$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: Ie58ENoluxCDazY7p8fFBjvUpfF/deixrL0u8Z9fc30= Subject key identifier: 61:99:23:09:F4:11:52:37:AF:5C:74:89:11:3F:DD:72:51:16:04:D4 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 7BA54D36B91B9482CC29DE6EF4837A39604BD17E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 0506 Signing time: Wed 03 Sep 2025 04:32:03 +0000 Manifest this update: Wed 03 Sep 2025 04:27:03 +0000 Manifest next update: Sat 06 Sep 2025 13:56:03 +0000 Files and hashes: 1: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=) 2: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: WLyE/dWCGvTRLhmyC1oLvlwpBZeQDtc5Vluyv6p3g5A=) 3: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=) 4: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=) 5: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=) 6: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=) 7: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=) 8: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M=) 9: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 13:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a5:4d:36:b9:1b:94:82:cc:29:de:6e:f4:83:7a:39:60:4b:d1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Sep 3 04:27:03 2025 GMT Not After : Sep 6 13:56:03 2025 GMT Subject: CN=61992309F4115237AF5C7489113FDD72511604D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:d6:90:37:04:d8:30:8e:59:8a:aa:0f:00: 62:84:ae:66:ab:52:98:a6:df:7e:2c:0e:51:df:c3: 93:68:c1:80:98:06:9c:47:6a:20:57:00:0f:cc:02: 18:69:b5:ae:ae:bc:e6:7f:8a:7c:80:4b:52:41:e9: 8a:f8:f5:78:c3:6f:b1:1f:de:87:49:0d:2c:ef:3e: 3c:01:48:77:8d:4b:97:db:79:81:4e:6d:53:21:e8: 08:57:44:5b:1e:cc:94:7e:fb:69:04:09:6c:1f:74: 99:c5:50:22:ad:86:70:de:33:d8:d6:0e:73:10:46: 97:4b:b4:46:d8:26:4b:b7:8a:e2:53:67:20:f5:63: c4:e0:5b:e6:88:41:21:94:38:3a:a4:54:c6:10:65: ae:04:44:d4:b6:39:0e:87:66:e9:13:56:6b:6a:b9: cf:0c:65:11:6e:c1:9b:dc:24:27:49:62:de:a7:04: d9:89:11:00:ab:80:40:3f:eb:05:21:71:4d:04:62: 6c:f7:e8:c8:e0:13:ad:d8:b1:a0:ae:4e:e3:11:be: 0e:e0:a4:27:d1:24:9c:45:7c:b2:c0:36:45:1d:6d: 3b:ac:ce:77:0f:9a:b5:c5:df:b9:44:d1:fc:6f:ac: 08:22:21:22:13:a7:77:e4:57:64:fa:d1:95:a1:80: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:23:09:F4:11:52:37:AF:5C:74:89:11:3F:DD:72:51:16:04:D4 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:eb:c5:0f:22:30:76:21:02:6e:12:ba:e5:0a:a9:d3:90:be: ab:7b:08:4a:e2:58:cf:3a:26:8b:e0:48:ec:77:b6:d6:90:a9: 19:3c:78:9c:86:53:28:d9:a9:23:f8:81:e2:b0:c5:5a:b6:65: 45:dc:ee:2a:ac:59:fd:76:14:9b:e0:41:4a:ad:7d:5d:8e:67: 3d:d5:29:e3:3a:d1:c1:8e:58:de:2a:26:82:de:10:30:30:1a: ee:28:26:ea:9a:6a:2f:26:ee:76:40:8d:a1:51:9c:8f:27:45: e5:74:35:d9:eb:09:c2:fa:ae:3c:f0:c6:51:41:04:02:f7:71: 43:b5:82:5c:54:4b:c3:26:62:5b:bd:64:38:d7:48:76:e1:ff: ed:de:c3:30:46:6c:39:6e:dd:d3:ac:1b:01:11:98:9d:ae:25: dc:d0:9a:ce:ca:e3:e8:a4:85:8c:b4:df:3e:89:51:77:55:9f: a6:90:7d:a0:36:9b:5d:a5:cc:b1:c3:41:2f:ee:21:a9:57:59: 37:c4:cc:a6:e6:70:56:3e:d2:d1:7b:60:99:08:97:ec:e9:9f: 54:ab:00:7f:3e:ff:f9:dd:30:db:9e:19:02:d0:f1:a9:71:5d: 52:f2:cf:bd:95:88:1e:f2:e6:d8:e9:aa:a0:41:15:69:11:f0: 06:47:69:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6VNNrkblILMKd5u9IN6OWBL0X4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA5MDMwNDI3MDNaFw0yNTA5MDYxMzU2MDNaMDMxMTAvBgNV BAMTKDYxOTkyMzA5RjQxMTUyMzdBRjVDNzQ4OTExM0ZERDcyNTExNjA0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb59aQNwTYMI5ZiqoPAGKErmar Upim334sDlHfw5NowYCYBpxHaiBXAA/MAhhpta6uvOZ/inyAS1JB6Yr49XjDb7Ef 3odJDSzvPjwBSHeNS5fbeYFObVMh6AhXRFsezJR++2kECWwfdJnFUCKthnDeM9jW DnMQRpdLtEbYJku3iuJTZyD1Y8TgW+aIQSGUODqkVMYQZa4ERNS2OQ6HZukTVmtq uc8MZRFuwZvcJCdJYt6nBNmJEQCrgEA/6wUhcU0EYmz36MjgE63YsaCuTuMRvg7g pCfRJJxFfLLANkUdbTuszncPmrXF37lE0fxvrAgiISITp3fkV2T60ZWhgLA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZkjCfQRUjevXHSJET/dclEWBNQwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHrxQ8iMHYhAm4SuuUKqdOQvqt7CEriWM86 JovgSOx3ttaQqRk8eJyGUyjZqSP4geKwxVq2ZUXc7iqsWf12FJvgQUqtfV2OZz3V KeM60cGOWN4qJoLeEDAwGu4oJuqaai8m7nZAjaFRnI8nReV0NdnrCcL6rjzwxlFB BAL3cUO1glxUS8MmYlu9ZDjXSHbh/+3ewzBGbDlu3dOsGwERmJ2uJdzQms7K4+ik hYy03z6JUXdVn6aQfaA2m12lzLHDQS/uIalXWTfEzKbmcFY+0tF7YJkIl+zpn1Sr AH8+//ndMNueGQLQ8alxXVLyz72ViB7y5tjpqqBBFWkR8AZHaYk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:19 2025 by rpki-client