$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: KmWtHq61w0bDZeifW1SbyknnnyAOBm49bfuYCOyNRF4= Subject key identifier: F5:69:0F:8E:F4:53:76:98:08:04:E4:C8:90:F6:59:BB:AE:E9:96:C4 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 2CFB22AF14664A36A676CF1ED5DCA00810ECEFB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 01BB Signing time: Sun 29 Jun 2025 06:30:50 +0000 Manifest this update: Sun 29 Jun 2025 06:25:50 +0000 Manifest next update: Wed 02 Jul 2025 12:01:50 +0000 Files and hashes: 1: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: deAEmu4MHFP07bICu+uJHOH+TJCqKyT22X5SceBZm70=) 2: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 12:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fb:22:af:14:66:4a:36:a6:76:cf:1e:d5:dc:a0:08:10:ec:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Jun 29 06:25:50 2025 GMT Not After : Jul 2 12:01:50 2025 GMT Subject: CN=F5690F8EF45376980804E4C890F659BBAEE996C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:46:24:c9:ae:ec:9c:7d:5e:9a:63:6a:ee: ea:9c:44:2c:79:e2:1e:c7:de:2e:83:7f:7b:84:d9: f3:83:ff:7e:2a:d3:a2:ac:41:7b:7e:19:49:af:f4: 3b:95:e2:64:41:c5:0e:0e:9d:c8:d1:21:1b:a2:43: 5b:2a:f5:de:a7:ba:27:02:b5:5f:22:3d:3f:ac:bd: 23:21:ba:5a:33:34:91:b7:c6:d3:6c:4e:ac:0f:42: ec:85:89:3c:33:9e:81:68:f3:4a:ee:e6:fe:94:a2: 57:b2:8c:58:18:c0:14:74:19:ea:4c:50:7f:ae:a2: 6a:32:77:12:f5:68:a7:1f:23:d2:33:95:e6:1f:a4: c3:08:32:67:9b:5f:0e:40:75:73:70:13:ba:63:9f: f6:fe:03:37:98:1a:97:4a:0d:04:31:fa:d5:30:54: 58:e6:1b:b1:bb:2d:42:73:2e:88:91:ae:2b:32:a3: 02:d3:ce:6d:d6:a3:e2:a9:4c:ff:af:40:c4:9f:c1: 29:81:4c:8c:1c:69:13:f0:ef:fc:18:50:fc:9c:1a: d0:38:40:57:95:50:f4:ed:63:2c:1e:a7:bb:4a:b1: 04:0d:01:e1:7d:e8:65:5e:09:d3:73:65:d4:62:ff: e3:d7:e3:60:3b:a4:cf:fa:ea:71:d5:0b:c9:9e:c5: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:69:0F:8E:F4:53:76:98:08:04:E4:C8:90:F6:59:BB:AE:E9:96:C4 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:47:03:4b:91:72:c0:12:65:cc:8c:4f:51:d2:e0:8c:d2:d7: 72:9f:66:87:40:87:f4:da:b5:41:5f:68:d5:9f:fb:fd:2f:a7: 2b:70:72:22:63:83:53:1d:66:58:01:4c:e1:a0:06:84:50:bd: 14:a3:61:d5:7b:c0:ac:cd:22:0e:d3:5e:d5:c3:84:fa:a7:9b: b4:93:fa:64:71:ed:42:b6:2f:31:62:5a:8a:0c:fb:a8:54:3c: 65:ae:67:c1:f2:b0:63:e7:00:6f:c9:76:76:71:30:86:b9:78: 14:6f:da:91:f2:1c:2a:f2:0a:87:a5:3d:3e:64:ca:87:06:78: 12:77:29:72:82:72:b1:41:25:bb:ca:5b:de:1f:02:33:9c:67: 37:e1:d7:89:51:03:01:6a:45:10:b0:c3:ae:d7:c7:d8:fe:fd: 0a:4c:6b:19:72:52:05:cd:6a:98:df:89:a8:94:82:fe:99:66: a0:f3:d3:27:97:36:8e:a7:48:35:06:49:1d:76:b5:0e:fc:a2: 00:7f:d1:7b:08:23:ef:ac:b3:d4:f3:3d:30:4e:ce:59:f0:89: a7:e2:e0:8b:e9:a2:61:ad:b5:af:5f:cd:f2:6a:67:8b:ee:4c: f1:59:4c:1d:40:65:5e:ec:6e:c8:07:9c:cc:12:88:62:f7:53: e3:c9:be:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPsirxRmSjamds8e1dygCBDs77gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA2MjkwNjI1NTBaFw0yNTA3MDIxMjAxNTBaMDMxMTAvBgNV BAMTKEY1NjkwRjhFRjQ1Mzc2OTgwODA0RTRDODkwRjY1OUJCQUVFOTk2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcUYkya7snH1emmNq7uqcRCx5 4h7H3i6Df3uE2fOD/34q06KsQXt+GUmv9DuV4mRBxQ4OncjRIRuiQ1sq9d6nuicC tV8iPT+svSMhulozNJG3xtNsTqwPQuyFiTwznoFo80ru5v6UoleyjFgYwBR0GepM UH+uomoydxL1aKcfI9IzleYfpMMIMmebXw5AdXNwE7pjn/b+AzeYGpdKDQQx+tUw VFjmG7G7LUJzLoiRrisyowLTzm3Wo+KpTP+vQMSfwSmBTIwcaRPw7/wYUPycGtA4 QFeVUPTtYywep7tKsQQNAeF96GVeCdNzZdRi/+PX42A7pM/66nHVC8mexYqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9WkPjvRTdpgIBOTIkPZZu67plsQwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBHA0uRcsASZcyMT1HS4IzS13KfZodAh/Ta tUFfaNWf+/0vpytwciJjg1MdZlgBTOGgBoRQvRSjYdV7wKzNIg7TXtXDhPqnm7ST +mRx7UK2LzFiWooM+6hUPGWuZ8HysGPnAG/JdnZxMIa5eBRv2pHyHCryCoelPT5k yocGeBJ3KXKCcrFBJbvKW94fAjOcZzfh14lRAwFqRRCww67Xx9j+/QpMaxlyUgXN apjfiaiUgv6ZZqDz0yeXNo6nSDUGSR12tQ78ogB/0XsII++ss9TzPTBOzlnwiafi 4IvpomGtta9fzfJqZ4vuTPFZTB1AZV7sbsgHnMwSiGL3U+PJvmo= -----END CERTIFICATE-----Generated at Mon Jun 30 13:29:08 2025 by rpki-client