$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: /ttKaG9yNd/jldqARA4cyULgBVwkvGVrbenbKCKFk50= Subject key identifier: 2C:51:78:86:33:9D:A7:50:1C:66:F5:60:B0:C5:8A:56:1B:7B:D1:85 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 42C2D82B93A3CC0A0E3DF4C96A7F228E8FFBC7DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01F3 Signing time: Sun 20 Jul 2025 15:51:21 +0000 Manifest this update: Sun 20 Jul 2025 15:46:21 +0000 Manifest next update: Wed 23 Jul 2025 20:41:21 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: Qh5iXUaLz085YiAao5lIIV9guQY+sWYceEeZZ6zBDJs=) 2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: fc9N7DoRxqpUmHlDT4PRJujTDovBV37QwRTTuq1poG8=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c2:d8:2b:93:a3:cc:0a:0e:3d:f4:c9:6a:7f:22:8e:8f:fb:c7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Jul 20 15:46:21 2025 GMT Not After : Jul 23 20:41:21 2025 GMT Subject: CN=2C517886339DA7501C66F560B0C58A561B7BD185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:da:3e:9c:55:b7:df:33:6a:af:7d:54:da: c9:65:e1:d4:c3:b4:0f:d5:98:74:d9:0e:9f:32:05: d6:3c:a0:8e:74:59:05:9e:f8:10:11:5e:74:57:6f: 7c:9b:38:b3:c7:88:a0:a8:8b:3f:c2:e9:c9:ae:2a: ea:af:e9:64:d9:f0:21:d8:fb:09:f2:3c:d9:95:b1: b9:74:1c:32:97:6e:31:3f:fe:13:e7:ca:4d:aa:2a: c7:60:06:79:e6:a0:8d:31:19:8c:4a:24:ac:08:d2: 7e:17:93:bf:47:07:24:2f:fb:e2:15:75:ef:9c:d1: 0e:84:d6:37:ac:89:f9:a9:91:28:a8:fc:fa:f4:78: 6c:7a:1e:90:52:2f:59:c3:d8:0b:8d:be:11:e8:02: 1e:63:30:3f:7c:9a:d0:70:93:22:50:5d:c6:09:56: f3:f2:3d:34:b1:db:6a:b4:e2:b6:b3:e4:10:2b:d5: 30:9c:a0:64:05:cf:40:5d:a0:1b:e0:f1:09:3c:c7: 71:8b:5a:ef:f0:43:71:25:d0:f5:6c:f1:d9:4a:71: 43:9c:8f:6f:11:e5:0b:2a:91:d8:bc:23:07:f0:b1: 51:be:43:43:25:ef:c0:c7:2a:2f:9f:eb:37:96:bb: b9:1e:0a:db:1f:69:e2:30:d5:05:8b:58:76:4f:3d: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:51:78:86:33:9D:A7:50:1C:66:F5:60:B0:C5:8A:56:1B:7B:D1:85 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8d:5a:d5:ca:0d:86:60:2d:43:17:6e:fd:57:79:43:27:41: 83:4d:6b:7e:3c:db:20:72:53:8e:f3:66:94:0e:1a:94:de:1d: 34:26:f5:75:90:3f:ce:f0:4a:da:30:71:da:e1:f7:9e:7c:e1: 3e:91:50:f4:01:6f:c4:3e:ad:98:a3:8f:d1:1b:9d:f1:61:08: 95:8b:ce:b2:2f:f5:f1:53:ee:7f:f7:14:bb:6f:03:e9:81:1f: 34:c3:87:e9:1a:1e:94:ed:c3:ce:31:a3:49:b2:67:57:fa:c0: c0:cb:ca:d6:a6:1e:1b:96:3e:60:d4:af:35:6f:03:40:b3:cd: b4:4e:e5:70:b6:d0:ff:13:eb:0c:06:58:04:dc:e3:4a:7c:76: 4c:f3:e7:d5:ed:a1:03:7a:66:bd:d1:ea:4f:68:45:fc:85:55: 70:6b:7a:09:82:e4:0b:68:d4:ce:fc:21:91:ec:96:a3:5e:ea: 2e:86:da:eb:72:05:7e:cc:11:8e:26:b4:7e:a8:e0:4b:63:fe: 30:b3:4d:ff:58:75:00:ff:b9:ac:c0:85:fe:54:0b:db:a6:a2: 56:db:9d:8b:4a:4d:ed:35:cf:24:73:d9:39:7b:51:7d:29:e0: 7e:38:19:dc:25:7c:ba:ed:c5:11:7f:62:2f:96:b7:e0:cc:53: 53:0a:17:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsLYK5OjzAoOPfTJan8ijo/7x90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA3MjAxNTQ2MjFaFw0yNTA3MjMyMDQxMjFaMDMxMTAvBgNV BAMTKDJDNTE3ODg2MzM5REE3NTAxQzY2RjU2MEIwQzU4QTU2MUI3QkQxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEdo+nFW33zNqr31U2sll4dTD tA/VmHTZDp8yBdY8oI50WQWe+BARXnRXb3ybOLPHiKCoiz/C6cmuKuqv6WTZ8CHY +wnyPNmVsbl0HDKXbjE//hPnyk2qKsdgBnnmoI0xGYxKJKwI0n4Xk79HByQv++IV de+c0Q6E1jesifmpkSio/Pr0eGx6HpBSL1nD2AuNvhHoAh5jMD98mtBwkyJQXcYJ VvPyPTSx22q04raz5BAr1TCcoGQFz0BdoBvg8Qk8x3GLWu/wQ3El0PVs8dlKcUOc j28R5Qsqkdi8IwfwsVG+Q0Ml78DHKi+f6zeWu7keCtsfaeIw1QWLWHZPPaeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFF4hjOdp1AcZvVgsMWKVht70YUwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuNWtXKDYZgLUMXbv1XeUMnQYNNa3482yBy U47zZpQOGpTeHTQm9XWQP87wStowcdrh95584T6RUPQBb8Q+rZijj9EbnfFhCJWL zrIv9fFT7n/3FLtvA+mBHzTDh+kaHpTtw84xo0myZ1f6wMDLytamHhuWPmDUrzVv A0CzzbRO5XC20P8T6wwGWATc40p8dkzz59XtoQN6Zr3R6k9oRfyFVXBregmC5Ato 1M78IZHslqNe6i6G2utyBX7MEY4mtH6o4Etj/jCzTf9YdQD/uazAhf5UC9umolbb nYtKTe01zyRz2Tl7UX0p4H44GdwlfLrtxRF/Yi+Wt+DMU1MKF5Y= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:28 2025 by rpki-client