$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: 8KtMztrwEEX6WXAO4vjY1AbY0mPr81U2nxlVmLBsC3A= Subject key identifier: 58:0A:FD:FB:9C:19:B8:58:73:44:37:76:E7:F8:98:44:B8:0B:A8:45 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 68DA3F72F7D26756975FEDF04BECF8EE9927A436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01F1 Signing time: Sat 19 Jul 2025 17:50:36 +0000 Manifest this update: Sat 19 Jul 2025 17:45:36 +0000 Manifest next update: Wed 23 Jul 2025 03:43:36 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: kN9MkACO7h+2pJUyPbt8u4WsHTUSDXvK/GsLAw7GDk4=) 2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:da:3f:72:f7:d2:67:56:97:5f:ed:f0:4b:ec:f8:ee:99:27:a4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Jul 19 17:45:36 2025 GMT Not After : Jul 23 03:43:36 2025 GMT Subject: CN=580AFDFB9C19B85873443776E7F89844B80BA845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:98:e6:84:55:0c:56:47:7f:8d:60:a7:80: 78:6d:bb:62:5f:6a:88:af:09:a0:3c:1a:24:d0:75: e1:5c:e4:c4:38:99:7d:da:d0:74:ec:b7:63:e3:79: ac:b3:c6:38:7f:23:cb:11:cb:fc:ec:07:37:8a:01: 45:73:9f:d3:1b:06:48:80:fe:3e:80:22:6a:6a:5c: 69:0d:db:55:04:f2:0b:3d:3e:ea:bb:c0:64:4a:d7: 84:bd:7e:c9:22:c3:40:25:11:37:2f:73:47:20:b9: a7:71:06:e8:27:7f:d2:c7:ae:04:f2:3f:6a:c6:13: c2:f9:1c:60:ee:e1:8c:16:90:9c:46:2d:8d:8e:71: 17:55:88:60:7e:03:8a:b4:59:12:66:af:cc:4a:63: 34:0c:fe:cb:6c:63:82:91:df:8f:e2:01:b9:90:9e: f5:3f:60:1c:c3:5d:06:9b:be:4c:5f:e7:ad:0d:1f: 7b:91:41:46:86:81:6b:a4:26:84:c1:2b:3c:b5:b3: 94:52:2a:1d:1c:85:41:82:cb:99:42:7b:29:55:3f: 70:9b:ff:42:0b:01:7d:29:70:90:fe:7b:91:98:09: 81:df:d6:f2:ac:fa:a4:92:43:99:fa:8f:e8:28:9b: 63:4d:2f:1d:17:6e:4f:5a:d1:d7:16:b4:a8:7d:18: ef:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:FD:FB:9C:19:B8:58:73:44:37:76:E7:F8:98:44:B8:0B:A8:45 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:05:78:74:41:a0:7c:ec:36:7d:67:ff:e4:ba:00:55:d0:92: 77:e0:f2:18:48:96:44:1a:27:99:53:a0:34:90:8a:8d:9e:a9: bd:77:07:3d:b5:8b:c2:47:d0:40:65:c2:14:ab:36:ee:ce:f3: 49:0f:29:e7:48:f9:fa:5d:e1:44:cf:d5:7f:32:94:cf:f4:92: 29:bd:a8:4e:43:bf:09:e5:d0:a8:35:bc:63:c6:2c:4d:a0:15: 04:f9:14:03:dd:c5:ee:c0:1d:ba:dc:43:86:a6:65:01:b1:66: 48:57:e0:c6:2b:59:14:ad:f4:1d:1a:c5:6c:e7:62:83:91:66: ee:81:df:e2:e6:27:c1:6b:4d:84:53:a5:69:00:cc:bc:d5:e2: 76:55:7c:d5:72:3e:fd:9b:de:e6:58:98:d7:77:7b:52:19:58: 10:69:53:e2:ee:fd:5e:d8:75:39:d8:9b:ce:50:bb:09:84:b1: fc:19:b7:27:75:38:c8:de:4a:92:32:4b:8c:b2:e1:2b:07:d8: 17:85:b9:72:e3:b1:2d:04:8f:dd:2b:6d:ec:12:80:87:a8:58: 38:1c:bb:ae:a4:de:da:1c:ba:4b:bb:e2:8d:45:bc:8a:96:4f: 71:cb:62:e3:c8:e3:fd:e4:96:c8:03:fc:77:c9:69:d9:44:fa: 35:da:53:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNo/cvfSZ1aXX+3wS+z47pknpDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA3MTkxNzQ1MzZaFw0yNTA3MjMwMzQzMzZaMDMxMTAvBgNV BAMTKDU4MEFGREZCOUMxOUI4NTg3MzQ0Mzc3NkU3Rjg5ODQ0QjgwQkE4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEZjmhFUMVkd/jWCngHhtu2Jf aoivCaA8GiTQdeFc5MQ4mX3a0HTst2Pjeayzxjh/I8sRy/zsBzeKAUVzn9MbBkiA /j6AImpqXGkN21UE8gs9Puq7wGRK14S9fskiw0AlETcvc0cguadxBugnf9LHrgTy P2rGE8L5HGDu4YwWkJxGLY2OcRdViGB+A4q0WRJmr8xKYzQM/stsY4KR34/iAbmQ nvU/YBzDXQabvkxf560NH3uRQUaGgWukJoTBKzy1s5RSKh0chUGCy5lCeylVP3Cb /0ILAX0pcJD+e5GYCYHf1vKs+qSSQ5n6j+gom2NNLx0Xbk9a0dcWtKh9GO/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWAr9+5wZuFhzRDd25/iYRLgLqEUwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEFeHRBoHzsNn1n/+S6AFXQknfg8hhIlkQa J5lToDSQio2eqb13Bz21i8JH0EBlwhSrNu7O80kPKedI+fpd4UTP1X8ylM/0kim9 qE5Dvwnl0Kg1vGPGLE2gFQT5FAPdxe7AHbrcQ4amZQGxZkhX4MYrWRSt9B0axWzn YoORZu6B3+LmJ8FrTYRTpWkAzLzV4nZVfNVyPv2b3uZYmNd3e1IZWBBpU+Lu/V7Y dTnYm85QuwmEsfwZtyd1OMjeSpIyS4yy4SsH2BeFuXLjsS0Ej90rbewSgIeoWDgc u66k3tocuku74o1FvIqWT3HLYuPI4/3klsgD/HfJadlE+jXaU4c= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:46 2025 by rpki-client