$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: z+U2bzQS48y76jIejUvF/oc5JOqGasSZ9Nf9M4KF98o= Subject key identifier: 30:91:41:32:4B:E7:AD:F9:57:84:20:09:6A:8B:6A:70:52:F4:CD:33 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 0453E85A93CDAF774413032E4D7A482D801B2053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 0340 Signing time: Mon 21 Jul 2025 20:21:53 +0000 Manifest this update: Mon 21 Jul 2025 20:16:53 +0000 Manifest next update: Fri 25 Jul 2025 04:15:53 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 2: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: 68hZvjq+JxwV+AtgFKZwvhVCxQ2ifzxdlK0WHemxUm4=) 3: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 4: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:53:e8:5a:93:cd:af:77:44:13:03:2e:4d:7a:48:2d:80:1b:20:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Jul 21 20:16:53 2025 GMT Not After : Jul 25 04:15:53 2025 GMT Subject: CN=309141324BE7ADF9578420096A8B6A7052F4CD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:31:25:6f:70:2b:69:8b:e0:26:3e:2d:a9: 36:80:c8:ba:91:18:54:60:31:7e:ac:8e:57:73:89: 21:4f:79:bd:15:8b:7d:2a:49:fd:e3:32:46:4c:54: d7:36:3a:13:14:74:e4:c4:27:40:1e:d7:bb:f1:52: 03:3f:8b:91:87:ce:62:c3:fd:30:43:39:e4:62:c2: de:88:b7:a2:aa:77:29:17:11:99:a9:bb:a1:eb:3b: 0f:a7:7c:f2:c2:0c:32:a9:23:d6:95:16:2c:d2:df: 48:61:2f:3a:aa:e6:10:ff:a7:7c:7c:28:76:30:78: 30:0a:3b:4c:11:19:f4:3f:2f:c3:49:03:8c:56:a1: 6e:e3:2c:56:34:bb:4d:75:9a:7a:43:7e:21:29:e0: 24:9b:9c:00:f6:7c:61:81:a2:c4:f8:66:0a:c2:a3: ca:2a:18:47:06:68:d4:d5:4a:55:0c:f8:2e:cf:48: 7b:ff:68:2f:10:6b:c4:26:b6:a7:03:6f:37:fe:a9: 97:57:9d:fb:6b:60:63:49:64:a1:5d:63:47:73:6e: 68:04:20:af:a5:00:ff:ce:19:55:7a:e7:54:59:c9: 72:c7:7e:b3:8b:21:7f:18:28:97:eb:82:ec:a2:82: 73:41:1c:17:cb:d7:7a:c2:9e:d1:2a:0f:5e:b3:bd: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:91:41:32:4B:E7:AD:F9:57:84:20:09:6A:8B:6A:70:52:F4:CD:33 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c4:08:a8:c9:b0:f0:52:92:33:b4:e5:35:ac:47:bd:91:cd: d7:f3:a0:7a:10:d3:40:f9:9d:a4:f2:4f:74:68:d9:f0:55:70: f7:dd:1d:ef:ee:20:b8:36:95:19:60:b7:24:f5:8b:17:27:74: b9:12:ae:23:85:37:33:a0:f7:f2:72:11:cf:34:dd:76:0c:ed: 62:e6:fb:e5:77:6f:f1:26:23:0c:14:4b:de:d6:ac:45:1f:2f: 4b:d1:7d:f8:62:2b:e4:73:17:d6:b6:d6:73:c2:2c:b8:da:00: 3f:4b:77:1d:cf:de:d4:ea:f2:4a:a7:04:22:b3:73:ce:27:4e: b2:6b:2f:ee:72:34:f1:03:ba:31:49:79:8a:df:a6:ba:37:43: 1f:70:a8:66:36:8f:a7:4a:13:36:d0:83:10:d3:b8:6b:cd:60: 94:ea:17:ab:c7:bf:61:72:a4:f4:79:c6:b0:5b:c0:a0:02:83: 89:2c:30:f9:0d:ba:30:b9:87:96:e3:97:f7:0a:85:d2:10:d2: 27:95:85:7d:23:81:eb:07:4a:72:87:ee:68:44:bd:0a:7b:69: 59:41:86:c6:16:19:fc:dd:0e:cc:4b:ad:81:2a:dc:a1:26:7f: 2d:aa:f6:66:f1:a2:ca:52:c6:88:c1:5f:b7:d8:a3:c5:9c:0c: 64:8f:f1:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFPoWpPNr3dEEwMuTXpILYAbIFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA3MjEyMDE2NTNaFw0yNTA3MjUwNDE1NTNaMDMxMTAvBgNV BAMTKDMwOTE0MTMyNEJFN0FERjk1Nzg0MjAwOTZBOEI2QTcwNTJGNENEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSjElb3AraYvgJj4tqTaAyLqR GFRgMX6sjldziSFPeb0Vi30qSf3jMkZMVNc2OhMUdOTEJ0Ae17vxUgM/i5GHzmLD /TBDOeRiwt6It6KqdykXEZmpu6HrOw+nfPLCDDKpI9aVFizS30hhLzqq5hD/p3x8 KHYweDAKO0wRGfQ/L8NJA4xWoW7jLFY0u011mnpDfiEp4CSbnAD2fGGBosT4ZgrC o8oqGEcGaNTVSlUM+C7PSHv/aC8Qa8QmtqcDbzf+qZdXnftrYGNJZKFdY0dzbmgE IK+lAP/OGVV651RZyXLHfrOLIX8YKJfrguyignNBHBfL13rCntEqD16zvYUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJFBMkvnrflXhCAJaotqcFL0zTMwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3ECKjJsPBSkjO05TWsR72RzdfzoHoQ00D5 naTyT3Ro2fBVcPfdHe/uILg2lRlgtyT1ixcndLkSriOFNzOg9/JyEc803XYM7WLm ++V3b/EmIwwUS97WrEUfL0vRffhiK+RzF9a21nPCLLjaAD9Ldx3P3tTq8kqnBCKz c84nTrJrL+5yNPEDujFJeYrfpro3Qx9wqGY2j6dKEzbQgxDTuGvNYJTqF6vHv2Fy pPR5xrBbwKACg4ksMPkNujC5h5bjl/cKhdIQ0ieVhX0jgesHSnKH7mhEvQp7aVlB hsYWGfzdDsxLrYEq3KEmfy2q9mbxospSxojBX7fYo8WcDGSP8RA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:33:30 2025 by rpki-client