$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: b0Umx3BzZwV7dsr4lTHLzd7GPvMtEmIL7buImwbkjX0= Subject key identifier: BA:CC:F8:19:5A:29:45:83:AC:D4:DA:DC:81:57:B6:DD:40:54:8C:5E Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 1523308C39F9856D0F60A9E1B7B37341C418B6AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04F1 Signing time: Tue 22 Jul 2025 02:30:48 +0000 Manifest this update: Tue 22 Jul 2025 02:25:48 +0000 Manifest next update: Fri 25 Jul 2025 05:25:48 +0000 Files and hashes: 1: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 2: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 4: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 5: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 6: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 7: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: wvFbuA7wMp+0tfv8HJNOGjVcPWbH7bd4W/I3KydKmmA=) 8: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 05:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:23:30:8c:39:f9:85:6d:0f:60:a9:e1:b7:b3:73:41:c4:18:b6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jul 22 02:25:48 2025 GMT Not After : Jul 25 05:25:48 2025 GMT Subject: CN=BACCF8195A294583ACD4DADC8157B6DD40548C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:c1:ed:3e:39:c6:43:74:c2:df:2e:22:d9: ea:19:18:40:5c:89:8c:4e:5a:ef:e4:b8:a0:76:c7: 5c:1d:5f:d5:61:87:06:c6:34:3d:7a:28:6a:04:1f: 52:6e:83:c4:b2:4e:fb:c7:c7:5d:60:fb:a0:ca:87: 93:14:01:34:f8:dc:17:7b:ba:69:ec:ee:47:64:0c: f8:0c:de:b6:8b:00:37:c6:ae:e5:af:dd:08:47:10: e3:c8:f8:e2:62:36:ab:0f:e3:09:b4:b6:8b:8c:d7: 28:d2:8d:79:5a:85:04:62:5b:75:11:3a:08:a8:3f: 65:f2:12:0f:23:b5:62:dd:5b:11:80:55:f6:29:25: 63:b0:24:a4:30:1a:14:20:a7:79:e2:63:70:48:41: 9f:fb:1c:6b:f5:07:b9:d8:17:a5:a1:4f:c2:a0:25: a5:b9:8f:f2:cc:57:38:ce:27:c6:c2:cb:b5:bc:5d: 31:db:2b:0e:b3:c0:10:e0:86:82:e0:af:cf:17:77: a4:0b:b4:8c:c3:31:a1:b3:a6:03:11:63:ff:c5:8c: 0f:20:be:02:30:04:7d:9c:0a:41:a7:27:27:e4:65: 50:a7:17:3c:91:8c:0f:bc:06:36:de:91:41:5a:2e: df:a1:08:47:8e:6a:12:39:4a:d1:1c:b1:33:bf:7b: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:F8:19:5A:29:45:83:AC:D4:DA:DC:81:57:B6:DD:40:54:8C:5E X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:93:5f:4b:74:69:b5:7c:17:23:79:e6:72:25:47:73:77:5d: df:66:7b:c1:86:24:10:05:77:0f:1e:79:39:f1:c2:e2:8d:a4: e1:93:c7:97:f6:41:7c:9d:81:8a:ce:f7:71:f9:ab:39:37:eb: 85:89:58:a3:f4:11:f2:c7:a0:91:6b:3c:bc:a2:bb:76:15:64: c4:71:90:d5:47:07:5a:7c:ff:6f:bf:a1:32:65:69:fe:19:cd: 25:58:af:54:0e:81:f0:9f:72:a8:2d:13:fe:e2:f0:98:c5:30: 58:4e:c5:5f:86:76:ad:f4:27:d8:9b:67:01:32:6c:21:f3:84: f6:72:f2:a5:30:53:19:04:cc:6e:15:b5:43:19:1e:ad:56:9c: c8:ce:b2:43:eb:8f:32:cd:ca:d1:71:4f:5c:d5:c9:84:17:43: a4:3d:cf:7a:23:a0:49:7b:1e:38:df:fc:08:43:d7:25:24:2e: 3e:4b:5f:42:db:c8:b7:87:91:b8:85:b0:8a:59:c1:05:21:7f: 67:84:f6:bf:50:f7:94:00:ed:c9:d0:5f:8b:2c:ed:84:0a:03: 3b:80:7d:ed:96:e1:34:f6:6f:42:dd:00:f6:d4:b4:6f:37:fd: e3:cb:ee:ef:1d:7d:cc:3d:1c:cc:de:b0:44:0d:e6:08:af:2c: 30:bd:39:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSMwjDn5hW0PYKnht7NzQcQYtqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA3MjIwMjI1NDhaFw0yNTA3MjUwNTI1NDhaMDMxMTAvBgNV BAMTKEJBQ0NGODE5NUEyOTQ1ODNBQ0Q0REFEQzgxNTdCNkRENDA1NDhDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65MHtPjnGQ3TC3y4i2eoZGEBc iYxOWu/kuKB2x1wdX9VhhwbGND16KGoEH1Jug8SyTvvHx11g+6DKh5MUATT43Bd7 umns7kdkDPgM3raLADfGruWv3QhHEOPI+OJiNqsP4wm0touM1yjSjXlahQRiW3UR OgioP2XyEg8jtWLdWxGAVfYpJWOwJKQwGhQgp3niY3BIQZ/7HGv1B7nYF6WhT8Kg JaW5j/LMVzjOJ8bCy7W8XTHbKw6zwBDghoLgr88Xd6QLtIzDMaGzpgMRY//FjA8g vgIwBH2cCkGnJyfkZVCnFzyRjA+8BjbekUFaLt+hCEeOahI5StEcsTO/e2nLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUusz4GVopRYOs1NrcgVe23UBUjF4wHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqTX0t0abV8FyN55nIlR3N3Xd9me8GGJBAF dw8eeTnxwuKNpOGTx5f2QXydgYrO93H5qzk364WJWKP0EfLHoJFrPLyiu3YVZMRx kNVHB1p8/2+/oTJlaf4ZzSVYr1QOgfCfcqgtE/7i8JjFMFhOxV+Gdq30J9ibZwEy bCHzhPZy8qUwUxkEzG4VtUMZHq1WnMjOskPrjzLNytFxT1zVyYQXQ6Q9z3ojoEl7 Hjjf/AhD1yUkLj5LX0LbyLeHkbiFsIpZwQUhf2eE9r9Q95QA7cnQX4ss7YQKAzuA fe2W4TT2b0LdAPbUtG83/ePL7u8dfcw9HMzesEQN5givLDC9Ob8= -----END CERTIFICATE-----Generated at Wed Jul 23 02:22:16 2025 by rpki-client