$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: PJXQMPQFjnVNglB1/TliVMQl3MshbmYnFDg3uk3mlRw= Subject key identifier: D6:0B:79:D4:9A:F1:68:F9:6B:FB:1A:07:DD:84:26:D4:E4:27:CD:D6 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 38DDD3E6B85293CDB7B8B4D104F9730F371D3E18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 04DD Signing time: Mon 02 Jun 2025 02:05:08 +0000 Manifest this update: Mon 02 Jun 2025 02:00:08 +0000 Manifest next update: Thu 05 Jun 2025 11:08:08 +0000 Files and hashes: 1: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=) 2: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=) 3: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=) 4: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=) 5: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=) 6: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=) 7: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=) 8: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M=) 9: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: g7ELOwS5W3lOp9s9lwNA0m/PditHIu5b3i+yNpCPb+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 11:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:dd:d3:e6:b8:52:93:cd:b7:b8:b4:d1:04:f9:73:0f:37:1d:3e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jun 2 02:00:08 2025 GMT Not After : Jun 5 11:08:08 2025 GMT Subject: CN=D60B79D49AF168F96BFB1A07DD8426D4E427CDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:bb:64:37:10:22:c3:73:d9:1d:48:22:89: 69:90:b1:d1:f1:53:a6:3f:9d:cd:c7:d4:4b:76:75: 34:f4:ec:cf:28:a0:1c:50:be:79:c9:c8:8e:1e:b8: 67:13:36:20:a2:a5:f7:ff:73:36:58:3f:be:87:e9: 01:85:5c:b0:f2:69:5b:17:14:d6:03:93:56:f1:c5: b8:3a:29:12:32:a6:70:53:83:1e:40:a7:c3:e5:a7: 56:82:3c:b2:d3:dd:50:ee:05:c6:1c:bc:72:d7:d1: a7:bc:77:c8:ee:3e:e4:e5:de:f4:6e:a4:77:61:2c: 67:42:ed:c7:8d:5a:4d:d0:13:a2:39:da:b1:b3:92: 8d:1f:fa:b2:1d:67:cd:21:11:5d:7a:26:de:c2:c1: 82:42:f3:69:73:91:67:a1:18:6d:34:e9:e4:a1:86: 0d:b1:b6:63:09:b3:91:9f:91:cc:29:5c:b4:27:35: 6e:53:00:16:f0:a7:1e:6f:90:ef:84:53:65:14:53: 8d:ee:31:ad:d4:ed:dc:e7:11:02:85:00:b9:a9:d9: de:9d:be:7a:28:d7:79:50:09:cf:14:ed:81:f8:2c: 3d:a7:59:cd:12:e9:3a:66:11:f9:15:8b:91:8c:a2: 4d:e5:ef:4e:71:ad:30:9b:de:4c:7f:1c:64:fb:06: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0B:79:D4:9A:F1:68:F9:6B:FB:1A:07:DD:84:26:D4:E4:27:CD:D6 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ae:a6:e4:66:1a:e3:db:56:b1:7d:c2:1b:bd:fb:b8:1d:7b: 55:95:c2:6e:3b:e8:58:d8:1d:40:bd:e6:f9:01:77:46:7b:46: ba:c6:4f:88:4e:45:75:33:eb:9d:30:fa:21:de:b8:6b:b6:d4: 70:7c:fd:19:52:1b:f5:f9:10:ec:6f:a7:dc:44:6c:0c:30:5f: f1:8c:d0:28:98:7e:25:6e:84:4e:56:18:1b:e1:dc:5d:c8:68: aa:5c:af:38:f4:d0:19:b7:08:4c:86:12:b6:cc:96:08:37:d5: b5:a7:d8:5e:7a:8d:05:5e:b7:c2:53:36:03:f8:8a:15:79:b1: 4c:a6:17:ee:f5:5a:b7:a4:df:cb:f0:ea:fc:1e:b8:38:a9:cc: 91:c6:4e:89:9f:b4:76:5f:4f:ff:d5:0e:68:7d:51:ec:83:0f: 0d:5c:8c:80:49:8c:fe:83:26:0b:a3:d7:96:c3:2e:d9:50:f2: 53:73:20:54:11:f6:6a:fb:48:74:29:0b:ba:a2:a7:78:a8:0c: cc:c0:37:2e:ff:89:5e:9a:e3:ca:b5:58:ae:0b:21:4c:dc:9c: 09:2e:b1:3a:8c:99:85:14:1a:0f:6f:8d:df:fc:86:43:00:7c: c9:a2:cd:ea:de:cc:eb:44:21:46:04:83:0d:25:3f:48:ee:11: 7a:ef:85:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUON3T5rhSk823uLTRBPlzDzcdPhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA2MDIwMjAwMDhaFw0yNTA2MDUxMTA4MDhaMDMxMTAvBgNV BAMTKEQ2MEI3OUQ0OUFGMTY4Rjk2QkZCMUEwN0REODQyNkQ0RTQyN0NERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhH7tkNxAiw3PZHUgiiWmQsdHx U6Y/nc3H1Et2dTT07M8ooBxQvnnJyI4euGcTNiCipff/czZYP76H6QGFXLDyaVsX FNYDk1bxxbg6KRIypnBTgx5Ap8Plp1aCPLLT3VDuBcYcvHLX0ae8d8juPuTl3vRu pHdhLGdC7ceNWk3QE6I52rGzko0f+rIdZ80hEV16Jt7CwYJC82lzkWehGG006eSh hg2xtmMJs5GfkcwpXLQnNW5TABbwpx5vkO+EU2UUU43uMa3U7dznEQKFALmp2d6d vnoo13lQCc8U7YH4LD2nWc0S6TpmEfkVi5GMok3l705xrTCb3kx/HGT7Bn5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1gt51JrxaPlr+xoH3YQm1OQnzdYwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmupuRmGuPbVrF9whu9+7gde1WVwm476FjY HUC95vkBd0Z7RrrGT4hORXUz650w+iHeuGu21HB8/RlSG/X5EOxvp9xEbAwwX/GM 0CiYfiVuhE5WGBvh3F3IaKpcrzj00Bm3CEyGErbMlgg31bWn2F56jQVet8JTNgP4 ihV5sUymF+71Wrek38vw6vweuDipzJHGTomftHZfT//VDmh9UeyDDw1cjIBJjP6D Jguj15bDLtlQ8lNzIFQR9mr7SHQpC7qip3ioDMzANy7/iV6a48q1WK4LIUzcnAku sTqMmYUUGg9vjd/8hkMAfMmizerezOtEIUYEgw0lP0juEXrvhSQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:52 2025 by rpki-client