$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: xWZzeVI4BCOD7sSCvHXe2eLQdHZ2C14HWc6Bj9ATk1c= Subject key identifier: 8F:4E:E8:02:F2:19:ED:99:F8:F0:26:A3:B7:D0:F8:F0:34:0D:58:F2 Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 6DD67014A0849A02FDB238A8CAF1888072BF8535 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 0266 Signing time: Mon 20 Oct 2025 08:31:25 +0000 Manifest this update: Mon 20 Oct 2025 08:26:25 +0000 Manifest next update: Thu 23 Oct 2025 09:20:25 +0000 Files and hashes: 1: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=) 2: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) 3: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) 4: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: W0q+2we9crHlvET27//CnH0cv2Oj5MxGGtvBjXl10eU=) 5: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d6:70:14:a0:84:9a:02:fd:b2:38:a8:ca:f1:88:80:72:bf:85:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Oct 20 08:26:25 2025 GMT Not After : Oct 23 09:20:25 2025 GMT Subject: CN=8F4EE802F219ED99F8F026A3B7D0F8F0340D58F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:6f:4d:34:ed:21:fa:44:4f:11:e8:bd:cd: cf:d4:cf:23:69:a4:cf:e8:fc:fd:67:c0:0b:97:4f: ce:28:d3:7a:c8:5a:1d:ca:f6:3b:d8:99:46:1b:1f: 79:1b:5d:cd:c3:18:d7:58:75:a3:bb:88:cc:ee:a6: 8e:49:f3:06:3f:48:bd:da:38:d3:38:31:73:0d:09: e9:9e:a5:cb:f2:e7:91:bd:30:d2:ad:e9:f4:76:4d: 1b:2c:6c:63:4f:51:91:b1:c6:5c:60:8e:0e:9a:80: d4:45:77:86:61:93:12:51:18:b2:f2:16:c3:75:15: d2:7a:d8:ea:0a:2e:8d:6e:25:93:a7:7a:7d:92:e6: b1:9a:87:db:7e:c1:be:e2:f5:df:28:06:04:0e:fd: f4:0a:36:46:5f:ce:e0:67:45:24:10:18:99:f5:0c: 76:d5:83:e4:75:44:44:b2:ff:7d:7a:fe:e2:91:22: d5:b7:4b:a0:e2:36:8a:80:4f:ea:15:24:9c:39:e5: 54:a0:41:5a:41:3f:f3:07:dd:68:70:c0:75:67:86: 7f:d7:ed:76:cd:a7:37:e9:95:f1:fb:b9:88:f7:4c: 8b:04:2e:2e:97:1f:28:d8:da:c4:1e:68:30:2e:dc: 7c:dd:fd:90:33:dc:0e:4f:b0:f0:77:65:dd:9a:17: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4E:E8:02:F2:19:ED:99:F8:F0:26:A3:B7:D0:F8:F0:34:0D:58:F2 X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cf:27:01:16:ce:79:0b:14:7e:08:b6:74:c0:cb:e8:86:04: a1:79:1c:69:7b:99:47:4c:89:4f:d8:17:e9:9a:4d:df:22:6e: 5f:cc:70:b7:3f:3b:41:82:fc:fc:a7:ba:a0:2a:8e:58:7f:3f: df:e8:10:16:b3:2b:77:02:a9:ac:25:03:a3:3a:64:07:8a:07: a3:35:83:12:d1:82:3a:7f:28:01:14:a1:c1:b8:3b:02:f1:7b: 2a:8e:84:36:50:40:1a:df:cd:f7:49:af:99:eb:7b:bc:97:7e: 0e:a1:6b:72:3e:af:56:09:91:22:8f:c4:6d:20:2b:60:8e:be: 6e:e8:f2:53:af:c8:7a:27:9c:74:02:ed:dd:67:97:d4:02:8d: 5f:de:c3:f3:43:fb:79:cf:de:d0:d4:51:c2:f2:81:31:23:8e: 34:59:47:67:cf:57:b7:18:3b:b7:84:4e:ae:71:8d:31:0c:3f: 8a:12:97:e3:b0:57:d0:5a:d0:dc:be:06:60:0f:6d:6e:63:04: a5:88:75:b3:b5:6d:32:38:c5:05:b3:9a:e3:23:e1:1d:84:cf: 2e:d4:94:fc:9c:f5:95:40:1f:69:61:57:6d:ef:d0:81:d6:94: 34:06:73:d4:1d:af:be:1d:80:99:e4:8b:ac:c1:72:c9:29:3d: ea:b9:ed:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdZwFKCEmgL9sjioyvGIgHK/hTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTEwMjAwODI2MjVaFw0yNTEwMjMwOTIwMjVaMDMxMTAvBgNV BAMTKDhGNEVFODAyRjIxOUVEOTlGOEYwMjZBM0I3RDBGOEYwMzQwRDU4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkm9NNO0h+kRPEei9zc/UzyNp pM/o/P1nwAuXT84o03rIWh3K9jvYmUYbH3kbXc3DGNdYdaO7iMzupo5J8wY/SL3a ONM4MXMNCemepcvy55G9MNKt6fR2TRssbGNPUZGxxlxgjg6agNRFd4ZhkxJRGLLy FsN1FdJ62OoKLo1uJZOnen2S5rGah9t+wb7i9d8oBgQO/fQKNkZfzuBnRSQQGJn1 DHbVg+R1RESy/316/uKRItW3S6DiNoqAT+oVJJw55VSgQVpBP/MH3WhwwHVnhn/X 7XbNpzfplfH7uYj3TIsELi6XHyjY2sQeaDAu3Hzd/ZAz3A5PsPB3Zd2aF+S/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj07oAvIZ7Zn48Cajt9D48DQNWPIwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvPJwEWznkLFH4ItnTAy+iGBKF5HGl7mUdM iU/YF+maTd8ibl/McLc/O0GC/PynuqAqjlh/P9/oEBazK3cCqawlA6M6ZAeKB6M1 gxLRgjp/KAEUocG4OwLxeyqOhDZQQBrfzfdJr5nre7yXfg6ha3I+r1YJkSKPxG0g K2COvm7o8lOvyHonnHQC7d1nl9QCjV/ew/ND+3nP3tDUUcLygTEjjjRZR2fPV7cY O7eETq5xjTEMP4oSl+OwV9Ba0Ny+BmAPbW5jBKWIdbO1bTI4xQWzmuMj4R2Ezy7U lPyc9ZVAH2lhV23v0IHWlDQGc9Qdr74dgJnki6zBcskpPeq57eA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:37 2025 by rpki-client