$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: 8HHJc/k2hAsXoGwgu+dsGU6eitTxX5KXZIcRXRHZQfY= Subject key identifier: 2F:83:8F:CE:FB:CB:4D:50:53:2C:BC:2F:BA:3F:A5:C9:EA:D6:73:1A Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 4321974E3954E5468C2394896CCDAC7B44BF34A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 0187 Signing time: Sun 29 Jun 2025 12:21:09 +0000 Manifest this update: Sun 29 Jun 2025 12:16:09 +0000 Manifest next update: Wed 02 Jul 2025 21:07:09 +0000 Files and hashes: 1: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) 2: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: ZR45FQN+pWBJZOJTSJNKcVVqjrfB27fjmlm6pPoRjts=) 3: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 4: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:21:97:4e:39:54:e5:46:8c:23:94:89:6c:cd:ac:7b:44:bf:34:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Jun 29 12:16:09 2025 GMT Not After : Jul 2 21:07:09 2025 GMT Subject: CN=2F838FCEFBCB4D50532CBC2FBA3FA5C9EAD6731A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:a8:ec:bc:e5:81:21:5c:39:fb:60:ef:aa: d6:de:2b:73:70:b7:a8:11:3b:aa:80:fc:cf:61:ea: f7:7c:c6:08:9c:ce:3f:4b:7c:55:37:96:57:19:98: cb:86:9b:be:45:92:36:81:a1:fe:40:68:f5:72:ce: ee:b7:3b:96:2b:9b:62:c8:1e:8c:4f:95:70:79:9e: bc:d9:12:62:9e:42:8f:9c:4b:da:e4:62:43:78:86: 14:0c:d6:43:09:9a:89:7d:3b:41:ed:b5:4a:73:78: ba:f0:17:66:78:60:77:3d:07:a2:77:dc:fd:24:f6: 72:40:c4:ed:75:d8:37:f2:e2:06:6a:28:7c:75:47: 55:af:27:e2:94:a3:0f:70:85:82:43:29:27:19:3f: 0c:ac:03:58:df:97:1b:d6:f1:30:d4:e9:82:1b:49: 2d:ba:09:19:b8:e9:13:b2:ec:6e:b4:f0:9b:76:d2: 2c:73:b3:a8:ab:ed:a2:f8:d5:82:b5:75:e7:53:ac: 7f:21:41:9e:2d:1d:3a:01:90:ef:32:09:10:2f:bb: 6c:c5:b9:01:d9:20:93:52:f2:09:fe:15:ad:d0:7b: 0d:ba:44:05:8d:f5:40:ca:53:77:43:e1:3b:50:dc: 62:8a:c0:8d:fa:50:b1:46:d1:84:c1:f3:d3:97:71: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:83:8F:CE:FB:CB:4D:50:53:2C:BC:2F:BA:3F:A5:C9:EA:D6:73:1A X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d4:10:65:2e:70:b7:99:fb:5a:0d:87:dd:76:0d:95:43:5a: eb:af:f3:f7:b4:83:6e:00:c6:34:8a:db:cf:33:e0:d6:11:9c: 1c:c6:27:fa:a0:58:27:cc:6a:39:3a:82:01:54:92:02:79:cc: bd:58:c4:2f:5f:bf:3a:5f:e6:3a:f4:98:74:33:4c:2d:ad:45: 25:4a:27:17:4b:25:e5:d5:44:0c:e8:36:66:4f:85:fc:f4:69: 2e:d4:22:e6:75:b4:96:70:7b:58:f8:29:72:c7:48:34:c6:39: 5a:3c:b1:ec:c6:75:32:ec:fc:40:04:b8:5a:78:ca:6f:1b:bf: 73:13:78:55:96:5a:67:9f:31:32:26:c1:27:10:e4:12:92:79: 31:14:e0:e2:d8:f6:93:b5:25:c5:73:07:93:c3:a4:53:b4:2d: f9:93:c0:69:11:42:ce:96:2d:d1:52:c8:b8:58:c5:16:ff:00: 77:18:b6:68:5b:9d:c3:5f:e0:f3:ab:bb:b3:bf:a2:a0:9e:de: 7f:75:18:0f:09:64:e8:af:4b:d1:7c:7a:60:9f:49:2d:67:4d: cf:3e:0e:cc:94:13:bc:ef:ab:77:5a:d0:2f:55:2c:0a:fb:4b: 0f:fb:37:ad:61:77:b3:4c:83:d0:89:49:88:5e:6e:63:f6:3a: a7:0b:fa:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyGXTjlU5UaMI5SJbM2se0S/NKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA2MjkxMjE2MDlaFw0yNTA3MDIyMTA3MDlaMDMxMTAvBgNV BAMTKDJGODM4RkNFRkJDQjRENTA1MzJDQkMyRkJBM0ZBNUM5RUFENjczMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQ6jsvOWBIVw5+2DvqtbeK3Nw t6gRO6qA/M9h6vd8xgiczj9LfFU3llcZmMuGm75FkjaBof5AaPVyzu63O5Yrm2LI HoxPlXB5nrzZEmKeQo+cS9rkYkN4hhQM1kMJmol9O0HttUpzeLrwF2Z4YHc9B6J3 3P0k9nJAxO112Dfy4gZqKHx1R1WvJ+KUow9whYJDKScZPwysA1jflxvW8TDU6YIb SS26CRm46ROy7G608Jt20ixzs6ir7aL41YK1dedTrH8hQZ4tHToBkO8yCRAvu2zF uQHZIJNS8gn+Fa3Qew26RAWN9UDKU3dD4TtQ3GKKwI36ULFG0YTB89OXcU0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4OPzvvLTVBTLLwvuj+lyerWcxowHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDUEGUucLeZ+1oNh912DZVDWuuv8/e0g24A xjSK288z4NYRnBzGJ/qgWCfMajk6ggFUkgJ5zL1YxC9fvzpf5jr0mHQzTC2tRSVK JxdLJeXVRAzoNmZPhfz0aS7UIuZ1tJZwe1j4KXLHSDTGOVo8sezGdTLs/EAEuFp4 ym8bv3MTeFWWWmefMTImwScQ5BKSeTEU4OLY9pO1JcVzB5PDpFO0LfmTwGkRQs6W LdFSyLhYxRb/AHcYtmhbncNf4POru7O/oqCe3n91GA8JZOivS9F8emCfSS1nTc8+ DsyUE7zvq3da0C9VLAr7Sw/7N61hd7NMg9CJSYhebmP2OqcL+p0= -----END CERTIFICATE-----Generated at Sun Jun 29 22:04:12 2025 by rpki-client