$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: UkZkoy+Fy90PAVRqq6n9ISOeh9qIlfBX66VVP8dhHAk= Subject key identifier: D4:6C:B8:7D:DA:6A:3E:B1:5C:3C:2F:93:83:22:06:46:AC:B4:7E:04 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 3F4B0EE7EA004381A54E079BC08D46CBD0C02B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01B6 Signing time: Mon 21 Jul 2025 09:50:44 +0000 Manifest this update: Mon 21 Jul 2025 09:45:44 +0000 Manifest next update: Thu 24 Jul 2025 12:43:44 +0000 Files and hashes: 1: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) 2: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: +2+SNYoMI1lssPzDy0j/RTfVUks66KYgXwPXxJUTe5U=) 3: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4b:0e:e7:ea:00:43:81:a5:4e:07:9b:c0:8d:46:cb:d0:c0:2b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Jul 21 09:45:44 2025 GMT Not After : Jul 24 12:43:44 2025 GMT Subject: CN=D46CB87DDA6A3EB15C3C2F9383220646ACB47E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:f8:18:99:96:ef:ef:2d:c4:38:08:62:18: 4c:5e:26:95:5b:5d:ee:57:dc:6c:e2:81:18:81:63: 59:60:1a:0d:7f:c3:12:37:0f:1a:c5:b9:54:5a:16: a3:0a:1e:a7:eb:98:c7:5f:03:7c:80:a3:57:4b:7c: 28:60:11:4b:9f:7f:ae:fb:98:07:b2:e4:1c:e2:e2: 9f:47:54:91:a9:97:1d:a6:2f:26:20:16:4b:f3:40: fd:1b:92:f4:7d:b1:27:34:af:39:f1:f0:d6:06:9d: e3:13:54:1b:4c:74:8e:82:45:91:ec:2f:e3:eb:33: 5d:56:5d:b4:9c:0d:39:c8:5c:93:89:d0:d8:f3:8c: 99:0b:8b:6b:14:43:1f:48:bd:b0:c6:7c:da:a5:29: c3:da:33:03:1a:c6:cd:52:ed:0f:ca:87:71:2a:fa: 11:05:0e:b9:4e:5d:2c:3d:cb:11:35:6c:93:58:ea: de:c1:d8:bb:15:df:49:0e:b1:73:cd:38:1f:41:1e: 9b:b2:cb:7f:33:6c:56:b3:3d:7b:1b:76:72:aa:05: bc:fe:2e:c0:3d:79:b4:e7:99:a6:56:70:90:21:42: 7d:ce:47:fe:0a:b3:55:f9:63:cf:39:5e:6d:ac:b7: 54:a2:62:c5:fd:e2:c0:08:60:52:72:98:37:1d:ed: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:B8:7D:DA:6A:3E:B1:5C:3C:2F:93:83:22:06:46:AC:B4:7E:04 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:10:00:a9:ed:54:f3:06:42:81:92:99:34:d9:b5:c9:d9:8a: 5a:63:71:e7:68:cf:6d:d5:8c:39:b1:29:43:49:fb:6c:72:f2: 60:ae:61:0d:7b:6b:22:24:a8:3d:f0:2d:21:d1:97:26:2a:f9: 90:e3:14:80:ec:d8:b4:73:c6:b0:c6:b7:5c:22:2f:bd:2b:00: 73:92:88:99:dc:ee:80:a9:9d:36:d0:9c:f7:06:a5:50:cc:cc: ae:09:4a:ce:0e:be:50:0d:21:8f:da:f3:20:07:5b:64:c3:39: 2e:13:29:a4:f9:75:7e:9b:2a:f9:6a:ea:57:65:5b:17:e6:ea: f5:a5:6e:d0:bb:da:10:32:90:1c:3a:94:0c:d9:a9:18:da:a6: 7b:35:0c:25:a3:f8:c3:5c:ba:07:95:d9:4b:3b:58:fb:10:69: 40:35:f5:52:af:c0:01:a0:5a:f8:96:a5:fd:9c:6e:2f:91:e7: 01:39:76:9b:48:ac:01:b7:6d:51:96:39:c2:17:a5:47:89:ce: e7:bb:38:11:cf:ff:9a:0f:4b:0d:7a:99:8e:8f:e3:2b:97:ef: bd:0c:6c:8d:81:5f:7e:db:5c:e6:84:94:b8:1e:55:8c:36:f7: 31:16:0f:71:2f:b0:b1:d4:c5:34:83:4e:0e:3f:ff:fd:e3:23: b5:02:9a:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0sO5+oAQ4GlTgebwI1Gy9DAKxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA3MjEwOTQ1NDRaFw0yNTA3MjQxMjQzNDRaMDMxMTAvBgNV BAMTKEQ0NkNCODdEREE2QTNFQjE1QzNDMkY5MzgzMjIwNjQ2QUNCNDdFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVfgYmZbv7y3EOAhiGExeJpVb Xe5X3GzigRiBY1lgGg1/wxI3DxrFuVRaFqMKHqfrmMdfA3yAo1dLfChgEUuff677 mAey5Bzi4p9HVJGplx2mLyYgFkvzQP0bkvR9sSc0rznx8NYGneMTVBtMdI6CRZHs L+PrM11WXbScDTnIXJOJ0NjzjJkLi2sUQx9IvbDGfNqlKcPaMwMaxs1S7Q/Kh3Eq +hEFDrlOXSw9yxE1bJNY6t7B2LsV30kOsXPNOB9BHpuyy38zbFazPXsbdnKqBbz+ LsA9ebTnmaZWcJAhQn3OR/4Ks1X5Y885Xm2st1SiYsX94sAIYFJymDcd7Qv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Gy4fdpqPrFcPC+TgyIGRqy0fgQwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIQAKntVPMGQoGSmTTZtcnZilpjcedoz23V jDmxKUNJ+2xy8mCuYQ17ayIkqD3wLSHRlyYq+ZDjFIDs2LRzxrDGt1wiL70rAHOS iJnc7oCpnTbQnPcGpVDMzK4JSs4OvlANIY/a8yAHW2TDOS4TKaT5dX6bKvlq6ldl Wxfm6vWlbtC72hAykBw6lAzZqRjapns1DCWj+MNcugeV2Us7WPsQaUA19VKvwAGg WviWpf2cbi+R5wE5dptIrAG3bVGWOcIXpUeJzue7OBHP/5oPSw16mY6P4yuX770M bI2BX37bXOaElLgeVYw29zEWD3EvsLHUxTSDTg4///3jI7UCmuA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:32:13 2025 by rpki-client