$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: dFqB4owQN/BZmiXGc0WPnj3I0/nETMnG4EetJvuvSsQ= Subject key identifier: A5:85:36:B9:76:3F:D6:D7:00:80:95:2D:1E:60:21:27:90:55:30:EA Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 31DDC89FB55E627AFF29A08A3786E784192A251B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: AE Signing time: Sat 19 Jul 2025 09:51:00 +0000 Manifest this update: Sat 19 Jul 2025 09:46:00 +0000 Manifest next update: Tue 22 Jul 2025 17:08:00 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: e93H/udX7J8usJdihZemu44x+rKKUJ6T2NtHxgV1Yzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:dd:c8:9f:b5:5e:62:7a:ff:29:a0:8a:37:86:e7:84:19:2a:25:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Jul 19 09:46:00 2025 GMT Not After : Jul 22 17:08:00 2025 GMT Subject: CN=A58536B9763FD6D70080952D1E602127905530EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:33:df:9c:e8:20:a4:73:a0:22:54:d3:cb: bf:e5:ac:e2:3c:a3:3e:eb:51:ed:d5:da:f8:d4:ce: b6:6b:f5:4c:38:63:dc:9d:c9:02:33:31:14:86:39: 51:62:27:3b:a2:c8:16:e6:b8:b2:01:3a:18:31:e6: ad:d7:2d:0b:58:ea:21:7d:19:5d:54:16:e1:44:e9: d2:c9:07:6b:69:4e:6c:96:9a:1b:d4:e6:00:a1:8f: 06:26:6d:03:ec:05:d3:50:39:29:01:56:25:83:fa: e4:dc:82:f2:27:1c:bc:1f:10:24:1a:82:97:cc:27: 81:d4:df:10:03:89:27:bc:aa:b3:9f:14:76:73:3c: 8f:48:21:56:c4:06:e8:48:00:d0:42:05:29:bc:33: 1c:07:88:b7:fa:96:44:2d:5b:b7:86:c6:14:80:ee: c9:82:85:69:44:bb:02:8d:a2:9e:83:14:cc:8b:12: 77:e2:94:b7:c9:c8:a1:2e:97:e5:3c:f2:62:78:ac: 72:40:1a:5c:c0:a4:11:13:40:32:d4:89:26:15:ce: 69:f3:b0:4f:28:45:08:71:34:c6:69:72:52:80:0c: e4:68:14:6f:98:f0:10:99:2c:07:3f:ee:0a:3c:e3: f5:53:2d:02:10:e8:d2:90:26:5d:04:15:d4:f8:0e: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:85:36:B9:76:3F:D6:D7:00:80:95:2D:1E:60:21:27:90:55:30:EA X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8a:e7:fc:00:a7:ee:fe:2c:09:d0:9a:24:54:25:17:50:7b: 4f:ee:a6:bc:4d:8f:bb:69:39:3d:10:0b:b8:68:ca:d7:29:68: 19:0d:0d:40:75:58:5c:a7:46:29:12:0a:b6:6a:8c:cb:c7:5d: ec:4f:dc:34:89:33:ee:e7:2c:a5:85:cd:5e:87:fd:93:08:9d: f6:1b:3d:22:01:e3:66:23:8a:22:50:fc:8c:42:57:cc:10:cf: dd:e8:1b:5b:74:db:8d:94:29:0b:88:cc:0a:d8:db:d8:be:82: 34:34:10:b5:57:1e:43:e1:49:ca:a0:19:e8:02:fc:b5:fb:07: cd:20:66:79:e9:cd:da:5f:d2:e8:ad:06:e2:23:26:42:ec:7f: ca:8e:6b:77:f3:af:e1:6e:04:f1:8f:11:42:79:b1:d6:c1:bc: 24:73:fa:ac:af:1a:ae:e3:b5:d1:73:5d:eb:f2:af:76:64:88: 3c:52:fe:b2:2d:cc:ef:f0:ec:49:16:32:38:22:eb:67:b5:61: c5:e4:8c:30:e3:52:c2:c9:c4:c3:42:a6:59:d1:88:cf:18:be: 7a:a8:a2:40:f1:97:cb:55:23:07:5b:2f:ef:b8:b6:c8:de:ce: 05:b4:ca:a4:b1:89:13:4b:ce:d7:60:b6:c9:97:45:e0:42:44: de:0d:8e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMd3In7VeYnr/KaCKN4bnhBkqJRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA3MTkwOTQ2MDBaFw0yNTA3MjIxNzA4MDBaMDMxMTAvBgNV BAMTKEE1ODUzNkI5NzYzRkQ2RDcwMDgwOTUyRDFFNjAyMTI3OTA1NTMwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4jPfnOggpHOgIlTTy7/lrOI8 oz7rUe3V2vjUzrZr9Uw4Y9ydyQIzMRSGOVFiJzuiyBbmuLIBOhgx5q3XLQtY6iF9 GV1UFuFE6dLJB2tpTmyWmhvU5gChjwYmbQPsBdNQOSkBViWD+uTcgvInHLwfECQa gpfMJ4HU3xADiSe8qrOfFHZzPI9IIVbEBuhIANBCBSm8MxwHiLf6lkQtW7eGxhSA 7smChWlEuwKNop6DFMyLEnfilLfJyKEul+U88mJ4rHJAGlzApBETQDLUiSYVzmnz sE8oRQhxNMZpclKADORoFG+Y8BCZLAc/7go84/VTLQIQ6NKQJl0EFdT4DovjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpYU2uXY/1tcAgJUtHmAhJ5BVMOowHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSK5/wAp+7+LAnQmiRUJRdQe0/uprxNj7tp OT0QC7hoytcpaBkNDUB1WFynRikSCrZqjMvHXexP3DSJM+7nLKWFzV6H/ZMInfYb PSIB42YjiiJQ/IxCV8wQz93oG1t0242UKQuIzArY29i+gjQ0ELVXHkPhScqgGegC /LX7B80gZnnpzdpf0uitBuIjJkLsf8qOa3fzr+FuBPGPEUJ5sdbBvCRz+qyvGq7j tdFzXevyr3ZkiDxS/rItzO/w7EkWMjgi62e1YcXkjDDjUsLJxMNCplnRiM8Yvnqo okDxl8tVIwdbL++4tsjezgW0yqSxiRNLztdgtsmXReBCRN4Njqg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:16 2025 by rpki-client