$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: RL89ESbdIrVUjnxPm7n/DuzpvDDHuDQS98+0xHFPNag= Subject key identifier: D3:E5:F9:24:02:A6:F6:93:58:12:D6:C1:83:47:A2:8A:A6:01:DA:F6 Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 23EBC0FA479FADE9BFA87BDC905C8FB3AF2CF368 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 0234 Signing time: Mon 30 Jun 2025 15:31:23 +0000 Manifest this update: Mon 30 Jun 2025 15:26:23 +0000 Manifest next update: Fri 04 Jul 2025 01:13:23 +0000 Files and hashes: 1: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=) 2: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=) 3: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=) 4: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: 4K1wxEyHU1qJEFSnTbAuwetG1MPNYJFUm4ck5aj9Rlw=) 5: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:eb:c0:fa:47:9f:ad:e9:bf:a8:7b:dc:90:5c:8f:b3:af:2c:f3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Jun 30 15:26:23 2025 GMT Not After : Jul 4 01:13:23 2025 GMT Subject: CN=D3E5F92402A6F6935812D6C18347A28AA601DAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:83:3c:7f:e6:d4:6b:c0:c9:1d:49:79:ba: 70:9e:83:58:3f:bc:29:69:a2:fb:9a:7c:b3:d9:09: 3f:08:fc:11:ca:90:30:30:00:d5:ac:aa:25:79:2f: a5:95:93:a2:ee:4b:02:13:0d:ad:39:b8:b3:89:aa: 6d:59:2f:bc:55:10:3f:24:62:1d:ac:d9:37:76:44: ee:ab:6e:50:0e:47:c2:7d:51:ae:ae:fb:45:8b:ce: 46:b2:22:ec:8f:e8:c8:30:80:7f:0d:55:99:99:ff: 11:5d:7d:f8:92:ae:c9:64:27:23:7a:fa:83:10:7d: ac:ea:8c:2e:c3:82:fe:43:b0:c8:ea:07:d4:b8:62: e4:8c:f4:67:8f:e8:5e:e8:e9:b5:03:04:29:d4:5d: a4:cd:5f:42:9f:e2:2b:e6:1b:9c:22:90:8d:a9:0c: b1:67:2e:ff:d9:97:7f:13:8e:99:ed:84:bf:3c:03: 52:be:56:c0:1f:d0:2d:26:c8:a8:67:50:e5:e5:81: e4:a6:78:12:b8:9f:9e:1d:04:3d:f4:14:ff:df:59: e6:19:cb:5d:ec:87:ac:2a:e2:17:51:48:aa:dd:89: 9b:59:ec:99:f8:39:80:a8:15:42:2d:77:5c:ca:12: 6a:fa:ea:db:bb:58:b5:13:55:29:a6:97:77:98:fe: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:F9:24:02:A6:F6:93:58:12:D6:C1:83:47:A2:8A:A6:01:DA:F6 X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f2:f4:ab:9c:e3:72:23:fd:e4:ba:a3:33:85:5d:bf:28:74: df:5e:34:93:b9:c0:3b:2c:3b:02:16:bd:e1:b1:ba:ad:c8:04: 7b:7f:a1:93:27:04:ca:2c:05:47:31:ca:2f:d4:c3:28:49:fa: bc:a4:9b:3c:2a:c8:d1:4d:69:0b:1e:6f:ed:d4:c8:68:a4:a0: 8d:db:3b:15:c3:b1:0c:9c:17:a0:4b:be:d9:7b:cb:25:bf:e5: e9:d6:e7:a7:d6:ae:fe:5e:14:ca:74:2d:3b:cc:36:a1:c8:fc: 10:d9:bc:16:15:9d:e1:15:04:3f:c6:83:54:6e:40:df:74:58: d2:15:12:6a:38:41:64:15:ca:c6:4a:d0:c5:63:1a:4c:09:ac: 3f:c8:b9:57:2e:e7:c5:12:ef:7f:31:a8:af:6e:a2:59:a7:d3: 8e:1a:70:3c:19:8f:eb:bc:b5:9a:9b:4a:aa:d2:d8:8a:92:38: ef:59:5e:35:4f:18:35:11:6e:2c:bc:68:fe:d4:a5:12:f9:a3: 65:3d:84:af:91:ce:cb:04:9e:7f:ec:fa:86:e7:10:cd:82:bf: 6f:d2:3f:09:b2:ad:86:bf:23:c4:41:a9:eb:41:eb:67:ef:da: 5e:cd:e2:2b:47:78:11:e5:07:24:56:0c:37:e7:9f:5f:67:04: 3c:19:a9:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+vA+kefrem/qHvckFyPs68s82gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTA2MzAxNTI2MjNaFw0yNTA3MDQwMTEzMjNaMDMxMTAvBgNV BAMTKEQzRTVGOTI0MDJBNkY2OTM1ODEyRDZDMTgzNDdBMjhBQTYwMURBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbK4M8f+bUa8DJHUl5unCeg1g/ vClpovuafLPZCT8I/BHKkDAwANWsqiV5L6WVk6LuSwITDa05uLOJqm1ZL7xVED8k Yh2s2Td2RO6rblAOR8J9Ua6u+0WLzkayIuyP6MgwgH8NVZmZ/xFdffiSrslkJyN6 +oMQfazqjC7Dgv5DsMjqB9S4YuSM9GeP6F7o6bUDBCnUXaTNX0Kf4ivmG5wikI2p DLFnLv/Zl38TjpnthL88A1K+VsAf0C0myKhnUOXlgeSmeBK4n54dBD30FP/fWeYZ y13sh6wq4hdRSKrdiZtZ7Jn4OYCoFUItd1zKEmr66tu7WLUTVSmml3eY/g+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+X5JAKm9pNYEtbBg0eiiqYB2vYwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTy9Kuc43Ij/eS6ozOFXb8odN9eNJO5wDss OwIWveGxuq3IBHt/oZMnBMosBUcxyi/UwyhJ+rykmzwqyNFNaQseb+3UyGikoI3b OxXDsQycF6BLvtl7yyW/5enW56fWrv5eFMp0LTvMNqHI/BDZvBYVneEVBD/Gg1Ru QN90WNIVEmo4QWQVysZK0MVjGkwJrD/IuVcu58US738xqK9uolmn044acDwZj+u8 tZqbSqrS2IqSOO9ZXjVPGDURbiy8aP7UpRL5o2U9hK+RzssEnn/s+obnEM2Cv2/S PwmyrYa/I8RBqetB62fv2l7N4itHeBHlByRWDDfnn19nBDwZqbU= -----END CERTIFICATE-----Generated at Tue Jul 1 05:22:40 2025 by rpki-client