$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: TgEotUEz+/dKFhBqKgxoIoK58my9IaJIEDhWNMQ7cmg= Subject key identifier: AE:86:59:49:38:13:AC:94:37:C6:D4:B1:0E:69:44:20:E3:8E:EE:DD Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 3EA747B228E72ED0494FC46EFB75E453FC01853E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01CC Signing time: Mon 08 Sep 2025 13:10:45 +0000 Manifest this update: Mon 08 Sep 2025 13:05:45 +0000 Manifest next update: Thu 11 Sep 2025 16:29:45 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) 3: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: VajVT7XzDH4DHB0j1/5O6gnbB4ns0QkGOoMJyA7Dbq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a7:47:b2:28:e7:2e:d0:49:4f:c4:6e:fb:75:e4:53:fc:01:85:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Sep 8 13:05:45 2025 GMT Not After : Sep 11 16:29:45 2025 GMT Subject: CN=AE8659493813AC9437C6D4B10E694420E38EEEDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:74:a0:6a:75:a4:00:17:14:77:ac:cf:3c: 45:1c:ab:2a:84:20:27:a3:44:d9:17:97:55:07:23: 3f:07:16:ea:67:c8:6b:8d:56:d5:92:44:a4:dc:fc: e2:91:19:da:60:5a:a4:46:08:63:98:e4:de:66:bd: 5c:3c:27:9e:eb:a2:48:62:6f:ac:6e:14:c7:23:ac: 09:ab:eb:9d:20:ec:9c:43:0c:28:20:63:c4:6a:04: db:3a:67:5c:c0:84:7e:5d:a3:4c:d5:71:72:a3:df: e2:27:65:72:30:76:51:dc:4f:ed:ec:1f:b5:43:27: 8e:cc:a1:62:0f:ad:ac:62:3a:8c:72:83:80:b9:37: 5b:a9:e0:a2:15:fa:17:8a:88:f2:9d:00:4f:bc:89: b0:62:ea:88:48:44:5a:03:18:90:f7:fa:63:34:cc: 7e:ca:e7:a9:1a:65:09:ae:f3:81:64:8f:49:25:b4: 96:17:f8:6a:70:87:43:a4:c7:19:77:3f:5c:47:d7: 41:27:cd:67:91:21:86:4b:50:13:32:a8:d8:20:15: ff:02:81:da:bf:3c:4b:6d:c2:c9:50:2e:28:53:e2: b0:76:0f:ad:bb:fc:cd:80:87:ea:71:8a:ee:b7:b9: db:87:42:50:3c:8f:f4:75:9a:87:3b:f0:b2:b5:fe: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:86:59:49:38:13:AC:94:37:C6:D4:B1:0E:69:44:20:E3:8E:EE:DD X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:32:1c:a7:52:99:07:70:4f:a5:d2:7f:e7:3a:c6:d1:67:8d: 0c:d6:3e:70:75:da:0e:82:06:b4:29:cf:ce:13:74:49:f9:9a: 1d:73:fe:80:6f:23:a9:83:89:11:65:5d:50:b2:6c:f4:d5:f0: bf:06:4f:2e:7a:be:4c:ed:9e:74:44:2c:13:74:cb:36:a8:bc: 91:1b:6f:6e:4a:98:65:fc:c5:fd:d7:18:64:8b:8a:b6:19:34: 27:0c:70:ca:a1:9b:7a:1c:c0:90:98:51:78:46:32:20:fa:0a: b2:7f:bd:0a:83:a5:57:23:46:db:57:00:ff:34:59:21:a8:44: 2f:ce:4b:f9:4b:e4:b9:29:c0:a6:64:c2:8b:14:da:88:9f:01: 4d:39:0c:2e:b4:35:7d:16:b4:45:70:03:74:b3:8f:45:fc:44: 06:c4:5f:9d:ff:fb:9a:4c:d3:57:84:0f:51:9b:cd:d6:93:15: 1d:98:a9:52:49:dd:98:aa:9d:c0:6b:a6:31:f0:b3:eb:e2:d2: 39:e4:82:20:0c:9f:29:ef:63:9a:48:0a:80:c9:97:a5:73:d5: 06:37:b1:55:7d:3c:da:af:80:34:7c:2f:80:82:02:ee:fa:18: b3:c7:01:c5:41:b4:d1:20:e0:9d:78:62:a9:ce:a7:fd:29:5d: 2f:06:09:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqdHsijnLtBJT8Ru+3XkU/wBhT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA5MDgxMzA1NDVaFw0yNTA5MTExNjI5NDVaMDMxMTAvBgNV BAMTKEFFODY1OTQ5MzgxM0FDOTQzN0M2RDRCMTBFNjk0NDIwRTM4RUVFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkXSganWkABcUd6zPPEUcqyqE ICejRNkXl1UHIz8HFupnyGuNVtWSRKTc/OKRGdpgWqRGCGOY5N5mvVw8J57rokhi b6xuFMcjrAmr650g7JxDDCggY8RqBNs6Z1zAhH5do0zVcXKj3+InZXIwdlHcT+3s H7VDJ47MoWIPraxiOoxyg4C5N1up4KIV+heKiPKdAE+8ibBi6ohIRFoDGJD3+mM0 zH7K56kaZQmu84Fkj0kltJYX+Gpwh0Okxxl3P1xH10EnzWeRIYZLUBMyqNggFf8C gdq/PEttwslQLihT4rB2D627/M2Ah+pxiu63uduHQlA8j/R1moc78LK1/vs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroZZSTgTrJQ3xtSxDmlEIOOO7t0wHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsyHKdSmQdwT6XSf+c6xtFnjQzWPnB12g6C BrQpz84TdEn5mh1z/oBvI6mDiRFlXVCybPTV8L8GTy56vkztnnRELBN0yzaovJEb b25KmGX8xf3XGGSLirYZNCcMcMqhm3ocwJCYUXhGMiD6CrJ/vQqDpVcjRttXAP80 WSGoRC/OS/lL5LkpwKZkwosU2oifAU05DC60NX0WtEVwA3Szj0X8RAbEX53/+5pM 01eED1GbzdaTFR2YqVJJ3ZiqncBrpjHws+vi0jnkgiAMnynvY5pICoDJl6Vz1QY3 sVV9PNqvgDR8L4CCAu76GLPHAcVBtNEg4J14YqnOp/0pXS8GCWo= -----END CERTIFICATE-----Generated at Tue Sep 9 02:41:57 2025 by rpki-client