$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: 1iGTiB//0yJej7TBJ3Dn8zUxCiu2EHXLpuxgnCM3BKQ= Subject key identifier: B4:80:3B:57:17:67:03:C9:AD:ED:D9:9E:F1:32:FA:0C:1A:34:71:24 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 1F4926F63FCB8C682A5783263C9E22E4B1BE98E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 0355 Signing time: Sun 07 Sep 2025 10:51:42 +0000 Manifest this update: Sun 07 Sep 2025 10:46:42 +0000 Manifest next update: Wed 10 Sep 2025 22:02:42 +0000 Files and hashes: 1: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 2: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: ZmDi7ss4x6br/3DQbH/NdARbvum+Mchto8dIK5aBHzA=) 4: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:49:26:f6:3f:cb:8c:68:2a:57:83:26:3c:9e:22:e4:b1:be:98:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Sep 7 10:46:42 2025 GMT Not After : Sep 10 22:02:42 2025 GMT Subject: CN=B4803B57176703C9ADEDD99EF132FA0C1A347124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:17:89:d0:8e:4f:27:1f:d5:7c:a6:2a:c6: 86:ff:dc:01:8c:19:58:04:8d:c0:bc:ba:4a:24:8f: f0:2f:a1:bb:b1:fd:5e:76:84:43:dc:18:4f:ba:3a: 79:b0:96:fd:cd:ea:d9:24:cf:ed:fd:a3:db:a8:85: f6:32:c9:3d:73:1f:4b:e7:5a:d0:95:d3:c6:86:21: c4:cc:3e:5f:c7:02:c8:f1:81:28:05:4f:74:bb:c3: ad:e2:ce:86:b8:a0:c5:f8:de:4a:65:97:9c:f9:27: 5c:60:ae:e2:89:43:b3:b4:75:cb:7b:a5:c7:08:29: c8:eb:22:d7:ad:8b:6b:f3:a1:26:49:49:84:76:a4: bd:9e:16:df:32:95:17:b1:3f:63:46:ef:36:5d:3c: bd:4a:a0:97:36:13:29:8f:59:eb:23:5e:68:c7:c6: f8:51:93:2a:2f:5e:65:a1:1b:42:a6:4c:49:81:c8: 33:b8:53:b9:81:5c:06:fd:7a:2b:71:ab:e9:3e:a1: 88:11:11:78:8b:5a:46:86:5c:f5:dc:15:48:93:7f: 59:98:df:71:96:db:e5:40:88:f1:40:d5:e1:ad:27: 24:16:4a:04:14:c0:47:5d:fb:66:cb:dc:e0:9f:1e: b9:da:c6:b9:b0:e2:fa:18:a2:62:30:95:a4:d8:26: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:80:3B:57:17:67:03:C9:AD:ED:D9:9E:F1:32:FA:0C:1A:34:71:24 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7e:d5:c7:5e:38:db:14:a8:bb:c8:79:49:7c:1f:dd:dc:fb: 41:21:cf:0c:d1:c5:79:52:26:55:11:f4:a7:d8:85:ab:24:a1: 96:eb:10:d8:33:62:2b:28:de:5d:d0:43:a9:6f:87:b0:66:d0: e1:09:e8:d1:13:b1:9d:da:4c:45:fd:48:a3:2b:b9:75:69:1e: 6f:ad:78:ab:40:72:db:ca:f3:cd:32:e7:0a:f7:ee:3a:d7:9b: a1:8b:fc:41:73:cc:9c:2c:5d:ec:c1:a2:17:32:04:de:78:d9: b3:fa:be:0c:b6:59:63:c7:3b:a5:ae:19:66:4c:c6:e4:9c:37: ef:7c:70:4d:22:9e:24:d1:0d:18:ab:8b:94:f4:f8:90:c5:13: 9f:35:d8:44:aa:d5:b6:6a:b1:98:f2:6d:76:df:67:37:ca:b3: 73:90:3b:3b:0a:8f:98:6e:68:f3:02:e5:a6:7b:1f:6b:73:19: b2:96:28:a9:35:90:6a:05:92:fc:51:70:8b:84:a2:81:88:64: 8b:87:f9:1c:ef:d5:0c:86:16:4a:e6:61:5a:52:f6:64:4a:19: 4f:6c:00:fa:d6:f0:40:40:2e:fb:5a:f7:ff:22:93:6a:c9:13: 73:7a:79:68:dd:f0:f9:fc:dc:c2:cb:3d:db:37:59:69:e7:f1: 88:45:89:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0km9j/LjGgqV4MmPJ4i5LG+mOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA5MDcxMDQ2NDJaFw0yNTA5MTAyMjAyNDJaMDMxMTAvBgNV BAMTKEI0ODAzQjU3MTc2NzAzQzlBREVERDk5RUYxMzJGQTBDMUEzNDcxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QxeJ0I5PJx/VfKYqxob/3AGM GVgEjcC8ukokj/Avobux/V52hEPcGE+6Onmwlv3N6tkkz+39o9uohfYyyT1zH0vn WtCV08aGIcTMPl/HAsjxgSgFT3S7w63izoa4oMX43kpll5z5J1xgruKJQ7O0dct7 pccIKcjrIteti2vzoSZJSYR2pL2eFt8ylRexP2NG7zZdPL1KoJc2EymPWesjXmjH xvhRkyovXmWhG0KmTEmByDO4U7mBXAb9eitxq+k+oYgREXiLWkaGXPXcFUiTf1mY 33GW2+VAiPFA1eGtJyQWSgQUwEdd+2bL3OCfHrnaxrmw4voYomIwlaTYJiPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtIA7VxdnA8mt7dme8TL6DBo0cSQwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAER+1cdeONsUqLvIeUl8H93c+0EhzwzRxXlS JlUR9KfYhaskoZbrENgzYiso3l3QQ6lvh7Bm0OEJ6NETsZ3aTEX9SKMruXVpHm+t eKtActvK880y5wr37jrXm6GL/EFzzJwsXezBohcyBN542bP6vgy2WWPHO6WuGWZM xuScN+98cE0iniTRDRiri5T0+JDFE5812ESq1bZqsZjybXbfZzfKs3OQOzsKj5hu aPMC5aZ7H2tzGbKWKKk1kGoFkvxRcIuEooGIZIuH+Rzv1QyGFkrmYVpS9mRKGU9s APrW8EBALvta9/8ik2rJE3N6eWjd8Pn83MLLPds3WWnn8YhFiQ8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client