMTKDhBQzUxRTFCREQzNzczQjczQjBCQjM0RjY3MDY2MzMwNTZCQzI5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX8nXFyrZkERaXO+QYd9yrnHv DRiPnF8/SZaNx77zeJIlK3KaH2WmsX07tULzct4I9zBuWcSLbcGOCNcNVB+SzjlC jlEiZgB2nYe0x60CyULZnbuSrpDcjxWdu+W4Ajqj9itcrbpwH6ldDT4zjFo1HiAm fjrfQc+K4dWBVDzbHHjvkzg7kRYTgB7rVEDLisgwNMBIecjwbf1mqE614z0Wnciw hTzSkc3zzYRAA2PuArd+5eYI4E8fUf7bNn3bk5OQkhLYNyZA0rQGR5etc514w321 w3qngPRhAQqbKCoZRWHZj6iyr5dk62HmA8MIjp+KhZ5RstGWL83i8fP5mhFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUisUeG903c7c7C7NPZwZjMFa8KSkwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjS3qsHjysNvb+KKZ76AkZ+5I3+PU5YPDnu 09C6sYFjcqrFQf0iyhiwSygGMdQksUu8mWQ6Bf8fnTAWY6BLCVr9K/Jmln42LjIB lScEgR1xzNg2NpFujnlZ71ATWVY0w7jrXRk8wlauYqcJKQpAn9BAHLodswxJ3TN8 sVBaDX2f2VZbslibgYb2I5IkfurOPcVElW0MBxEZMIwBo/5KSlg+2nJmI441iXzH 4Lf9W+H+tiZkVArfIquEMYT7qnvoqSPAUh9vFdq51jhspujaP4DhJpUxPPhOPJft 77nUbetppjrFGGb66GZXj4o4oAK00a2SwqWfkazNHV0EbAbVWCU= -----END CERTIFICATE-----Generated at Sun Apr 20 02:13:10 2025 by rpki-client