$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: pCjA7FCTu+VUzRqOVLYD9X7CRb8rL5q6e7awqOwVipY= Subject key identifier: 75:CA:38:46:E2:CF:1D:32:C3:B8:87:34:3D:85:26:DF:22:04:8A:0D Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 5E6A703ED3A38AC8B0C6E339A5937706475E582D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 024C Signing time: Fri 22 Aug 2025 08:31:24 +0000 Manifest this update: Fri 22 Aug 2025 08:26:24 +0000 Manifest next update: Mon 25 Aug 2025 17:40:24 +0000 Files and hashes: 1: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=) 2: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) 3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) 4: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=) 5: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: eoc3+/NwS5Cc866wKbDKCKRLV64PbkviuAJHaIH96B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6a:70:3e:d3:a3:8a:c8:b0:c6:e3:39:a5:93:77:06:47:5e:58:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Aug 22 08:26:24 2025 GMT Not After : Aug 25 17:40:24 2025 GMT Subject: CN=75CA3846E2CF1D32C3B887343D8526DF22048A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:6c:12:ff:43:ed:29:60:00:a5:b1:56:7a: b1:38:00:13:d1:12:fe:b1:a5:b7:ef:5c:1c:38:f2: 41:3c:b2:89:e8:34:45:74:6b:4e:a1:eb:67:5d:8e: 01:90:1b:bb:32:93:83:1b:ff:3a:a7:04:70:0d:20: 2c:6c:b7:a3:46:f5:5a:f1:d6:ed:f0:3f:a1:71:4d: 4a:90:25:35:86:cb:11:ee:95:d6:57:23:dd:6a:91: 73:f6:71:fd:74:bc:f1:8b:62:d8:e6:cf:e6:51:12: fc:3f:41:10:72:bb:c4:86:4e:cb:c8:70:e4:7a:2f: 1d:e1:1b:91:c6:d7:19:48:c2:33:4b:d9:71:f4:38: c9:71:5f:aa:a5:ca:38:fd:2b:9d:24:0f:db:97:77: 19:73:38:0e:f1:a2:98:06:72:d3:fb:03:56:08:4d: 45:ad:10:e1:8e:e8:0c:d5:47:f9:6c:80:5e:2a:56: d5:0b:82:21:11:dc:bb:67:c6:d5:c5:de:60:52:e3: 6e:1b:c4:df:43:84:05:41:bd:08:30:fa:4e:a1:f2: ee:12:3b:bc:28:b0:c7:74:17:8f:19:fb:61:89:67: 7d:c0:38:24:59:66:07:e5:06:cf:19:1b:2a:97:2c: 5e:9c:6c:ee:5a:1d:4c:38:34:5a:b3:bb:74:c7:e1: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CA:38:46:E2:CF:1D:32:C3:B8:87:34:3D:85:26:DF:22:04:8A:0D X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ec:b1:5d:19:22:72:21:a6:e1:e5:1e:09:9d:22:c3:36:2e: f9:c5:01:eb:89:b9:7c:ca:58:90:23:24:85:a7:8f:16:35:fa: 0c:ed:71:5d:74:21:1c:2d:b2:9d:16:c3:59:59:f3:a2:2a:3c: 4a:23:64:58:43:ce:af:4a:08:b7:47:d4:eb:96:28:27:64:d8: 52:c6:18:8e:5a:21:a5:52:16:90:bb:95:ad:02:3d:b6:99:ac: 05:fa:3a:e2:be:f9:ce:dc:15:01:c8:cf:82:cd:a1:5a:ef:58: e7:d8:f7:39:3d:e6:ce:37:3d:a8:40:5f:36:d8:24:44:3f:fd: 9a:12:5c:65:78:2c:a2:f3:61:e4:8c:d9:c7:88:2e:25:45:c3: 0b:7a:60:9e:2c:42:26:3f:aa:43:27:1e:ba:d9:eb:29:bf:f4: 92:9b:1a:50:8a:be:ff:7a:81:6e:d0:0c:0c:5f:bb:88:7c:d1: f9:6f:a7:50:06:56:92:ee:e5:8e:fe:ba:0f:13:07:8f:50:6f: c3:7a:7b:5c:eb:d5:6f:93:8f:b2:bb:56:8a:e8:d7:d0:e0:52: 22:4b:6e:e0:64:29:1f:ca:40:64:4f:47:88:cf:88:3c:94:3b: 14:76:22:8a:20:44:53:55:bc:7b:84:fc:63:f9:6b:06:2d:60: cb:76:01:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmpwPtOjisiwxuM5pZN3BkdeWC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTA4MjIwODI2MjRaFw0yNTA4MjUxNzQwMjRaMDMxMTAvBgNV BAMTKDc1Q0EzODQ2RTJDRjFEMzJDM0I4ODczNDNEODUyNkRGMjIwNDhBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG42wS/0PtKWAApbFWerE4ABPR Ev6xpbfvXBw48kE8sonoNEV0a06h62ddjgGQG7syk4Mb/zqnBHANICxst6NG9Vrx 1u3wP6FxTUqQJTWGyxHuldZXI91qkXP2cf10vPGLYtjmz+ZREvw/QRByu8SGTsvI cOR6Lx3hG5HG1xlIwjNL2XH0OMlxX6qlyjj9K50kD9uXdxlzOA7xopgGctP7A1YI TUWtEOGO6AzVR/lsgF4qVtULgiER3LtnxtXF3mBS424bxN9DhAVBvQgw+k6h8u4S O7wosMd0F48Z+2GJZ33AOCRZZgflBs8ZGyqXLF6cbO5aHUw4NFqzu3TH4QvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdco4RuLPHTLDuIc0PYUm3yIEig0wHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHssV0ZInIhpuHlHgmdIsM2LvnFAeuJuXzK WJAjJIWnjxY1+gztcV10IRwtsp0Ww1lZ86IqPEojZFhDzq9KCLdH1OuWKCdk2FLG GI5aIaVSFpC7la0CPbaZrAX6OuK++c7cFQHIz4LNoVrvWOfY9zk95s43PahAXzbY JEQ//ZoSXGV4LKLzYeSM2ceILiVFwwt6YJ4sQiY/qkMnHrrZ6ym/9JKbGlCKvv96 gW7QDAxfu4h80flvp1AGVpLu5Y7+ug8TB49Qb8N6e1zr1W+Tj7K7Voro19DgUiJL buBkKR/KQGRPR4jPiDyUOxR2IoogRFNVvHuE/GP5awYtYMt2AZc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:35 2025 by rpki-client