$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: ZHdmi1in150iSmg76aIxMpl+f6erG77A2CCyxMopaKc= Subject key identifier: 56:43:B1:77:5F:A3:BF:4E:86:9A:82:7A:DE:F0:A5:74:F4:15:FC:74 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 6F0DDB527DEC0E77F5DB6215B5A18F7B1863DE30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 41 Signing time: Fri 18 Jul 2025 22:51:52 +0000 Manifest this update: Fri 18 Jul 2025 22:46:52 +0000 Manifest next update: Tue 22 Jul 2025 00:56:52 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: W53F/X7ata+lBTz94QfuIKcNtZEakGc2iPGhlagJ2X8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 00:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0d:db:52:7d:ec:0e:77:f5:db:62:15:b5:a1:8f:7b:18:63:de:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Jul 18 22:46:52 2025 GMT Not After : Jul 22 00:56:52 2025 GMT Subject: CN=5643B1775FA3BF4E869A827ADEF0A574F415FC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:6a:38:70:fa:4f:64:8a:91:63:eb:82:32: d5:8f:f3:66:29:da:f5:3f:bd:db:80:ce:e8:0f:80: 19:f5:d3:c8:55:3e:4f:5f:d0:ca:97:46:47:ac:f1: 94:31:fb:ff:ee:89:7e:bf:22:c6:dc:a6:c1:9b:2d: dd:c6:40:42:6e:3e:3a:9f:68:a0:57:d4:c6:78:98: 9c:22:88:de:3f:a3:af:ba:a9:cf:9e:fc:1b:29:f1: d1:00:f6:fc:eb:92:21:30:87:4e:93:1c:c4:0e:5d: 54:6d:2f:aa:d6:a2:62:6a:fc:4b:cb:0e:2c:b6:3c: 48:e9:41:43:a5:3b:12:97:7c:f3:22:af:0d:82:3c: 37:cc:8b:3f:63:e5:10:2e:de:4a:d8:7d:db:82:ce: 03:46:33:10:5b:14:53:02:ec:fa:99:cf:33:95:e0: a9:d6:2c:f5:14:5a:c7:92:7e:1d:1a:99:bb:36:9b: 77:d6:ae:72:b0:03:8e:f2:de:bd:2c:18:80:87:2f: 7f:e4:77:31:1d:08:42:cb:5a:6b:43:68:9e:b4:c3: d4:54:26:b3:80:bb:d9:96:b2:b0:d9:7e:23:f9:f4: cd:88:ee:06:f1:d4:e7:ba:92:c4:d4:22:96:87:cd: 86:55:e6:0b:f4:a9:d4:96:89:41:da:db:91:f0:5e: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:B1:77:5F:A3:BF:4E:86:9A:82:7A:DE:F0:A5:74:F4:15:FC:74 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:99:ea:b3:88:b4:2c:5d:91:cd:3c:f3:1c:36:21:12:55:a5: db:bc:67:c2:de:2d:eb:a4:31:d4:f0:e5:0a:10:a8:6f:30:35: 6a:dd:25:5b:d8:99:d2:d0:bb:6e:0a:eb:5a:31:77:a2:0a:7e: 13:3d:97:c6:5c:cb:ee:cb:ec:ea:c5:b2:30:1a:27:8d:36:41: f9:df:53:2c:81:cb:d8:59:e2:9b:7b:03:f9:9c:e9:f7:23:3b: 20:8c:e3:aa:e4:77:a4:4d:e9:ac:26:e4:cb:c8:be:69:ae:0c: bd:fd:b8:f1:48:70:2d:50:d2:df:6c:d6:41:89:92:ea:97:58: b9:bf:c7:43:f7:f0:ca:00:02:a4:f6:ff:95:e2:ea:64:4b:6b: 92:42:a5:8a:4a:03:9a:06:6f:18:c1:34:f7:7e:bb:9d:aa:26: cc:03:55:4c:d5:55:a2:f6:1d:7a:4a:94:ab:3d:49:df:71:1f: 2f:b8:98:76:98:36:a9:06:5d:a6:c4:87:73:f2:77:6d:4f:fd: 85:3b:c3:dd:f4:af:e6:90:2f:e9:7f:70:57:24:b4:27:93:1a: da:24:b1:d4:df:ea:df:a8:f0:e5:b1:93:f5:d4:40:36:1a:14: b1:d0:bb:dc:af:e4:36:c3:12:6e:2d:27:dc:bf:1b:b6:fb:88: 04:f1:42:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbw3bUn3sDnf122IVtaGPexhj3jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTA3MTgyMjQ2NTJaFw0yNTA3MjIwMDU2NTJaMDMxMTAvBgNV BAMTKDU2NDNCMTc3NUZBM0JGNEU4NjlBODI3QURFRjBBNTc0RjQxNUZDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3L2o4cPpPZIqRY+uCMtWP82Yp 2vU/vduAzugPgBn108hVPk9f0MqXRkes8ZQx+//uiX6/IsbcpsGbLd3GQEJuPjqf aKBX1MZ4mJwiiN4/o6+6qc+e/Bsp8dEA9vzrkiEwh06THMQOXVRtL6rWomJq/EvL Diy2PEjpQUOlOxKXfPMirw2CPDfMiz9j5RAu3krYfduCzgNGMxBbFFMC7PqZzzOV 4KnWLPUUWseSfh0ambs2m3fWrnKwA47y3r0sGICHL3/kdzEdCELLWmtDaJ60w9RU JrOAu9mWsrDZfiP59M2I7gbx1Oe6ksTUIpaHzYZV5gv0qdSWiUHa25HwXrgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVkOxd1+jv06GmoJ63vCldPQV/HQwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Z6rOItCxdkc088xw2IRJVpdu8Z8LeLeuk MdTw5QoQqG8wNWrdJVvYmdLQu24K61oxd6IKfhM9l8Zcy+7L7OrFsjAaJ402Qfnf UyyBy9hZ4pt7A/mc6fcjOyCM46rkd6RN6awm5MvIvmmuDL39uPFIcC1Q0t9s1kGJ kuqXWLm/x0P38MoAAqT2/5Xi6mRLa5JCpYpKA5oGbxjBNPd+u52qJswDVUzVVaL2 HXpKlKs9Sd9xHy+4mHaYNqkGXabEh3Pyd21P/YU7w930r+aQL+l/cFcktCeTGtok sdTf6t+o8OWxk/XUQDYaFLHQu9yv5DbDEm4tJ9y/G7b7iATxQsI= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:28 2025 by rpki-client