$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: 1/Fc2/72PWiiImtsWGyRlAn25WYqxm5iFu9x2ouMTcg= Subject key identifier: 70:99:3B:B5:BC:C5:CF:EB:79:F0:2A:7D:CE:33:B2:68:BD:40:E3:47 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 2FC27B548FF760C780678688307A4F45B50101A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 14:41:19 +0000 Manifest this update: Sat 28 Jun 2025 14:36:19 +0000 Manifest next update: Tue 01 Jul 2025 19:19:19 +0000 Files and hashes: 1: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) 2: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 3: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: zmq7q8J+gfX5OAqujTObj5dNw9V0vzALLgDthTGpbXE=) 4: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c2:7b:54:8f:f7:60:c7:80:67:86:88:30:7a:4f:45:b5:01:01:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Jun 28 14:36:19 2025 GMT Not After : Jul 1 19:19:19 2025 GMT Subject: CN=70993BB5BCC5CFEB79F02A7DCE33B268BD40E347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:7e:9c:fb:15:55:bf:55:f9:ad:35:6d:12: 1f:aa:31:6c:99:a1:e6:95:b5:d2:93:64:66:74:e1: a4:71:62:5d:1f:05:97:ec:d4:1e:86:3e:fd:5f:45: d3:08:30:1c:3b:c7:ad:11:e7:18:1a:83:6b:aa:14: d9:d3:6c:c7:ed:0c:05:ba:21:3b:3e:3e:e9:9f:92: 32:fc:c2:09:36:9f:9f:ce:dd:ac:64:63:a3:6c:45: f8:9d:e5:b7:69:fb:fc:40:c2:7e:77:3d:22:01:20: de:d5:e6:bc:13:ca:24:e8:6f:b6:c3:77:47:6c:bd: be:2a:e6:e5:33:8a:b7:33:ff:26:7e:f0:bb:6d:45: 6a:09:90:dd:1e:a1:7f:92:fe:7a:c1:29:fe:84:59: f8:f3:23:6a:fc:04:ab:d7:82:58:76:51:ee:1c:0e: 4f:6d:e8:c1:7b:07:3b:0e:e5:2c:18:08:55:d4:b0: c3:b3:ee:c0:78:46:ba:06:6b:6b:85:6e:49:27:d4: ec:c4:c4:c8:d1:9a:06:2b:12:92:79:ac:b9:10:5c: 0d:43:e6:c7:6a:c6:0e:df:2d:b9:93:39:1e:98:ea: d3:a3:03:a6:02:4e:08:66:8e:f0:9d:5f:21:10:e7: c5:34:90:86:72:c1:ed:e4:7a:6e:2e:18:9c:c6:9f: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:99:3B:B5:BC:C5:CF:EB:79:F0:2A:7D:CE:33:B2:68:BD:40:E3:47 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6e:49:a9:92:40:25:21:fc:df:0d:91:bc:5d:98:58:01:78: c4:c3:ff:41:04:81:fd:cf:51:41:fe:d5:51:b9:43:d0:47:ad: 01:c7:df:5c:a7:1f:cb:e4:3e:4e:e8:09:13:dc:b6:97:07:61: f9:31:0b:c1:6d:b5:ea:f4:c8:b1:b5:3d:d7:6c:8e:f0:eb:94: 85:4c:67:2a:aa:ab:19:69:4a:5f:7f:00:73:a9:7e:bc:50:f2: 3b:b5:54:19:44:40:b9:2f:43:5a:af:80:67:4f:fc:7a:3d:6a: 59:fd:c7:9a:f4:14:41:33:41:54:f7:59:89:d5:b1:dd:5b:9a: 1e:6b:3e:4f:b2:c5:d1:5d:f1:91:a8:85:16:12:8f:aa:88:49: c8:e7:86:b8:ec:6a:24:2d:36:cf:ff:f0:e6:b2:19:ef:80:cc: 4d:3d:3d:c6:c3:94:7f:9a:52:a5:3d:fa:94:7d:f3:ba:25:03: 5e:11:0e:34:48:2b:c7:8e:87:f9:2a:ee:14:0e:ce:5b:5a:03: c2:46:e0:ff:df:0c:c4:c6:a2:ff:a2:ce:9d:7c:f9:ca:39:17: da:c0:12:7a:b8:46:bf:40:45:c4:59:a1:cf:0d:9d:0b:e8:21: 67:46:d9:38:1f:4e:2e:f5:fd:df:ce:cc:ab:ee:fe:92:bd:ce: 12:c8:07:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8J7VI/3YMeAZ4aIMHpPRbUBAaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA2MjgxNDM2MTlaFw0yNTA3MDExOTE5MTlaMDMxMTAvBgNV BAMTKDcwOTkzQkI1QkNDNUNGRUI3OUYwMkE3RENFMzNCMjY4QkQ0MEUzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgtX6c+xVVv1X5rTVtEh+qMWyZ oeaVtdKTZGZ04aRxYl0fBZfs1B6GPv1fRdMIMBw7x60R5xgag2uqFNnTbMftDAW6 ITs+PumfkjL8wgk2n5/O3axkY6NsRfid5bdp+/xAwn53PSIBIN7V5rwTyiTob7bD d0dsvb4q5uUzircz/yZ+8LttRWoJkN0eoX+S/nrBKf6EWfjzI2r8BKvXglh2Ue4c Dk9t6MF7BzsO5SwYCFXUsMOz7sB4RroGa2uFbkkn1OzExMjRmgYrEpJ5rLkQXA1D 5sdqxg7fLbmTOR6Y6tOjA6YCTghmjvCdXyEQ58U0kIZywe3kem4uGJzGny4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcJk7tbzFz+t58Cp9zjOyaL1A40cwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVuSamSQCUh/N8NkbxdmFgBeMTD/0EEgf3P UUH+1VG5Q9BHrQHH31ynH8vkPk7oCRPctpcHYfkxC8Ftter0yLG1PddsjvDrlIVM ZyqqqxlpSl9/AHOpfrxQ8ju1VBlEQLkvQ1qvgGdP/Ho9aln9x5r0FEEzQVT3WYnV sd1bmh5rPk+yxdFd8ZGohRYSj6qIScjnhrjsaiQtNs//8OayGe+AzE09PcbDlH+a UqU9+pR987olA14RDjRIK8eOh/kq7hQOzltaA8JG4P/fDMTGov+izp18+co5F9rA Enq4Rr9ARcRZoc8NnQvoIWdG2TgfTi71/d/OzKvu/pK9zhLIB24= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:54 2025 by rpki-client