$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: XKjvWEtlelumrx4gzuqDfAaBF93fAV10oAusoqGdgoc= Subject key identifier: EF:4E:B4:9D:71:A1:7E:00:37:C6:29:91:FD:2B:2A:D7:19:A0:C6:D9 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 40F54DF163A52E78C14F5D740B5ED9D80415B566 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 21:20:49 +0000 Manifest this update: Thu 21 Aug 2025 21:15:49 +0000 Manifest next update: Sun 24 Aug 2025 23:11:49 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 2: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 3: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 4: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 6: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 7: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 8: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: F0FZUfClTARgSDG9nhNH1cWQjQUHbt2hwY8aMByZrSg=) 9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f5:4d:f1:63:a5:2e:78:c1:4f:5d:74:0b:5e:d9:d8:04:15:b5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Aug 21 21:15:49 2025 GMT Not After : Aug 24 23:11:49 2025 GMT Subject: CN=EF4EB49D71A17E0037C62991FD2B2AD719A0C6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:5a:c2:cd:7c:5f:97:43:f1:bb:ab:35:fa: 70:c2:99:95:e5:f5:3b:19:a4:16:c3:42:98:9c:a2: 86:eb:91:fc:67:fa:f1:98:b1:a8:68:83:1f:0b:94: 50:1a:2b:11:c5:ca:c8:e9:1f:56:ff:6b:13:64:12: 17:4d:db:c6:72:86:ae:2d:3e:46:d5:0d:ff:61:d4: eb:43:28:d6:a3:f1:d5:aa:cc:46:a3:d9:d6:84:61: e3:41:27:55:8e:b8:10:db:26:b5:39:db:d2:1e:15: 0c:15:3e:83:0d:0a:86:6d:2c:08:83:28:4c:d8:c9: c0:5b:b8:b5:86:2a:6b:7e:39:1e:9f:29:03:12:43: 7a:bf:04:ed:78:12:d9:60:4e:9f:96:16:31:47:0e: 5f:20:14:bc:d2:fc:62:b4:70:52:46:2f:50:ba:21: 4c:a5:40:87:3c:b5:b8:b4:39:bf:b4:7f:a1:f4:eb: ef:15:a7:43:f1:9e:92:97:44:0b:bd:42:77:05:89: b9:88:5e:fd:8c:a9:a9:1f:92:5e:aa:0c:0a:0c:bc: 98:16:14:ab:4b:b2:b5:e1:95:e7:10:65:3e:83:8e: 2c:1d:2e:45:f8:56:e9:b7:e2:d1:48:f5:cc:d6:1e: 81:aa:ec:b2:57:43:a2:bd:06:8c:07:57:09:8c:de: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4E:B4:9D:71:A1:7E:00:37:C6:29:91:FD:2B:2A:D7:19:A0:C6:D9 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c8:1b:b6:49:aa:1f:af:40:c9:85:45:89:4e:48:92:4e:88: bb:6b:7f:18:9c:03:b8:11:d1:bf:49:7b:82:0b:d8:6a:e7:64: ba:38:54:f5:5d:6c:7a:2e:71:fc:84:67:c5:36:0f:3d:1b:90: ca:e3:1e:97:cb:26:e3:84:85:9d:02:55:a5:34:49:b0:63:31: a2:d1:79:4e:36:14:af:3a:ed:e5:ea:2d:c5:ea:8d:5b:00:ea: 4f:59:54:17:5f:18:00:b6:ba:d3:24:1e:64:26:60:7c:32:51: 5c:f3:4a:27:3f:57:0a:78:ef:e3:8d:0a:fa:c7:2d:4c:94:34: 14:84:61:56:48:cf:57:13:9a:9e:6d:98:7d:74:70:54:e6:4c: c9:17:bb:a3:4d:1b:18:91:c5:9b:d7:43:c7:1c:2d:53:b7:69: f7:20:aa:8e:cf:bc:39:fd:5d:b1:06:45:3c:2b:cc:40:ff:b9: 2f:4b:fc:79:bc:08:99:19:86:57:0c:4e:d1:99:83:7f:c4:73: c8:13:7b:41:b7:94:ad:08:bf:40:b3:aa:42:46:a2:e6:c3:23: 51:98:25:2d:1d:0e:31:41:a3:63:d7:1a:42:47:f4:b7:47:aa: 6c:12:4f:10:6b:30:a4:d0:e9:f7:6d:07:50:0b:cc:43:47:9a: c5:ab:62:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPVN8WOlLnjBT110C17Z2AQVtWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA4MjEyMTE1NDlaFw0yNTA4MjQyMzExNDlaMDMxMTAvBgNV BAMTKEVGNEVCNDlENzFBMTdFMDAzN0M2Mjk5MUZEMkIyQUQ3MTlBMEM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9lrCzXxfl0Pxu6s1+nDCmZXl 9TsZpBbDQpicoobrkfxn+vGYsahogx8LlFAaKxHFysjpH1b/axNkEhdN28Zyhq4t PkbVDf9h1OtDKNaj8dWqzEaj2daEYeNBJ1WOuBDbJrU529IeFQwVPoMNCoZtLAiD KEzYycBbuLWGKmt+OR6fKQMSQ3q/BO14EtlgTp+WFjFHDl8gFLzS/GK0cFJGL1C6 IUylQIc8tbi0Ob+0f6H06+8Vp0PxnpKXRAu9QncFibmIXv2Mqakfkl6qDAoMvJgW FKtLsrXhlecQZT6DjiwdLkX4Vum34tFI9czWHoGq7LJXQ6K9BowHVwmM3uyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7060nXGhfgA3ximR/Ssq1xmgxtkwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvIG7ZJqh+vQMmFRYlOSJJOiLtrfxicA7gR 0b9Je4IL2GrnZLo4VPVdbHoucfyEZ8U2Dz0bkMrjHpfLJuOEhZ0CVaU0SbBjMaLR eU42FK867eXqLcXqjVsA6k9ZVBdfGAC2utMkHmQmYHwyUVzzSic/Vwp47+ONCvrH LUyUNBSEYVZIz1cTmp5tmH10cFTmTMkXu6NNGxiRxZvXQ8ccLVO3afcgqo7PvDn9 XbEGRTwrzED/uS9L/Hm8CJkZhlcMTtGZg3/Ec8gTe0G3lK0Iv0CzqkJGoubDI1GY JS0dDjFBo2PXGkJH9LdHqmwSTxBrMKTQ6fdtB1ALzENHmsWrYpI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:52 2025 by rpki-client