$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: unazR7lCQrm/1p5jq+uK8erCBsYxeAAKDiJSlEruJkI= Subject key identifier: C5:01:10:69:1B:94:40:B9:09:08:F5:3D:D7:C7:8C:EB:81:8E:9A:74 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 6F5BBE85C295BC0DAA16D8303E252DFCD4C47DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 00:21:24 +0000 Manifest this update: Fri 22 Aug 2025 00:16:24 +0000 Manifest next update: Mon 25 Aug 2025 07:42:24 +0000 Files and hashes: 1: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) 2: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 3: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 4: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: h0WhcMdnwUqrvgisXu75jLjHu0tVaABVVb50bAw8MNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5b:be:85:c2:95:bc:0d:aa:16:d8:30:3e:25:2d:fc:d4:c4:7d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Aug 22 00:16:24 2025 GMT Not After : Aug 25 07:42:24 2025 GMT Subject: CN=C50110691B9440B90908F53DD7C78CEB818E9A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:f6:52:d1:f8:da:da:49:a4:be:57:b5:0c: dd:53:55:59:28:6f:71:64:6e:3d:f3:a7:92:46:67: 0b:04:8b:ca:3f:8d:ba:fe:1d:25:6f:56:8e:43:65: b9:52:ca:f3:df:68:ed:d1:5d:5c:b3:6e:ac:98:62: b2:8c:f8:c4:78:fc:66:8b:c9:86:40:6c:9c:3d:21: 38:8f:f6:6c:1e:79:20:46:8c:a6:c8:9d:9c:41:75: 0a:ce:04:dc:c0:c2:df:57:38:5a:a1:b0:00:47:b3: 59:27:e6:7f:95:65:c8:a4:d8:d4:4a:63:0f:1e:d3: d5:f8:01:c2:1c:2e:64:c2:c6:f3:d3:3e:24:2a:80: ff:06:ba:e7:ce:60:48:ba:c8:a7:f1:15:8f:a1:95: 4d:11:a0:3e:08:74:2a:9c:a4:b5:19:d9:a9:f9:00: a5:71:e5:7a:1b:04:e7:15:eb:89:f9:b7:03:5d:93: 65:2a:be:47:c0:5b:22:5f:d7:30:22:98:b5:81:53: a7:e6:32:79:e0:2d:05:ec:27:a9:a7:7a:6c:c2:af: 99:0e:74:55:10:f2:fa:5b:b9:3a:74:8b:30:74:04: b3:d3:c8:cd:09:04:87:f7:79:67:37:ca:01:1a:2b: eb:a1:85:36:ec:6e:35:75:6a:5e:ea:8b:33:c7:c6: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:10:69:1B:94:40:B9:09:08:F5:3D:D7:C7:8C:EB:81:8E:9A:74 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:49:02:b9:45:43:ac:5b:cd:d2:08:7a:29:8c:a4:06:dd:0a: 83:c2:dd:04:c1:cf:32:12:c1:b3:67:43:05:5e:fe:9f:8d:4d: ee:88:25:a9:8b:f7:a9:f8:1b:8f:cf:90:17:28:48:83:50:0d: 24:c8:e0:af:84:f3:97:74:8a:10:46:e7:ec:f6:bf:33:81:4e: 29:95:7a:1f:61:8f:98:44:21:60:11:9e:63:99:d8:44:99:04: 4f:70:1e:17:4e:1b:a5:94:89:7a:97:c3:62:89:1f:1e:6c:7f: db:c3:f9:b4:83:1f:a6:44:24:8b:e5:ac:10:d5:c4:44:51:03: 29:ca:d6:45:62:f0:47:32:5c:93:b0:3c:45:45:69:b7:36:b5: c0:4e:7d:4d:f3:ef:46:cf:cb:ad:73:e7:1e:46:41:45:a7:ad: 11:e6:1c:af:be:87:a9:ad:97:24:c2:47:90:56:a4:fc:0d:ad: 50:92:31:f9:40:e4:77:68:39:c9:ba:e2:55:68:f0:e4:ff:be: 2c:0b:10:69:83:e2:48:31:67:a5:24:37:60:2a:84:7f:85:f9: de:8c:da:cf:45:6b:50:83:b9:b1:03:f2:7b:22:b7:6f:f3:04: 53:2b:4f:d7:d5:28:93:0b:69:ca:01:7d:53:ae:f3:a2:98:0f: 82:92:3f:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1u+hcKVvA2qFtgwPiUt/NTEfb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA4MjIwMDE2MjRaFw0yNTA4MjUwNzQyMjRaMDMxMTAvBgNV BAMTKEM1MDExMDY5MUI5NDQwQjkwOTA4RjUzREQ3Qzc4Q0VCODE4RTlBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAfZS0fja2kmkvle1DN1TVVko b3Fkbj3zp5JGZwsEi8o/jbr+HSVvVo5DZblSyvPfaO3RXVyzbqyYYrKM+MR4/GaL yYZAbJw9ITiP9mweeSBGjKbInZxBdQrOBNzAwt9XOFqhsABHs1kn5n+VZcik2NRK Yw8e09X4AcIcLmTCxvPTPiQqgP8GuufOYEi6yKfxFY+hlU0RoD4IdCqcpLUZ2an5 AKVx5XobBOcV64n5twNdk2UqvkfAWyJf1zAimLWBU6fmMnngLQXsJ6mnemzCr5kO dFUQ8vpbuTp0izB0BLPTyM0JBIf3eWc3ygEaK+uhhTbsbjV1al7qizPHxjKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQEQaRuUQLkJCPU918eM64GOmnQwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJJArlFQ6xbzdIIeimMpAbdCoPC3QTBzzIS wbNnQwVe/p+NTe6IJamL96n4G4/PkBcoSINQDSTI4K+E85d0ihBG5+z2vzOBTimV eh9hj5hEIWARnmOZ2ESZBE9wHhdOG6WUiXqXw2KJHx5sf9vD+bSDH6ZEJIvlrBDV xERRAynK1kVi8EcyXJOwPEVFabc2tcBOfU3z70bPy61z5x5GQUWnrRHmHK++h6mt lyTCR5BWpPwNrVCSMflA5HdoOcm64lVo8OT/viwLEGmD4kgxZ6UkN2AqhH+F+d6M 2s9Fa1CDubED8nsit2/zBFMrT9fVKJMLacoBfVOu86KYD4KSPzw= -----END CERTIFICATE-----Generated at Sat Aug 23 11:56:53 2025 by rpki-client