$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: J/9PLfoJauHX2U1X7hpg2GCOXdsfuxOcjZWVTZ/DtMk= Subject key identifier: AC:75:0A:AF:48:1B:E0:A7:63:EE:A9:A2:14:BE:4E:81:EA:A9:E4:ED Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 2FF5257331BA1EF5F3D4827A9365B6438E2CA55A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 0190 Signing time: Sun 20 Jul 2025 00:31:11 +0000 Manifest this update: Sun 20 Jul 2025 00:26:11 +0000 Manifest next update: Wed 23 Jul 2025 05:23:11 +0000 Files and hashes: 1: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) 2: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 3: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) 4: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: afTkhx3ZWrUzvBervWCXO1ORq6O6gB5SItNPoL22xmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f5:25:73:31:ba:1e:f5:f3:d4:82:7a:93:65:b6:43:8e:2c:a5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Jul 20 00:26:11 2025 GMT Not After : Jul 23 05:23:11 2025 GMT Subject: CN=AC750AAF481BE0A763EEA9A214BE4E81EAA9E4ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:5f:f0:07:2a:ee:f1:c6:4c:a9:a0:eb:36: 8e:5f:6b:5c:5a:e7:e5:46:a0:bf:eb:5d:0e:ce:1d: bb:bb:30:56:01:9a:1d:38:8b:d1:a8:47:8e:99:ae: 3d:29:27:3d:68:84:3e:9d:9e:76:0e:e3:ab:ed:a2: 11:83:3b:1a:02:c3:61:f7:24:f4:ba:8e:5f:ce:0b: e3:d9:5f:74:5d:36:57:8a:a5:cb:be:56:43:fb:be: 2c:b5:ec:3f:6d:09:cc:da:e0:43:94:05:f0:dd:e1: e1:1d:66:11:ca:c1:0a:b4:5f:19:cf:80:1e:95:52: ae:8c:d0:6d:24:a5:41:98:a9:48:fb:9d:ef:ed:fe: bc:60:fd:55:8b:c0:be:fe:b0:98:5d:81:9d:22:8c: c0:be:74:cf:13:88:bf:fc:87:84:1a:ca:07:df:23: f4:09:18:7b:51:74:ad:fc:0e:ec:7c:ce:6a:16:5c: e6:0c:7a:7e:6b:13:bb:fb:2e:a5:d4:df:c2:54:4c: d3:d8:76:89:86:0e:54:41:12:b4:f1:2e:83:59:d2: 37:31:ce:8b:41:e6:2c:5c:ec:20:82:86:67:e1:81: d1:b2:5c:f0:33:0e:1c:bb:ee:b6:0c:c5:d0:75:fc: fc:16:95:6f:17:3f:ae:d0:5c:ee:9a:8c:2b:9e:a2: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:75:0A:AF:48:1B:E0:A7:63:EE:A9:A2:14:BE:4E:81:EA:A9:E4:ED X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:34:80:30:a9:57:a4:4b:85:57:4c:9c:fc:96:f6:21:bd:84: d4:8b:54:cd:c4:d3:8c:a0:68:26:2f:53:bb:82:4a:31:12:2b: 8b:3a:e6:72:23:24:92:dc:79:6d:e0:e4:d3:7b:71:59:d6:84: 0d:37:c7:4b:4b:7f:dc:f6:64:dc:0e:ad:8a:16:46:4f:e3:20: da:dd:78:67:47:25:40:cf:97:a8:5b:e2:e7:72:c1:94:b0:02: 3b:89:6f:4e:4a:8f:21:09:82:be:79:a2:eb:0c:4f:aa:f4:db: d4:7e:01:82:1d:88:dd:55:d5:f9:c1:b2:1e:69:99:3a:26:3b: 74:10:bd:63:71:de:f0:0a:ab:17:fa:a7:eb:e7:cd:3a:1c:e2: 7d:37:39:a4:ff:ba:e2:05:50:be:fd:93:1b:8a:a2:6e:ec:f5: 45:2e:af:39:3b:f8:1c:b5:8b:06:30:ad:ef:cd:db:c8:35:da: 5b:20:1f:11:5d:bc:f1:df:95:c3:26:3c:b6:9f:2c:ea:6f:35: ad:e0:12:67:77:14:91:12:92:88:0d:03:99:d1:59:70:ee:9d: 49:71:ee:3c:a7:48:5c:19:60:87:6f:36:0e:a8:5c:87:c1:75: 2e:11:c4:ba:7c:b8:c7:9a:0f:5a:d8:c2:b8:06:22:74:9a:bd: ff:da:14:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/UlczG6HvXz1IJ6k2W2Q44spVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA3MjAwMDI2MTFaFw0yNTA3MjMwNTIzMTFaMDMxMTAvBgNV BAMTKEFDNzUwQUFGNDgxQkUwQTc2M0VFQTlBMjE0QkU0RTgxRUFBOUU0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUt1/wByru8cZMqaDrNo5fa1xa 5+VGoL/rXQ7OHbu7MFYBmh04i9GoR46Zrj0pJz1ohD6dnnYO46vtohGDOxoCw2H3 JPS6jl/OC+PZX3RdNleKpcu+VkP7viy17D9tCcza4EOUBfDd4eEdZhHKwQq0XxnP gB6VUq6M0G0kpUGYqUj7ne/t/rxg/VWLwL7+sJhdgZ0ijMC+dM8TiL/8h4Qaygff I/QJGHtRdK38Dux8zmoWXOYMen5rE7v7LqXU38JUTNPYdomGDlRBErTxLoNZ0jcx zotB5ixc7CCChmfhgdGyXPAzDhy77rYMxdB1/PwWlW8XP67QXO6ajCueog0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHUKr0gb4Kdj7qmiFL5Ogeqp5O0wHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALA0gDCpV6RLhVdMnPyW9iG9hNSLVM3E04yg aCYvU7uCSjESK4s65nIjJJLceW3g5NN7cVnWhA03x0tLf9z2ZNwOrYoWRk/jINrd eGdHJUDPl6hb4udywZSwAjuJb05KjyEJgr55ousMT6r029R+AYIdiN1V1fnBsh5p mTomO3QQvWNx3vAKqxf6p+vnzToc4n03OaT/uuIFUL79kxuKom7s9UUurzk7+By1 iwYwre/N28g12lsgHxFdvPHflcMmPLafLOpvNa3gEmd3FJESkogNA5nRWXDunUlx 7jynSFwZYIdvNg6oXIfBdS4RxLp8uMeaD1rYwrgGInSavf/aFDc= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:21 2025 by rpki-client