$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: P8TDVkeodXNixjEKBdAq7h+VkzUrc5tyn/4gV8if4es= Subject key identifier: 6F:72:CB:A6:26:E4:EB:31:98:30:79:C5:99:9A:3E:CA:B5:E8:00:9E Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 7F28B0182BB90A4BB5C98AB1092AD084BE343797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 01D3 Signing time: Thu 21 Aug 2025 23:00:51 +0000 Manifest this update: Thu 21 Aug 2025 22:55:51 +0000 Manifest next update: Mon 25 Aug 2025 03:24:51 +0000 Files and hashes: 1: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: T6PZECZFYPeimojlhiswCPmqW4G1QRptUt6NmiL5OnU=) 2: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:28:b0:18:2b:b9:0a:4b:b5:c9:8a:b1:09:2a:d0:84:be:34:37:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Aug 21 22:55:51 2025 GMT Not After : Aug 25 03:24:51 2025 GMT Subject: CN=6F72CBA626E4EB31983079C5999A3ECAB5E8009E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:28:87:f5:d2:d8:fd:41:19:b5:a4:9c:7f: 86:33:4b:04:91:d4:ee:d3:1a:57:e2:8d:b8:02:fa: c4:8d:55:8a:0d:ee:57:31:7e:f1:1d:f3:71:4d:97: 48:f1:27:4e:b2:26:43:93:21:77:43:aa:dc:a2:aa: 14:20:71:cc:37:f5:4f:27:15:ad:7d:44:aa:8b:90: 2d:bd:0c:c7:8e:30:9c:6c:12:29:4f:e2:8d:4e:5b: 0b:d0:78:5f:c2:6e:1c:68:dc:f4:5c:3f:27:3c:3b: 92:f1:ba:25:ab:de:28:13:c1:e6:a4:02:f3:b8:61: 2c:66:f6:5a:46:f9:9f:00:71:e4:ea:ae:11:58:7e: ae:80:f4:13:91:c1:bd:a7:97:d0:7d:c9:68:20:b6: 7c:b7:d3:1d:4a:54:76:25:54:ec:a0:0c:0f:1b:30: 79:c7:68:be:76:c5:e9:87:1d:b6:75:31:37:a8:8e: 7b:0a:9e:43:73:ea:b7:65:d8:57:a1:4a:fd:03:ca: 80:0d:ca:49:78:74:ea:1f:e7:9f:1c:fc:a8:4e:23: b6:f0:ba:f0:7b:3a:5a:47:54:98:6a:a2:6d:1a:4e: dc:d1:ee:3d:b2:ec:83:dd:57:e4:db:5c:e7:1b:41: ad:3f:c2:4e:91:51:b5:2f:c7:d7:1f:8f:9e:f8:90: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:72:CB:A6:26:E4:EB:31:98:30:79:C5:99:9A:3E:CA:B5:E8:00:9E X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:98:9d:b5:89:2d:b2:d0:24:7a:29:ec:c6:52:46:e7:03:65: e4:34:3c:a8:3b:81:35:24:c2:83:e1:af:f7:fc:ec:ff:bc:40: 1e:29:cc:6a:b6:4e:63:1f:3d:e2:37:d4:ae:5c:36:c4:12:2d: f4:cf:97:f3:08:52:8b:3b:41:7e:53:02:96:f1:7d:29:a3:19: b1:b9:fc:7d:c0:a7:d3:1c:0c:cf:c3:48:25:e7:f1:3c:ad:44: 4a:8a:c3:35:61:3e:ff:95:6e:be:47:9a:90:fc:c4:7f:eb:6b: bd:f1:d1:e5:74:36:76:26:21:8d:7d:76:fe:30:85:a8:e1:3a: f0:39:2e:dc:61:85:19:f3:d8:6b:ad:65:6d:af:06:a1:fb:6a: 04:21:e5:0d:9b:a5:bc:b7:86:9d:42:9e:aa:28:f2:45:32:57: fb:2c:0d:e4:18:c4:e3:66:d6:ba:ef:e6:07:24:f4:e4:10:a8: dd:2f:6a:46:6b:a9:d9:aa:29:e6:fa:39:95:70:ba:30:00:54: b9:db:dc:0a:90:4d:37:8a:cf:07:61:56:9a:34:87:e4:13:8a: e9:3c:90:9e:13:ca:90:eb:76:34:bb:10:00:08:6e:22:9a:05: 0d:fb:f1:8e:19:24:23:e0:02:b3:72:a6:19:3d:e8:11:8f:0b: e6:19:57:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyiwGCu5Cku1yYqxCSrQhL40N5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA4MjEyMjU1NTFaFw0yNTA4MjUwMzI0NTFaMDMxMTAvBgNV BAMTKDZGNzJDQkE2MjZFNEVCMzE5ODMwNzlDNTk5OUEzRUNBQjVFODAwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNSiH9dLY/UEZtaScf4YzSwSR 1O7TGlfijbgC+sSNVYoN7lcxfvEd83FNl0jxJ06yJkOTIXdDqtyiqhQgccw39U8n Fa19RKqLkC29DMeOMJxsEilP4o1OWwvQeF/Cbhxo3PRcPyc8O5LxuiWr3igTweak AvO4YSxm9lpG+Z8AceTqrhFYfq6A9BORwb2nl9B9yWggtny30x1KVHYlVOygDA8b MHnHaL52xemHHbZ1MTeojnsKnkNz6rdl2FehSv0DyoANykl4dOof558c/KhOI7bw uvB7OlpHVJhqom0aTtzR7j2y7IPdV+TbXOcbQa0/wk6RUbUvx9cfj574kG/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3LLpibk6zGYMHnFmZo+yrXoAJ4wHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmYnbWJLbLQJHop7MZSRucDZeQ0PKg7gTUk woPhr/f87P+8QB4pzGq2TmMfPeI31K5cNsQSLfTPl/MIUos7QX5TApbxfSmjGbG5 /H3Ap9McDM/DSCXn8TytREqKwzVhPv+Vbr5HmpD8xH/ra73x0eV0NnYmIY19dv4w hajhOvA5LtxhhRnz2GutZW2vBqH7agQh5Q2bpby3hp1Cnqoo8kUyV/ssDeQYxONm 1rrv5gck9OQQqN0vakZrqdmqKeb6OZVwujAAVLnb3AqQTTeKzwdhVpo0h+QTiuk8 kJ4TypDrdjS7EAAIbiKaBQ378Y4ZJCPgArNyphk96BGPC+YZV+s= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:34 2025 by rpki-client