$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: DMtUpe8xyN8B3w0x9Atosa7HZBvK8tL5YeK2wdcJkUM= Subject key identifier: FC:95:20:8B:2E:AB:6F:09:5A:59:83:EE:4B:DD:F4:B6:7A:54:20:D1 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 58EED002F56A9A2F24B90CE70FA4411B3C57B231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: B5 Signing time: Wed 02 Jul 2025 02:21:07 +0000 Manifest this update: Wed 02 Jul 2025 02:16:07 +0000 Manifest next update: Sat 05 Jul 2025 08:38:07 +0000 Files and hashes: 1: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) 2: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) 3: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: E5Z/qusNvmj+h1P5W75BJIlXiLXbEYog4dzfLVYW2Ow=) 4: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ee:d0:02:f5:6a:9a:2f:24:b9:0c:e7:0f:a4:41:1b:3c:57:b2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Jul 2 02:16:07 2025 GMT Not After : Jul 5 08:38:07 2025 GMT Subject: CN=FC95208B2EAB6F095A5983EE4BDDF4B67A5420D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:f0:c5:77:03:18:26:b6:72:fd:d1:1a:9e: 4d:da:bf:92:4e:70:54:03:74:bc:d8:bb:1c:11:44: e3:0b:b1:56:6e:d8:90:91:72:ef:ab:60:bb:31:59: ed:57:f6:8c:3b:c9:83:a3:e8:75:41:8e:3a:91:5e: a5:3c:9e:ee:38:f0:d3:ec:2f:18:f0:ad:6c:30:19: 3d:8e:9a:95:90:81:ca:10:e1:fd:9b:1f:9b:7d:c9: b4:81:93:0f:e0:4c:d7:38:93:f1:43:5f:e4:14:7c: b2:b9:0b:15:49:cd:1d:0f:89:44:a6:1b:8b:1c:b8: b2:51:16:c6:06:d5:02:1b:c1:63:5a:4b:3a:1f:7e: 96:4a:14:9e:a3:69:0b:18:7d:5a:63:f2:96:79:4d: 6e:93:c2:73:22:04:bf:b1:7c:1d:63:ed:4e:84:aa: 8b:d9:13:25:c8:0c:0c:38:b6:6f:a1:27:02:77:b2: f4:1f:48:94:fb:4b:4c:29:ae:ad:7b:21:e3:90:85: 18:23:98:ad:80:35:c1:2f:d4:21:8b:5f:ec:e7:c4: ba:5d:ca:2a:01:a4:8a:d1:1c:49:4d:a9:5d:16:b5: a0:49:62:83:98:21:c3:b8:46:89:31:d7:99:13:80: af:01:91:78:64:c5:03:1d:a1:8e:dc:3f:25:5a:c3: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:95:20:8B:2E:AB:6F:09:5A:59:83:EE:4B:DD:F4:B6:7A:54:20:D1 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:21:19:ab:f2:4a:7b:89:f4:2a:43:9d:db:80:87:e8:7c:c0: 0d:44:d5:8d:1c:a8:76:7b:a0:d2:d7:dc:8f:33:e9:15:bc:c0: f5:4d:6f:9c:ca:44:f9:db:40:81:9c:42:3f:3b:27:45:33:d0: 72:fe:e8:ac:4c:fc:53:04:f9:3a:fc:ab:be:34:20:12:96:33: 21:d2:41:0b:3e:7c:4f:58:41:d4:94:0d:23:c4:36:84:d2:88: e4:9e:d3:77:84:31:52:99:19:82:69:0a:47:b3:32:1b:0d:ce: 74:ea:20:ec:b7:11:7a:f8:3d:d1:66:f7:d6:f4:33:b2:dc:74: 4f:d0:f1:47:1f:9c:18:e6:98:26:14:9c:04:41:7d:03:25:15: 0a:b1:f3:98:35:a2:e4:75:d9:52:51:58:4d:a1:b1:b2:b9:30: a1:fc:bb:93:fc:c2:51:f2:87:b6:49:ae:63:ef:be:b6:e3:38: 6d:a2:40:b1:53:4c:6d:c7:3a:b9:44:ff:3e:55:60:d3:39:43: 85:ad:6d:12:76:48:2e:a0:0f:5e:87:c7:73:0b:c9:04:58:82: 25:20:f6:cf:ad:30:26:36:e7:c3:fc:ef:02:da:92:2c:82:10: 8a:18:03:f0:0c:c9:a0:73:9f:7e:7b:c3:6d:9e:42:9a:a5:ce: 0f:7d:9f:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO7QAvVqmi8kuQznD6RBGzxXsjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNTA3MDIwMjE2MDdaFw0yNTA3MDUwODM4MDdaMDMxMTAvBgNV BAMTKEZDOTUyMDhCMkVBQjZGMDk1QTU5ODNFRTRCRERGNEI2N0E1NDIwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWvDFdwMYJrZy/dEank3av5JO cFQDdLzYuxwRROMLsVZu2JCRcu+rYLsxWe1X9ow7yYOj6HVBjjqRXqU8nu448NPs LxjwrWwwGT2OmpWQgcoQ4f2bH5t9ybSBkw/gTNc4k/FDX+QUfLK5CxVJzR0PiUSm G4scuLJRFsYG1QIbwWNaSzoffpZKFJ6jaQsYfVpj8pZ5TW6TwnMiBL+xfB1j7U6E qovZEyXIDAw4tm+hJwJ3svQfSJT7S0wprq17IeOQhRgjmK2ANcEv1CGLX+znxLpd yioBpIrRHElNqV0WtaBJYoOYIcO4Rokx15kTgK8BkXhkxQMdoY7cPyVaw0zFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JUgiy6rbwlaWYPuS930tnpUINEwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8hGavySnuJ9CpDnduAh+h8wA1E1Y0cqHZ7 oNLX3I8z6RW8wPVNb5zKRPnbQIGcQj87J0Uz0HL+6KxM/FME+Tr8q740IBKWMyHS QQs+fE9YQdSUDSPENoTSiOSe03eEMVKZGYJpCkezMhsNznTqIOy3EXr4PdFm99b0 M7LcdE/Q8UcfnBjmmCYUnARBfQMlFQqx85g1ouR12VJRWE2hsbK5MKH8u5P8wlHy h7ZJrmPvvrbjOG2iQLFTTG3HOrlE/z5VYNM5Q4WtbRJ2SC6gD16Hx3MLyQRYgiUg 9s+tMCY258P87wLakiyCEIoYA/AMyaBzn357w22eQpqlzg99nyk= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:18 2025 by rpki-client