$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: SNMilUWq4SNONqINHSdw2NN1PecrKoyDpD43A2fvhGg= Subject key identifier: 0F:99:E7:77:2A:5D:7D:9B:23:6A:5A:C8:87:B4:1C:37:0A:E7:05:A4 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 5298CF0BC73DC2EC1E99289A7763879947BCAEE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 01A5 Signing time: Fri 05 Sep 2025 21:21:10 +0000 Manifest this update: Fri 05 Sep 2025 21:16:10 +0000 Manifest next update: Mon 08 Sep 2025 23:31:10 +0000 Files and hashes: 1: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: xaY7t+ohsCWsHgHtiK5pWWTZ3b5ezCo+I/qA3hNuKqU=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) 3: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 23:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:98:cf:0b:c7:3d:c2:ec:1e:99:28:9a:77:63:87:99:47:bc:ae:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Sep 5 21:16:10 2025 GMT Not After : Sep 8 23:31:10 2025 GMT Subject: CN=0F99E7772A5D7D9B236A5AC887B41C370AE705A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:66:f3:54:48:22:0a:e4:d3:7f:b0:27:c1: 3e:62:a3:f4:5b:d6:e1:92:15:86:c6:24:b3:d2:08: 9b:59:25:25:d8:bb:d6:eb:55:f9:22:98:42:24:47: 53:53:cb:e8:e2:70:f8:5f:e7:51:53:c5:3c:d7:e4: 19:87:ef:48:4e:4a:6f:cc:55:01:f4:e9:1c:04:d1: c9:d3:d1:92:64:f4:da:75:46:3d:dd:0b:2a:33:55: 8b:5b:64:07:47:eb:14:cc:ed:09:56:54:5b:f4:27: e7:77:d4:ae:49:46:c8:f6:e6:e9:dd:ac:59:dd:38: 4f:b7:44:6a:53:9f:42:ca:75:2b:bf:53:65:dd:bc: e6:c5:a0:66:cf:f5:4e:f2:69:28:ab:36:2e:3d:a8: f4:34:6c:fc:6b:5a:4b:3e:85:32:50:5d:e6:28:97: d7:b1:24:86:a1:0f:d7:dd:65:3a:6f:30:7b:f6:e7: b3:78:d9:1e:e6:f5:28:82:76:8f:3a:e9:8b:2a:02: 3c:03:1d:ce:66:3b:6a:79:fd:e4:09:55:35:19:fd: 2c:b2:fb:97:ed:bc:69:82:29:7d:3d:08:57:cd:18: cc:e2:4d:9a:0c:e0:19:66:eb:02:5e:3c:60:30:8b: 14:00:57:83:48:0a:db:c5:43:81:8b:e3:01:7f:aa: ee:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:99:E7:77:2A:5D:7D:9B:23:6A:5A:C8:87:B4:1C:37:0A:E7:05:A4 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:07:2c:74:4d:d1:14:49:c1:b0:89:2e:d6:0a:b9:e0:dc:72: ab:7b:95:05:36:39:b0:4c:c3:8f:cb:96:76:65:93:91:8d:14: 75:19:c5:f2:65:55:31:d0:43:eb:06:69:78:38:8b:e1:a4:40: 4e:58:17:29:1c:39:ba:d4:c5:cd:d8:85:89:64:30:3a:b4:cb: 0f:9f:59:8e:bc:6f:d0:89:81:9c:ec:4e:3a:be:d8:b8:39:78: 78:22:98:4b:f4:91:ac:b7:4d:d9:b3:bd:8e:c4:53:05:41:6a: 53:1f:34:ca:50:80:20:34:58:06:b5:7a:b3:22:cc:5b:51:e8: 1c:2e:60:d5:7f:a1:dc:66:fa:7b:bc:f8:3a:2e:ec:2d:7e:23: 6b:36:8c:4a:09:6e:c9:fa:fd:79:93:d5:33:7a:f1:f5:9c:7d: 89:c2:fa:7f:1b:3e:54:a7:f8:52:00:46:b0:23:af:0e:1e:54: 6a:a4:db:ab:9d:b9:55:10:86:ec:15:82:e7:a6:40:b1:28:4c: 70:d3:52:48:89:52:02:82:ab:8a:05:b4:b6:6d:f1:6e:f6:14: 6a:9f:1b:b7:5d:1f:62:97:56:22:f4:b0:63:b2:4f:7b:c3:73: af:96:64:39:f9:9d:46:f0:0f:ba:c6:2c:89:8d:02:ea:4e:ba: d3:6e:85:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpjPC8c9wuwemSiad2OHmUe8rukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA5MDUyMTE2MTBaFw0yNTA5MDgyMzMxMTBaMDMxMTAvBgNV BAMTKDBGOTlFNzc3MkE1RDdEOUIyMzZBNUFDODg3QjQxQzM3MEFFNzA1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fmbzVEgiCuTTf7AnwT5io/Rb 1uGSFYbGJLPSCJtZJSXYu9brVfkimEIkR1NTy+jicPhf51FTxTzX5BmH70hOSm/M VQH06RwE0cnT0ZJk9Np1Rj3dCyozVYtbZAdH6xTM7QlWVFv0J+d31K5JRsj25und rFndOE+3RGpTn0LKdSu/U2XdvObFoGbP9U7yaSirNi49qPQ0bPxrWks+hTJQXeYo l9exJIahD9fdZTpvMHv257N42R7m9SiCdo866YsqAjwDHc5mO2p5/eQJVTUZ/Syy +5ftvGmCKX09CFfNGMziTZoM4Blm6wJePGAwixQAV4NICtvFQ4GL4wF/qu5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5nndypdfZsjalrIh7QcNwrnBaQwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgHLHRN0RRJwbCJLtYKueDccqt7lQU2ObBM w4/LlnZlk5GNFHUZxfJlVTHQQ+sGaXg4i+GkQE5YFykcObrUxc3YhYlkMDq0yw+f WY68b9CJgZzsTjq+2Lg5eHgimEv0kay3TdmzvY7EUwVBalMfNMpQgCA0WAa1erMi zFtR6BwuYNV/odxm+nu8+Dou7C1+I2s2jEoJbsn6/XmT1TN68fWcfYnC+n8bPlSn +FIARrAjrw4eVGqk26uduVUQhuwVguemQLEoTHDTUkiJUgKCq4oFtLZt8W72FGqf G7ddH2KXViL0sGOyT3vDc6+WZDn5nUbwD7rGLImNAupOutNuhX8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:07 2025 by rpki-client