$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: scgUkWmdcQs5rVgZOqGE34hyZzkoLQYRFlTQok4y3HA= Subject key identifier: 0C:03:3E:6C:61:F5:FA:09:95:EB:5D:1F:07:77:36:E5:76:8F:A4:1A Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 6B1447DB250A7FA4EEDFF0FE9D195810447D6EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 043E Signing time: Mon 30 Jun 2025 00:20:56 +0000 Manifest this update: Mon 30 Jun 2025 00:15:56 +0000 Manifest next update: Thu 03 Jul 2025 11:38:56 +0000 Files and hashes: 1: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: WgbXNG8agZLsdWuibA+X6Mi27XbyZbOqSqTrCdPcDxk=) 2: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: bwkHoMcFkTxg1cprLBeFyt3e6yMZZa8kwMNQMpEMTkk=) 3: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: wXlkmxwi7/34ddrk854GfkHymHTZJQyn7AeLJRM2mj8=) 4: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: 0N5j+ZERhxA6Ar8dT9/oyVhTL5hECc6nE7wFownHGuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:14:47:db:25:0a:7f:a4:ee:df:f0:fe:9d:19:58:10:44:7d:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Jun 30 00:15:56 2025 GMT Not After : Jul 3 11:38:56 2025 GMT Subject: CN=0C033E6C61F5FA0995EB5D1F077736E5768FA41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:84:71:2d:0a:bf:3c:a7:16:90:d1:2c:71: b1:3d:8a:d9:7f:db:c4:65:58:9c:d9:b4:b3:79:f1: dc:c1:8c:be:bb:2c:3e:99:43:dd:59:6d:43:65:fa: 0a:3f:d4:69:ed:43:bb:1d:a3:0f:33:b1:66:94:4f: 91:bc:a1:37:db:e3:d2:27:52:90:45:68:96:1c:f0: 1a:df:4a:54:34:7c:43:9f:88:88:2d:6e:3a:ff:3f: 4c:75:aa:05:4c:ed:4e:45:b7:49:2b:90:fe:aa:c1: 3d:e1:eb:3d:66:0c:21:8f:34:a7:99:a9:2d:b1:42: 52:57:3f:60:44:7d:fd:41:f9:82:88:0b:ae:bc:27: 67:02:6a:49:4d:0a:9e:12:7a:0f:8b:2d:dd:ac:43: e4:45:d4:0e:d4:c8:84:e4:a8:80:ac:64:f3:97:c1: 67:21:5e:22:4e:c4:2f:f7:7b:14:95:95:d2:a3:6c: 8c:e0:c5:12:1f:b4:93:7f:80:72:6a:72:c0:6c:05: ee:53:a5:3d:48:0b:96:1b:10:94:63:89:08:fb:6c: 77:57:34:cf:d0:b6:2a:4b:ba:d7:7f:9f:68:80:b2: 8f:01:6f:da:df:eb:2a:05:76:37:9d:1a:82:59:1b: 6e:ef:8f:96:6d:91:c8:58:20:14:f6:1e:9a:aa:bf: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:3E:6C:61:F5:FA:09:95:EB:5D:1F:07:77:36:E5:76:8F:A4:1A X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cf:0e:fc:c1:5c:49:49:3e:8c:c4:c2:6b:2c:df:11:7d:bc: 3b:db:38:89:5f:4a:a5:e8:a4:f1:b6:56:1f:37:af:69:05:b4: bb:8d:66:10:9b:57:2b:4c:38:1b:f7:0c:67:01:50:77:75:44: dc:a4:87:04:a6:0a:35:7c:72:41:1e:ec:54:23:f3:63:b6:5f: 13:79:4f:77:eb:27:e4:4f:c2:1b:a5:aa:ea:dd:16:bb:d9:76: b1:98:37:e8:70:f2:67:1e:18:f0:85:bb:0d:20:6c:3b:b6:b6: 62:0c:99:de:0d:04:b4:f3:1a:b1:25:48:f9:db:54:07:e8:6b: 5f:17:b2:f6:c7:e9:27:02:07:7c:7a:f9:bf:be:59:b1:2f:d6: 91:74:37:7f:87:60:b6:ba:7b:c6:61:4c:be:b7:2a:36:61:83: e4:7b:9c:f8:00:57:a5:9b:09:77:79:d8:2f:06:14:6a:93:1e: 5f:b7:e7:7d:5c:72:63:9c:a6:d0:eb:16:dd:6f:a2:76:fd:0b: 47:64:2e:15:60:ba:a0:33:3e:95:9d:1a:60:93:5d:a0:97:21: cc:4f:de:da:76:9d:73:48:e1:be:a2:92:b1:2e:2e:95:ea:d6: 3c:8c:48:4c:1c:9b:27:8e:10:66:85:47:10:63:3f:e2:aa:c2: da:e2:08:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxRH2yUKf6Tu3/D+nRlYEER9bqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTA2MzAwMDE1NTZaFw0yNTA3MDMxMTM4NTZaMDMxMTAvBgNV BAMTKDBDMDMzRTZDNjFGNUZBMDk5NUVCNUQxRjA3NzczNkU1NzY4RkE0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8moRxLQq/PKcWkNEscbE9itl/ 28RlWJzZtLN58dzBjL67LD6ZQ91ZbUNl+go/1GntQ7sdow8zsWaUT5G8oTfb49In UpBFaJYc8BrfSlQ0fEOfiIgtbjr/P0x1qgVM7U5Ft0krkP6qwT3h6z1mDCGPNKeZ qS2xQlJXP2BEff1B+YKIC668J2cCaklNCp4Seg+LLd2sQ+RF1A7UyITkqICsZPOX wWchXiJOxC/3exSVldKjbIzgxRIftJN/gHJqcsBsBe5TpT1IC5YbEJRjiQj7bHdX NM/QtipLutd/n2iAso8Bb9rf6yoFdjedGoJZG27vj5ZtkchYIBT2Hpqqv7sVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDAM+bGH1+gmV610fB3c25XaPpBowHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrPDvzBXElJPozEwmss3xF9vDvbOIlfSqXo pPG2Vh83r2kFtLuNZhCbVytMOBv3DGcBUHd1RNykhwSmCjV8ckEe7FQj82O2XxN5 T3frJ+RPwhulqurdFrvZdrGYN+hw8mceGPCFuw0gbDu2tmIMmd4NBLTzGrElSPnb VAfoa18XsvbH6ScCB3x6+b++WbEv1pF0N3+HYLa6e8ZhTL63KjZhg+R7nPgAV6Wb CXd52C8GFGqTHl+3531ccmOcptDrFt1vonb9C0dkLhVguqAzPpWdGmCTXaCXIcxP 3tp2nXNI4b6ikrEuLpXq1jyMSEwcmyeOEGaFRxBjP+KqwtriCIk= -----END CERTIFICATE-----Generated at Mon Jun 30 19:12:19 2025 by rpki-client