$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: JUT2szJir5uD43qgRE5L3vtzuaVZkeyjdrO4Qh7+fiM= Subject key identifier: CA:85:18:81:17:CE:94:D2:F8:6B:8D:00:6F:77:B0:95:0D:C5:2F:FA Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 4520D1B16D51C8D2E72CBC1908103D78035F5D7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 034E Signing time: Sat 23 Aug 2025 04:41:43 +0000 Manifest this update: Sat 23 Aug 2025 04:36:43 +0000 Manifest next update: Tue 26 Aug 2025 07:02:43 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 3: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 4: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: CRui6j5+5RhK9rSjtDrMH6Fh8CNeUjqOyxgxsGsialU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:20:d1:b1:6d:51:c8:d2:e7:2c:bc:19:08:10:3d:78:03:5f:5d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Aug 23 04:36:43 2025 GMT Not After : Aug 26 07:02:43 2025 GMT Subject: CN=CA85188117CE94D2F86B8D006F77B0950DC52FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:fd:f3:e0:4e:c9:4c:74:43:05:f5:8c:61: 5d:e2:24:9c:c3:07:c8:7d:ab:a0:eb:d8:3e:6e:a1: 74:7a:5c:e9:2f:77:50:37:4a:fd:9b:21:60:99:3c: 79:cc:c0:84:8a:eb:2c:29:9a:8b:25:a9:fd:48:a4: 03:5c:58:d8:c0:eb:1e:9b:f5:59:86:07:df:0e:bc: c4:d3:c4:16:ad:b7:11:da:d7:f0:d5:89:98:1d:1e: 22:a7:09:20:90:53:c7:72:bc:1e:02:fb:57:e3:0a: 31:7d:b8:70:62:6b:d1:a1:cc:35:7b:ef:fa:8f:27: ed:a9:73:3c:0b:8b:67:00:82:99:65:4b:c1:0b:5e: e5:f9:01:d0:02:54:ea:95:3d:c1:45:72:72:ea:6d: 94:9f:08:6d:8e:ca:82:8b:71:b2:c7:30:29:2d:36: 81:a9:bf:1b:1a:a7:b8:09:0d:a2:83:e7:f1:f8:80: f6:73:ac:5c:d9:fa:73:1c:85:f6:dc:47:49:7e:83: b1:30:2f:5a:5e:16:f8:16:68:ab:6a:da:4d:7c:e1: a4:87:d5:87:7c:ce:e2:24:23:b4:d5:0e:bc:49:cb: a2:f9:1f:e2:09:f3:89:a2:7c:60:f7:10:b0:2b:01: aa:34:f8:b1:48:8e:6a:64:ee:2b:77:84:bd:be:bf: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:18:81:17:CE:94:D2:F8:6B:8D:00:6F:77:B0:95:0D:C5:2F:FA X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:18:99:8a:8e:b9:57:15:05:35:ca:04:6c:0d:8d:b1:8c:6a: a4:0d:57:a7:54:df:66:f7:10:ac:67:cf:4b:d9:f0:e1:e4:9d: b5:84:85:15:0f:fd:f9:a9:d0:4f:05:f0:c4:47:41:55:50:89: 68:e1:54:df:d6:08:2b:34:80:65:9b:e1:e3:91:86:eb:36:6c: 9a:c4:d1:9d:d2:27:89:f4:63:6f:e2:53:1f:2e:66:d3:87:9e: 16:31:a5:09:8b:eb:fd:7b:5a:56:1e:84:ea:b8:33:75:72:06: dd:a6:fd:0b:94:c0:af:70:e8:f0:ec:78:78:85:ef:aa:99:d1: 9e:ae:c3:23:fe:96:9f:1b:40:0d:7c:35:4e:ae:b6:a4:3e:0b: a0:e5:c6:20:9f:47:3b:70:da:13:c3:1a:86:31:51:68:af:bd: 62:a3:c0:bd:87:39:2a:d8:08:43:56:ec:e8:bb:ab:31:15:a2: 36:9c:40:cd:ee:c7:aa:b4:8a:ec:32:e2:91:05:e2:0e:7d:e5: 42:db:9d:fd:83:6d:2b:11:8a:3a:24:1a:73:e7:91:ce:2f:97: 59:9e:7a:3f:d9:c7:90:23:89:f9:11:09:be:fd:1a:8d:57:72: 41:ed:2d:27:66:e1:82:e3:13:f4:b4:41:72:37:c0:ae:93:a5: b1:46:50:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSDRsW1RyNLnLLwZCBA9eANfXXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA4MjMwNDM2NDNaFw0yNTA4MjYwNzAyNDNaMDMxMTAvBgNV BAMTKENBODUxODgxMTdDRTk0RDJGODZCOEQwMDZGNzdCMDk1MERDNTJGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmP3z4E7JTHRDBfWMYV3iJJzD B8h9q6Dr2D5uoXR6XOkvd1A3Sv2bIWCZPHnMwISK6ywpmoslqf1IpANcWNjA6x6b 9VmGB98OvMTTxBattxHa1/DViZgdHiKnCSCQU8dyvB4C+1fjCjF9uHBia9GhzDV7 7/qPJ+2pczwLi2cAgpllS8ELXuX5AdACVOqVPcFFcnLqbZSfCG2OyoKLcbLHMCkt NoGpvxsap7gJDaKD5/H4gPZzrFzZ+nMchfbcR0l+g7EwL1peFvgWaKtq2k184aSH 1Yd8zuIkI7TVDrxJy6L5H+IJ84mifGD3ELArAao0+LFIjmpk7it3hL2+v5UZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyoUYgRfOlNL4a40Ab3ewlQ3FL/owHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgYmYqOuVcVBTXKBGwNjbGMaqQNV6dU32b3 EKxnz0vZ8OHknbWEhRUP/fmp0E8F8MRHQVVQiWjhVN/WCCs0gGWb4eORhus2bJrE 0Z3SJ4n0Y2/iUx8uZtOHnhYxpQmL6/17WlYehOq4M3VyBt2m/QuUwK9w6PDseHiF 76qZ0Z6uwyP+lp8bQA18NU6utqQ+C6DlxiCfRztw2hPDGoYxUWivvWKjwL2HOSrY CENW7Oi7qzEVojacQM3ux6q0iuwy4pEF4g595ULbnf2DbSsRijokGnPnkc4vl1me ej/Zx5AjifkRCb79Go1XckHtLSdm4YLjE/S0QXI3wK6TpbFGUHw= -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:34 2025 by rpki-client