$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: O9zh+Rqw4vWHH5u3muxEIHR8vktUKroMVCwOc+gcxbI= Subject key identifier: E5:4B:BC:1E:01:7B:BC:3E:60:45:C6:BF:BA:70:CB:9D:E6:31:42:11 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 606D92FE41B6239A902BDC3A76A36898D75E38D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02EA Signing time: Sat 19 Jul 2025 09:31:51 +0000 Manifest this update: Sat 19 Jul 2025 09:26:51 +0000 Manifest next update: Tue 22 Jul 2025 18:33:51 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: EgUg9CUrUp6HmfAUp0RUXOFw3qfGR/gC1LmHgPpYGI8=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 3: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 4: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6d:92:fe:41:b6:23:9a:90:2b:dc:3a:76:a3:68:98:d7:5e:38:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Jul 19 09:26:51 2025 GMT Not After : Jul 22 18:33:51 2025 GMT Subject: CN=E54BBC1E017BBC3E6045C6BFBA70CB9DE6314211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:ab:bd:66:9f:ee:22:94:32:c0:3d:d2:46: 92:24:47:ba:4a:28:60:09:88:91:9b:a4:90:a4:55: e1:a7:52:8f:7c:5e:f8:b3:56:f2:13:06:de:16:2b: 22:e2:08:ee:08:96:8b:14:5b:97:bd:4f:03:22:82: 62:bd:03:09:d5:47:3a:02:cd:fb:e6:df:4a:e2:de: 1d:c9:5b:ff:39:18:3a:60:58:de:68:6e:b3:2a:27: d2:16:65:d8:5c:10:89:f2:36:26:d5:4d:21:b0:77: 8c:ef:24:14:82:b7:d9:4d:03:df:65:da:f4:0a:dd: eb:d7:7c:3a:07:f3:59:7d:d9:f0:f3:85:5f:4a:39: 48:64:d6:d2:e1:d3:71:bf:a7:35:98:99:b5:6d:c9: a5:7d:64:1c:93:4c:f0:fc:3d:0e:ae:ff:61:68:7a: 05:17:4c:71:34:e2:bf:74:54:86:4f:71:ff:e5:5f: ab:c1:fa:3a:57:f1:d7:b7:f0:02:74:ad:ab:35:49: 49:f9:5b:c9:82:01:b2:b9:dc:18:07:35:a9:67:27: d7:5d:05:30:4c:eb:9a:d3:a3:f7:01:89:00:ca:80: a9:43:1f:42:55:f1:f4:3d:65:80:f7:0c:bf:99:5c: 4c:44:dc:5b:9a:55:20:fc:86:24:c1:48:08:1e:68: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:BC:1E:01:7B:BC:3E:60:45:C6:BF:BA:70:CB:9D:E6:31:42:11 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f9:f3:55:49:35:21:66:5b:1b:2a:7a:b1:57:b8:da:2f:a4: 52:19:64:33:09:55:94:51:fe:2d:da:4f:be:e4:cf:90:21:e2: 83:7f:e8:0c:72:df:7a:c2:5e:a1:6c:9d:27:70:ea:74:54:2e: 1a:32:70:b4:e0:08:5a:58:17:bc:ef:1c:bc:c1:a5:45:d0:ea: c3:30:64:3a:16:88:d2:07:36:ca:a8:87:b2:4c:6c:ae:53:ed: 59:14:98:43:5d:50:58:96:da:4e:0f:82:3d:b9:6b:40:7f:1a: 76:c1:63:47:e6:6a:88:d5:16:bd:b9:e8:3a:a7:c5:3a:94:a3: 30:f0:b1:bb:e3:95:46:93:05:3d:d4:2e:ea:af:69:67:30:b4: 4f:2f:a2:3f:19:94:cf:34:97:ee:47:19:0c:37:0b:89:fa:e9: 15:be:b0:b2:df:3c:7b:44:9c:01:08:26:e8:1c:75:fc:2c:71: ee:b1:c5:fd:e2:be:e3:dc:ab:47:71:bb:f6:e6:58:50:18:38: 4e:a0:13:c4:2a:47:2f:60:f5:18:96:02:a0:78:ad:24:8c:63: c4:7c:85:39:07:f9:11:f0:15:8b:46:1c:1c:53:c5:9b:6e:75: 6a:cd:3c:cf:8f:a1:3c:35:48:44:5c:eb:dc:56:23:c5:af:4b: be:53:31:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG2S/kG2I5qQK9w6dqNomNdeONIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA3MTkwOTI2NTFaFw0yNTA3MjIxODMzNTFaMDMxMTAvBgNV BAMTKEU1NEJCQzFFMDE3QkJDM0U2MDQ1QzZCRkJBNzBDQjlERTYzMTQyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bKu9Zp/uIpQywD3SRpIkR7pK KGAJiJGbpJCkVeGnUo98XvizVvITBt4WKyLiCO4IlosUW5e9TwMigmK9AwnVRzoC zfvm30ri3h3JW/85GDpgWN5obrMqJ9IWZdhcEInyNibVTSGwd4zvJBSCt9lNA99l 2vQK3evXfDoH81l92fDzhV9KOUhk1tLh03G/pzWYmbVtyaV9ZByTTPD8PQ6u/2Fo egUXTHE04r90VIZPcf/lX6vB+jpX8de38AJ0ras1SUn5W8mCAbK53BgHNalnJ9dd BTBM65rTo/cBiQDKgKlDH0JV8fQ9ZYD3DL+ZXExE3FuaVSD8hiTBSAgeaAmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Uu8HgF7vD5gRca/unDLneYxQhEwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/581VJNSFmWxsqerFXuNovpFIZZDMJVZRR /i3aT77kz5Ah4oN/6Axy33rCXqFsnSdw6nRULhoycLTgCFpYF7zvHLzBpUXQ6sMw ZDoWiNIHNsqoh7JMbK5T7VkUmENdUFiW2k4Pgj25a0B/GnbBY0fmaojVFr256Dqn xTqUozDwsbvjlUaTBT3ULuqvaWcwtE8voj8ZlM80l+5HGQw3C4n66RW+sLLfPHtE nAEIJugcdfwsce6xxf3ivuPcq0dxu/bmWFAYOE6gE8QqRy9g9RiWAqB4rSSMY8R8 hTkH+RHwFYtGHBxTxZtudWrNPM+PoTw1SERc69xWI8WvS75TMUc= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:40 2025 by rpki-client