$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: 74TnBzSeS1imcqplAOWXUb9fBD/RV9JO2LAIIlL2x6I= Subject key identifier: 1E:5B:DE:29:48:2D:19:53:B6:08:C4:6F:5F:5E:C9:E0:35:8F:F6:0C Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 4FC2E5D3625D33056DB0A39A52AD9E478CFD500A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 020B Signing time: Sat 06 Sep 2025 23:51:24 +0000 Manifest this update: Sat 06 Sep 2025 23:46:24 +0000 Manifest next update: Wed 10 Sep 2025 05:23:24 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: UFnuXKXmrAC+ujlZdA2bTyxSr/EOrchd2dtr5Xe5+1E=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c2:e5:d3:62:5d:33:05:6d:b0:a3:9a:52:ad:9e:47:8c:fd:50:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Sep 6 23:46:24 2025 GMT Not After : Sep 10 05:23:24 2025 GMT Subject: CN=1E5BDE29482D1953B608C46F5F5EC9E0358FF60C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:37:e8:ba:a2:95:05:d6:64:e5:7a:62:80: 8b:9a:f6:21:77:b7:3e:32:17:59:f7:88:5c:93:7f: b5:ed:f4:20:45:6b:6d:16:bb:62:c2:d4:dd:76:32: a1:7d:9f:0e:5f:0c:17:91:56:f0:d4:02:a7:dd:5e: d7:36:f2:29:94:53:b5:b7:f0:4d:14:67:93:08:01: f6:b5:66:f0:99:24:c5:55:50:5c:b9:a4:db:21:5e: c8:d6:61:61:28:a2:bd:70:e9:16:12:c2:70:0e:3f: 2b:0e:af:aa:a4:b5:95:55:98:bc:31:70:e4:80:93: 1d:3d:65:48:89:b8:d3:8a:88:7c:e6:54:c7:c4:9f: 0b:36:44:39:29:99:1c:c4:cc:2e:c2:ca:3e:de:38: 18:57:72:8a:4e:41:e1:56:d1:f0:1f:29:bd:db:f2: 21:75:c8:f4:18:8d:61:5c:2b:75:3d:61:6c:6b:ae: 64:b4:ca:81:a2:f4:58:6d:35:80:1d:ae:78:26:8b: 04:df:24:a3:23:65:72:5f:17:bc:ab:4e:30:7d:87: ff:99:6d:78:99:a1:e4:f6:a5:b3:73:d7:a3:bf:a7: 58:c6:d0:d5:52:b4:64:87:37:f6:51:82:f4:e2:e7: b9:b7:01:fe:ec:92:b8:f9:4c:1e:8b:fe:05:1d:54: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5B:DE:29:48:2D:19:53:B6:08:C4:6F:5F:5E:C9:E0:35:8F:F6:0C X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ed:9e:09:00:40:22:7b:94:16:d4:d3:1d:f1:0d:cd:5f:32: 7c:b4:78:3b:3c:de:a5:2d:88:ae:78:66:c7:89:0b:9e:03:d3: 6e:69:15:ff:7b:96:cc:4e:cb:1a:09:4e:bf:eb:a3:23:b8:a5: d5:3a:de:36:19:03:38:f5:d3:a2:45:81:d3:09:e0:71:85:2a: 5f:3b:3b:40:37:f8:7f:9c:44:58:99:fd:11:60:73:fc:39:c4: ce:ee:e8:57:e8:97:0e:45:d7:46:80:e7:ea:fb:10:55:00:b1: 38:0b:b3:47:4e:18:08:e1:7e:0b:20:de:fa:ea:b5:b3:b8:3d: e9:8b:0f:d5:c5:ec:74:94:ec:d3:d4:52:30:be:86:36:c0:86: 02:c1:e6:d7:32:53:65:9f:95:63:e0:cb:0d:be:8a:b6:e1:f4: f9:57:45:c6:35:1a:60:38:f5:d1:ae:d7:81:8c:c5:67:f0:ef: 3f:b9:58:e3:16:06:96:d7:eb:80:d0:e5:d3:5c:1b:b6:f5:7d: db:4a:ac:af:f7:38:7e:33:0a:ae:db:0c:ec:8c:81:8c:7e:73: a6:d4:a7:a3:a9:2f:a9:95:5f:58:a2:a9:6e:ee:ca:66:72:b9: 4d:43:29:5d:ba:52:b0:0f:58:ed:7f:d0:0c:8a:f3:f9:2b:26: af:36:a5:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8Ll02JdMwVtsKOaUq2eR4z9UAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA5MDYyMzQ2MjRaFw0yNTA5MTAwNTIzMjRaMDMxMTAvBgNV BAMTKDFFNUJERTI5NDgyRDE5NTNCNjA4QzQ2RjVGNUVDOUUwMzU4RkY2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVjfouqKVBdZk5XpigIua9iF3 tz4yF1n3iFyTf7Xt9CBFa20Wu2LC1N12MqF9nw5fDBeRVvDUAqfdXtc28imUU7W3 8E0UZ5MIAfa1ZvCZJMVVUFy5pNshXsjWYWEoor1w6RYSwnAOPysOr6qktZVVmLwx cOSAkx09ZUiJuNOKiHzmVMfEnws2RDkpmRzEzC7Cyj7eOBhXcopOQeFW0fAfKb3b 8iF1yPQYjWFcK3U9YWxrrmS0yoGi9FhtNYAdrngmiwTfJKMjZXJfF7yrTjB9h/+Z bXiZoeT2pbNz16O/p1jG0NVStGSHN/ZRgvTi57m3Af7skrj5TB6L/gUdVH9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlveKUgtGVO2CMRvX17J4DWP9gwwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjtngkAQCJ7lBbU0x3xDc1fMny0eDs83qUt iK54ZseJC54D025pFf97lsxOyxoJTr/royO4pdU63jYZAzj106JFgdMJ4HGFKl87 O0A3+H+cRFiZ/RFgc/w5xM7u6Ffolw5F10aA5+r7EFUAsTgLs0dOGAjhfgsg3vrq tbO4PemLD9XF7HSU7NPUUjC+hjbAhgLB5tcyU2WflWPgyw2+irbh9PlXRcY1GmA4 9dGu14GMxWfw7z+5WOMWBpbX64DQ5dNcG7b1fdtKrK/3OH4zCq7bDOyMgYx+c6bU p6OpL6mVX1iiqW7uymZyuU1DKV26UrAPWO1/0AyK8/krJq82pWo= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:59 2025 by rpki-client