$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: nh+//5G4W+r5PKDhVVITgp1+yDcdywceRCJE5Tei3hw= Subject key identifier: 22:16:8E:ED:7E:36:18:82:B9:02:E8:67:C8:39:00:22:CD:E3:7A:F8 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 344A8C7ACAE305AFD647CF22689303A612F175DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 08:00:47 +0000 Manifest this update: Wed 04 Jun 2025 07:55:47 +0000 Manifest next update: Sat 07 Jun 2025 18:54:47 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 2: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: Q550gbTJ4xwVsBGNwsScCY3ioTNGSs1JSsYYtAKFys8=) 3: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 6: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 7: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 8: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 9: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4a:8c:7a:ca:e3:05:af:d6:47:cf:22:68:93:03:a6:12:f1:75:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jun 4 07:55:47 2025 GMT Not After : Jun 7 18:54:47 2025 GMT Subject: CN=22168EED7E361882B902E867C8390022CDE37AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:c9:08:30:b2:d9:c7:5b:9d:bf:68:6f:d6: 3f:6c:a7:7e:a3:ce:61:62:12:e8:f5:3a:2f:8f:3e: 06:a4:22:46:f8:8d:fb:fc:e8:22:3a:91:ec:a3:f0: 5c:10:d3:53:1d:43:1a:fd:19:27:ab:bc:ba:33:64: af:82:b8:14:61:fe:fe:a9:65:1c:57:26:77:2a:e0: f0:32:f8:1d:e0:bf:cf:46:fc:ad:5f:80:0a:92:56: 02:46:6c:cb:52:0a:7e:49:00:22:5a:fe:2e:ab:a2: 5a:fd:80:93:d0:f1:b4:40:4a:54:16:75:09:73:5a: 8b:69:bf:74:09:7e:e5:6c:02:41:ba:98:eb:1a:05: 9e:29:eb:3e:01:55:2b:47:82:68:4c:ca:51:35:2f: 31:80:70:06:04:df:88:f7:31:69:8f:33:98:7a:cb: db:b1:43:da:65:97:10:57:2d:f3:90:1c:08:f8:0b: 6c:f1:90:ad:0d:17:be:f1:b6:23:a6:1f:ca:44:54: 35:9d:eb:9d:73:70:9f:eb:29:d1:b5:be:1e:4e:b7: 3f:77:db:af:62:34:1e:2e:2f:59:25:6c:85:8f:fc: 01:b9:89:7e:3f:a8:5f:8c:0d:53:27:3f:52:dc:90: e8:52:22:cf:24:49:3f:79:84:6e:9a:ee:f2:f7:03: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:16:8E:ED:7E:36:18:82:B9:02:E8:67:C8:39:00:22:CD:E3:7A:F8 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:38:45:81:b2:e9:70:35:a8:1f:77:ba:7d:8f:31:87:53:e4: f5:f0:54:6e:8e:da:ef:53:e5:cc:9e:ef:7d:4f:21:ef:a0:fd: cc:52:fe:de:09:8a:0e:30:ac:27:79:45:c7:75:15:a2:c8:cc: 0b:9c:74:a2:54:0e:66:19:5d:2f:a2:cf:1d:09:df:48:34:7a: da:6a:05:11:eb:7a:72:f8:91:bf:b8:27:2e:c6:80:8d:ec:d4: 6e:2a:30:c8:99:ba:aa:d9:78:71:bc:fa:c2:bf:a0:99:7b:31: 43:d2:a9:36:35:7b:bf:69:30:3b:66:11:81:ff:42:ee:b5:ff: b7:22:f6:37:75:47:63:1a:db:62:86:3f:28:4b:55:47:59:f0: af:5f:aa:98:4e:23:08:f9:80:35:c5:45:7d:d8:a9:33:b0:20: c5:63:b7:fd:a2:44:f4:c5:5c:a5:9c:ca:6d:6d:25:19:91:27: 7a:c9:17:35:a2:6e:0b:85:3f:bf:bc:f6:05:b1:6a:61:db:65: 38:f0:0d:92:d3:af:e9:a3:e0:a8:16:d4:7b:6a:58:74:16:cb: 33:5f:b7:c6:5e:d0:78:06:ae:14:a4:46:ca:c9:da:15:0c:90: a9:a0:5a:79:66:50:ae:b0:02:f2:da:1b:19:81:cd:23:27:c2: 32:02:fd:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEqMesrjBa/WR88iaJMDphLxddwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA2MDQwNzU1NDdaFw0yNTA2MDcxODU0NDdaMDMxMTAvBgNV BAMTKDIyMTY4RUVEN0UzNjE4ODJCOTAyRTg2N0M4MzkwMDIyQ0RFMzdBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMskIMLLZx1udv2hv1j9sp36j zmFiEuj1Oi+PPgakIkb4jfv86CI6keyj8FwQ01MdQxr9GServLozZK+CuBRh/v6p ZRxXJncq4PAy+B3gv89G/K1fgAqSVgJGbMtSCn5JACJa/i6rolr9gJPQ8bRASlQW dQlzWotpv3QJfuVsAkG6mOsaBZ4p6z4BVStHgmhMylE1LzGAcAYE34j3MWmPM5h6 y9uxQ9pllxBXLfOQHAj4C2zxkK0NF77xtiOmH8pEVDWd651zcJ/rKdG1vh5Otz93 269iNB4uL1klbIWP/AG5iX4/qF+MDVMnP1LckOhSIs8kST95hG6a7vL3A+VTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIhaO7X42GIK5AuhnyDkAIs3jevgwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo4RYGy6XA1qB93un2PMYdT5PXwVG6O2u9T 5cye731PIe+g/cxS/t4Jig4wrCd5Rcd1FaLIzAucdKJUDmYZXS+izx0J30g0etpq BRHrenL4kb+4Jy7GgI3s1G4qMMiZuqrZeHG8+sK/oJl7MUPSqTY1e79pMDtmEYH/ Qu61/7ci9jd1R2Ma22KGPyhLVUdZ8K9fqphOIwj5gDXFRX3YqTOwIMVjt/2iRPTF XKWcym1tJRmRJ3rJFzWibguFP7+89gWxamHbZTjwDZLTr+mj4KgW1HtqWHQWyzNf t8Ze0HgGrhSkRsrJ2hUMkKmgWnlmUK6wAvLaGxmBzSMnwjIC/d4= -----END CERTIFICATE-----Generated at Fri Jun 6 16:56:22 2025 by rpki-client