$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: y5y71/L56bSVUBNn9FM+GewVUBN76qO3K7BHIRDlWgs= Subject key identifier: 4B:FB:67:6E:9A:F1:7F:0D:9D:74:27:18:91:AB:E6:C5:FB:28:05:9B Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 41B658BD2FB9C4CC0B166E9072FF32F3FF5D8D55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 14:21:20 +0000 Manifest this update: Sat 06 Sep 2025 14:16:20 +0000 Manifest next update: Wed 10 Sep 2025 00:06:20 +0000 Files and hashes: 1: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 2: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: IF3IKFCFv0KZ9sgYFJDr3Zk/OpSZC3UWpw56Ktsdbvs=) 3: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:58:bd:2f:b9:c4:cc:0b:16:6e:90:72:ff:32:f3:ff:5d:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Sep 6 14:16:20 2025 GMT Not After : Sep 10 00:06:20 2025 GMT Subject: CN=4BFB676E9AF17F0D9D74271891ABE6C5FB28059B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:2d:19:1a:f6:f2:18:66:7d:f9:7d:e5:01: ce:0d:0f:2e:5e:47:82:7b:cf:24:8a:cb:02:e6:7b: ef:ab:62:fc:bc:2b:ad:c9:d2:31:8f:df:c6:99:87: 44:01:69:35:c0:af:90:a8:41:88:e5:e1:37:a7:3d: ba:05:ab:60:b4:44:bc:97:d9:a6:97:20:4a:55:86: 46:99:3b:17:73:16:1b:2d:80:cf:04:8e:65:ca:38: 33:72:f5:35:6d:05:14:1f:f1:91:df:a1:81:69:96: 27:d2:db:7b:6b:74:8c:53:0d:74:2a:bc:77:ce:fe: 66:7e:8c:9c:36:1c:5f:18:9f:81:b9:d1:6b:6e:0a: 28:aa:31:c1:79:d2:00:ae:a1:dd:24:09:55:44:96: 8f:b6:3f:84:1a:0d:94:ee:ea:41:0f:60:38:b2:32: b0:6a:15:75:58:bd:f2:21:83:fa:19:2e:36:0a:ef: b4:98:5c:5c:4e:c6:d4:92:30:c0:d4:c3:dc:bd:0e: 71:86:c5:2f:40:56:f6:9c:4e:af:c0:54:8b:52:09: ac:73:08:22:e8:ad:84:6c:f0:20:63:92:95:86:7f: 05:5d:2f:ef:7e:31:53:1b:db:8d:f1:bb:ac:c1:52: 9a:23:1a:6a:fd:67:86:24:2f:f4:c0:c1:97:05:8d: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:67:6E:9A:F1:7F:0D:9D:74:27:18:91:AB:E6:C5:FB:28:05:9B X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:45:26:d4:69:9d:8b:1a:0a:c2:ca:0c:7b:51:7e:19:ab:3f: 4d:c6:38:f8:16:c3:96:08:ce:67:79:03:4c:8b:2f:ac:80:e0: 80:c6:9d:d6:ab:92:6b:7c:0d:22:93:c5:c8:4f:47:18:94:bc: 73:d0:d3:6c:a8:bc:89:62:b3:f6:c2:1b:ab:ee:aa:85:93:fd: cb:f0:40:0d:f4:14:59:1b:69:d6:b8:a6:6f:dd:90:a1:c9:be: 2c:3e:30:51:b7:ec:4b:f8:07:9c:e5:0a:68:ef:ea:09:98:89: 3e:52:f0:32:1c:41:c9:a8:ad:32:00:6c:56:dc:ae:3f:c9:7c: 81:26:6e:91:48:cc:69:a4:88:f7:3a:dc:5e:2b:9c:34:f3:20: a9:16:06:24:7d:dd:12:2e:bd:8a:5a:d8:5e:ba:8a:6f:3e:3d: 28:ea:a4:68:f8:8f:8e:76:ff:89:9a:6c:b8:92:9a:4b:b0:65: 43:04:ad:b1:27:7c:53:64:a7:40:ac:d1:7f:3f:cd:7e:23:23: 58:02:99:0a:1e:3d:8b:be:ff:59:28:de:56:e2:cc:30:bd:13: fe:96:59:d2:3d:99:d8:a2:72:76:ca:79:b7:e0:41:17:9c:95: a3:b9:f1:49:04:c8:47:44:88:45:b7:78:51:39:82:34:90:e0: 40:6e:a8:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbZYvS+5xMwLFm6Qcv8y8/9djVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA5MDYxNDE2MjBaFw0yNTA5MTAwMDA2MjBaMDMxMTAvBgNV BAMTKDRCRkI2NzZFOUFGMTdGMEQ5RDc0MjcxODkxQUJFNkM1RkIyODA1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxS0ZGvbyGGZ9+X3lAc4NDy5e R4J7zySKywLme++rYvy8K63J0jGP38aZh0QBaTXAr5CoQYjl4TenPboFq2C0RLyX 2aaXIEpVhkaZOxdzFhstgM8EjmXKODNy9TVtBRQf8ZHfoYFplifS23trdIxTDXQq vHfO/mZ+jJw2HF8Yn4G50WtuCiiqMcF50gCuod0kCVVElo+2P4QaDZTu6kEPYDiy MrBqFXVYvfIhg/oZLjYK77SYXFxOxtSSMMDUw9y9DnGGxS9AVvacTq/AVItSCaxz CCLorYRs8CBjkpWGfwVdL+9+MVMb243xu6zBUpojGmr9Z4YkL/TAwZcFjW3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/tnbprxfw2ddCcYkavmxfsoBZswHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhFJtRpnYsaCsLKDHtRfhmrP03GOPgWw5YI zmd5A0yLL6yA4IDGndarkmt8DSKTxchPRxiUvHPQ02yovIlis/bCG6vuqoWT/cvw QA30FFkbada4pm/dkKHJviw+MFG37Ev4B5zlCmjv6gmYiT5S8DIcQcmorTIAbFbc rj/JfIEmbpFIzGmkiPc63F4rnDTzIKkWBiR93RIuvYpa2F66im8+PSjqpGj4j452 /4mabLiSmkuwZUMErbEnfFNkp0Cs0X8/zX4jI1gCmQoePYu+/1ko3lbizDC9E/6W WdI9mdiicnbKebfgQReclaO58UkEyEdEiEW3eFE5gjSQ4EBuqIo= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:29 2025 by rpki-client