$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: b0sh93dqemJ1yVZgjMOOjhP4QYqD9xB4i4WQA7sTQk4= Subject key identifier: AF:8D:C8:CC:D3:D6:3C:F4:ED:13:0F:19:69:F3:C7:AA:36:69:25:A4 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 3093BC33374A998DC09C4559246ABB9651270CBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 0206 Signing time: Fri 05 Sep 2025 07:20:36 +0000 Manifest this update: Fri 05 Sep 2025 07:15:36 +0000 Manifest next update: Mon 08 Sep 2025 13:24:36 +0000 Files and hashes: 1: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) 3: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: 5sZT2qKWM6PyCaVjNmJomCp5M64ZGRhBpXkPMj/K7YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:93:bc:33:37:4a:99:8d:c0:9c:45:59:24:6a:bb:96:51:27:0c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Sep 5 07:15:36 2025 GMT Not After : Sep 8 13:24:36 2025 GMT Subject: CN=AF8DC8CCD3D63CF4ED130F1969F3C7AA366925A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9b:9d:7c:fb:df:44:50:da:23:29:87:0f:5d: cd:ab:e0:8b:0d:6a:81:a3:75:d7:00:a9:51:02:0a: f0:ba:a8:f5:6a:e3:7b:01:9a:9e:99:96:04:30:b5: 4d:ae:09:9e:98:1f:11:48:f0:76:fe:6a:87:31:9b: 5e:dc:d4:8e:08:eb:ba:e0:d8:8f:a1:77:97:01:3a: 65:7e:b3:1f:20:62:e5:09:a2:87:2d:8c:c8:3b:db: 5f:13:8a:4a:6a:ad:52:77:53:41:60:e5:1c:e4:e3: 05:6f:ab:2d:d6:eb:9d:f4:28:67:91:9b:04:7a:fc: e3:d0:66:77:93:89:47:a8:1f:17:e2:2a:6b:2c:bc: c3:a6:4c:86:bd:f6:d9:66:7e:ec:7c:6a:25:9d:f9: 25:e5:2f:fc:2b:94:78:c1:4c:4f:ea:20:7e:cb:82: b8:60:1f:29:4b:0a:0e:18:36:55:c2:54:7e:ad:1c: 83:38:cc:a9:0b:d3:06:7b:b1:48:ec:90:0d:18:20: 7c:c2:15:d5:a4:ad:10:9a:4d:ba:ab:12:27:3b:92: 88:b5:1b:e1:92:36:e6:76:99:df:ed:3e:4e:2f:44: 43:1e:0f:ae:ea:01:41:db:6b:47:32:f5:3e:46:15: e0:7c:8c:a1:e9:03:a7:1b:36:49:36:af:78:3a:f9: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8D:C8:CC:D3:D6:3C:F4:ED:13:0F:19:69:F3:C7:AA:36:69:25:A4 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5b:72:d1:8e:86:25:c3:91:4e:b6:52:bd:aa:8d:74:70:3f: 32:4f:0b:b4:65:d5:69:86:17:d8:b6:e1:93:68:70:04:6a:6c: e3:e3:b1:dc:63:2f:13:0d:45:bb:6b:32:b4:35:87:a8:b1:ec: b7:84:30:1b:65:85:a1:c4:d7:0a:fc:1f:97:bf:54:06:ac:fb: 94:95:9f:17:02:a0:e1:b9:38:79:c8:48:22:a6:3c:da:09:32: 61:84:7d:27:e7:5f:a7:8c:05:36:cc:81:ee:0a:f3:d4:66:7d: 1a:b7:3a:00:42:1a:24:c0:b1:f2:93:60:47:07:76:32:dd:77: c8:69:76:de:e7:5a:9e:ab:3c:11:ee:6e:d1:74:73:ef:e9:e5: 2d:37:24:42:f0:a0:5c:87:37:ab:82:bf:58:d5:5a:5d:51:c2: 44:a5:76:c1:41:6f:ea:4b:48:ca:04:98:f1:45:51:e7:fb:16: 2c:d4:da:67:1f:a1:a3:a9:e2:3d:f0:bc:90:97:7b:f8:d8:9d: 8f:d2:78:63:8d:72:17:42:cb:6e:57:d2:d6:23:10:ff:c3:59: e4:5a:41:b3:ef:96:8a:82:54:41:82:f6:65:e3:b3:74:c4:9d: 40:62:d7:dc:31:0a:d7:53:39:ba:52:1b:0d:5e:a6:4d:cc:91: 14:24:49:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJO8MzdKmY3AnEVZJGq7llEnDL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA5MDUwNzE1MzZaFw0yNTA5MDgxMzI0MzZaMDMxMTAvBgNV BAMTKEFGOERDOENDRDNENjNDRjRFRDEzMEYxOTY5RjNDN0FBMzY2OTI1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzm518+99EUNojKYcPXc2r4IsN aoGjddcAqVECCvC6qPVq43sBmp6ZlgQwtU2uCZ6YHxFI8Hb+aocxm17c1I4I67rg 2I+hd5cBOmV+sx8gYuUJooctjMg7218TikpqrVJ3U0Fg5Rzk4wVvqy3W6530KGeR mwR6/OPQZneTiUeoHxfiKmssvMOmTIa99tlmfux8aiWd+SXlL/wrlHjBTE/qIH7L grhgHylLCg4YNlXCVH6tHIM4zKkL0wZ7sUjskA0YIHzCFdWkrRCaTbqrEic7koi1 G+GSNuZ2md/tPk4vREMeD67qAUHba0cy9T5GFeB8jKHpA6cbNkk2r3g6+UxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr43IzNPWPPTtEw8ZafPHqjZpJaQwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFbctGOhiXDkU62Ur2qjXRwPzJPC7Rl1WmG F9i24ZNocARqbOPjsdxjLxMNRbtrMrQ1h6ix7LeEMBtlhaHE1wr8H5e/VAas+5SV nxcCoOG5OHnISCKmPNoJMmGEfSfnX6eMBTbMge4K89RmfRq3OgBCGiTAsfKTYEcH djLdd8hpdt7nWp6rPBHubtF0c+/p5S03JELwoFyHN6uCv1jVWl1RwkSldsFBb+pL SMoEmPFFUef7FizU2mcfoaOp4j3wvJCXe/jYnY/SeGONchdCy25X0tYjEP/DWeRa QbPvloqCVEGC9mXjs3TEnUBi19wxCtdTObpSGw1epk3MkRQkSeo= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:59 2025 by rpki-client