$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: vM5kOVpxl4sAmN6zJdY3RRcqXP2E7NvoAhgpjXL0OL4= Subject key identifier: 92:0B:5B:2F:E8:CF:E2:93:54:85:98:7B:0C:20:15:76:08:50:60:B0 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 7662318821B31A4F59412C9E31BF401A27DAD293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 01F6 Signing time: Fri 05 Sep 2025 21:11:27 +0000 Manifest this update: Fri 05 Sep 2025 21:06:27 +0000 Manifest next update: Tue 09 Sep 2025 00:37:27 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: V8jfV9Ke+Xtx4qkUYF6KIjipjCUXLrUijfxJ5se6djY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:62:31:88:21:b3:1a:4f:59:41:2c:9e:31:bf:40:1a:27:da:d2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Sep 5 21:06:27 2025 GMT Not After : Sep 9 00:37:27 2025 GMT Subject: CN=920B5B2FE8CFE2935485987B0C201576085060B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:1c:1f:b7:dc:e8:bf:c8:8b:19:86:68:79: 6a:5d:a2:ac:ca:c0:32:a6:80:1b:a2:e9:23:0e:d9: 57:99:80:0e:1b:55:3c:dc:fd:b0:4f:4d:78:51:aa: 7e:92:c8:81:db:06:13:41:d9:22:58:9d:ae:e0:69: e5:8b:fd:b6:f1:7a:1b:ae:59:fa:9d:a7:7d:9f:72: 95:38:68:7f:a6:ac:11:a7:f4:cb:4a:b9:9d:a3:a5: 39:96:ca:c2:d4:c6:f0:7b:34:8c:93:12:e5:89:98: 0d:18:d1:69:7c:c8:d2:cc:ad:b6:70:c9:93:ba:51: 9c:dd:dd:3c:40:f6:26:b9:ae:84:bb:98:4c:ee:d9: 59:9d:3e:af:3b:a3:54:a6:24:06:c0:7c:9b:ac:49: e4:81:5e:c6:5b:2b:d8:d3:38:df:26:57:b0:11:e9: e0:5e:df:44:d9:8f:9c:1e:59:2a:b9:47:ae:e0:a4: 6b:33:47:60:ba:31:9f:86:07:15:37:b2:29:b9:4c: 1b:07:f2:e1:8d:5c:1c:30:36:1a:96:65:5c:91:e6: 94:f6:f8:11:f1:43:3a:39:fe:db:0b:0b:59:45:85: 0e:b5:f9:b1:af:f3:1e:9e:ec:0b:44:33:f5:a4:96: d5:04:22:7c:f0:44:82:77:d8:5c:95:86:a3:2a:89: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0B:5B:2F:E8:CF:E2:93:54:85:98:7B:0C:20:15:76:08:50:60:B0 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:67:e1:06:1c:51:db:87:30:cf:8b:bb:65:b1:8d:c9:36:8b: 73:ef:5d:cb:ac:4f:98:61:4f:8d:48:2a:67:63:21:ae:fc:d7: bd:b2:0f:2a:d1:22:c9:39:47:75:79:cb:51:a4:03:40:c0:5e: 7d:ef:78:43:c3:9b:c8:97:d8:01:98:d3:06:cd:d5:89:0e:e8: e1:db:dc:51:b7:90:6a:05:d9:87:75:72:0a:fd:c6:bd:9f:77: 43:18:70:d9:ff:3d:51:a2:d4:3b:f8:c8:68:fc:f6:e3:d8:d6: 56:cd:18:e8:3d:1a:14:9f:9a:bd:46:bc:fb:7e:3a:96:b9:2b: 48:bf:12:90:3d:79:5e:72:fa:b1:50:cf:cc:59:bc:73:c8:be: 2e:80:fb:f2:5f:1d:2f:4d:f0:59:f3:10:da:a6:ad:92:64:c4: 07:57:4c:b9:45:b5:5a:d5:fc:87:9a:51:e5:cc:3b:fa:98:9b: 8b:07:86:26:53:1d:56:7b:fa:11:6d:02:a1:93:22:b6:0c:27: 7f:04:ac:9c:10:0f:af:a6:8e:f1:15:20:3b:fe:50:16:9a:2c: 3b:eb:47:b8:78:58:5d:ed:78:d0:08:8b:3c:0b:1c:38:34:fe: bc:09:a9:3c:d5:4a:af:db:a4:dc:34:cf:74:68:b0:21:86:f5: ce:f8:2f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmIxiCGzGk9ZQSyeMb9AGifa0pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNTA5MDUyMTA2MjdaFw0yNTA5MDkwMDM3MjdaMDMxMTAvBgNV BAMTKDkyMEI1QjJGRThDRkUyOTM1NDg1OTg3QjBDMjAxNTc2MDg1MDYwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpBwft9zov8iLGYZoeWpdoqzK wDKmgBui6SMO2VeZgA4bVTzc/bBPTXhRqn6SyIHbBhNB2SJYna7gaeWL/bbxehuu Wfqdp32fcpU4aH+mrBGn9MtKuZ2jpTmWysLUxvB7NIyTEuWJmA0Y0Wl8yNLMrbZw yZO6UZzd3TxA9ia5roS7mEzu2VmdPq87o1SmJAbAfJusSeSBXsZbK9jTON8mV7AR 6eBe30TZj5weWSq5R67gpGszR2C6MZ+GBxU3sim5TBsH8uGNXBwwNhqWZVyR5pT2 +BHxQzo5/tsLC1lFhQ61+bGv8x6e7AtEM/WkltUEInzwRIJ32FyVhqMqie31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkgtbL+jP4pNUhZh7DCAVdghQYLAwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5n4QYcUduHMM+Lu2Wxjck2i3PvXcusT5hh T41IKmdjIa78172yDyrRIsk5R3V5y1GkA0DAXn3veEPDm8iX2AGY0wbN1YkO6OHb 3FG3kGoF2Yd1cgr9xr2fd0MYcNn/PVGi1Dv4yGj89uPY1lbNGOg9GhSfmr1GvPt+ Opa5K0i/EpA9eV5y+rFQz8xZvHPIvi6A+/JfHS9N8FnzENqmrZJkxAdXTLlFtVrV /IeaUeXMO/qYm4sHhiZTHVZ7+hFtAqGTIrYMJ38ErJwQD6+mjvEVIDv+UBaaLDvr R7h4WF3teNAIizwLHDg0/rwJqTzVSq/bpNw0z3RosCGG9c74L/4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:52 2025 by rpki-client