$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: 8wgvza+mQC4NBGPXzS1JeHShH+Hwt/7bwtVHKMKtpIM= Subject key identifier: 31:ED:D4:E5:17:EF:39:E6:D0:5B:9F:A9:57:1F:F1:A4:B8:B9:6F:75 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 6649F52A8DC6E8A232FF9AFC4F037BC6973A0301 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: 66 Signing time: Sat 05 Jul 2025 07:41:00 +0000 Manifest this update: Sat 05 Jul 2025 07:36:00 +0000 Manifest next update: Tue 08 Jul 2025 17:08:00 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oo6mbVmnsw7e/0gjMVSA14EiHwAIiPeTDgFb+zR54Og=) 2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: WHnXa3+l2BVF9pDA34p2y5MPrgNJ1xOLxXqgijc3bbM=) 3: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: SSz0FH9OJV8hlGAC05Kx9zjUDYvlDSKSzXcXaMHUajQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:49:f5:2a:8d:c6:e8:a2:32:ff:9a:fc:4f:03:7b:c6:97:3a:03:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Jul 5 07:36:00 2025 GMT Not After : Jul 8 17:08:00 2025 GMT Subject: CN=31EDD4E517EF39E6D05B9FA9571FF1A4B8B96F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:84:4f:df:2d:d0:2b:e8:af:10:17:32:3a: 46:02:14:0a:44:00:8b:67:70:2f:3a:48:16:6b:89: 59:f4:a0:0f:73:64:c4:89:88:12:a9:ce:1e:8d:57: 0e:a6:4e:7c:9a:16:09:80:54:6f:fd:85:5d:12:c8: 2e:06:62:1e:19:1c:3e:c4:5f:69:a7:33:c5:66:16: 4b:b6:ea:fa:f1:94:c8:f9:05:62:ce:36:95:63:a7: 5c:95:10:20:c4:d3:85:2b:56:ab:d9:66:c0:5c:98: 57:3c:99:24:bc:15:73:55:a5:06:b2:54:4c:af:b3: 17:be:4d:c9:70:0f:b6:d8:7d:72:b8:3b:f2:99:2c: aa:52:4c:ba:c8:7e:dc:08:28:d6:4a:10:6f:51:fc: 8d:f3:88:25:6e:ed:69:33:bf:bb:e5:7f:1c:e2:72: 48:4e:7e:75:ff:f3:6f:91:68:f3:5c:60:75:a2:eb: 4d:29:36:b2:eb:0b:37:ff:b6:fd:46:5c:32:9c:c3: 34:55:db:be:d2:8b:71:f2:d4:2a:f1:1d:74:8e:e1: 89:af:b7:58:05:ee:1a:5a:30:38:fe:4c:f6:7f:fa: ff:57:56:65:36:aa:d3:92:6c:2a:ac:36:8f:b7:69: f8:7c:4c:de:23:6b:9b:46:57:ed:e5:c6:85:4c:c0: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:ED:D4:E5:17:EF:39:E6:D0:5B:9F:A9:57:1F:F1:A4:B8:B9:6F:75 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b9:52:8b:13:6b:7f:64:e2:0a:14:9c:77:1d:b3:65:9e:73: 7f:c0:72:a3:30:ec:00:06:0e:51:ca:02:d7:8a:87:03:4e:47: c7:a7:00:ac:7e:02:f7:5c:c8:90:80:2f:7e:64:bb:a7:46:fa: a3:9c:44:79:c8:a8:94:31:69:cf:9d:3d:4c:1e:6b:a7:f0:d6: da:ed:d9:44:95:b7:0c:87:32:cb:fd:e6:25:95:5d:20:c1:41: 40:4f:be:9f:e5:db:2f:b9:c4:22:ab:0b:ff:49:a0:df:3e:c6: e7:c3:4a:eb:07:2f:6e:cb:84:e1:86:c0:a2:4b:81:30:f9:8d: e1:2c:41:76:82:4a:0b:29:47:6b:be:01:a7:82:f8:8e:83:d5: 4c:f0:9e:4d:4e:73:8e:6b:8d:1a:ed:8d:15:d3:d1:75:e5:c6: a4:ef:48:0c:c2:7e:2e:73:57:c8:f2:c2:74:a6:5f:e6:f3:38: 66:20:79:45:2a:7d:32:13:17:23:58:c4:f3:c0:b6:23:82:ee: 34:1a:b7:d3:72:87:e9:f7:69:d6:d2:79:ab:7f:0b:59:7f:e9: 7c:ad:9d:b8:9d:9b:a3:72:38:3a:fd:b0:3a:6d:5a:d0:96:ff: c5:9c:a9:82:6d:41:ed:fb:81:8c:e1:c8:96:75:9e:69:fb:55: 7f:7b:7f:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkn1Ko3G6KIy/5r8TwN7xpc6AwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTA3MDUwNzM2MDBaFw0yNTA3MDgxNzA4MDBaMDMxMTAvBgNV BAMTKDMxRURENEU1MTdFRjM5RTZEMDVCOUZBOTU3MUZGMUE0QjhCOTZGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfn4RP3y3QK+ivEBcyOkYCFApE AItncC86SBZriVn0oA9zZMSJiBKpzh6NVw6mTnyaFgmAVG/9hV0SyC4GYh4ZHD7E X2mnM8VmFku26vrxlMj5BWLONpVjp1yVECDE04UrVqvZZsBcmFc8mSS8FXNVpQay VEyvsxe+TclwD7bYfXK4O/KZLKpSTLrIftwIKNZKEG9R/I3ziCVu7Wkzv7vlfxzi ckhOfnX/82+RaPNcYHWi600pNrLrCzf/tv1GXDKcwzRV277Si3Hy1CrxHXSO4Ymv t1gF7hpaMDj+TPZ/+v9XVmU2qtOSbCqsNo+3afh8TN4ja5tGV+3lxoVMwBpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMe3U5RfvOebQW5+pVx/xpLi5b3UwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGi5UosTa39k4goUnHcds2Wec3/AcqMw7AAG DlHKAteKhwNOR8enAKx+AvdcyJCAL35ku6dG+qOcRHnIqJQxac+dPUwea6fw1trt 2USVtwyHMsv95iWVXSDBQUBPvp/l2y+5xCKrC/9JoN8+xufDSusHL27LhOGGwKJL gTD5jeEsQXaCSgspR2u+AaeC+I6D1Uzwnk1Oc45rjRrtjRXT0XXlxqTvSAzCfi5z V8jywnSmX+bzOGYgeUUqfTITFyNYxPPAtiOC7jQat9Nyh+n3adbSeat/C1l/6Xyt nbidm6NyODr9sDptWtCW/8WcqYJtQe37gYzhyJZ1nmn7VX97f8k= -----END CERTIFICATE-----Generated at Sat Jul 5 23:53:21 2025 by rpki-client