$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: ESzBFrrJb7HltcPxmpKUD7jqnokEpRLVp5bmgNGDhRw= Subject key identifier: 61:2A:25:6A:49:58:30:54:7F:F0:62:A0:B5:6C:C0:1A:B4:E4:1D:2C Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 266449AA5FA8CFDBDCDAE0F95CB372C1EC25CD7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0204 Signing time: Fri 22 Aug 2025 11:51:24 +0000 Manifest this update: Fri 22 Aug 2025 11:46:24 +0000 Manifest next update: Mon 25 Aug 2025 16:00:24 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) 3: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: TjgrDnGMet+BWISt2Vfq4MnC0dYd3xmMjBfSk/uMjmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:64:49:aa:5f:a8:cf:db:dc:da:e0:f9:5c:b3:72:c1:ec:25:cd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Aug 22 11:46:24 2025 GMT Not After : Aug 25 16:00:24 2025 GMT Subject: CN=612A256A495830547FF062A0B56CC01AB4E41D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:ea:03:d0:db:83:ee:a9:c0:c8:3a:c6:a5: c9:aa:bd:9d:de:d1:fc:e5:cd:07:44:33:93:15:0d: fc:bd:d2:43:95:ce:b6:a7:7c:01:40:19:e6:49:56: 12:ae:a1:4d:49:ae:b9:48:5e:59:bf:28:84:e3:e0: ce:65:33:2c:33:93:47:73:94:da:82:0b:c6:ac:bb: e1:00:62:76:0d:17:f9:25:00:28:ee:fd:ef:4d:74: bd:24:91:14:30:dd:a8:af:63:f5:06:36:b7:24:9e: 8b:46:3c:43:31:27:c3:dc:31:80:a3:9a:5d:82:db: 29:04:31:f1:f7:e0:d7:1e:f0:74:04:25:b0:ab:1b: 16:47:ff:82:8b:0d:bf:2e:06:24:ff:12:30:50:02: 5e:f2:61:1f:96:e1:c3:a9:91:00:d0:0f:11:ec:b3: 52:ba:5f:27:02:1d:39:c0:f8:fe:3e:7b:97:70:e5: 06:1c:2a:1f:7c:75:e6:43:4c:8a:72:69:8f:cb:85: 78:6c:a6:b4:c7:8b:30:1e:62:13:cd:e8:6c:59:c7: af:3f:6e:32:4f:34:24:20:db:4a:b5:cf:20:ac:45: bf:ea:b1:60:43:f4:bf:d9:36:31:fc:9e:d0:bd:54: cf:5c:92:73:bf:43:64:bd:b1:6c:3c:fb:b9:f0:6a: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:25:6A:49:58:30:54:7F:F0:62:A0:B5:6C:C0:1A:B4:E4:1D:2C X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:32:4c:30:f1:15:47:ba:5e:f9:49:82:0c:6c:2b:20:3a:52: ad:e0:33:bc:0e:8b:b2:66:d6:cd:e3:14:7a:fe:99:2b:60:b3: 99:c9:13:68:cb:08:e5:89:e9:f2:2f:28:47:4f:1a:6c:92:d4: 83:c3:3d:24:df:d6:eb:4c:75:a3:a9:b6:7f:28:31:69:55:35: c8:ff:cc:5a:a2:8b:d7:0e:f9:ab:ac:5c:12:04:c8:a3:ca:88: 13:83:86:6c:97:69:a7:f2:a7:e7:96:5e:3c:6c:b8:4f:e4:51: 61:a9:57:47:fb:a5:b3:ef:73:8d:04:cb:28:6e:79:19:b3:3d: 4a:df:51:f0:de:63:fe:cc:63:a1:78:25:4f:af:b3:44:3d:78: f8:9a:5d:d3:c8:cb:5a:cb:ad:e8:03:6c:3c:b0:74:dd:9e:64: 65:4b:58:73:9a:87:22:be:03:6b:b5:c9:37:a6:2c:c6:f1:99: 3a:cf:de:ae:b9:7e:d0:22:35:9c:b0:be:27:cb:3d:dd:d3:cd: a7:36:e9:16:2a:14:62:1e:31:15:5c:6b:4b:62:7f:46:ce:31: 7a:4e:11:c2:44:c3:e7:51:40:c7:3d:0b:18:e8:a4:32:c3:68: 35:7e:c0:a2:e2:88:f2:53:6c:14:1e:53:b5:e8:a0:72:65:a0: 44:b6:41:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmRJql+oz9vc2uD5XLNywewlzXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA4MjIxMTQ2MjRaFw0yNTA4MjUxNjAwMjRaMDMxMTAvBgNV BAMTKDYxMkEyNTZBNDk1ODMwNTQ3RkYwNjJBMEI1NkNDMDFBQjRFNDFEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5y+oD0NuD7qnAyDrGpcmqvZ3e 0fzlzQdEM5MVDfy90kOVzranfAFAGeZJVhKuoU1JrrlIXlm/KITj4M5lMywzk0dz lNqCC8asu+EAYnYNF/klACju/e9NdL0kkRQw3aivY/UGNrcknotGPEMxJ8PcMYCj ml2C2ykEMfH34Nce8HQEJbCrGxZH/4KLDb8uBiT/EjBQAl7yYR+W4cOpkQDQDxHs s1K6XycCHTnA+P4+e5dw5QYcKh98deZDTIpyaY/LhXhsprTHizAeYhPN6GxZx68/ bjJPNCQg20q1zyCsRb/qsWBD9L/ZNjH8ntC9VM9cknO/Q2S9sWw8+7nwalGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYSolaklYMFR/8GKgtWzAGrTkHSwwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwyTDDxFUe6XvlJggxsKyA6Uq3gM7wOi7Jm 1s3jFHr+mStgs5nJE2jLCOWJ6fIvKEdPGmyS1IPDPSTf1utMdaOptn8oMWlVNcj/ zFqii9cO+ausXBIEyKPKiBODhmyXaafyp+eWXjxsuE/kUWGpV0f7pbPvc40Eyyhu eRmzPUrfUfDeY/7MY6F4JU+vs0Q9ePiaXdPIy1rLregDbDywdN2eZGVLWHOahyK+ A2u1yTemLMbxmTrP3q65ftAiNZywvifLPd3Tzac26RYqFGIeMRVca0tif0bOMXpO EcJEw+dRQMc9CxjopDLDaDV+wKLiiPJTbBQeU7XooHJloES2QZk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:17 2025 by rpki-client