$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: AUyHr1afp9b7N9HDdOu9oj+bB7zycm81zRQCyIlPKDA= Subject key identifier: 6A:99:73:00:7B:B6:19:66:EB:90:08:F9:BA:23:70:2C:32:04:0E:02 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 0C3E913F09C0888D64FBAD642E692262BBBE07B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 032A Signing time: Sun 01 Jun 2025 16:41:42 +0000 Manifest this update: Sun 01 Jun 2025 16:36:42 +0000 Manifest next update: Thu 05 Jun 2025 04:39:42 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: 5odl6z1O8OWP7iVYmb2ecABlzQ3f4KbhOHsz82ISVks=) 4: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3e:91:3f:09:c0:88:8d:64:fb:ad:64:2e:69:22:62:bb:be:07:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Jun 1 16:36:42 2025 GMT Not After : Jun 5 04:39:42 2025 GMT Subject: CN=6A9973007BB61966EB9008F9BA23702C32040E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:df:fa:a9:f3:dc:e5:a9:0d:e9:ac:47:73: 7f:e7:1d:98:e2:c0:9b:84:5d:36:08:b0:12:1a:74: b3:08:52:1a:30:02:6a:f4:ec:61:13:bb:2e:ed:c3: a6:bc:de:e8:cb:96:aa:38:ae:13:3a:fa:4d:4d:a2: c2:57:ab:45:e2:1e:31:8a:00:18:00:48:0b:f4:e9: 88:ca:00:c5:35:10:80:dd:1d:39:ad:36:50:57:18: 24:65:7f:46:e5:ce:f8:dc:1e:a2:c5:e3:1e:1c:f5: 6a:4d:cf:fe:5b:75:b7:4e:d0:21:4f:38:17:37:85: 36:f0:b2:95:33:ff:a4:6d:20:4d:ff:e8:43:c9:79: 19:04:0b:72:2a:d5:4a:5d:26:6e:c0:46:f8:fa:d7: 3d:b6:61:af:66:12:f9:a4:db:c2:7f:89:2d:e6:b9: 0b:b5:ec:6d:a8:2b:d0:d3:f8:0e:b7:1a:9f:3b:ef: ce:ba:a8:57:95:39:4f:8d:08:1a:d3:a3:b4:1c:01: 3e:77:ae:06:fe:29:19:01:fd:ba:f4:b1:44:4f:1e: dd:1d:b6:88:91:8d:95:bd:e1:58:b0:8a:1f:d2:59: a2:0d:96:bf:1f:e1:41:05:e9:1c:19:55:ee:bb:e5: 1f:17:19:65:44:89:27:78:f9:66:1a:0e:e1:17:d0: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:99:73:00:7B:B6:19:66:EB:90:08:F9:BA:23:70:2C:32:04:0E:02 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:38:3f:d7:18:d8:4a:63:bb:9c:6e:d3:fc:4c:01:0f:46:5c: 5e:37:53:d3:90:c3:bd:b0:de:23:a8:83:a1:30:f7:39:36:b5: 6b:20:7c:47:b5:44:80:3f:ac:a8:34:8c:f9:ba:32:e9:d0:9f: 8f:cc:c3:a2:3e:5d:fe:39:f3:8a:13:75:29:cd:d0:d1:02:68: fa:5c:68:42:ad:e1:ae:d1:4d:8e:b1:da:1e:db:80:66:89:9b: 9b:b8:ed:1d:07:bc:86:7f:32:6d:3b:15:87:bb:c6:8b:f5:82: 60:bf:c9:a9:d3:a4:11:0b:17:fa:00:28:79:30:25:f9:53:78: 02:10:01:29:58:83:cf:6a:57:95:62:43:99:48:4f:b5:56:9b: 4a:c9:4f:76:74:a3:78:f3:13:1c:45:5c:26:0b:62:dc:2f:b5: 7e:55:c6:00:ca:44:ca:21:51:96:e3:cf:00:16:51:a9:15:bd: bc:d5:9e:67:75:71:4e:48:a8:ef:03:26:3e:0d:f6:94:1c:0b: e9:4b:18:28:c1:73:d4:c5:ee:b8:fb:1e:8f:ec:60:84:b5:9a: a2:da:68:fa:ee:1b:4f:db:b7:eb:8a:7c:b5:65:61:b4:5e:fd: c0:45:ff:d3:85:52:34:e3:9e:84:84:b0:51:ea:72:da:0d:44: eb:58:67:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDD6RPwnAiI1k+61kLmkiYru+B7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA2MDExNjM2NDJaFw0yNTA2MDUwNDM5NDJaMDMxMTAvBgNV BAMTKDZBOTk3MzAwN0JCNjE5NjZFQjkwMDhGOUJBMjM3MDJDMzIwNDBFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Hd/6qfPc5akN6axHc3/nHZji wJuEXTYIsBIadLMIUhowAmr07GETuy7tw6a83ujLlqo4rhM6+k1NosJXq0XiHjGK ABgASAv06YjKAMU1EIDdHTmtNlBXGCRlf0blzvjcHqLF4x4c9WpNz/5bdbdO0CFP OBc3hTbwspUz/6RtIE3/6EPJeRkEC3Iq1UpdJm7ARvj61z22Ya9mEvmk28J/iS3m uQu17G2oK9DT+A63Gp877866qFeVOU+NCBrTo7QcAT53rgb+KRkB/br0sURPHt0d toiRjZW94Viwih/SWaINlr8f4UEF6RwZVe675R8XGWVEiSd4+WYaDuEX0DZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaplzAHu2GWbrkAj5uiNwLDIEDgIwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw4P9cY2Epju5xu0/xMAQ9GXF43U9OQw72w 3iOog6Ew9zk2tWsgfEe1RIA/rKg0jPm6MunQn4/Mw6I+Xf4584oTdSnN0NECaPpc aEKt4a7RTY6x2h7bgGaJm5u47R0HvIZ/Mm07FYe7xov1gmC/yanTpBELF/oAKHkw JflTeAIQASlYg89qV5ViQ5lIT7VWm0rJT3Z0o3jzExxFXCYLYtwvtX5VxgDKRMoh UZbjzwAWUakVvbzVnmd1cU5IqO8DJj4N9pQcC+lLGCjBc9TF7rj7Ho/sYIS1mqLa aPruG0/bt+uKfLVlYbRe/cBF/9OFUjTjnoSEsFHqctoNROtYZ8o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:50 2025 by rpki-client