$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: gClkfcmi+Us+weFvo+yd5N5/hedWFv/uzwR7OWb/OR8= Subject key identifier: 76:75:A5:49:F0:57:B5:6E:1A:77:70:E2:F3:4A:50:08:FA:60:18:9F Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 7A8B692660B2AF215676D8E35712CB48C3D1DE1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 04F2 Signing time: Sat 19 Jul 2025 21:52:00 +0000 Manifest this update: Sat 19 Jul 2025 21:47:00 +0000 Manifest next update: Wed 23 Jul 2025 04:38:00 +0000 Files and hashes: 1: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=) 2: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=) 3: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=) 4: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M=) 5: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=) 6: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=) 7: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=) 8: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=) 9: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: WnLdbEGeNp3N4uX4qVnAHeUeIV+4f6T9KGdT/0BLces=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8b:69:26:60:b2:af:21:56:76:d8:e3:57:12:cb:48:c3:d1:de:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jul 19 21:47:00 2025 GMT Not After : Jul 23 04:38:00 2025 GMT Subject: CN=7675A549F057B56E1A7770E2F34A5008FA60189F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:89:22:3f:04:4b:ed:50:37:1d:75:61:67: 4c:ab:a9:46:9c:bb:24:d9:2b:91:5b:73:84:46:6d: 73:5d:cf:24:6e:37:64:2b:26:ab:c9:53:a3:1b:3e: 9b:9d:1d:c8:fe:f1:e9:fc:00:9d:4b:ef:47:bc:32: 59:0a:59:14:b9:e8:6c:fd:19:ee:8d:fc:77:dd:87: fd:29:c9:ae:b2:61:05:69:e1:e7:b6:a6:39:a2:3b: 7b:90:41:e7:be:da:23:a4:9e:f4:c8:dd:7e:c9:55: 44:9a:a0:f8:5d:4e:ab:a6:ce:c0:d4:5a:f7:82:63: e6:cc:73:de:40:e8:9f:5d:de:a7:27:a7:77:a5:6f: 98:1c:d9:00:23:56:be:95:b6:4f:b4:fb:78:d5:a6: da:0a:d3:a9:37:b6:cd:9e:41:23:83:75:06:91:db: fe:c3:c0:bc:4c:52:d9:d4:f4:3c:b7:82:17:8b:03: fa:2c:a8:b9:84:b9:8b:1d:a4:fb:1c:61:9e:c8:27: d6:92:42:cb:c5:e3:13:ee:11:aa:54:2b:74:b9:c5: 02:7e:3d:10:48:9e:89:d5:8e:84:e4:69:42:51:0b: 6a:d3:6f:f2:71:43:79:d0:81:70:4e:9f:ac:7e:7b: c3:ef:fd:27:b0:cb:36:02:f3:ae:21:2c:cd:60:08: 4f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:A5:49:F0:57:B5:6E:1A:77:70:E2:F3:4A:50:08:FA:60:18:9F X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7c:07:66:2e:ba:be:6c:31:27:46:4d:f9:93:e3:57:a7:59: 3b:0a:d2:b3:b7:6e:a3:48:92:e7:f7:1d:76:de:5d:ee:8c:41: 08:b9:d0:d6:3f:28:ed:f8:66:ea:4d:58:54:58:91:34:b1:3f: 7f:ae:dc:ba:47:57:f0:8b:b5:7c:6f:84:b6:ed:8f:dd:fb:81: 41:02:c9:d0:f1:8a:63:6f:ca:d7:bd:fe:e5:21:11:4e:f4:c0: 94:7e:00:48:e8:15:93:21:ba:38:0b:95:17:50:70:36:0c:f6: 61:0b:6a:27:0b:62:ac:be:2e:4b:21:82:0d:40:bc:04:71:1d: 07:d4:67:fd:73:44:6d:f5:fd:5a:b8:32:26:99:3a:ef:f6:1c: c5:0f:3d:90:46:35:24:b9:eb:de:ae:d9:42:95:3d:5b:e2:b5: ab:54:0e:e6:66:62:57:36:dc:a7:74:87:ea:c4:f2:65:a1:85: 3b:e0:f2:2a:d9:d7:5c:50:6e:ab:cc:fb:8b:99:33:fb:b0:d8: 90:ad:2a:c6:fb:23:c8:48:9f:17:4c:80:c3:46:06:8f:95:08: 2c:74:a2:ea:1f:8a:e1:3a:51:17:cd:e5:34:78:b0:06:94:d6: 81:c4:a2:df:b1:10:4c:18:dd:d1:74:8e:bd:da:c7:8c:26:fb: 49:48:60:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeotpJmCyryFWdtjjVxLLSMPR3h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA3MTkyMTQ3MDBaFw0yNTA3MjMwNDM4MDBaMDMxMTAvBgNV BAMTKDc2NzVBNTQ5RjA1N0I1NkUxQTc3NzBFMkYzNEE1MDA4RkE2MDE4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoC4kiPwRL7VA3HXVhZ0yrqUac uyTZK5Fbc4RGbXNdzyRuN2QrJqvJU6MbPpudHcj+8en8AJ1L70e8MlkKWRS56Gz9 Ge6N/Hfdh/0pya6yYQVp4ee2pjmiO3uQQee+2iOknvTI3X7JVUSaoPhdTqumzsDU WveCY+bMc95A6J9d3qcnp3elb5gc2QAjVr6Vtk+0+3jVptoK06k3ts2eQSODdQaR 2/7DwLxMUtnU9Dy3gheLA/osqLmEuYsdpPscYZ7IJ9aSQsvF4xPuEapUK3S5xQJ+ PRBInonVjoTkaUJRC2rTb/JxQ3nQgXBOn6x+e8Pv/SewyzYC864hLM1gCE+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdnWlSfBXtW4ad3Di80pQCPpgGJ8wHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADF8B2Yuur5sMSdGTfmT41enWTsK0rO3bqNI kuf3HXbeXe6MQQi50NY/KO34ZupNWFRYkTSxP3+u3LpHV/CLtXxvhLbtj937gUEC ydDximNvyte9/uUhEU70wJR+AEjoFZMhujgLlRdQcDYM9mELaicLYqy+Lkshgg1A vARxHQfUZ/1zRG31/Vq4MiaZOu/2HMUPPZBGNSS5696u2UKVPVvitatUDuZmYlc2 3Kd0h+rE8mWhhTvg8irZ11xQbqvM+4uZM/uw2JCtKsb7I8hInxdMgMNGBo+VCCx0 ouofiuE6URfN5TR4sAaU1oHEot+xEEwY3dF0jr3ax4wm+0lIYAk= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:13 2025 by rpki-client