$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: urHI/240LRM2t7FN32jNCF6XjI41yPnwEjHa72qN9Gk= Subject key identifier: C8:DD:7C:D4:87:6F:27:2C:65:84:2D:5B:D9:CE:CA:B9:C2:1C:AB:C6 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 502DE95E4B851A87A9578F95D7C762F503346FD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 01D9 Signing time: Thu 04 Sep 2025 06:10:50 +0000 Manifest this update: Thu 04 Sep 2025 06:05:50 +0000 Manifest next update: Sun 07 Sep 2025 14:07:50 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: cnr+5jQ196T0Z49O9DUaWD3wIZg2ssd/pgWGTZs6O6s=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2d:e9:5e:4b:85:1a:87:a9:57:8f:95:d7:c7:62:f5:03:34:6f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Sep 4 06:05:50 2025 GMT Not After : Sep 7 14:07:50 2025 GMT Subject: CN=C8DD7CD4876F272C65842D5BD9CECAB9C21CABC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:0e:99:e3:d0:a9:9d:9e:6e:ca:e6:e2:34: 29:71:9c:45:2b:5d:be:dd:87:9e:e3:32:4b:1c:c2: 5a:02:c1:bf:8a:80:5d:9d:ec:36:83:7e:36:fd:7d: ce:f6:c1:6b:78:a8:ec:9a:ba:5b:7b:6c:38:22:19: 57:cc:59:25:b4:d8:d9:15:55:ea:94:9a:b2:52:2f: 7b:d1:b5:b7:90:59:c7:56:38:c1:00:28:c2:8c:2c: 5d:e5:c8:f6:ff:d8:57:25:42:c9:a3:2e:43:2e:f9: 48:88:ad:07:88:86:0e:95:f8:71:75:c5:95:ed:16: 60:1f:48:5a:da:ee:dd:2c:32:fe:c4:de:c4:42:1a: 5f:9c:1f:85:fe:db:ac:f3:dd:00:51:73:e1:30:1f: 4c:ab:cb:f7:43:d9:d6:eb:f4:35:86:a5:cc:58:64: ec:bb:6e:23:74:36:11:79:76:1f:d4:60:aa:c5:e1: b3:bd:ba:c9:a9:c2:f5:db:43:b5:b6:a6:a2:e7:00: e1:62:6a:54:c3:4d:20:ac:17:f5:37:e6:6f:5b:41: 6e:a1:92:c4:ed:5f:b6:76:f5:3d:89:11:81:d6:fe: 11:b5:11:0f:ff:dd:13:76:41:c8:c3:27:2e:1c:2c: b1:8e:be:1c:93:a9:77:b6:37:b9:d7:20:58:82:7d: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DD:7C:D4:87:6F:27:2C:65:84:2D:5B:D9:CE:CA:B9:C2:1C:AB:C6 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6a:7a:af:29:1c:46:9a:74:35:2f:db:c1:d9:eb:89:a6:6d: 57:50:7d:e5:51:e3:52:95:68:b4:cb:78:3c:b7:96:92:0f:bb: 80:33:55:15:11:d4:73:f6:49:e4:cd:6d:d7:b9:cf:1f:b7:47: e3:2e:11:e2:6c:30:d7:30:23:93:d4:de:40:e7:33:75:e7:2e: 7b:84:fc:57:af:ee:7a:47:22:27:a4:13:72:49:1f:36:66:33: 83:63:14:a9:d6:3a:f7:0c:02:39:fe:ed:af:9a:2a:a8:e1:d8: 07:15:c6:04:b6:9b:1a:1f:c1:87:3f:22:e6:e5:ce:3f:41:f1: ce:40:b8:84:73:42:21:a6:7a:93:43:b6:95:38:c8:e3:ff:d3: 89:89:a0:48:e4:7b:ae:c6:2f:74:54:81:9b:44:22:05:7b:89: b5:d3:77:4f:df:2e:8d:2d:20:3b:17:cd:56:86:15:0c:63:75: 04:32:c9:d0:2a:01:85:a3:e3:7e:72:2c:37:fc:7e:fc:9d:2f: 79:cb:16:29:fa:bf:c6:22:c2:47:0e:b5:22:8f:67:e8:05:52: f1:69:96:85:42:1f:7a:d2:46:10:4e:d0:58:3a:e2:42:88:89: cd:f6:78:e8:f8:c5:44:97:23:d5:d0:e9:14:3a:6c:d4:fb:db: c0:8b:64:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUC3pXkuFGoepV4+V18di9QM0b9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA5MDQwNjA1NTBaFw0yNTA5MDcxNDA3NTBaMDMxMTAvBgNV BAMTKEM4REQ3Q0Q0ODc2RjI3MkM2NTg0MkQ1QkQ5Q0VDQUI5QzIxQ0FCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1w6Z49CpnZ5uyubiNClxnEUr Xb7dh57jMkscwloCwb+KgF2d7DaDfjb9fc72wWt4qOyault7bDgiGVfMWSW02NkV VeqUmrJSL3vRtbeQWcdWOMEAKMKMLF3lyPb/2FclQsmjLkMu+UiIrQeIhg6V+HF1 xZXtFmAfSFra7t0sMv7E3sRCGl+cH4X+26zz3QBRc+EwH0yry/dD2dbr9DWGpcxY ZOy7biN0NhF5dh/UYKrF4bO9usmpwvXbQ7W2pqLnAOFialTDTSCsF/U35m9bQW6h ksTtX7Z29T2JEYHW/hG1EQ//3RN2QcjDJy4cLLGOvhyTqXe2N7nXIFiCfXS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyN181IdvJyxlhC1b2c7KucIcq8YwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVqeq8pHEaadDUv28HZ64mmbVdQfeVR41KV aLTLeDy3lpIPu4AzVRUR1HP2SeTNbde5zx+3R+MuEeJsMNcwI5PU3kDnM3XnLnuE /Fev7npHIiekE3JJHzZmM4NjFKnWOvcMAjn+7a+aKqjh2AcVxgS2mxofwYc/Iubl zj9B8c5AuIRzQiGmepNDtpU4yOP/04mJoEjke67GL3RUgZtEIgV7ibXTd0/fLo0t IDsXzVaGFQxjdQQyydAqAYWj435yLDf8fvydL3nLFin6v8YiwkcOtSKPZ+gFUvFp loVCH3rSRhBO0Fg64kKIic32eOj4xUSXI9XQ6RQ6bNT728CLZDU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:45 2025 by rpki-client