$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: hp01Cm2Y3q4dcyggI+CmndHH+jye22rI2fAHV/eBotI= Subject key identifier: 07:AA:48:4A:93:4A:B8:1F:D8:F6:EF:A9:CE:1D:8C:49:72:5A:75:FF Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 7F97553973CD5206361255EE309580268FFF4230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02E0 Signing time: Sun 29 Jun 2025 10:31:52 +0000 Manifest this update: Sun 29 Jun 2025 10:26:52 +0000 Manifest next update: Wed 02 Jul 2025 17:04:52 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: Cz+gMi+bo+FjY3ucHqEBIXaIQzTAUN5Uub1tzdNv3Y4=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=) 5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:97:55:39:73:cd:52:06:36:12:55:ee:30:95:80:26:8f:ff:42:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Jun 29 10:26:52 2025 GMT Not After : Jul 2 17:04:52 2025 GMT Subject: CN=07AA484A934AB81FD8F6EFA9CE1D8C49725A75FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ea:59:bc:b8:98:08:74:ed:51:1c:5d:43:cb: 79:80:78:79:6f:a5:e5:50:ac:09:17:52:71:b5:a0: 90:22:45:b2:3f:25:52:6d:8b:51:17:22:47:28:2f: 0d:1a:bf:b9:58:fe:ee:37:9f:ef:4d:11:90:b5:56: b8:ce:2b:a3:f0:ea:d2:f0:c5:e1:32:5a:51:ef:62: 57:7c:54:e8:22:33:0d:f2:1f:16:02:0a:27:bc:3d: fa:ba:cf:87:5a:2e:06:1d:2d:ec:ec:e4:f0:a3:ee: e5:b7:ed:62:67:b1:1a:9b:e4:3d:78:a1:05:ab:13: ca:a2:77:80:57:1c:e6:83:cd:35:8e:8b:ff:a4:58: 46:de:88:3f:5a:09:b4:b1:ce:b9:79:fb:41:52:c9: 06:92:db:6c:26:b3:10:f7:e9:93:c3:90:d5:53:e8: 4f:9a:1b:96:00:26:22:a0:d6:27:35:8c:e7:14:3b: 8f:9b:cc:72:5b:17:1c:49:29:75:9e:75:c6:d8:a1: e3:c2:ee:41:01:af:76:35:b1:2f:43:81:02:63:86: 94:f8:f4:2c:9b:f1:0a:5f:f2:33:3d:f3:9a:f9:67: 2e:f2:14:66:36:ee:ad:8f:a0:ac:e1:69:d8:62:7b: af:30:2b:59:2a:c0:e4:6d:f4:50:e4:89:03:56:e5: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:48:4A:93:4A:B8:1F:D8:F6:EF:A9:CE:1D:8C:49:72:5A:75:FF X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7d:4f:ef:a6:89:b7:79:00:10:63:32:d4:a8:e3:21:fb:96: ba:71:aa:6d:87:28:50:f4:dd:3a:5e:ab:5a:3f:67:8d:22:53: a9:62:8f:8c:95:78:0d:3c:b9:cb:28:e2:6b:6a:76:3a:a4:bb: 41:27:0f:1d:6c:38:c3:ab:85:65:91:c7:94:db:7a:39:4f:d6: 82:b2:ed:b6:c7:f4:c7:87:ac:7c:b5:a7:a6:75:8a:04:67:96: a9:c5:5f:6e:35:7a:83:12:c7:dd:63:28:17:86:93:bf:7c:9b: c1:94:ac:b0:8a:9b:70:ca:2b:15:e2:b3:38:a7:50:b9:82:24: 65:f2:05:9f:4b:ab:ba:95:6a:b1:c1:08:90:f3:cf:e2:5f:86: 6d:00:2a:60:e4:33:54:c2:d9:6d:30:d1:3f:70:0b:a0:e5:48: 4a:41:69:34:3c:61:a1:a6:75:b1:39:10:d3:f3:e0:4b:15:6e: c4:4e:2b:2f:56:90:be:07:6b:e0:1a:7f:60:eb:85:5b:68:97: ec:7e:9d:1f:65:7c:40:bd:b5:7f:79:8c:44:52:d5:3c:c2:99: 2e:32:e8:03:4c:f1:2e:42:d5:3e:bb:23:5a:3b:62:9e:28:b7: b4:22:9b:f3:49:40:ff:aa:21:c2:b5:b2:63:81:a6:c1:56:c1: 46:b3:0b:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5dVOXPNUgY2ElXuMJWAJo//QjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA2MjkxMDI2NTJaFw0yNTA3MDIxNzA0NTJaMDMxMTAvBgNV BAMTKDA3QUE0ODRBOTM0QUI4MUZEOEY2RUZBOUNFMUQ4QzQ5NzI1QTc1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw6lm8uJgIdO1RHF1Dy3mAeHlv peVQrAkXUnG1oJAiRbI/JVJti1EXIkcoLw0av7lY/u43n+9NEZC1VrjOK6Pw6tLw xeEyWlHvYld8VOgiMw3yHxYCCie8Pfq6z4daLgYdLezs5PCj7uW37WJnsRqb5D14 oQWrE8qid4BXHOaDzTWOi/+kWEbeiD9aCbSxzrl5+0FSyQaS22wmsxD36ZPDkNVT 6E+aG5YAJiKg1ic1jOcUO4+bzHJbFxxJKXWedcbYoePC7kEBr3Y1sS9DgQJjhpT4 9Cyb8Qpf8jM985r5Zy7yFGY27q2PoKzhadhie68wK1kqwORt9FDkiQNW5WmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB6pISpNKuB/Y9u+pzh2MSXJadf8wHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJ9T++mibd5ABBjMtSo4yH7lrpxqm2HKFD0 3Tpeq1o/Z40iU6lij4yVeA08ucso4mtqdjqku0EnDx1sOMOrhWWRx5TbejlP1oKy 7bbH9MeHrHy1p6Z1igRnlqnFX241eoMSx91jKBeGk798m8GUrLCKm3DKKxXiszin ULmCJGXyBZ9Lq7qVarHBCJDzz+Jfhm0AKmDkM1TC2W0w0T9wC6DlSEpBaTQ8YaGm dbE5ENPz4EsVbsROKy9WkL4Ha+Aaf2DrhVtol+x+nR9lfEC9tX95jERS1TzCmS4y 6ANM8S5C1T67I1o7Yp4ot7Qim/NJQP+qIcK1smOBpsFWwUazC3U= -----END CERTIFICATE-----Generated at Mon Jun 30 16:44:07 2025 by rpki-client