$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: AOiu3oVuYwQaSNf/dd8sWpqXTieVgfqi9lIRy+GlvTI= Subject key identifier: 3D:28:50:88:51:E5:9E:DD:E0:39:EE:5C:95:68:22:30:A4:43:36:94 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 1AF678A0F8C1679ED6E651B5919B293CBD449BCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 01ED Signing time: Sun 19 Oct 2025 10:00:51 +0000 Manifest this update: Sun 19 Oct 2025 09:55:51 +0000 Manifest next update: Wed 22 Oct 2025 19:32:51 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: i6rlAflUuvcJlurcpNf99e7DLOf+mdDeFgv13yPbBbU=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f6:78:a0:f8:c1:67:9e:d6:e6:51:b5:91:9b:29:3c:bd:44:9b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Oct 19 09:55:51 2025 GMT Not After : Oct 22 19:32:51 2025 GMT Subject: CN=3D28508851E59EDDE039EE5C95682230A4433694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:14:1d:11:cc:4d:01:a5:ff:a7:59:9f:f7: d2:17:b2:a6:36:d0:7e:8b:21:9c:82:9b:d0:04:a4: 28:ed:a1:5a:75:b7:79:8a:90:b7:11:2f:be:b5:41: 60:e8:d8:03:e4:68:29:14:4b:89:d3:67:29:9c:b3: d9:25:fe:58:55:d5:61:0a:26:02:e5:a8:e2:e8:b5: ef:67:60:3c:29:6a:57:2b:3f:6b:4b:95:aa:4d:59: ca:3d:00:ec:62:c4:59:0f:de:57:ad:53:65:ae:43: ff:a0:ea:3a:4b:76:15:45:63:14:f5:60:d7:4f:f3: 2f:91:a7:59:0f:e9:15:4c:2a:7a:0b:03:db:de:21: 01:97:40:da:92:60:11:f4:e5:dc:e5:2f:37:f2:48: 4e:a9:a9:3a:1f:8a:1d:01:3d:b1:1e:6f:d3:04:82: 66:84:11:f0:b5:57:54:3c:82:a9:c7:7e:fd:3b:9e: 85:2b:6d:1b:bd:07:e6:8c:65:76:2c:a4:7c:55:57: 99:8a:70:c2:84:78:5e:92:26:65:23:08:26:43:71: 78:de:52:63:42:75:59:8f:36:0c:01:f6:b9:41:7a: fa:2c:e5:5f:b3:57:f5:5d:19:fe:c5:4d:0e:10:db: d2:84:92:80:b6:8e:52:d0:05:2b:c6:12:61:1a:aa: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:28:50:88:51:E5:9E:DD:E0:39:EE:5C:95:68:22:30:A4:43:36:94 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6a:6f:da:56:f2:be:43:41:d6:73:4a:a9:9f:d7:f5:3d:10: f1:08:2a:96:c5:4e:10:14:f3:46:50:0c:d9:40:a7:0d:17:8e: b9:5c:34:d8:70:f5:83:99:df:7e:72:8b:30:87:fc:0c:e7:c7: 07:01:a5:aa:59:3d:88:e2:a3:ec:f1:1e:7b:ab:56:7e:f6:6e: f7:e5:b6:fa:dc:61:9c:91:08:b4:b1:75:92:06:8e:f6:74:4d: 2b:72:cd:f4:da:22:d1:99:92:bf:23:3a:c1:16:9e:c7:d2:57: ec:cc:cf:65:a0:35:69:13:ff:9e:17:8f:68:8a:81:99:c7:cc: 80:97:67:6e:bc:b1:f9:87:33:35:03:03:e5:ff:82:38:07:c9: ee:2f:0d:e5:47:f7:15:c4:67:b0:fb:56:1a:18:42:91:32:98: a2:f2:25:67:b7:20:d3:06:95:1c:d3:bc:dc:49:2e:94:65:df: b2:00:fa:6c:c2:99:fd:92:4e:62:9f:63:9a:14:eb:fc:79:bf: e8:b2:79:31:ca:3e:85:30:5e:5f:c8:ea:9e:70:c9:a7:dd:80: ef:82:81:b7:7f:26:b1:c3:a8:7b:e8:e8:0f:b8:46:57:14:d3: 88:7e:17:83:ae:0b:56:c1:53:c9:60:56:b2:08:db:c2:3b:25: 26:24:08:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvZ4oPjBZ57W5lG1kZspPL1Em8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTEwMTkwOTU1NTFaFw0yNTEwMjIxOTMyNTFaMDMxMTAvBgNV BAMTKDNEMjg1MDg4NTFFNTlFRERFMDM5RUU1Qzk1NjgyMjMwQTQ0MzM2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QhQdEcxNAaX/p1mf99IXsqY2 0H6LIZyCm9AEpCjtoVp1t3mKkLcRL761QWDo2APkaCkUS4nTZymcs9kl/lhV1WEK JgLlqOLote9nYDwpalcrP2tLlapNWco9AOxixFkP3letU2WuQ/+g6jpLdhVFYxT1 YNdP8y+Rp1kP6RVMKnoLA9veIQGXQNqSYBH05dzlLzfySE6pqTofih0BPbEeb9ME gmaEEfC1V1Q8gqnHfv07noUrbRu9B+aMZXYspHxVV5mKcMKEeF6SJmUjCCZDcXje UmNCdVmPNgwB9rlBevos5V+zV/VdGf7FTQ4Q29KEkoC2jlLQBSvGEmEaqrizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPShQiFHlnt3gOe5clWgiMKRDNpQwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxqb9pW8r5DQdZzSqmf1/U9EPEIKpbFThAU 80ZQDNlApw0XjrlcNNhw9YOZ335yizCH/AznxwcBpapZPYjio+zxHnurVn72bvfl tvrcYZyRCLSxdZIGjvZ0TStyzfTaItGZkr8jOsEWnsfSV+zMz2WgNWkT/54Xj2iK gZnHzICXZ268sfmHMzUDA+X/gjgHye4vDeVH9xXEZ7D7VhoYQpEymKLyJWe3INMG lRzTvNxJLpRl37IA+mzCmf2STmKfY5oU6/x5v+iyeTHKPoUwXl/I6p5wyafdgO+C gbd/JrHDqHvo6A+4RlcU04h+F4OuC1bBU8lgVrII28I7JSYkCEc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:32 2025 by rpki-client