$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: tLDax+os6BBaxYw9/DlfgPfggnIXwxXKAyk7durmaX8= Subject key identifier: B9:69:B8:81:3E:C8:CD:F3:5B:07:A1:DA:7E:8D:AE:2F:FB:E6:F7:47 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 19835BC91D230E462C49F57E780B036586068826 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 56 Signing time: Thu 04 Sep 2025 03:11:53 +0000 Manifest this update: Thu 04 Sep 2025 03:06:53 +0000 Manifest next update: Sun 07 Sep 2025 12:45:53 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: gdCmwYZ5I2UKIA8Kii26NvAu7zENv3Am3I2xswXM0vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:83:5b:c9:1d:23:0e:46:2c:49:f5:7e:78:0b:03:65:86:06:88:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Sep 4 03:06:53 2025 GMT Not After : Sep 7 12:45:53 2025 GMT Subject: CN=B969B8813EC8CDF35B07A1DA7E8DAE2FFBE6F747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:e9:78:82:d8:a7:60:d8:5f:ba:64:34:af: 1b:74:c7:31:00:6e:ef:4d:59:d5:5d:7a:9d:8f:69: 39:a1:60:6b:42:f0:0a:fd:63:94:6f:14:1e:71:92: a0:ff:76:63:cb:14:36:fa:11:0c:87:ba:09:7e:97: 8e:be:66:ba:58:47:e7:cd:1a:88:df:96:be:5d:e8: f6:a5:91:e3:58:51:e5:88:04:cf:de:f4:21:06:37: 8e:df:07:a6:cc:2f:fd:80:4b:e2:2a:a6:fc:ed:96: a0:ed:a9:74:bc:db:e3:cb:06:7a:53:c4:02:1b:54: dc:ef:16:7c:a3:9d:9d:ba:f2:ba:20:69:52:93:9d: f6:8b:56:db:2f:50:82:84:32:5e:6d:b3:ae:61:42: 21:e7:c6:b3:56:6b:0d:dc:40:ad:66:db:bd:ea:fe: b7:70:33:98:e4:5d:70:f0:e3:4c:f3:05:26:89:63: b1:11:aa:67:db:c8:bf:11:c3:83:a0:00:d6:88:db: 86:8e:3d:2c:0f:48:cf:94:ef:55:18:6c:da:53:6a: 03:c6:6a:15:93:1a:70:41:80:0a:c6:65:48:71:c8: 9d:3e:97:5e:87:92:8c:84:95:a3:46:30:78:1c:7f: 31:f0:db:fe:16:0d:a1:05:ad:19:68:ef:a6:0d:56: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:B8:81:3E:C8:CD:F3:5B:07:A1:DA:7E:8D:AE:2F:FB:E6:F7:47 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:2d:3b:01:d5:6c:a1:ed:dd:5c:97:74:28:1f:84:db:b6: 21:39:5f:dd:da:db:ed:3c:54:e8:82:0b:d6:6d:93:4e:e0:1b: 52:e4:37:38:1b:62:76:a5:51:ba:6a:51:1f:01:12:7b:9e:96: 83:c5:8d:79:fc:53:6d:25:98:b6:e6:95:98:20:c9:96:76:0c: d7:f8:27:ec:90:34:3f:ea:0e:4b:71:7f:40:cc:b9:89:b6:20: 89:1c:cf:a6:df:a7:3c:0c:0e:9f:d0:71:8f:ce:80:72:3f:68: e5:79:5e:da:85:45:16:60:db:ca:47:31:6e:1d:c7:2b:bb:62: 02:6d:1c:85:72:42:2c:a0:08:b3:b1:63:24:ef:49:0b:11:64: c5:20:6f:6d:cc:ac:e5:73:55:39:43:77:53:03:2a:1d:45:3f: 89:f1:ba:36:0b:c9:40:9d:c3:c8:1b:e8:e6:d0:a2:3a:23:31: 64:e7:39:19:77:ed:97:4c:77:af:52:d2:0f:13:6b:09:a1:b3: 89:82:76:1c:e4:40:a1:3f:f8:8d:5a:1c:77:ea:1a:38:6f:b6: de:a4:39:02:1c:25:15:8d:a8:dd:6b:74:6e:f3:f0:3f:d2:c7: 4a:a0:77:ba:46:02:63:d8:ae:f1:6e:33:30:f8:97:f0:1b:ea: f4:b9:2e:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYNbyR0jDkYsSfV+eAsDZYYGiCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTA5MDQwMzA2NTNaFw0yNTA5MDcxMjQ1NTNaMDMxMTAvBgNV BAMTKEI5NjlCODgxM0VDOENERjM1QjA3QTFEQTdFOERBRTJGRkJFNkY3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7Ol4gtinYNhfumQ0rxt0xzEA bu9NWdVdep2PaTmhYGtC8Ar9Y5RvFB5xkqD/dmPLFDb6EQyHugl+l46+ZrpYR+fN Gojflr5d6PalkeNYUeWIBM/e9CEGN47fB6bML/2AS+IqpvztlqDtqXS82+PLBnpT xAIbVNzvFnyjnZ268rogaVKTnfaLVtsvUIKEMl5ts65hQiHnxrNWaw3cQK1m273q /rdwM5jkXXDw40zzBSaJY7ERqmfbyL8Rw4OgANaI24aOPSwPSM+U71UYbNpTagPG ahWTGnBBgArGZUhxyJ0+l16HkoyElaNGMHgcfzHw2/4WDaEFrRlo76YNVn4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWm4gT7IzfNbB6Hafo2uL/vm90cwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL1LTsB1Wyh7d1cl3QoH4TbtiE5X93a2+08 VOiCC9Ztk07gG1LkNzgbYnalUbpqUR8BEnueloPFjXn8U20lmLbmlZggyZZ2DNf4 J+yQND/qDktxf0DMuYm2IIkcz6bfpzwMDp/QcY/OgHI/aOV5XtqFRRZg28pHMW4d xyu7YgJtHIVyQiygCLOxYyTvSQsRZMUgb23MrOVzVTlDd1MDKh1FP4nxujYLyUCd w8gb6ObQojojMWTnORl37ZdMd69S0g8Tawmhs4mCdhzkQKE/+I1aHHfqGjhvtt6k OQIcJRWNqN1rdG7z8D/Sx0qgd7pGAmPYrvFuMzD4l/Ab6vS5Log= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:42 2025 by rpki-client