$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: MNBBZKk4AVbhdMH5pVtc1BQi7THdwx7+YaVtvibxCig= Subject key identifier: 0D:5C:66:B2:2F:1A:0D:6B:58:5E:A6:85:9E:B8:F8:4A:8D:48:0A:F4 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 49458575BACBEBE7D473A0D9FA958731C41A9C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01C4 Signing time: Thu 21 Aug 2025 09:20:45 +0000 Manifest this update: Thu 21 Aug 2025 09:15:45 +0000 Manifest next update: Sun 24 Aug 2025 15:46:45 +0000 Files and hashes: 1: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: 1slYhoSDbKH98/kvYSG1MPbXyKHe10dqSxVkp2BZA+c=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) 3: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:45:85:75:ba:cb:eb:e7:d4:73:a0:d9:fa:95:87:31:c4:1a:9c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Aug 21 09:15:45 2025 GMT Not After : Aug 24 15:46:45 2025 GMT Subject: CN=0D5C66B22F1A0D6B585EA6859EB8F84A8D480AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:98:5b:52:77:96:87:7b:6e:62:1a:34:ae: d6:57:d8:76:80:b3:ad:07:9a:16:97:19:48:2b:d0: 41:98:bd:f6:d0:79:21:c7:52:99:b1:c0:70:aa:1e: 36:37:11:7f:d9:e0:f9:a7:df:d2:3c:9a:33:fd:a2: 7a:3b:b9:cd:e7:7d:b8:f9:21:02:62:bb:6c:75:91: 43:d0:6a:36:c0:ee:68:08:7e:e6:bb:c2:e8:62:39: c0:b1:6f:bb:72:2e:67:3b:a7:3b:da:f9:a3:d4:7f: ff:57:cb:71:96:09:70:c3:e1:c1:a1:8b:46:c5:26: b7:b4:3d:9a:f6:ae:cd:59:e6:c7:9d:3e:88:ff:65: 25:cc:e1:8a:cd:0b:eb:49:44:d2:dc:00:65:2a:4c: 52:e9:b5:e4:ac:ab:4e:37:c9:04:c9:f2:fc:d8:2f: f5:d4:9a:b7:28:a2:76:3d:cc:5a:a0:ad:98:43:b4: e1:7e:f0:29:04:e6:34:c1:9a:eb:c6:82:5f:1f:8c: 44:3a:0b:33:54:70:4e:13:8a:fd:76:48:45:c0:c9: 43:07:3f:83:53:02:f6:67:86:e2:37:11:21:a5:f9: f3:4c:19:18:39:66:c6:74:7d:09:74:29:66:9c:af: 07:f2:2d:61:f8:e6:c3:1c:fd:84:66:8c:5b:bc:6f: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5C:66:B2:2F:1A:0D:6B:58:5E:A6:85:9E:B8:F8:4A:8D:48:0A:F4 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:bc:b8:8c:7a:2b:37:73:43:d1:86:e3:5d:b4:54:03:b1:94: 53:1c:8c:07:a9:97:6a:19:b6:ac:d7:5b:ca:52:df:22:c9:b9: 91:0e:eb:ea:d8:09:9a:a7:e6:58:44:2c:16:3c:ee:d4:83:8c: f4:27:7d:d0:48:f1:83:69:01:32:28:4a:fb:73:76:ac:41:fe: c9:ce:59:c4:9a:2f:aa:8b:06:52:c3:b7:62:73:c9:e5:00:56: dd:f5:92:17:c6:98:1a:1b:cf:42:33:2c:25:47:ec:bb:6e:8b: 5c:73:5d:ca:05:9c:5d:86:b2:ff:1b:a2:79:79:f0:41:19:f7: 4c:d8:65:36:4f:78:04:73:77:d5:3a:af:f0:66:05:da:c1:ce: 81:98:77:62:b0:8b:4b:c9:51:9d:26:b9:fd:16:58:d4:ec:fe: 70:ee:51:05:a4:9e:c3:88:ec:3a:59:22:af:5e:7d:95:03:76: 69:74:42:3a:04:ef:20:d5:e6:2a:77:8f:95:4d:df:f1:d5:6d: dd:aa:a4:4c:e5:f5:0a:be:7c:80:d1:ae:c0:e6:fc:77:12:9b: d4:21:9d:86:76:ea:b9:04:73:92:91:88:0b:e3:dd:24:b4:19: fe:51:d7:33:95:dd:d3:06:0d:da:cb:8b:b5:e1:76:67:d5:e6: ff:a2:31:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUWFdbrL6+fUc6DZ+pWHMcQanBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA4MjEwOTE1NDVaFw0yNTA4MjQxNTQ2NDVaMDMxMTAvBgNV BAMTKDBENUM2NkIyMkYxQTBENkI1ODVFQTY4NTlFQjhGODRBOEQ0ODBBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxphbUneWh3tuYho0rtZX2HaA s60HmhaXGUgr0EGYvfbQeSHHUpmxwHCqHjY3EX/Z4Pmn39I8mjP9ono7uc3nfbj5 IQJiu2x1kUPQajbA7mgIfua7wuhiOcCxb7tyLmc7pzva+aPUf/9Xy3GWCXDD4cGh i0bFJre0PZr2rs1Z5sedPoj/ZSXM4YrNC+tJRNLcAGUqTFLpteSsq043yQTJ8vzY L/XUmrcoonY9zFqgrZhDtOF+8CkE5jTBmuvGgl8fjEQ6CzNUcE4Tiv12SEXAyUMH P4NTAvZnhuI3ESGl+fNMGRg5ZsZ0fQl0KWacrwfyLWH45sMc/YRmjFu8b1FdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVxmsi8aDWtYXqaFnrj4So1ICvQwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMW8uIx6KzdzQ9GG4120VAOxlFMcjAepl2oZ tqzXW8pS3yLJuZEO6+rYCZqn5lhELBY87tSDjPQnfdBI8YNpATIoSvtzdqxB/snO WcSaL6qLBlLDt2JzyeUAVt31khfGmBobz0IzLCVH7Ltui1xzXcoFnF2Gsv8bonl5 8EEZ90zYZTZPeARzd9U6r/BmBdrBzoGYd2Kwi0vJUZ0muf0WWNTs/nDuUQWknsOI 7DpZIq9efZUDdml0QjoE7yDV5ip3j5VN3/HVbd2qpEzl9Qq+fIDRrsDm/HcSm9Qh nYZ26rkEc5KRiAvj3SS0Gf5R1zOV3dMGDdrLi7XhdmfV5v+iMdg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:50 2025 by rpki-client