$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: WSyhxAo4+b+A4gs0filc5UAyIVymo0OXBk0wbeNabP0= Subject key identifier: 7D:EB:C3:65:F7:99:91:75:4E:E3:A0:92:ED:1D:DA:12:9A:FF:64:8B Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 53DC18ECCD932509AF577A4AC2B461F32CAC99AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04E8 Signing time: Tue 01 Jul 2025 18:00:47 +0000 Manifest this update: Tue 01 Jul 2025 17:55:47 +0000 Manifest next update: Fri 04 Jul 2025 18:44:47 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 2: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: L2qFnceBgpuGuAO7TX5VA1yWSsW213GtBbHF1k8eaMY=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 4: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 5: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 6: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 7: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 8: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 9: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dc:18:ec:cd:93:25:09:af:57:7a:4a:c2:b4:61:f3:2c:ac:99:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jul 1 17:55:47 2025 GMT Not After : Jul 4 18:44:47 2025 GMT Subject: CN=7DEBC365F79991754EE3A092ED1DDA129AFF648B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:ba:9f:a8:a7:51:83:b8:d7:63:71:ae:20: 5c:eb:8d:47:ea:f5:d2:c8:23:36:90:cc:63:c6:ed: ac:3d:b0:b6:a0:4c:71:fc:8e:ea:4e:9a:22:10:87: 4f:fb:ee:f8:36:bd:2b:48:5c:8b:81:86:1d:83:e8: e5:77:3b:2e:9e:ab:2b:34:b6:50:55:f3:7b:64:9c: 45:a5:87:e5:dc:8e:be:34:46:eb:08:22:c3:5c:c6: c1:49:40:fa:f3:ec:b4:79:bc:a0:07:78:dd:e0:96: bc:e1:ca:44:2f:dd:9c:3c:7a:e9:bc:ad:e1:a4:46: 29:88:73:5f:eb:2b:04:b7:3f:82:7a:58:c1:a9:af: 20:92:27:79:d8:da:2c:b3:24:8e:b5:29:f1:37:7d: 25:c3:11:18:1e:22:55:3e:98:89:f2:45:bc:c3:41: eb:1d:ce:28:88:12:e6:62:8d:9b:48:5c:64:88:9f: 7b:98:f7:f5:82:c5:0e:e5:4b:be:99:4a:c7:96:f2: f4:f8:2a:e0:19:53:ca:64:77:23:69:d5:23:15:b3: eb:1e:45:93:9d:f3:c4:95:12:09:0d:18:36:40:8a: 91:19:8a:09:ad:c0:21:e9:76:35:86:50:69:7d:e1: 18:56:73:da:b7:f2:b2:be:9c:ab:45:7e:f0:bd:af: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:C3:65:F7:99:91:75:4E:E3:A0:92:ED:1D:DA:12:9A:FF:64:8B X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bb:98:8b:56:12:04:18:42:e6:6c:59:6f:33:69:78:96:5e: 60:5c:00:e6:cb:9b:41:15:31:90:87:fc:86:96:d1:ab:6f:b1: 1c:1a:82:cf:42:1f:2b:7a:b9:40:67:6d:19:bf:eb:b8:fa:eb: 61:6f:bf:56:87:d6:78:e3:cd:ee:ab:bc:92:7e:56:e5:ba:8a: 9e:ee:b8:8a:a1:e1:be:1c:5b:ab:11:6a:27:3f:37:90:5a:f0: d9:9a:83:de:bc:00:35:e3:34:33:5c:04:c0:80:3e:43:9c:f0: 19:ea:2b:0b:86:91:7a:cf:6b:b6:05:29:d1:a0:cd:10:5d:eb: 6b:91:d4:a2:e7:1e:20:ad:74:2e:39:e8:1b:be:88:17:1e:6a: d0:f7:14:1c:33:29:44:d1:62:3a:aa:89:15:78:cd:e6:64:ba: 0f:8f:4a:9a:a5:9b:0c:6e:bb:50:e6:e9:cc:ff:d8:0d:87:d2: 97:e5:85:81:bb:d6:0b:cf:96:e5:84:0d:1e:fe:fd:fc:b6:8f: fa:fa:41:c0:01:98:7b:31:70:16:1a:b3:a2:fe:45:0c:fd:54: 8c:ff:85:1e:45:5a:cd:46:7f:b8:a8:57:3b:2b:b5:be:4b:bd: e0:67:b2:3c:a6:a1:5d:3f:11:d3:77:0c:8b:c2:36:13:29:3d: da:50:cd:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9wY7M2TJQmvV3pKwrRh8yysmaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA3MDExNzU1NDdaFw0yNTA3MDQxODQ0NDdaMDMxMTAvBgNV BAMTKDdERUJDMzY1Rjc5OTkxNzU0RUUzQTA5MkVEMUREQTEyOUFGRjY0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKbqfqKdRg7jXY3GuIFzrjUfq 9dLIIzaQzGPG7aw9sLagTHH8jupOmiIQh0/77vg2vStIXIuBhh2D6OV3Oy6eqys0 tlBV83tknEWlh+Xcjr40RusIIsNcxsFJQPrz7LR5vKAHeN3glrzhykQv3Zw8eum8 reGkRimIc1/rKwS3P4J6WMGpryCSJ3nY2iyzJI61KfE3fSXDERgeIlU+mInyRbzD QesdziiIEuZijZtIXGSIn3uY9/WCxQ7lS76ZSseW8vT4KuAZU8pkdyNp1SMVs+se RZOd88SVEgkNGDZAipEZigmtwCHpdjWGUGl94RhWc9q38rK+nKtFfvC9rxY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfevDZfeZkXVO46CS7R3aEpr/ZIswHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa7mItWEgQYQuZsWW8zaXiWXmBcAObLm0EV MZCH/IaW0atvsRwags9CHyt6uUBnbRm/67j662Fvv1aH1njjze6rvJJ+VuW6ip7u uIqh4b4cW6sRaic/N5Ba8Nmag968ADXjNDNcBMCAPkOc8BnqKwuGkXrPa7YFKdGg zRBd62uR1KLnHiCtdC456Bu+iBceatD3FBwzKUTRYjqqiRV4zeZkug+PSpqlmwxu u1Dm6cz/2A2H0pflhYG71gvPluWEDR7+/fy2j/r6QcABmHsxcBYas6L+RQz9VIz/ hR5FWs1Gf7ioVzsrtb5LveBnsjymoV0/EdN3DIvCNhMpPdpQzcE= -----END CERTIFICATE-----Generated at Thu Jul 3 06:52:18 2025 by rpki-client