$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: 6cxfFlCgyJF428i7luoSVgWVxvgs4/+0z6rJvxhQ7As= Subject key identifier: DF:F4:3A:2C:11:0E:F1:A4:0A:A1:6D:DE:EA:F9:6A:94:02:12:62:76 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 5F53BDDB397D67320E21E4277A61771C76B9CAE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04F2 Signing time: Thu 24 Jul 2025 05:30:48 +0000 Manifest this update: Thu 24 Jul 2025 05:25:48 +0000 Manifest next update: Sun 27 Jul 2025 06:59:48 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 2: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 5: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: wAbZ28BhxZSCttNAjouxhwErtTrMhTFBAkcwOGLqqC0=) 6: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 7: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 8: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 9: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 06:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:53:bd:db:39:7d:67:32:0e:21:e4:27:7a:61:77:1c:76:b9:ca:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jul 24 05:25:48 2025 GMT Not After : Jul 27 06:59:48 2025 GMT Subject: CN=DFF43A2C110EF1A40AA16DDEEAF96A9402126276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:3b:3f:09:93:4d:90:57:1c:f4:9b:c0:c4: 15:c8:bb:7b:e3:66:51:ef:47:42:c0:d6:00:b7:7f: 26:91:fb:68:be:99:0e:d1:ac:bb:90:e8:5b:33:29: c4:46:d9:f3:c0:cc:ca:36:f4:66:e2:38:7d:df:5d: 78:f2:f5:06:2e:42:8f:bf:60:ed:e6:d9:d7:be:c4: 2f:31:ba:0a:cb:00:8d:ae:45:3c:fc:57:ad:73:30: 9c:6b:bf:b8:72:84:48:f2:2c:d9:75:dc:75:cd:0e: e5:ea:c4:ef:cd:a2:fd:c2:85:7b:2d:97:5a:40:61: dd:2e:4d:11:f7:c6:ba:fd:24:7f:8b:bf:12:90:92: 37:cb:88:03:c1:c9:9e:dd:99:38:9d:35:77:89:83: b8:d8:fb:b2:c1:68:f1:bb:14:6e:ce:ee:29:7c:d3: de:f5:8a:03:4e:13:77:4f:3b:d6:2c:6f:c8:d0:88: 2b:97:80:c7:fd:6d:1e:f0:02:73:4b:8a:8d:1e:b7: f2:d9:c5:75:bd:a5:d4:63:7d:14:38:7f:31:5f:57: b5:80:cf:04:5c:d3:82:81:17:ba:48:c8:b4:3a:93: d0:56:80:e8:56:8a:77:5e:90:a0:28:01:52:06:9c: 15:40:af:e6:a7:2e:ac:4a:41:3b:a8:65:62:8f:4d: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:3A:2C:11:0E:F1:A4:0A:A1:6D:DE:EA:F9:6A:94:02:12:62:76 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9d:92:4f:d0:ba:a4:bc:0d:36:a7:67:6a:8c:ef:2a:ac:c2: 09:59:d3:76:3b:7e:34:ae:a2:b5:8f:d7:2d:62:28:ea:98:5f: 0c:f7:08:f2:01:20:ed:d7:ac:da:d7:a3:99:a9:6d:40:7c:91: e9:3f:57:a7:54:ea:9b:86:c2:a2:ab:85:6e:de:79:47:f4:9e: 78:a7:9c:b4:9c:c9:7f:ed:0c:22:2d:39:df:e4:90:8d:3b:58: 8b:9f:14:f6:a8:a6:ff:55:9f:04:61:52:e0:f5:fc:3a:f1:ca: a4:8c:84:58:c3:6a:86:20:4f:eb:0f:7d:b1:f0:26:51:bb:d7: e1:ab:51:43:90:d7:6d:ef:81:86:9b:64:99:1d:36:d9:cd:00: 4b:ff:9b:b8:44:72:1e:0d:97:bc:82:80:bf:a4:e0:ba:0b:6f: 8f:3f:35:2a:4e:01:4a:47:76:39:d1:d4:44:6a:39:7c:e2:3e: 90:b7:2a:a4:8a:41:f2:07:33:8d:b9:a7:d6:4d:23:bd:5b:70: d8:ab:5e:36:8f:ff:ba:a9:89:5b:ab:f6:25:5f:08:c2:ce:57: 29:98:f6:21:ab:19:19:20:12:40:66:3b:34:d3:d6:44:fb:c2: 41:25:72:51:de:ed:77:2d:e8:b9:e4:4b:ca:fc:df:fc:e5:55: 47:dd:d0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1O92zl9ZzIOIeQnemF3HHa5yugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA3MjQwNTI1NDhaFw0yNTA3MjcwNjU5NDhaMDMxMTAvBgNV BAMTKERGRjQzQTJDMTEwRUYxQTQwQUExNkRERUVBRjk2QTk0MDIxMjYyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoDs/CZNNkFcc9JvAxBXIu3vj ZlHvR0LA1gC3fyaR+2i+mQ7RrLuQ6FszKcRG2fPAzMo29GbiOH3fXXjy9QYuQo+/ YO3m2de+xC8xugrLAI2uRTz8V61zMJxrv7hyhEjyLNl13HXNDuXqxO/Nov3ChXst l1pAYd0uTRH3xrr9JH+LvxKQkjfLiAPByZ7dmTidNXeJg7jY+7LBaPG7FG7O7il8 0971igNOE3dPO9Ysb8jQiCuXgMf9bR7wAnNLio0et/LZxXW9pdRjfRQ4fzFfV7WA zwRc04KBF7pIyLQ6k9BWgOhWindekKAoAVIGnBVAr+anLqxKQTuoZWKPTQszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/Q6LBEO8aQKoW3e6vlqlAISYnYwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSdkk/QuqS8DTanZ2qM7yqswglZ03Y7fjSu orWP1y1iKOqYXwz3CPIBIO3XrNrXo5mpbUB8kek/V6dU6puGwqKrhW7eeUf0nnin nLScyX/tDCItOd/kkI07WIufFPaopv9VnwRhUuD1/DrxyqSMhFjDaoYgT+sPfbHw JlG71+GrUUOQ123vgYabZJkdNtnNAEv/m7hEch4Nl7yCgL+k4LoLb48/NSpOAUpH djnR1ERqOXziPpC3KqSKQfIHM425p9ZNI71bcNirXjaP/7qpiVur9iVfCMLOVymY 9iGrGRkgEkBmOzTT1kT7wkElclHe7Xct6LnkS8r83/zlVUfd0Mg= -----END CERTIFICATE-----Generated at Fri Jul 25 06:25:03 2025 by rpki-client