$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: w8VGZ8jhR81xfAQHq/eisAR8yLAOgVc+bqwd25O+gz0= Subject key identifier: 0D:09:AF:DD:06:75:F7:18:77:38:49:D8:BD:3C:6F:E3:64:BD:81:7F Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 145C81530AD03BA88AE1350D7827B143BB4092D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 04EF Signing time: Mon 21 Jul 2025 00:41:19 +0000 Manifest this update: Mon 21 Jul 2025 00:36:19 +0000 Manifest next update: Thu 24 Jul 2025 11:43:19 +0000 Files and hashes: 1: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 2: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) 3: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 4: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: jngSu6XXe8BrOpl+B3gWrNoQe+GguS6YSlgo9ca5gfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5c:81:53:0a:d0:3b:a8:8a:e1:35:0d:78:27:b1:43:bb:40:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Jul 21 00:36:19 2025 GMT Not After : Jul 24 11:43:19 2025 GMT Subject: CN=0D09AFDD0675F718773849D8BD3C6FE364BD817F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:a1:c0:e3:93:03:37:f1:e8:ec:91:7b:28: 50:32:61:e4:41:7a:67:19:6c:cd:9f:bd:39:de:e8: 6d:78:29:96:89:15:c1:31:e1:7d:62:64:20:36:58: f1:92:fb:02:95:62:9c:46:b0:ae:a9:da:18:4d:5e: 1a:93:dc:b2:fa:89:77:43:35:ae:0d:4e:ba:3e:37: 4d:ff:9e:5e:54:bf:d3:56:ed:ee:b9:7f:85:bf:50: 64:5c:74:44:37:a4:36:c1:a7:e7:3e:0b:5e:ec:ed: ac:82:6f:f7:51:03:80:8c:e7:a4:98:68:44:fe:78: a3:08:2b:9a:1b:ec:d7:92:9e:f5:c6:85:8b:49:47: 76:c7:c8:64:70:bd:d0:b1:63:6e:b1:eb:28:a3:17: 87:ba:31:63:93:86:34:ac:4c:99:68:88:49:50:87: a3:88:2d:95:12:00:eb:ca:5a:bd:6f:43:bc:69:47: 4b:2e:fb:2c:bc:da:c3:94:20:6b:f9:cf:8e:b7:a9: bf:05:c1:34:38:33:82:d5:d3:b5:fd:f4:72:f0:8b: 85:41:a9:d0:c5:f8:2e:0a:ce:cf:69:4c:00:9c:8e: 65:38:ad:05:a7:f6:05:ac:09:d5:f0:7e:51:9b:4f: 72:05:80:bb:17:ae:c6:4f:b9:17:5c:4b:b4:be:e2: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:09:AF:DD:06:75:F7:18:77:38:49:D8:BD:3C:6F:E3:64:BD:81:7F X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e1:13:6b:3b:b7:c4:77:15:27:68:d2:1d:1b:a4:18:aa:61: 64:fa:f4:a3:66:ad:22:e7:97:cd:82:36:99:d8:ba:cf:b2:99: 26:d4:34:a3:8d:4e:f6:97:ba:6c:06:03:d5:03:39:14:14:4d: 10:21:e9:05:ba:57:1d:85:3c:0d:52:21:ad:94:b1:a0:9e:06: cd:d3:f6:2f:d2:4c:4b:63:ed:56:00:07:39:24:d9:81:1b:ef: 10:7f:92:5a:f5:f6:ef:34:8e:15:c1:b2:55:2d:bc:a7:1b:6d: 41:6b:27:19:1a:50:24:83:4d:ed:08:b7:ed:0c:a8:eb:57:36: 56:30:f8:ad:d7:00:c8:f4:f1:c8:60:05:2f:12:e2:49:cd:d0: 93:6d:11:d2:c9:b7:6d:ee:fc:18:35:0f:c6:d2:12:a4:95:5f: da:83:96:f0:53:63:2b:31:8a:60:07:b1:70:96:27:55:56:91: 00:cc:18:f5:55:da:67:d9:d3:50:47:eb:f7:9d:73:c0:2f:d1: a7:6e:d8:88:db:a7:a7:ee:7e:55:49:d4:b2:24:1e:00:b3:5e: b9:01:3e:53:10:75:a7:bd:83:28:59:a4:00:d4:b0:ab:62:84: 05:5b:92:5a:f7:e6:ef:2f:e6:82:1c:2b:fc:3e:66:11:06:7a: cd:e6:51:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFyBUwrQO6iK4TUNeCexQ7tAktAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA3MjEwMDM2MTlaFw0yNTA3MjQxMTQzMTlaMDMxMTAvBgNV BAMTKDBEMDlBRkREMDY3NUY3MTg3NzM4NDlEOEJEM0M2RkUzNjRCRDgxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgaHA45MDN/Ho7JF7KFAyYeRB emcZbM2fvTne6G14KZaJFcEx4X1iZCA2WPGS+wKVYpxGsK6p2hhNXhqT3LL6iXdD Na4NTro+N03/nl5Uv9NW7e65f4W/UGRcdEQ3pDbBp+c+C17s7ayCb/dRA4CM56SY aET+eKMIK5ob7NeSnvXGhYtJR3bHyGRwvdCxY26x6yijF4e6MWOThjSsTJloiElQ h6OILZUSAOvKWr1vQ7xpR0su+yy82sOUIGv5z463qb8FwTQ4M4LV07X99HLwi4VB qdDF+C4Kzs9pTACcjmU4rQWn9gWsCdXwflGbT3IFgLsXrsZPuRdcS7S+4o1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQmv3QZ19xh3OEnYvTxv42S9gX8wHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbhE2s7t8R3FSdo0h0bpBiqYWT69KNmrSLn l82CNpnYus+ymSbUNKONTvaXumwGA9UDORQUTRAh6QW6Vx2FPA1SIa2UsaCeBs3T 9i/STEtj7VYABzkk2YEb7xB/klr19u80jhXBslUtvKcbbUFrJxkaUCSDTe0It+0M qOtXNlYw+K3XAMj08chgBS8S4knN0JNtEdLJt23u/Bg1D8bSEqSVX9qDlvBTYysx imAHsXCWJ1VWkQDMGPVV2mfZ01BH6/edc8Av0adu2Ijbp6fuflVJ1LIkHgCzXrkB PlMQdae9gyhZpADUsKtihAVbklr35u8v5oIcK/w+ZhEGes3mUcE= -----END CERTIFICATE-----Generated at Mon Jul 21 10:29:43 2025 by rpki-client