$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: 9yyzJ2ZJaQfsk8hrV3C49m2BXlPhXWB8n9lRghf0vHo= Subject key identifier: 4D:A6:0E:51:D6:61:30:D7:B3:19:FD:58:00:3F:C6:D4:92:9F:55:F7 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 59627909EB3C8B187F6476E479BF8B9EA7D549B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: 7B Signing time: Sat 23 Aug 2025 01:21:02 +0000 Manifest this update: Sat 23 Aug 2025 01:16:02 +0000 Manifest next update: Tue 26 Aug 2025 10:54:02 +0000 Files and hashes: 1: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: wrLKR6XocTmz4cB8F8pIUJA6iWtZCTTuavezorNb3OI=) 2: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oo6mbVmnsw7e/0gjMVSA14EiHwAIiPeTDgFb+zR54Og=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: WHnXa3+l2BVF9pDA34p2y5MPrgNJ1xOLxXqgijc3bbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:62:79:09:eb:3c:8b:18:7f:64:76:e4:79:bf:8b:9e:a7:d5:49:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Aug 23 01:16:02 2025 GMT Not After : Aug 26 10:54:02 2025 GMT Subject: CN=4DA60E51D66130D7B319FD58003FC6D4929F55F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:71:c0:23:4d:d1:a9:dd:01:e1:a0:31:dd: a4:a5:7e:c0:4a:6e:a2:07:8a:7c:fe:51:e1:72:b2: f7:2e:12:e9:68:cd:54:d7:7b:a2:6d:f8:3c:aa:19: 9b:12:d0:4e:24:0c:b3:f5:ed:74:38:b2:18:56:c8: 0a:aa:bb:c9:66:7b:03:21:78:52:84:cb:3e:a3:c4: c4:82:86:45:f3:99:f8:f8:7c:12:ba:ee:89:13:94: c6:9e:21:b6:f0:8d:14:d9:c0:84:3b:a4:cb:bb:49: ef:52:b1:40:f8:9b:7c:e5:a7:05:b8:7f:76:39:1f: 5e:35:52:40:c2:c1:95:76:fb:60:ca:3d:2f:3e:45: 1b:01:1b:d3:ba:44:2c:cf:c5:fa:76:77:59:86:7d: 54:38:d3:d0:70:b9:23:48:a9:47:00:2d:12:61:90: 7f:07:57:b8:29:23:b7:53:a1:77:b8:50:ac:21:d5: 12:ab:28:b0:d0:3c:c3:38:73:ad:84:55:16:37:d7: d0:f1:5b:21:83:32:37:ac:ab:a3:e1:05:7e:b8:4a: 10:f6:4c:ac:80:81:0b:9b:6d:86:d8:13:5e:5b:f9: 1e:5c:d3:1e:e9:c3:16:ba:9a:93:94:56:65:25:33: 88:65:37:76:ed:80:4c:bd:5d:d8:d8:1c:5a:d7:d1: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:0E:51:D6:61:30:D7:B3:19:FD:58:00:3F:C6:D4:92:9F:55:F7 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:90:c0:f2:fe:cf:93:71:95:06:ec:e7:e6:9a:66:27:33:02: 43:f2:bb:31:ce:6d:6e:19:e3:74:6c:4d:d3:da:69:0d:d3:7f: a5:68:8b:b7:1f:c6:ab:50:3f:07:bc:16:20:20:f2:2b:da:be: 3b:bc:e6:8f:d9:f5:d8:a2:c8:70:fd:d1:8d:52:9e:b0:64:4c: ea:1f:a0:1a:88:1e:01:d8:74:27:27:f7:a1:85:03:53:7d:ba: 37:ab:09:c4:21:90:05:17:cf:7c:4e:b8:5a:47:62:83:d8:d9: 50:41:ec:fc:18:9c:2d:e6:c4:08:ef:8f:85:3c:84:1b:d3:48: c7:15:89:61:0a:2a:b0:80:3e:59:08:89:22:2c:3f:f5:91:b0: fe:83:8e:73:b6:49:65:2e:60:d8:f6:8a:9b:2a:6a:83:25:a9: 87:c7:c0:2d:71:f5:eb:05:a5:f6:54:11:01:c0:03:b8:a2:d1: f7:8a:ac:12:f8:89:9b:5b:90:d7:44:6b:e8:42:81:8a:31:73: 3b:f1:73:e6:7c:ed:7d:c4:55:2f:3a:ed:62:39:62:1e:96:96: ba:36:e4:1c:84:70:f5:f9:8b:b5:dd:df:45:e9:67:dc:47:79: 78:f1:20:93:20:cb:cf:f0:db:a5:75:98:8b:5a:33:28:53:80: 96:09:74:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWJ5Ces8ixh/ZHbkeb+LnqfVSbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTA4MjMwMTE2MDJaFw0yNTA4MjYxMDU0MDJaMDMxMTAvBgNV BAMTKDREQTYwRTUxRDY2MTMwRDdCMzE5RkQ1ODAwM0ZDNkQ0OTI5RjU1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpXHAI03Rqd0B4aAx3aSlfsBK bqIHinz+UeFysvcuEulozVTXe6Jt+DyqGZsS0E4kDLP17XQ4shhWyAqqu8lmewMh eFKEyz6jxMSChkXzmfj4fBK67okTlMaeIbbwjRTZwIQ7pMu7Se9SsUD4m3zlpwW4 f3Y5H141UkDCwZV2+2DKPS8+RRsBG9O6RCzPxfp2d1mGfVQ409BwuSNIqUcALRJh kH8HV7gpI7dToXe4UKwh1RKrKLDQPMM4c62EVRY319DxWyGDMjesq6PhBX64ShD2 TKyAgQubbYbYE15b+R5c0x7pwxa6mpOUVmUlM4hlN3btgEy9XdjYHFrX0f4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaYOUdZhMNezGf1YAD/G1JKfVfcwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2QwPL+z5NxlQbs5+aaZiczAkPyuzHObW4Z 43RsTdPaaQ3Tf6Voi7cfxqtQPwe8FiAg8ivavju85o/Z9diiyHD90Y1SnrBkTOof oBqIHgHYdCcn96GFA1N9ujerCcQhkAUXz3xOuFpHYoPY2VBB7PwYnC3mxAjvj4U8 hBvTSMcViWEKKrCAPlkIiSIsP/WRsP6DjnO2SWUuYNj2ipsqaoMlqYfHwC1x9esF pfZUEQHAA7ii0feKrBL4iZtbkNdEa+hCgYoxczvxc+Z87X3EVS867WI5Yh6Wlro2 5ByEcPX5i7Xd30XpZ9xHeXjxIJMgy8/w26V1mItaMyhTgJYJdNs= -----END CERTIFICATE-----Generated at Sun Aug 24 08:41:49 2025 by rpki-client