$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: +O6ILew9hjhs16XAkdYRV4bCwRgo2gJ4Gtp36JeUWxg= Subject key identifier: 97:EE:9A:3E:68:34:5B:CD:01:61:AC:23:75:6E:28:13:24:5F:7E:5C Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 5B70123FA47876DAB1B5E9C6796283F23395C300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: E5 Signing time: Sun 19 Oct 2025 22:31:10 +0000 Manifest this update: Sun 19 Oct 2025 22:26:10 +0000 Manifest next update: Thu 23 Oct 2025 05:42:10 +0000 Files and hashes: 1: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) 2: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: rnlezOtYgxECOc+lxXIrRA7xyXqBiQrXS3paHQYO4/8=) 3: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) 4: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:70:12:3f:a4:78:76:da:b1:b5:e9:c6:79:62:83:f2:33:95:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Oct 19 22:26:10 2025 GMT Not After : Oct 23 05:42:10 2025 GMT Subject: CN=97EE9A3E68345BCD0161AC23756E2813245F7E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:76:41:01:a4:ce:28:70:9d:e1:e8:e9:13: 9b:d8:11:40:1f:9f:8d:5d:ce:f9:d5:ef:32:b3:a7: b3:dd:b6:7b:f8:3d:ef:00:71:ec:0c:37:97:90:8d: 75:43:25:1c:3a:92:60:db:8d:a5:23:e6:0e:38:6e: 76:fd:fc:e2:e3:d9:1c:91:ff:5d:83:d5:6f:57:ae: d0:98:cb:4a:77:ab:42:64:71:ba:01:16:5a:22:b3: 84:ce:95:3e:67:84:db:2a:23:17:6d:05:5f:23:20: 69:32:57:a0:3e:ae:3b:4c:00:ea:1c:52:ec:e5:75: b1:d3:97:86:2a:74:9c:b2:75:ce:a4:d6:dc:f9:c6: e6:ef:54:94:44:40:53:e0:3b:82:c5:bd:48:f2:b0: d9:c2:24:2a:5e:9d:2c:45:2a:12:3d:f7:dc:58:24: e6:b4:43:57:5f:6f:05:fe:06:f3:0d:e8:a2:92:1a: e6:c5:55:82:43:b2:31:50:18:4d:36:ec:30:b2:4e: 2f:8a:93:c7:7a:01:90:89:ee:6d:83:eb:3c:1e:d2: 90:dc:6d:db:34:8e:6a:6d:d4:b6:cd:b7:e8:4b:3e: 06:2b:c5:8b:95:c5:d3:a7:17:86:8b:92:a3:ba:df: 1f:d9:03:8c:06:65:5b:35:2b:be:15:d7:bd:12:44: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:9A:3E:68:34:5B:CD:01:61:AC:23:75:6E:28:13:24:5F:7E:5C X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1f:f5:83:d4:da:f8:c4:10:1b:76:84:9c:c4:4a:d0:69:59: 74:72:69:22:c5:94:49:ad:0e:40:7b:de:95:89:a6:a7:c8:69: a2:2b:04:39:b8:c8:3f:04:08:a1:d6:47:57:1c:44:36:72:6c: 05:9a:cb:16:ac:ba:7b:8f:e2:5d:16:f1:ea:03:5a:9d:7c:3b: 67:43:50:16:89:94:26:15:a9:19:07:cb:c4:4e:a3:a1:ce:a8: 6f:d2:d3:f5:58:ea:8c:a1:76:ca:5c:7b:51:49:b7:4e:c9:0c: be:ff:2f:42:1f:43:8b:13:3c:50:a4:37:9f:5a:b1:e0:9f:14: 9f:7f:d1:72:07:2f:04:50:0f:8d:21:ca:2c:74:17:22:42:2b: 88:bc:d7:a0:9d:63:87:5e:2c:25:06:0b:0f:b0:12:94:5a:6c: 0f:a6:e0:12:b3:27:ba:66:a4:36:20:a4:1c:9e:12:85:41:59: 9e:20:fe:c7:86:c9:14:68:41:d9:b7:db:70:b7:50:44:42:ab: 08:d4:ac:0d:2d:ca:ea:03:4e:84:db:2c:3e:20:df:c5:36:af: 0d:bb:42:c6:82:c9:8a:0f:e4:f5:81:c2:c2:f4:ae:dd:dd:28: b1:da:3d:86:e3:b1:6c:91:4a:c2:21:92:56:84:e9:f4:2e:3e: d2:e0:37:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3ASP6R4dtqxtenGeWKD8jOVwwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNTEwMTkyMjI2MTBaFw0yNTEwMjMwNTQyMTBaMDMxMTAvBgNV BAMTKDk3RUU5QTNFNjgzNDVCQ0QwMTYxQUMyMzc1NkUyODEzMjQ1RjdFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7XZBAaTOKHCd4ejpE5vYEUAf n41dzvnV7zKzp7Pdtnv4Pe8AcewMN5eQjXVDJRw6kmDbjaUj5g44bnb9/OLj2RyR /12D1W9XrtCYy0p3q0JkcboBFlois4TOlT5nhNsqIxdtBV8jIGkyV6A+rjtMAOoc UuzldbHTl4YqdJyydc6k1tz5xubvVJREQFPgO4LFvUjysNnCJCpenSxFKhI999xY JOa0Q1dfbwX+BvMN6KKSGubFVYJDsjFQGE027DCyTi+Kk8d6AZCJ7m2D6zwe0pDc bds0jmpt1LbNt+hLPgYrxYuVxdOnF4aLkqO63x/ZA4wGZVs1K74V170SRMC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+6aPmg0W80BYawjdW4oEyRfflwwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsf9YPU2vjEEBt2hJzEStBpWXRyaSLFlEmt DkB73pWJpqfIaaIrBDm4yD8ECKHWR1ccRDZybAWayxasunuP4l0W8eoDWp18O2dD UBaJlCYVqRkHy8ROo6HOqG/S0/VY6oyhdspce1FJt07JDL7/L0IfQ4sTPFCkN59a seCfFJ9/0XIHLwRQD40hyix0FyJCK4i816CdY4deLCUGCw+wEpRabA+m4BKzJ7pm pDYgpByeEoVBWZ4g/seGyRRoQdm323C3UERCqwjUrA0tyuoDToTbLD4g38U2rw27 QsaCyYoP5PWBwsL0rt3dKLHaPYbjsWyRSsIhklaE6fQuPtLgN7E= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:01 2025 by rpki-client