$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: pKsB9JJJOA+9QjzZeXMuFrY2NASyn9qcoTHS01Qcol8= Subject key identifier: 74:20:21:EC:1A:A8:56:E8:84:DC:61:6C:26:03:0F:72:A8:DA:88:B5 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 6729FCC764F95736F989782E0F3070E663986C1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0225 Signing time: Tue 04 Nov 2025 13:41:26 +0000 Manifest this update: Tue 04 Nov 2025 13:36:26 +0000 Manifest next update: Fri 07 Nov 2025 20:20:26 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: 5ZXaWWKZqnH9fClJmNB3q0Ag90OhpK5W7PSKvkltsuo=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:29:fc:c7:64:f9:57:36:f9:89:78:2e:0f:30:70:e6:63:98:6c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Nov 4 13:36:26 2025 GMT Not After : Nov 7 20:20:26 2025 GMT Subject: CN=742021EC1AA856E884DC616C26030F72A8DA88B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:4b:b7:fe:46:97:ab:42:fb:49:aa:35:f6: 7c:bc:32:43:94:4b:59:aa:9b:f9:13:89:d0:9a:fa: 8a:13:40:c2:eb:13:10:9a:ae:f0:7c:6f:56:43:55: 81:9d:44:1d:d8:c1:2a:c4:ab:26:31:1c:de:d5:ab: 37:9f:d2:fc:56:0f:34:10:e7:35:f9:98:67:fd:94: 86:be:b6:b7:5c:af:c3:27:1d:5c:78:a3:44:b5:2b: b8:79:08:69:e7:12:0d:f4:2e:15:81:4a:41:0e:3d: 16:be:2e:89:f4:62:e2:9c:68:4b:4f:de:f3:1a:5e: b6:e6:01:a8:db:61:50:35:38:10:d9:f5:36:76:2c: 97:8f:4c:df:b6:45:0f:35:d4:37:51:83:b9:b5:4d: 5d:69:62:36:ae:0a:59:3b:59:e1:7a:d2:cd:63:1c: 90:94:cc:9e:49:a8:5e:c6:e0:53:1c:89:02:6d:5b: 34:52:a8:4f:75:e0:91:d6:66:a3:72:7f:3e:ba:5b: 90:a0:e7:0d:22:a0:d5:13:80:66:ab:0b:28:d3:f7: 69:b1:f3:86:7b:25:cb:4b:a2:4c:fc:5c:0a:f3:c3: 3d:74:25:63:31:8e:f0:77:28:61:e7:01:ea:7b:5e: 79:f7:1a:cd:35:8f:9c:68:61:1f:ee:b1:fa:7e:c8: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:20:21:EC:1A:A8:56:E8:84:DC:61:6C:26:03:0F:72:A8:DA:88:B5 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b3:3d:3c:8b:44:1c:54:2a:7a:38:1c:58:aa:ce:5a:98:b4: cb:22:6b:d5:d8:22:93:66:93:7b:cf:d4:da:e5:7e:fa:4d:80: 88:b7:05:a9:10:d7:c6:46:80:8e:7f:51:99:20:4e:66:a5:e1: 79:61:7e:37:b1:eb:65:7f:c3:44:9f:c0:4c:4b:58:24:a5:c2: 78:ce:1b:0e:b1:a9:02:35:a4:fb:a6:f0:10:fd:cf:a5:bf:17: f7:2b:bd:65:31:67:42:bb:99:c2:9a:5a:1d:7b:a4:ff:8f:85: 3e:09:2f:6b:bd:85:e0:a0:50:8a:44:53:6c:9b:62:c6:25:27: 41:54:1b:82:25:c7:71:d4:d8:9d:40:d9:23:22:39:0c:a6:55: d8:47:0d:3a:2e:81:37:b5:78:d7:d9:76:a9:90:2a:49:e4:48: 8c:5d:9f:d6:b9:79:42:e9:31:14:a8:81:2d:64:99:3f:cd:71: 10:2a:c1:f8:a2:c4:c6:23:ee:57:6d:3f:59:02:d0:ca:73:ae: 19:7b:08:69:9a:5d:3b:ab:da:c3:b5:63:2e:8b:e4:4a:32:cf: 98:2b:c1:a7:44:d3:e7:09:0c:4a:32:d2:4e:bf:ef:cf:dd:84: bb:9d:20:a3:b9:a8:a0:9c:7a:12:cc:cb:b0:3a:e4:4f:45:d4: e0:22:a7:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyn8x2T5Vzb5iXguDzBw5mOYbB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTExMDQxMzM2MjZaFw0yNTExMDcyMDIwMjZaMDMxMTAvBgNV BAMTKDc0MjAyMUVDMUFBODU2RTg4NERDNjE2QzI2MDMwRjcyQThEQTg4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MUu3/kaXq0L7Sao19ny8MkOU S1mqm/kTidCa+ooTQMLrExCarvB8b1ZDVYGdRB3YwSrEqyYxHN7Vqzef0vxWDzQQ 5zX5mGf9lIa+trdcr8MnHVx4o0S1K7h5CGnnEg30LhWBSkEOPRa+Lon0YuKcaEtP 3vMaXrbmAajbYVA1OBDZ9TZ2LJePTN+2RQ811DdRg7m1TV1pYjauClk7WeF60s1j HJCUzJ5JqF7G4FMciQJtWzRSqE914JHWZqNyfz66W5Cg5w0ioNUTgGarCyjT92mx 84Z7JctLokz8XArzwz10JWMxjvB3KGHnAep7Xnn3Gs01j5xoYR/usfp+yIk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCAh7BqoVuiE3GFsJgMPcqjaiLUwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSzPTyLRBxUKno4HFiqzlqYtMsia9XYIpNm k3vP1NrlfvpNgIi3BakQ18ZGgI5/UZkgTmal4Xlhfjex62V/w0SfwExLWCSlwnjO Gw6xqQI1pPum8BD9z6W/F/crvWUxZ0K7mcKaWh17pP+PhT4JL2u9heCgUIpEU2yb YsYlJ0FUG4Ilx3HU2J1A2SMiOQymVdhHDTougTe1eNfZdqmQKknkSIxdn9a5eULp MRSogS1kmT/NcRAqwfiixMYj7ldtP1kC0Mpzrhl7CGmaXTur2sO1Yy6L5Eoyz5gr wadE0+cJDEoy0k6/78/dhLudIKO5qKCcehLMy7A65E9F1OAip6Q= -----END CERTIFICATE-----Generated at Wed Nov 5 09:36:36 2025 by rpki-client