$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: X4mygu34+5lGct1o4+OSShFivrie+vX1EMqyiuB12Io= Subject key identifier: B8:A0:F9:53:FE:6C:1D:B7:B9:13:FB:46:E2:7F:11:DC:89:7B:44:31 Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 79B797EE63EC2686059B8C72564CD7C4FDB81A6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 0456 Signing time: Fri 22 Aug 2025 15:20:57 +0000 Manifest this update: Fri 22 Aug 2025 15:15:57 +0000 Manifest next update: Tue 26 Aug 2025 02:06:57 +0000 Files and hashes: 1: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: dgVDCSTEoaFciYNL9I3/FZfAeiTebCWTg50LxI2/N6M=) 2: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: wXlkmxwi7/34ddrk854GfkHymHTZJQyn7AeLJRM2mj8=) 3: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: bwkHoMcFkTxg1cprLBeFyt3e6yMZZa8kwMNQMpEMTkk=) 4: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: 0N5j+ZERhxA6Ar8dT9/oyVhTL5hECc6nE7wFownHGuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b7:97:ee:63:ec:26:86:05:9b:8c:72:56:4c:d7:c4:fd:b8:1a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Aug 22 15:15:57 2025 GMT Not After : Aug 26 02:06:57 2025 GMT Subject: CN=B8A0F953FE6C1DB7B913FB46E27F11DC897B4431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:3f:97:a1:d2:c4:a0:ad:70:61:6e:81:30: e0:f5:0e:c1:e4:14:c2:cd:44:02:c2:f2:96:60:a5: da:5c:77:8c:91:01:93:1c:ea:cb:b7:92:49:cc:4a: 40:57:f3:38:3e:7c:de:f5:62:d5:f9:b1:c9:41:9c: bc:e9:b2:db:40:56:e7:ce:74:99:89:ce:b0:b8:ff: d4:64:56:9a:ce:b1:f3:9e:23:bc:9e:54:45:a6:c2: f9:56:47:c3:bf:b1:16:76:86:7d:2d:61:f1:80:b6: d6:66:e3:81:6e:2e:e2:07:b8:c2:0e:46:dd:df:a8: c8:fd:c6:42:b0:d1:28:10:b6:c5:72:3e:ce:03:5d: 18:00:af:c3:5f:fc:18:44:37:94:50:43:30:f4:22: a8:e1:81:97:bb:be:f9:12:d4:b1:51:f4:be:f2:9b: e0:57:01:51:be:25:ca:cc:c8:5f:d8:51:98:c6:ac: e6:af:0d:0c:c8:58:b6:16:bf:86:0a:af:6a:9d:a9: 0f:b7:f4:50:7a:8c:03:16:d3:a8:f2:dc:d4:1c:32: b6:b9:ca:4b:c8:ab:93:53:f4:39:b7:f5:15:d7:03: 13:55:14:1b:81:da:e4:77:4e:52:24:72:96:3f:37: 24:39:37:50:81:50:08:75:79:2c:f1:cf:d6:f6:0a: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A0:F9:53:FE:6C:1D:B7:B9:13:FB:46:E2:7F:11:DC:89:7B:44:31 X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3a:b1:38:1f:02:9e:7f:dc:8e:66:67:be:b6:b6:de:48:b4: 19:69:45:8d:bb:14:4c:c5:5e:47:ea:c4:3c:56:70:76:17:f4: 63:bc:b7:74:c6:49:b4:64:9b:03:8e:d6:6b:c6:ee:fc:f7:42: da:30:02:57:0c:af:41:d4:a1:ae:31:2d:1c:53:b2:ea:7a:fa: 0f:6e:63:12:15:ee:95:a1:fa:c3:47:20:d2:4e:f0:72:9a:25: 4f:68:bd:23:39:aa:cb:6d:48:20:86:06:e6:e6:af:8e:53:b5: 77:35:bd:7a:94:7a:df:e6:54:82:90:ef:72:62:d6:67:22:15: 1e:44:89:fd:b4:3c:51:f3:02:3e:c7:3d:e0:68:bd:d5:09:f9: f6:de:5d:1c:de:62:08:e2:d9:c0:ea:31:9a:f1:cb:a3:33:af: c1:81:3d:2e:aa:f7:9b:4e:fb:de:66:f2:0e:4c:c6:12:c5:51: 2d:c4:ca:93:e6:8d:76:ac:d2:77:28:25:c6:7d:46:28:b4:ad: 31:98:08:2f:6d:e6:a6:13:b6:50:43:9a:a6:63:e2:c4:e5:5f: fe:ba:2d:c3:88:59:fa:df:36:fc:ed:76:d5:55:35:b3:4d:f0: 27:8d:da:74:98:a6:e7:10:63:6e:cc:8b:f3:0d:8b:d9:5f:5f: fb:bb:25:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebeX7mPsJoYFm4xyVkzXxP24GmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTA4MjIxNTE1NTdaFw0yNTA4MjYwMjA2NTdaMDMxMTAvBgNV BAMTKEI4QTBGOTUzRkU2QzFEQjdCOTEzRkI0NkUyN0YxMURDODk3QjQ0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58z+XodLEoK1wYW6BMOD1DsHk FMLNRALC8pZgpdpcd4yRAZMc6su3kknMSkBX8zg+fN71YtX5sclBnLzpsttAVufO dJmJzrC4/9RkVprOsfOeI7yeVEWmwvlWR8O/sRZ2hn0tYfGAttZm44FuLuIHuMIO Rt3fqMj9xkKw0SgQtsVyPs4DXRgAr8Nf/BhEN5RQQzD0IqjhgZe7vvkS1LFR9L7y m+BXAVG+JcrMyF/YUZjGrOavDQzIWLYWv4YKr2qdqQ+39FB6jAMW06jy3NQcMra5 ykvIq5NT9Dm39RXXAxNVFBuB2uR3TlIkcpY/NyQ5N1CBUAh1eSzxz9b2CoGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuKD5U/5sHbe5E/tG4n8R3Il7RDEwHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKk6sTgfAp5/3I5mZ762tt5ItBlpRY27FEzF XkfqxDxWcHYX9GO8t3TGSbRkmwOO1mvG7vz3QtowAlcMr0HUoa4xLRxTsup6+g9u YxIV7pWh+sNHINJO8HKaJU9ovSM5qsttSCCGBubmr45TtXc1vXqUet/mVIKQ73Ji 1mciFR5Eif20PFHzAj7HPeBovdUJ+fbeXRzeYgji2cDqMZrxy6Mzr8GBPS6q95tO +95m8g5MxhLFUS3EypPmjXas0ncoJcZ9Rii0rTGYCC9t5qYTtlBDmqZj4sTlX/66 LcOIWfrfNvztdtVVNbNN8CeN2nSYpucQY27Mi/MNi9lfX/u7JQo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:37 2025 by rpki-client