$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: ZblQBE3R3A10Cw8s8wvbhtqqjIppi4/Vvy8RiSUUpl0= Subject key identifier: A4:03:CF:F1:FD:56:A8:B8:99:35:7F:EA:04:C2:3D:0F:B7:34:80:18 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 42BDC4D648ECB0D30869FA6AC23F929056F29EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02F9 Signing time: Fri 22 Aug 2025 03:51:51 +0000 Manifest this update: Fri 22 Aug 2025 03:46:51 +0000 Manifest next update: Mon 25 Aug 2025 05:16:51 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: ebJgrDxFmWTJc7uBbSJhpCn77c0T3InFf5WzKAd9Jko=) 2: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 4: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bd:c4:d6:48:ec:b0:d3:08:69:fa:6a:c2:3f:92:90:56:f2:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Aug 22 03:46:51 2025 GMT Not After : Aug 25 05:16:51 2025 GMT Subject: CN=A403CFF1FD56A8B899357FEA04C23D0FB7348018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:20:b1:f1:ef:9b:3f:db:c0:d0:82:6f:23: 74:12:41:e8:ba:54:32:71:d9:a9:30:1a:2c:d9:3b: 7e:fd:50:a7:12:78:d0:0f:79:9f:65:cd:eb:8f:dd: d7:f9:99:6f:ef:f7:d1:91:3a:ea:eb:01:be:79:47: 40:bd:c0:19:d8:1d:9b:2b:84:96:48:2f:05:df:7b: 99:6f:ab:ee:2a:c1:62:e8:57:e2:bf:8c:19:e5:8f: b0:ca:19:90:a0:34:79:4e:24:22:b4:ed:55:16:97: f2:82:e8:61:86:0a:8f:ac:12:68:fe:01:ac:ff:a6: 34:82:a6:17:e5:cd:e9:44:1a:6b:f5:2d:53:42:70: fe:14:6c:4f:70:fc:33:64:6f:24:d3:df:b0:76:4c: 82:fa:2c:19:fa:56:bc:5a:19:89:fd:95:a1:6f:e9: e3:5c:6e:e1:5b:64:80:46:df:f3:07:36:23:ab:3d: 03:93:49:ff:8f:20:ce:2d:e7:cf:be:42:08:27:51: 9c:aa:bd:f9:ae:5a:85:45:a6:80:0e:8c:1d:6f:54: b9:32:1e:4c:62:e9:84:7b:c1:fb:2f:23:74:83:cc: c3:1b:c0:0b:b6:79:27:64:1f:e2:4a:0b:f7:f7:b5: d2:80:51:4f:85:f9:c4:b3:10:79:2e:f5:04:9a:af: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:CF:F1:FD:56:A8:B8:99:35:7F:EA:04:C2:3D:0F:B7:34:80:18 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:81:3c:f8:7a:c4:6e:38:cb:1c:93:6f:0b:e9:5e:57:3a: c0:81:5f:fb:cb:af:c2:36:78:d5:05:b9:4f:76:a3:b2:ac:85: 61:6d:dc:0f:af:fc:3f:e5:e3:6d:4e:d4:55:4f:09:9d:d8:78: db:96:c5:6f:1d:30:d1:ad:09:75:46:ee:e0:00:85:05:5e:a0: a5:a0:d0:e4:aa:33:0f:04:3b:76:42:67:66:02:71:20:fe:96: a3:ca:8c:8d:01:75:e3:88:e2:47:be:dd:c2:16:7a:77:40:a1: 84:b1:70:c2:77:f0:49:e3:b1:8d:81:1a:7f:28:b6:e5:64:67: b7:6f:b1:b0:84:2e:a7:9e:d7:b1:c4:dc:d4:88:80:c6:00:bc: dd:4a:ac:d0:6c:bf:77:6b:9d:b6:40:d2:6d:cc:41:d2:0a:83: db:81:27:49:f5:18:f1:80:22:04:8d:f9:c5:fb:e0:7f:e0:5a: f7:0f:5e:19:91:1c:c7:ef:6c:e4:c9:e3:bb:60:e1:5b:d1:1e: 12:eb:81:73:d1:ec:e2:0c:5c:a2:b3:71:e8:ef:6e:e4:82:84: 21:a8:d3:11:27:39:fe:73:53:12:4b:96:fe:5e:8b:2b:38:d7: ac:55:d4:d6:7d:62:4e:b1:45:69:1f:b0:71:c4:83:8d:2b:d9: 2a:eb:b3:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQr3E1kjssNMIafpqwj+SkFbynqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA4MjIwMzQ2NTFaFw0yNTA4MjUwNTE2NTFaMDMxMTAvBgNV BAMTKEE0MDNDRkYxRkQ1NkE4Qjg5OTM1N0ZFQTA0QzIzRDBGQjczNDgwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHyCx8e+bP9vA0IJvI3QSQei6 VDJx2akwGizZO379UKcSeNAPeZ9lzeuP3df5mW/v99GROurrAb55R0C9wBnYHZsr hJZILwXfe5lvq+4qwWLoV+K/jBnlj7DKGZCgNHlOJCK07VUWl/KC6GGGCo+sEmj+ Aaz/pjSCphflzelEGmv1LVNCcP4UbE9w/DNkbyTT37B2TIL6LBn6VrxaGYn9laFv 6eNcbuFbZIBG3/MHNiOrPQOTSf+PIM4t58++QggnUZyqvfmuWoVFpoAOjB1vVLky Hkxi6YR7wfsvI3SDzMMbwAu2eSdkH+JKC/f3tdKAUU+F+cSzEHku9QSarxJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpAPP8f1WqLiZNX/qBMI9D7c0gBgwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCVgTz4esRuOMsck28L6V5XOsCBX/vLr8I2 eNUFuU92o7KshWFt3A+v/D/l421O1FVPCZ3YeNuWxW8dMNGtCXVG7uAAhQVeoKWg 0OSqMw8EO3ZCZ2YCcSD+lqPKjI0BdeOI4ke+3cIWendAoYSxcMJ38EnjsY2BGn8o tuVkZ7dvsbCELqee17HE3NSIgMYAvN1KrNBsv3drnbZA0m3MQdIKg9uBJ0n1GPGA IgSN+cX74H/gWvcPXhmRHMfvbOTJ47tg4VvRHhLrgXPR7OIMXKKzcejvbuSChCGo 0xEnOf5zUxJLlv5eiys416xV1NZ9Yk6xRWkfsHHEg40r2Srrs78= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:35 2025 by rpki-client