$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: QY7pknoGZHH59TSYeqaVrn5mqmUZ5GpLdsR5vMnFDwE= Subject key identifier: 43:C1:DD:D5:3B:16:CA:FD:71:03:EF:D6:89:56:CF:3D:51:B8:4D:90 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 5763EE906084A126B3E5E4EE3A607B51BFB4E9FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01DE Signing time: Sat 18 Oct 2025 07:50:46 +0000 Manifest this update: Sat 18 Oct 2025 07:45:46 +0000 Manifest next update: Tue 21 Oct 2025 19:33:46 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 2: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: OSIaRFOGwDQC/1WuGtERElOW74tuWJOlIHhO8cuIaw8=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:63:ee:90:60:84:a1:26:b3:e5:e4:ee:3a:60:7b:51:bf:b4:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Oct 18 07:45:46 2025 GMT Not After : Oct 21 19:33:46 2025 GMT Subject: CN=43C1DDD53B16CAFD7103EFD68956CF3D51B84D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:16:27:99:e1:6c:c0:3b:50:2f:4f:e3:71: 80:ef:29:05:9f:35:e0:fc:4e:68:92:2a:71:33:7f: ba:14:af:0e:37:5e:4a:a2:67:1e:ee:9c:79:9b:01: 09:cd:e3:c5:c4:65:0f:94:5e:e6:fe:21:45:27:97: 5d:8a:4b:0b:0b:67:08:fb:1b:0c:c8:9c:9b:cd:84: ae:b9:62:de:6e:7e:d6:55:01:5e:22:38:44:99:cf: 90:17:d4:44:0b:8c:31:70:a0:a8:a2:37:9f:ac:89: 48:b4:9f:2c:2e:28:c3:a4:e7:06:20:19:ac:8f:2b: 78:b9:7f:55:28:38:ff:0a:7f:d2:6a:83:99:ec:b9: 70:97:43:44:91:51:68:d9:17:94:01:13:7d:48:19: 7f:d2:7d:5a:b9:c5:e0:7e:8f:cc:9c:4f:65:aa:28: e7:09:c6:52:99:72:11:98:62:6b:7c:1e:17:f9:f9: f9:49:96:0b:df:e8:72:4f:2e:58:f7:ca:52:7e:24: 82:2e:69:8a:f9:5f:d7:eb:19:2e:90:d8:3e:ff:1e: c9:2b:31:85:d5:1c:51:7b:7e:8f:26:3e:60:74:48: 18:20:09:55:f0:5e:d9:94:c0:06:43:e4:8b:db:d2: 81:c7:72:1a:32:b8:a9:1f:2f:8d:44:58:1c:a0:be: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:DD:D5:3B:16:CA:FD:71:03:EF:D6:89:56:CF:3D:51:B8:4D:90 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:04:8f:f0:1d:ea:22:10:87:a1:d2:5d:f7:cb:4f:44:d7:98: d9:32:37:b2:6b:2a:1a:48:d8:36:86:49:70:03:9c:ac:4d:cb: 32:b0:61:12:98:80:a0:d7:c9:5f:ae:cc:44:14:42:a0:e1:f7: 87:99:5b:63:a0:e1:b4:80:99:3b:79:e8:6b:d3:4e:4c:b8:4a: 40:31:a5:1e:92:2c:bd:97:8c:e1:f1:90:5d:4e:ea:d4:b8:84: cd:a9:f0:34:27:4d:68:79:68:b0:92:e1:f5:11:2c:08:12:ba: cd:f0:dc:9f:a1:6e:e2:05:52:54:29:5d:fe:1b:b5:ce:c2:c9: 86:68:6f:f9:ca:ec:d4:68:f2:96:c5:c9:a3:90:4d:9e:3a:43: 00:26:11:38:9b:8d:ba:c0:4c:c7:14:9c:1b:c1:a2:eb:f0:a4: 69:65:e1:c3:32:dc:7a:40:9d:73:d0:b9:3e:bd:47:96:6d:c1: 00:a7:7e:aa:68:2b:ce:5c:18:21:4f:5b:50:86:2b:39:99:a2: 61:ba:f1:a1:69:02:82:46:bb:e3:26:8e:e8:01:77:4b:e1:66: 7c:d5:89:12:0b:9f:d4:b7:40:7a:7d:40:d1:f3:7d:ca:69:99: ac:cf:76:10:41:39:3b:cb:73:8b:11:92:d5:16:00:6e:4e:9a: 72:26:e3:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2PukGCEoSaz5eTuOmB7Ub+06fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTEwMTgwNzQ1NDZaFw0yNTEwMjExOTMzNDZaMDMxMTAvBgNV BAMTKDQzQzFEREQ1M0IxNkNBRkQ3MTAzRUZENjg5NTZDRjNENTFCODREOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiBYnmeFswDtQL0/jcYDvKQWf NeD8TmiSKnEzf7oUrw43XkqiZx7unHmbAQnN48XEZQ+UXub+IUUnl12KSwsLZwj7 GwzInJvNhK65Yt5uftZVAV4iOESZz5AX1EQLjDFwoKiiN5+siUi0nywuKMOk5wYg GayPK3i5f1UoOP8Kf9Jqg5nsuXCXQ0SRUWjZF5QBE31IGX/SfVq5xeB+j8ycT2Wq KOcJxlKZchGYYmt8Hhf5+flJlgvf6HJPLlj3ylJ+JIIuaYr5X9frGS6Q2D7/Hskr MYXVHFF7fo8mPmB0SBggCVXwXtmUwAZD5Ivb0oHHchoyuKkfL41EWBygvt0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8Hd1TsWyv1xA+/WiVbPPVG4TZAwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQEj/Ad6iIQh6HSXffLT0TXmNkyN7JrKhpI 2DaGSXADnKxNyzKwYRKYgKDXyV+uzEQUQqDh94eZW2Og4bSAmTt56GvTTky4SkAx pR6SLL2XjOHxkF1O6tS4hM2p8DQnTWh5aLCS4fURLAgSus3w3J+hbuIFUlQpXf4b tc7CyYZob/nK7NRo8pbFyaOQTZ46QwAmETibjbrATMcUnBvBouvwpGll4cMy3HpA nXPQuT69R5ZtwQCnfqpoK85cGCFPW1CGKzmZomG68aFpAoJGu+MmjugBd0vhZnzV iRILn9S3QHp9QNHzfcppmazPdhBBOTvLc4sRktUWAG5OmnIm49c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:56 2025 by rpki-client