$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: sicaIXo0q7TU8zGMFdTzEDnGdt1vGIK/dals0uONuBI= Subject key identifier: 9D:4B:FB:A3:6D:39:C3:FD:1E:70:7E:2B:30:CA:CA:D5:B6:E9:07:38 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 709E6D87F524C20CF596A8884D7E4E436E362E74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 019F Signing time: Sat 23 Aug 2025 08:21:18 +0000 Manifest this update: Sat 23 Aug 2025 08:16:18 +0000 Manifest next update: Tue 26 Aug 2025 17:13:18 +0000 Files and hashes: 1: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: Qc6AwrmIjdnYdCng8S513XDb9V+KIYizJlD52RC89gg=) 2: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) 4: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9e:6d:87:f5:24:c2:0c:f5:96:a8:88:4d:7e:4e:43:6e:36:2e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Aug 23 08:16:18 2025 GMT Not After : Aug 26 17:13:18 2025 GMT Subject: CN=9D4BFBA36D39C3FD1E707E2B30CACAD5B6E90738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:76:02:6f:4c:b5:51:e6:3a:86:fb:dd:d0: e1:5f:4c:47:4f:d5:ca:0f:5e:5e:59:1d:53:44:87: 57:3b:20:7c:6b:c1:7c:3c:d7:fc:8a:72:8e:cc:2a: 02:0a:04:00:b8:42:64:b9:47:87:a3:a1:3e:d1:f1: 97:9e:3b:08:6d:4a:07:d7:b7:ec:b9:39:6c:63:1b: 74:30:20:c6:f0:c8:c5:46:ea:5c:80:58:f1:dd:44: 46:ab:ce:78:10:ca:0c:3c:03:25:e1:f1:2d:a7:c1: e1:a7:6f:21:22:5b:76:27:ff:03:20:b5:b0:7d:83: 94:ae:c9:f5:c9:1c:81:a1:fd:cf:49:27:87:48:80: 5f:4e:38:ee:58:d3:71:de:22:29:71:c8:9f:4f:db: 26:0e:4f:77:20:9b:f6:6d:0b:57:60:d8:07:16:eb: 58:f3:cf:b4:8d:31:6f:d5:72:9e:94:26:f6:ed:71: c9:ae:f3:fd:3d:53:ba:68:2d:42:c5:ed:a1:f6:e6: 4a:ca:db:a8:10:83:75:21:1f:d9:71:7a:78:20:93: f1:ec:1d:cf:a6:17:48:51:b7:ce:4b:a5:9c:65:42: 3c:ef:53:a0:be:e7:fb:be:d3:99:c5:17:22:17:99: 08:a3:9e:0a:56:82:fb:9b:2f:62:7d:4a:d1:74:34: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:FB:A3:6D:39:C3:FD:1E:70:7E:2B:30:CA:CA:D5:B6:E9:07:38 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e0:ed:47:e2:ff:20:40:17:10:5a:5b:bd:3d:10:8f:57:e4: d3:29:30:18:b5:60:57:6b:76:9b:38:aa:f9:eb:69:06:9f:03: e4:89:e8:c9:b0:7c:ed:68:fa:7b:db:6d:66:63:c1:f4:71:21: 9f:2d:ca:a6:08:73:82:20:49:6e:aa:41:36:8e:c4:e3:dd:9c: 94:d4:dd:3b:b6:22:4b:9c:d4:fe:2e:db:1c:f7:39:49:68:63: ac:3f:9e:8d:5f:5c:6c:fe:bc:c6:8c:61:d1:c8:c0:28:6e:93: f4:87:ba:c8:24:c9:fd:6b:90:3b:3a:97:94:da:b2:d4:d7:e8: 72:f1:f5:9d:ba:35:5a:e3:a5:a0:9d:19:d0:99:60:8a:61:fa: 29:0f:63:7f:11:bd:0b:ea:7d:7d:86:f0:a0:a4:b0:e1:8c:ad: dc:3c:13:6b:37:65:93:93:1b:e9:3c:b6:f9:9b:5b:7b:48:8e: b8:18:36:e3:88:b9:7f:4a:12:3d:48:73:ef:b9:eb:d1:81:14: 2c:d5:24:12:82:1b:29:c5:61:74:ec:42:41:21:cf:d9:3f:8d: 98:a6:30:c4:db:f5:f1:9c:59:f4:74:88:a9:fb:ac:37:10:87: bc:5f:92:4c:4f:b5:39:33:61:dc:a0:72:6d:33:1d:95:29:92: 40:37:dd:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJ5th/Ukwgz1lqiITX5OQ242LnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA4MjMwODE2MThaFw0yNTA4MjYxNzEzMThaMDMxMTAvBgNV BAMTKDlENEJGQkEzNkQzOUMzRkQxRTcwN0UyQjMwQ0FDQUQ1QjZFOTA3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KnYCb0y1UeY6hvvd0OFfTEdP 1coPXl5ZHVNEh1c7IHxrwXw81/yKco7MKgIKBAC4QmS5R4ejoT7R8ZeeOwhtSgfX t+y5OWxjG3QwIMbwyMVG6lyAWPHdREarzngQygw8AyXh8S2nweGnbyEiW3Yn/wMg tbB9g5SuyfXJHIGh/c9JJ4dIgF9OOO5Y03HeIilxyJ9P2yYOT3cgm/ZtC1dg2AcW 61jzz7SNMW/Vcp6UJvbtccmu8/09U7poLULF7aH25krK26gQg3UhH9lxenggk/Hs Hc+mF0hRt85LpZxlQjzvU6C+5/u+05nFFyIXmQijngpWgvubL2J9StF0NFFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUv7o205w/0ecH4rMMrK1bbpBzgwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXg7Ufi/yBAFxBaW709EI9X5NMpMBi1YFdr dps4qvnraQafA+SJ6MmwfO1o+nvbbWZjwfRxIZ8tyqYIc4IgSW6qQTaOxOPdnJTU 3Tu2Ikuc1P4u2xz3OUloY6w/no1fXGz+vMaMYdHIwChuk/SHusgkyf1rkDs6l5Ta stTX6HLx9Z26NVrjpaCdGdCZYIph+ikPY38RvQvqfX2G8KCksOGMrdw8E2s3ZZOT G+k8tvmbW3tIjrgYNuOIuX9KEj1Ic++569GBFCzVJBKCGynFYXTsQkEhz9k/jZim MMTb9fGcWfR0iKn7rDcQh7xfkkxPtTkzYdygcm0zHZUpkkA33ag= -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:39 2025 by rpki-client