$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: xaOh0wBd8XXDNsAwzz0zDOp5B9wV+yRoz+Mc++x6pv0= Subject key identifier: 06:4F:85:BA:5A:D7:35:B7:B7:06:55:CE:78:EC:3B:7C:95:24:B2:2C Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 0E5E21FAD8173DDA545115C7E7810208D0342192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01AE Signing time: Wed 02 Jul 2025 23:00:45 +0000 Manifest this update: Wed 02 Jul 2025 22:55:45 +0000 Manifest next update: Sun 06 Jul 2025 07:00:45 +0000 Files and hashes: 1: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: WxsDtS0ABHHFvqMOw31jYcfZLJssioCseEY3zkVWm9o=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5e:21:fa:d8:17:3d:da:54:51:15:c7:e7:81:02:08:d0:34:21:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Jul 2 22:55:45 2025 GMT Not After : Jul 6 07:00:45 2025 GMT Subject: CN=064F85BA5AD735B7B70655CE78EC3B7C9524B22C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:86:45:2b:6a:c4:7a:ec:f0:2d:30:3b:38: 5d:f6:2d:a1:61:a0:c9:55:37:bf:e9:97:8a:07:ec: a1:69:3b:6a:cd:34:ce:7d:5e:89:c8:d8:9b:21:c4: 8b:26:dd:10:9d:42:8e:64:6d:97:3d:66:87:6e:a2: b1:1b:8b:2a:18:30:ce:15:32:55:4f:ad:26:99:20: f9:41:0e:65:e3:2e:c2:0f:77:16:67:41:4a:7d:f6: 9e:15:76:76:8f:72:b5:8a:9a:3b:18:a6:06:ad:0a: f3:ea:d7:c5:26:51:be:b1:31:6d:51:12:ab:e0:0a: e0:cf:9f:b0:99:32:86:9c:ef:a2:01:b4:c8:7c:d8: c6:5a:7a:1a:ee:2e:a6:12:a5:67:0d:21:41:9b:92: 16:c2:35:f7:2a:54:9b:83:dc:3c:48:0d:ad:44:f2: 2a:c4:6c:5b:32:10:a0:f1:a8:3f:9b:b3:a5:e2:a1: 86:a6:0d:33:ae:4b:30:4b:5b:a4:81:1b:61:24:c2: 35:14:11:42:57:af:7e:19:33:42:8f:57:c5:6f:d6: b1:48:0c:c6:69:69:2c:3f:f9:c7:f0:a7:0e:dc:ba: 0a:40:60:cc:51:08:9d:b1:15:ee:c8:4b:89:7e:97: 5f:38:1b:fe:b0:e4:63:4b:d2:bc:60:79:ef:84:58: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4F:85:BA:5A:D7:35:B7:B7:06:55:CE:78:EC:3B:7C:95:24:B2:2C X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:dd:49:56:68:ed:f0:0e:6e:f8:57:0e:0a:80:59:6c:04:83: e1:34:b9:a9:8f:39:21:22:30:6a:81:35:8c:ac:b6:c4:16:a1: 52:9c:c6:0e:7a:5c:04:d3:27:24:8f:62:c1:bc:ae:e3:59:2c: 02:84:c9:ad:0b:a6:26:71:da:14:f3:64:fe:2d:05:c6:ae:6c: 45:61:24:c4:09:c4:11:66:db:d2:0a:10:8b:7b:37:6c:cd:af: 09:e2:98:d2:18:e5:e2:7b:5a:7f:a9:9d:68:ec:1f:cd:05:0c: 05:44:62:27:04:07:7f:0a:5f:54:85:18:53:4a:cf:ac:05:04: 87:ba:5f:ff:ae:df:7a:78:7a:c0:68:15:c9:46:d8:f7:f4:b5: 90:a2:f6:69:d8:4d:a0:49:a7:35:95:f3:5f:61:5d:88:22:3e: 52:51:f3:b2:4a:96:f9:fd:61:f3:a0:4a:f2:9b:c3:fa:5e:9e: a2:4d:28:08:6f:26:9f:60:3c:b2:ff:df:07:68:1e:f4:fa:45: 1f:d9:d8:eb:2a:63:6e:d8:04:cf:df:fd:33:38:54:39:3e:bd: 97:42:49:b6:75:1b:f0:35:76:fc:8f:a3:83:84:d1:15:9e:23: 84:dc:db:cc:cc:f2:9a:e2:d3:73:03:44:68:cb:be:3e:de:de: 6b:19:07:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDl4h+tgXPdpUURXH54ECCNA0IZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA3MDIyMjU1NDVaFw0yNTA3MDYwNzAwNDVaMDMxMTAvBgNV BAMTKDA2NEY4NUJBNUFENzM1QjdCNzA2NTVDRTc4RUMzQjdDOTUyNEIyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy24ZFK2rEeuzwLTA7OF32LaFh oMlVN7/pl4oH7KFpO2rNNM59XonI2JshxIsm3RCdQo5kbZc9ZoduorEbiyoYMM4V MlVPrSaZIPlBDmXjLsIPdxZnQUp99p4VdnaPcrWKmjsYpgatCvPq18UmUb6xMW1R EqvgCuDPn7CZMoac76IBtMh82MZaehruLqYSpWcNIUGbkhbCNfcqVJuD3DxIDa1E 8irEbFsyEKDxqD+bs6XioYamDTOuSzBLW6SBG2EkwjUUEUJXr34ZM0KPV8Vv1rFI DMZpaSw/+cfwpw7cugpAYMxRCJ2xFe7IS4l+l184G/6w5GNL0rxgee+EWDoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBk+FulrXNbe3BlXOeOw7fJUksiwwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3dSVZo7fAObvhXDgqAWWwEg+E0uamPOSEi MGqBNYystsQWoVKcxg56XATTJySPYsG8ruNZLAKEya0LpiZx2hTzZP4tBcaubEVh JMQJxBFm29IKEIt7N2zNrwnimNIY5eJ7Wn+pnWjsH80FDAVEYicEB38KX1SFGFNK z6wFBIe6X/+u33p4esBoFclG2Pf0tZCi9mnYTaBJpzWV819hXYgiPlJR87JKlvn9 YfOgSvKbw/penqJNKAhvJp9gPLL/3wdoHvT6RR/Z2OsqY27YBM/f/TM4VDk+vZdC SbZ1G/A1dvyPo4OE0RWeI4Tc28zM8pri03MDRGjLvj7e3msZBx4= -----END CERTIFICATE-----Generated at Fri Jul 4 00:27:14 2025 by rpki-client