$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: beKco7Y7LeiZXo1i8AY2e/YkVId5VUibjo5TEoz5otU= Subject key identifier: 31:BF:91:F4:05:B8:D6:29:3C:91:9C:C7:7A:13:DE:AF:B0:0A:8B:E6 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 23BD00DC87C64D750A7CDA2DDA3444AD3F7D385F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 01C5 Signing time: Mon 21 Jul 2025 15:30:50 +0000 Manifest this update: Mon 21 Jul 2025 15:25:50 +0000 Manifest next update: Thu 24 Jul 2025 20:11:50 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: j2aQ3poXcnYzzzKL6x/FNjphej97DqNaAxPLxnKZRzQ=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bd:00:dc:87:c6:4d:75:0a:7c:da:2d:da:34:44:ad:3f:7d:38:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Jul 21 15:25:50 2025 GMT Not After : Jul 24 20:11:50 2025 GMT Subject: CN=31BF91F405B8D6293C919CC77A13DEAFB00A8BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:6d:30:99:24:e7:db:4d:f8:88:ac:ef:bc: d1:d0:03:3f:60:01:e3:df:36:c4:86:92:2d:1c:89: 94:57:3e:9b:94:8a:2f:43:0b:65:da:b0:3f:a1:14: 6c:05:0e:48:06:f5:05:be:5f:42:a5:9f:19:a9:ae: ad:2a:83:e4:dc:35:9d:e7:33:81:d6:d7:1a:7e:85: a7:f7:c6:7c:ec:a9:1a:45:6a:3e:cf:57:1c:53:b1: db:90:80:b9:d6:b5:d6:7e:0c:6e:e1:24:bb:ab:f4: 92:3d:45:f0:f1:11:cb:a7:66:91:55:c1:d2:cd:2e: 38:76:be:46:47:d6:94:44:66:d4:30:4a:39:74:e5: 69:df:59:15:55:d3:d0:bf:8f:9b:38:4b:09:d0:ad: 3b:5e:b7:f9:18:1e:77:9f:51:03:4a:0f:23:70:41: 4f:08:56:1d:bc:cb:e5:f1:11:f6:ff:35:0f:1b:2d: 6f:be:0e:e7:9c:35:01:c0:6b:53:72:ca:8b:e8:67: ad:69:bb:b4:12:1f:98:82:6a:18:11:4d:83:c7:bd: 9d:bc:4b:89:9a:11:55:41:6c:71:df:88:78:c7:48: 55:90:31:26:c3:02:d9:16:06:b8:95:ec:47:b4:95: f8:21:6e:e6:6b:9f:31:f6:0f:cd:93:48:00:f1:bf: 83:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BF:91:F4:05:B8:D6:29:3C:91:9C:C7:7A:13:DE:AF:B0:0A:8B:E6 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bf:03:aa:80:16:be:8c:a5:60:2d:46:d7:e9:be:cb:9f:e5: 30:0e:12:dc:d3:88:7d:b7:15:87:74:44:fa:8b:1a:f0:52:ec: 25:30:ac:68:60:52:44:50:2a:9e:c5:91:43:7f:fa:28:7d:84: 5c:6f:f1:0c:8b:3f:a1:1e:3b:e1:78:f6:43:49:bb:39:85:ab: a6:66:05:6e:8d:23:48:b1:4e:9b:47:49:bd:3f:df:1c:1b:81: 28:b0:ee:16:87:37:91:7a:b5:76:03:54:35:bd:30:61:95:c6: 91:12:b8:6e:9d:7f:d9:4d:89:58:e2:1f:d8:f3:3f:13:d2:ce: fb:63:38:8d:cc:1e:3c:db:84:d7:20:c6:d1:e2:11:ad:3d:69: 7a:cb:45:57:3f:c4:66:6d:02:f4:82:42:7c:37:76:68:78:4c: 2b:c2:c8:24:e0:e4:3d:cf:c8:fa:d2:08:23:e1:ea:27:d9:d5: 7c:29:e9:b9:84:c7:4d:e5:cd:56:04:ee:53:6d:17:ec:e9:2d: 80:52:53:bc:2d:1d:56:d2:ca:3f:bf:da:4a:eb:06:c6:81:d6: 9b:cd:08:c4:bb:8a:8d:90:e0:dc:8a:c2:26:11:5c:04:f2:8a: 2c:2b:c9:82:9d:6e:5d:29:9b:da:62:2f:e1:bb:33:ce:c1:c9: a3:cf:29:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI70A3IfGTXUKfNot2jRErT99OF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA3MjExNTI1NTBaFw0yNTA3MjQyMDExNTBaMDMxMTAvBgNV BAMTKDMxQkY5MUY0MDVCOEQ2MjkzQzkxOUNDNzdBMTNERUFGQjAwQThCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8m0wmSTn2034iKzvvNHQAz9g AePfNsSGki0ciZRXPpuUii9DC2XasD+hFGwFDkgG9QW+X0Klnxmprq0qg+TcNZ3n M4HW1xp+haf3xnzsqRpFaj7PVxxTsduQgLnWtdZ+DG7hJLur9JI9RfDxEcunZpFV wdLNLjh2vkZH1pREZtQwSjl05WnfWRVV09C/j5s4SwnQrTtet/kYHnefUQNKDyNw QU8IVh28y+XxEfb/NQ8bLW++DuecNQHAa1NyyovoZ61pu7QSH5iCahgRTYPHvZ28 S4maEVVBbHHfiHjHSFWQMSbDAtkWBriV7Ee0lfghbuZrnzH2D82TSADxv4MhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMb+R9AW41ik8kZzHehPer7AKi+YwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG/A6qAFr6MpWAtRtfpvsuf5TAOEtzTiH23 FYd0RPqLGvBS7CUwrGhgUkRQKp7FkUN/+ih9hFxv8QyLP6EeO+F49kNJuzmFq6Zm BW6NI0ixTptHSb0/3xwbgSiw7haHN5F6tXYDVDW9MGGVxpESuG6df9lNiVjiH9jz PxPSzvtjOI3MHjzbhNcgxtHiEa09aXrLRVc/xGZtAvSCQnw3dmh4TCvCyCTg5D3P yPrSCCPh6ifZ1Xwp6bmEx03lzVYE7lNtF+zpLYBSU7wtHVbSyj+/2krrBsaB1pvN CMS7io2Q4NyKwiYRXATyiiwryYKdbl0pm9piL+G7M87ByaPPKY0= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:05 2025 by rpki-client