$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: pvvTWntZUoQX5HdILuyO3/+kKcfcKrV986oVwJ7Sorw= Subject key identifier: 5F:75:5C:25:A1:EA:10:11:7A:D6:86:5C:5C:8F:24:02:AE:2F:D3:5E Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 4338D1BA707CBA6D6317457E7765B2796B57E345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01E9 Signing time: Sat 28 Jun 2025 10:51:26 +0000 Manifest this update: Sat 28 Jun 2025 10:46:26 +0000 Manifest next update: Tue 01 Jul 2025 12:01:26 +0000 Files and hashes: 1: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: ahlH74VGzK4yyuC3Uwb5wci0tyuQtZqDYj1/gHsdzQs=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: Qh5iXUaLz085YiAao5lIIV9guQY+sWYceEeZZ6zBDJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:38:d1:ba:70:7c:ba:6d:63:17:45:7e:77:65:b2:79:6b:57:e3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Jun 28 10:46:26 2025 GMT Not After : Jul 1 12:01:26 2025 GMT Subject: CN=5F755C25A1EA10117AD6865C5C8F2402AE2FD35E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:e7:02:54:95:29:3c:62:22:a6:0d:17:da: 42:61:23:e6:98:24:52:de:10:d7:4a:42:84:95:14: 96:e2:a1:b8:f3:d7:ca:d7:eb:44:4d:f2:7d:d7:ae: 3b:bc:e2:2f:c1:2c:4a:1c:9f:42:23:c9:65:0f:58: 32:ad:6f:db:76:6f:91:9e:65:9b:ec:ee:79:d5:60: 5f:90:9e:5c:ae:84:2d:63:78:0d:cd:8b:1b:34:ca: e8:8b:6c:62:e3:6d:fa:38:19:fe:c5:b8:a8:93:4e: 07:b1:ae:56:7e:a6:6e:c6:41:f7:68:56:c4:25:9d: 03:10:95:40:5b:b3:b9:c7:06:5e:1c:d6:35:a4:1b: c7:4f:e3:4b:d5:48:89:9e:e6:f2:88:ab:87:fa:7d: 34:67:13:2c:0e:9f:8a:5a:e6:5f:17:fb:96:22:0f: b0:42:47:7f:65:c3:61:a5:53:60:13:16:3f:78:0c: 29:8d:58:ae:50:c7:07:3f:c9:98:0c:6e:13:d1:c3: af:50:3a:a8:13:a4:5b:9e:b6:38:77:30:5b:ea:91: ef:8e:74:09:56:5d:e5:b1:7e:dd:0b:cd:b9:5c:ae: d7:19:b1:df:2c:a2:87:5b:bd:9b:d2:0f:2b:0f:5c: ff:27:16:e0:49:3a:75:c8:b4:d0:44:25:c8:d8:ca: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:75:5C:25:A1:EA:10:11:7A:D6:86:5C:5C:8F:24:02:AE:2F:D3:5E X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:01:ab:df:62:b7:cd:96:b9:a8:46:68:0c:5f:40:d0:94:dd: ee:ea:73:ce:ec:e1:a7:03:61:1b:7d:12:d2:97:b6:40:bf:54: 9b:b1:dd:cf:03:5d:96:86:90:88:55:86:ee:24:ef:3b:75:6c: 01:50:2e:34:68:0a:b8:c5:e5:5f:f8:77:31:f1:05:51:4b:a0: 90:c5:cf:3f:80:89:5e:88:6e:06:18:45:c1:82:af:8e:37:8c: 71:2c:f7:cd:ee:49:d8:e6:34:2c:d1:ef:e7:49:7b:31:c2:31: 88:4e:aa:08:0f:c0:72:bb:45:bb:ef:7c:ed:d6:8e:9a:91:dc: e9:59:b4:15:ee:d1:cb:2c:61:25:6d:a7:f1:0e:2e:bc:68:57: 71:62:65:ce:d2:e4:11:97:49:db:71:0e:31:a3:cb:ba:ec:20: 72:bb:d2:3b:c6:9f:08:81:f6:04:3e:9c:a5:ef:c2:86:87:3c: cf:6f:f1:07:7c:5e:57:3d:7c:82:c9:21:18:80:1e:9f:35:21: 31:d9:f0:f1:aa:41:43:5a:e1:b1:ac:50:f7:2e:2a:ea:ff:50: 90:84:13:b3:4f:e3:b6:f6:fc:b2:84:fd:b4:18:2a:12:1b:d8: 78:78:29:7b:46:7f:a9:be:2f:2f:09:72:26:94:14:5d:ab:58: 7b:8d:a1:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzjRunB8um1jF0V+d2WyeWtX40UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA2MjgxMDQ2MjZaFw0yNTA3MDExMjAxMjZaMDMxMTAvBgNV BAMTKDVGNzU1QzI1QTFFQTEwMTE3QUQ2ODY1QzVDOEYyNDAyQUUyRkQzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HecCVJUpPGIipg0X2kJhI+aY JFLeENdKQoSVFJbiobjz18rX60RN8n3Xrju84i/BLEocn0IjyWUPWDKtb9t2b5Ge ZZvs7nnVYF+QnlyuhC1jeA3Nixs0yuiLbGLjbfo4Gf7FuKiTTgexrlZ+pm7GQfdo VsQlnQMQlUBbs7nHBl4c1jWkG8dP40vVSIme5vKIq4f6fTRnEywOn4pa5l8X+5Yi D7BCR39lw2GlU2ATFj94DCmNWK5Qxwc/yZgMbhPRw69QOqgTpFuetjh3MFvqke+O dAlWXeWxft0LzblcrtcZsd8soodbvZvSDysPXP8nFuBJOnXItNBEJcjYyvG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX3VcJaHqEBF61oZcXI8kAq4v014wHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoBq99it82WuahGaAxfQNCU3e7qc87s4acD YRt9EtKXtkC/VJux3c8DXZaGkIhVhu4k7zt1bAFQLjRoCrjF5V/4dzHxBVFLoJDF zz+AiV6IbgYYRcGCr443jHEs983uSdjmNCzR7+dJezHCMYhOqggPwHK7RbvvfO3W jpqR3OlZtBXu0cssYSVtp/EOLrxoV3FiZc7S5BGXSdtxDjGjy7rsIHK70jvGnwiB 9gQ+nKXvwoaHPM9v8Qd8Xlc9fILJIRiAHp81ITHZ8PGqQUNa4bGsUPcuKur/UJCE E7NP47b2/LKE/bQYKhIb2Hh4KXtGf6m+Ly8JciaUFF2rWHuNoTg= -----END CERTIFICATE-----Generated at Sun Jun 29 21:21:57 2025 by rpki-client