$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: OEGs75alZjCVIPwUban50RW/BC9JW/MN03CnxEZnLRw= Subject key identifier: 3F:10:16:E3:00:65:E0:CF:42:FC:0D:62:33:1E:F7:49:57:9A:A4:57 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 2CBBF1B85DC521616E4EF0CC2BC97FF2E4708776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 19:51:22 +0000 Manifest this update: Sun 19 Oct 2025 19:46:22 +0000 Manifest next update: Wed 22 Oct 2025 23:05:22 +0000 Files and hashes: 1: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 2: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 3: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: tBg3ldaRq5Vv47wPdwOWmekZYzCtLS3RkZ3yb0shxtQ=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:bb:f1:b8:5d:c5:21:61:6e:4e:f0:cc:2b:c9:7f:f2:e4:70:87:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Oct 19 19:46:22 2025 GMT Not After : Oct 22 23:05:22 2025 GMT Subject: CN=3F1016E30065E0CF42FC0D62331EF749579AA457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:09:a6:eb:9f:b7:87:6f:87:46:be:c3:0b: 0f:6b:6d:6c:fa:e2:5c:92:95:19:29:0c:27:56:66: 33:00:e7:09:26:2c:21:a7:3c:1f:48:f4:de:22:dc: 1b:b8:49:cb:71:37:97:71:05:72:6e:e7:2d:05:ff: 2c:e4:75:d1:29:73:28:03:ef:1f:c9:e1:86:b6:74: a7:c6:9c:91:12:40:ec:ee:dc:40:e2:43:44:46:09: e0:ec:f9:74:ef:9b:9b:a6:45:b9:1d:9d:24:c2:2f: fe:95:03:0a:02:b9:25:be:42:48:19:b3:48:66:06: 0b:a3:59:23:39:74:66:fe:55:02:d5:5b:df:d3:07: 06:2c:fb:d1:80:9e:25:cd:b4:8d:bb:1f:29:ca:a6: 48:00:08:09:9c:ab:cc:8b:2e:a9:12:ad:7a:90:56: 40:fb:79:f6:cc:b8:35:c0:b6:70:ef:02:c0:cb:4e: c0:cd:09:6f:fd:63:0a:7f:4f:7f:a6:38:95:0c:7b: 1d:0d:bb:30:46:44:e3:55:24:33:96:91:6d:a0:32: 17:20:f3:d3:5b:e6:b0:b7:36:97:98:c8:26:bc:fb: c4:21:af:e3:87:4f:b1:80:f8:58:af:4d:46:1b:5d: 33:00:30:a6:8d:b2:39:eb:a2:c5:72:cb:f0:73:48: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:10:16:E3:00:65:E0:CF:42:FC:0D:62:33:1E:F7:49:57:9A:A4:57 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9c:28:3d:95:fc:0a:82:d1:6b:55:db:b3:81:30:f0:92:32: 8b:8d:70:75:8a:ef:b0:7e:f9:40:af:17:88:2d:b5:59:e0:17: 1f:01:c5:d9:f6:53:4d:ae:f9:39:58:ee:1a:d5:75:9b:16:7f: 6d:c4:0d:84:8d:f3:b5:2a:70:ac:41:19:e7:c3:2e:72:18:5d: db:d9:bb:f6:87:18:29:98:92:6b:70:12:f7:eb:f5:ed:b1:fa: 7e:94:55:6e:94:9d:f7:15:6a:da:0c:20:72:b6:1d:f2:7c:64: d3:0e:c4:41:56:08:a0:eb:93:62:6a:4c:23:94:d3:68:bc:92: 56:4d:71:19:0a:ca:24:bc:0f:9b:30:48:1c:72:fe:02:9c:42: 15:29:fb:14:bd:48:bc:05:0f:6f:63:f3:74:c8:d7:03:17:9f: 80:8a:a5:5e:e3:a7:d2:cc:7e:ac:4d:e4:09:7b:ec:04:33:63: e2:d0:92:c8:62:f9:2f:6c:9c:59:92:88:41:ac:b0:b8:91:b4: b0:ce:db:49:ba:36:12:79:06:cd:92:4f:16:46:d5:14:b2:f1: 52:18:02:ed:68:03:42:98:da:1c:e7:22:57:47:e9:cd:bf:1c: a5:07:18:aa:2f:4f:ca:54:17:df:50:97:09:93:a8:3d:4d:5e: b3:dc:75:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLvxuF3FIWFuTvDMK8l/8uRwh3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTEwMTkxOTQ2MjJaFw0yNTEwMjIyMzA1MjJaMDMxMTAvBgNV BAMTKDNGMTAxNkUzMDA2NUUwQ0Y0MkZDMEQ2MjMzMUVGNzQ5NTc5QUE0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJQmm65+3h2+HRr7DCw9rbWz6 4lySlRkpDCdWZjMA5wkmLCGnPB9I9N4i3Bu4SctxN5dxBXJu5y0F/yzkddEpcygD 7x/J4Ya2dKfGnJESQOzu3EDiQ0RGCeDs+XTvm5umRbkdnSTCL/6VAwoCuSW+QkgZ s0hmBgujWSM5dGb+VQLVW9/TBwYs+9GAniXNtI27HynKpkgACAmcq8yLLqkSrXqQ VkD7efbMuDXAtnDvAsDLTsDNCW/9Ywp/T3+mOJUMex0NuzBGRONVJDOWkW2gMhcg 89Nb5rC3NpeYyCa8+8Qhr+OHT7GA+FivTUYbXTMAMKaNsjnrosVyy/BzSOGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPxAW4wBl4M9C/A1iMx73SVeapFcwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKcKD2V/AqC0WtV27OBMPCSMouNcHWK77B+ +UCvF4gttVngFx8Bxdn2U02u+TlY7hrVdZsWf23EDYSN87UqcKxBGefDLnIYXdvZ u/aHGCmYkmtwEvfr9e2x+n6UVW6UnfcVatoMIHK2HfJ8ZNMOxEFWCKDrk2JqTCOU 02i8klZNcRkKyiS8D5swSBxy/gKcQhUp+xS9SLwFD29j83TI1wMXn4CKpV7jp9LM fqxN5Al77AQzY+LQkshi+S9snFmSiEGssLiRtLDO20m6NhJ5Bs2STxZG1RSy8VIY Au1oA0KY2hznIldH6c2/HKUHGKovT8pUF99QlwmTqD1NXrPcdZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:00 2025 by rpki-client