$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: cIRRV/k9hVBbnMPfJXk+u+KGOGophtNpwUCGUrUS7v4= Subject key identifier: C7:E7:57:CD:53:01:44:1F:10:8F:F4:2D:51:1E:21:DD:43:4A:C1:CF Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 53C2565E9C26DD535F11D8C2DA92C7E1A03D3B91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 0200 Signing time: Fri 22 Aug 2025 21:10:38 +0000 Manifest this update: Fri 22 Aug 2025 21:05:38 +0000 Manifest next update: Mon 25 Aug 2025 21:23:38 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: zP63fbrFU+ZZhY3UBPl8ib/PGALyXfzjqSwRyk7BSYA=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c2:56:5e:9c:26:dd:53:5f:11:d8:c2:da:92:c7:e1:a0:3d:3b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Aug 22 21:05:38 2025 GMT Not After : Aug 25 21:23:38 2025 GMT Subject: CN=C7E757CD5301441F108FF42D511E21DD434AC1CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:a0:9c:38:67:2a:2f:15:fe:04:f9:b6:6e: 7c:f5:05:00:08:8b:f6:fa:84:8a:37:3d:9a:c6:2d: b5:91:da:47:07:ba:be:af:0d:53:14:11:dc:db:ba: 5b:ba:53:f5:e2:19:9d:f3:b1:2a:ed:51:bb:a1:04: 50:2f:c0:81:9e:5f:0e:e2:e6:56:c2:ef:02:20:c3: fa:63:18:49:99:06:b6:dc:d9:c4:70:91:59:5e:f7: cb:a3:61:dd:4c:02:99:66:03:33:7e:a0:f6:80:28: c2:d0:0b:15:5e:fc:31:e7:03:9c:13:bf:bb:70:b9: 3e:57:41:4d:f2:22:33:2a:09:cc:14:f1:06:c6:f8: 12:d8:0b:62:6a:28:2d:7b:73:fb:5a:05:5d:5a:6b: c2:73:eb:76:14:53:c1:e4:64:64:97:b0:71:c9:d5: 45:56:21:6f:29:ae:73:9e:8d:aa:4f:81:f2:8e:6f: 31:55:0b:3d:0d:2b:12:aa:53:ac:31:d7:d9:eb:69: af:b1:13:70:19:45:92:b2:72:4e:12:fa:49:cd:a6: 54:61:98:40:fa:05:7b:59:1a:6c:b7:15:8d:95:23: 2f:ce:98:5c:89:1a:81:21:1e:90:79:22:7b:b6:cd: 22:ab:36:3f:e2:95:d3:aa:3a:32:98:4a:24:5b:d1: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:57:CD:53:01:44:1F:10:8F:F4:2D:51:1E:21:DD:43:4A:C1:CF X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fb:9b:db:ff:4c:26:d6:68:7b:d5:a7:b5:82:e6:c8:ad:7e: e1:37:6c:fe:a2:0e:2c:19:4c:75:6f:ed:6a:bc:d5:a4:c9:b0: 84:d9:61:bc:31:7f:9d:d6:65:e1:50:77:f7:48:45:da:7e:81: 82:96:69:32:98:17:cd:cf:78:ca:01:dd:59:72:c0:a9:cd:96: 81:32:41:67:11:1b:3a:51:23:de:bd:62:c7:82:77:b3:ab:55: 19:4e:cb:e3:7e:b6:3d:87:7a:37:a3:f2:5d:42:d4:75:7f:63: 1a:a5:dc:09:87:d3:85:13:fc:77:c5:69:88:c3:64:28:83:3e: fa:c1:34:f9:bb:dc:f0:90:22:f9:9b:4a:78:59:af:5e:11:64: 11:d2:9a:05:1d:1c:5c:84:e9:54:31:1b:f1:8b:36:d4:8d:b6: 6d:d1:5d:0d:c4:dc:f4:de:b0:ee:7c:de:1d:2e:6f:a1:b0:75: 87:c7:c2:c5:96:0a:f5:8d:7e:f4:e6:47:8d:bb:5b:ef:a9:2d: 22:0a:e1:dc:df:40:5a:38:bd:9e:73:2f:2e:3e:0b:96:5d:90: 72:f1:bc:de:e7:3b:11:ed:25:e4:b2:98:db:9c:e1:4a:8b:5f: 66:9e:89:46:27:a9:69:13:44:df:6d:86:0b:ae:8c:1f:54:ad: 3c:d2:12:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8JWXpwm3VNfEdjC2pLH4aA9O5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA4MjIyMTA1MzhaFw0yNTA4MjUyMTIzMzhaMDMxMTAvBgNV BAMTKEM3RTc1N0NENTMwMTQ0MUYxMDhGRjQyRDUxMUUyMURENDM0QUMxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDaCcOGcqLxX+BPm2bnz1BQAI i/b6hIo3PZrGLbWR2kcHur6vDVMUEdzbulu6U/XiGZ3zsSrtUbuhBFAvwIGeXw7i 5lbC7wIgw/pjGEmZBrbc2cRwkVle98ujYd1MAplmAzN+oPaAKMLQCxVe/DHnA5wT v7twuT5XQU3yIjMqCcwU8QbG+BLYC2JqKC17c/taBV1aa8Jz63YUU8HkZGSXsHHJ 1UVWIW8prnOejapPgfKObzFVCz0NKxKqU6wx19nraa+xE3AZRZKyck4S+knNplRh mED6BXtZGmy3FY2VIy/OmFyJGoEhHpB5Inu2zSKrNj/ildOqOjKYSiRb0aIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+dXzVMBRB8Qj/QtUR4h3UNKwc8wHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb7m9v/TCbWaHvVp7WC5sitfuE3bP6iDiwZ THVv7Wq81aTJsITZYbwxf53WZeFQd/dIRdp+gYKWaTKYF83PeMoB3VlywKnNloEy QWcRGzpRI969YseCd7OrVRlOy+N+tj2Hejej8l1C1HV/Yxql3AmH04UT/HfFaYjD ZCiDPvrBNPm73PCQIvmbSnhZr14RZBHSmgUdHFyE6VQxG/GLNtSNtm3RXQ3E3PTe sO583h0ub6GwdYfHwsWWCvWNfvTmR427W++pLSIK4dzfQFo4vZ5zLy4+C5ZdkHLx vN7nOxHtJeSymNuc4UqLX2aeiUYnqWkTRN9thguujB9UrTzSEng= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:33 2025 by rpki-client