$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: K5KoeRQUqnBIfJ+AIXNW0hZlH59bD5F/zctPWB45j+g= Subject key identifier: 3C:62:E0:99:94:22:4D:D7:36:C6:21:56:A0:43:5A:DF:8E:0D:D6:F8 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 2C8A964721851A5B7BE43A8ADA979032AA0FB988 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01FC Signing time: Tue 05 Aug 2025 04:41:24 +0000 Manifest this update: Tue 05 Aug 2025 04:36:24 +0000 Manifest next update: Fri 08 Aug 2025 06:54:24 +0000 Files and hashes: 1: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: CvvPd5dgQapXErjK3Mk2GMQkoO5bnE9q3Hj6m8B0ULE=) 2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8a:96:47:21:85:1a:5b:7b:e4:3a:8a:da:97:90:32:aa:0f:b9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Aug 5 04:36:24 2025 GMT Not After : Aug 8 06:54:24 2025 GMT Subject: CN=3C62E09994224DD736C62156A0435ADF8E0DD6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:bd:c9:5a:85:4d:b4:5b:e1:eb:16:bd:34: 51:b8:a6:00:8f:24:47:cf:f4:36:39:e7:a2:8d:fc: 18:52:9a:3c:8f:f1:fb:73:34:00:7e:11:05:60:a9: ee:fc:89:8b:b6:bb:63:db:85:ea:ec:38:69:1e:6f: 3e:54:18:2d:64:98:31:7c:ac:03:67:02:04:01:a5: 38:e9:66:15:75:f9:64:44:a1:9a:70:4d:39:b6:22: 46:bc:b6:38:2c:3c:71:0d:f3:4b:45:a5:4b:84:9f: 7d:90:11:76:c9:0d:8c:1f:62:5d:c7:81:b7:16:f1: 45:3f:f2:b2:02:b3:f8:d4:69:a0:75:da:3e:99:06: a7:6c:bd:b8:e3:90:dc:0d:0c:10:12:f9:03:c9:1f: d5:35:f2:13:fe:07:ed:42:c0:77:69:38:10:9b:64: 9d:f9:47:97:4a:53:96:69:1f:c4:92:9d:01:10:e0: 5d:1e:34:ee:89:cd:f8:16:af:75:71:d7:1f:dd:e6: ad:03:8f:49:60:af:38:f4:82:d5:52:90:58:35:7c: 5c:21:6c:43:66:2c:02:a8:c0:ab:86:20:11:0e:48: 8b:c9:50:f2:97:94:00:f1:75:59:2f:0f:30:7a:f8: 71:db:51:f7:a3:d9:47:ed:c8:ef:5c:23:a7:7b:3d: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:62:E0:99:94:22:4D:D7:36:C6:21:56:A0:43:5A:DF:8E:0D:D6:F8 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ba:28:e4:60:4b:d4:8e:f5:b0:7e:dc:95:4a:05:67:64:7a: 5a:4b:ad:d9:59:c5:08:ee:59:b9:04:a2:2c:c3:df:d4:c9:3e: a1:7d:4c:b9:13:af:3b:11:f5:f2:cd:cd:ea:e2:ba:d4:56:d1: 99:e7:48:09:75:b2:44:ab:2e:dd:ba:77:64:5e:52:6d:e8:48: 5a:14:92:43:33:d3:a7:4c:83:a6:cf:77:26:25:34:ca:a2:84: a9:0d:35:29:04:ba:c4:23:68:70:7e:78:bc:36:cf:07:8e:f7: 0a:2b:a4:18:60:bc:d5:9a:8d:68:48:c0:f3:56:4c:d5:66:14: ac:28:5c:30:8e:c7:04:34:17:bc:6a:1a:d0:5b:11:65:44:58: 41:93:90:aa:55:47:f3:6c:57:f3:88:f3:de:a6:bd:46:25:22: a5:57:f6:11:0c:bd:76:11:3d:18:f5:2c:36:ab:24:b0:24:ae: 8b:e5:ba:dc:93:a4:17:bf:a1:2f:c1:2d:b2:51:16:74:8c:40: fa:67:e2:74:54:bf:79:8f:47:e9:7e:40:71:b3:b3:9f:bf:f7: 66:e3:14:17:18:e4:d1:e4:cd:51:84:4c:a3:69:38:e6:a5:3a: 37:50:c8:ae:4c:c8:7a:52:e5:f3:e9:74:8e:65:d1:46:51:d6: 14:9f:6d:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIqWRyGFGlt75DqK2peQMqoPuYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA4MDUwNDM2MjRaFw0yNTA4MDgwNjU0MjRaMDMxMTAvBgNV BAMTKDNDNjJFMDk5OTQyMjRERDczNkM2MjE1NkEwNDM1QURGOEUwREQ2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yL3JWoVNtFvh6xa9NFG4pgCP JEfP9DY556KN/BhSmjyP8ftzNAB+EQVgqe78iYu2u2PbhersOGkebz5UGC1kmDF8 rANnAgQBpTjpZhV1+WREoZpwTTm2Ika8tjgsPHEN80tFpUuEn32QEXbJDYwfYl3H gbcW8UU/8rICs/jUaaB12j6ZBqdsvbjjkNwNDBAS+QPJH9U18hP+B+1CwHdpOBCb ZJ35R5dKU5ZpH8SSnQEQ4F0eNO6JzfgWr3Vx1x/d5q0Dj0lgrzj0gtVSkFg1fFwh bENmLAKowKuGIBEOSIvJUPKXlADxdVkvDzB6+HHbUfej2UftyO9cI6d7Pfm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGLgmZQiTdc2xiFWoENa344N1vgwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy6KORgS9SO9bB+3JVKBWdkelpLrdlZxQju WbkEoizD39TJPqF9TLkTrzsR9fLNzeriutRW0ZnnSAl1skSrLt26d2ReUm3oSFoU kkMz06dMg6bPdyYlNMqihKkNNSkEusQjaHB+eLw2zweO9worpBhgvNWajWhIwPNW TNVmFKwoXDCOxwQ0F7xqGtBbEWVEWEGTkKpVR/NsV/OI896mvUYlIqVX9hEMvXYR PRj1LDarJLAkrovlutyTpBe/oS/BLbJRFnSMQPpn4nRUv3mPR+l+QHGzs5+/92bj FBcY5NHkzVGETKNpOOalOjdQyK5MyHpS5fPpdI5l0UZR1hSfbe0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:13 2025 by rpki-client