$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: j0HfK2KX9gpmnz03gs4h/+UHdqfyaZ2KTzsco5j6UNo= Subject key identifier: 6D:AF:59:B3:BD:6E:A6:22:C4:25:1A:09:14:C0:DD:69:85:FB:6F:0C Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 3C5F8ABA3CFCF494816A9179FC4A4C522214F2C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 0347 Signing time: Thu 07 Aug 2025 13:11:42 +0000 Manifest this update: Thu 07 Aug 2025 13:06:42 +0000 Manifest next update: Sun 10 Aug 2025 14:25:42 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 2: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: XXvrfZfD0Mnoe6SdZhtKi/0lXEagV0/CEQRntgxSIjw=) 4: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5f:8a:ba:3c:fc:f4:94:81:6a:91:79:fc:4a:4c:52:22:14:f2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Aug 7 13:06:42 2025 GMT Not After : Aug 10 14:25:42 2025 GMT Subject: CN=6DAF59B3BD6EA622C4251A0914C0DD6985FB6F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6c:8b:d1:fa:65:35:10:c9:26:9a:4e:b5:2b: 0d:4a:89:44:c6:f8:72:d1:b5:87:e7:24:ea:ec:6f: 4d:5c:4e:ad:ce:20:6d:4e:99:70:e8:b4:d1:a0:9b: f0:5e:83:fc:b7:ce:01:78:a1:60:03:b5:22:38:67: 51:05:3c:d2:f7:37:07:90:c3:48:da:e9:d8:27:29: ab:42:d6:b9:6b:0f:74:cb:03:55:5c:57:42:ad:97: f2:4d:76:43:bf:0e:13:5d:de:65:74:93:c1:63:b3: 7b:f8:e6:56:f1:ab:2c:23:f7:19:0b:69:5a:f3:0b: 4d:ae:15:c0:3a:8f:4e:bb:46:06:00:53:4d:4a:d0: 39:a3:59:1e:44:c6:27:11:a6:c5:2c:12:4c:ad:f6: 23:9c:bc:3c:9b:cc:fa:46:27:d0:0d:e8:eb:97:1a: f6:e4:3e:26:e7:32:55:8b:5b:d5:0d:3e:14:f3:a8: 82:5c:88:a8:28:94:4f:f2:46:38:7b:b5:6f:98:1b: 6f:07:29:df:d7:b4:e1:8c:10:0f:38:8a:ea:73:00: b1:ca:4e:e9:7c:8d:bd:fe:89:d1:4e:07:d1:ce:3f: 90:8d:fc:fe:8a:e7:3f:d6:aa:00:55:91:50:12:fc: dd:d6:30:42:f7:e9:12:b8:3a:50:63:64:70:97:71: 10:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:59:B3:BD:6E:A6:22:C4:25:1A:09:14:C0:DD:69:85:FB:6F:0C X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:31:32:09:52:62:60:85:e7:66:cc:3e:05:2b:cb:64:16:82: 33:1c:e7:5f:10:78:f0:a6:83:7c:5a:f0:12:45:a0:00:62:6e: 61:37:c2:6d:a3:f1:55:c7:fc:75:3d:f4:90:ba:12:87:ea:f9: c9:33:e4:fe:ab:9a:3a:18:24:25:66:9e:c5:d9:8e:0c:ec:06: 38:cb:c2:52:78:66:5e:c9:9e:5d:74:81:11:27:ae:4e:b8:d8: 0e:09:2d:e2:bb:11:cd:08:2c:70:cc:28:5a:b7:c4:fd:30:ea: 8a:e0:1e:73:10:ef:89:50:82:74:51:56:c0:ea:70:22:34:c3: bf:3d:5c:99:da:1c:3c:0f:bf:da:11:87:0a:fc:a7:48:38:58: c8:bb:3e:d9:9d:e3:4a:ca:23:57:6d:98:62:fb:a7:5a:05:ec: f7:0b:48:ff:db:a2:3e:f4:1b:62:28:59:45:8a:be:2f:5f:fd: 5d:af:47:58:e0:38:35:aa:21:f2:13:e1:1b:26:54:bf:22:6a: 37:1c:51:d5:e8:10:cc:7d:1f:9c:db:4f:18:2d:02:45:78:be: e1:46:a9:ea:15:63:e8:02:91:e1:1a:0c:ac:01:55:01:d9:6f: c9:69:fd:28:33:13:0b:f2:04:9b:68:be:da:e8:b8:60:7a:24: 36:40:57:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF+Kujz89JSBapF5/EpMUiIU8sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA4MDcxMzA2NDJaFw0yNTA4MTAxNDI1NDJaMDMxMTAvBgNV BAMTKDZEQUY1OUIzQkQ2RUE2MjJDNDI1MUEwOTE0QzBERDY5ODVGQjZGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfbIvR+mU1EMkmmk61Kw1KiUTG +HLRtYfnJOrsb01cTq3OIG1OmXDotNGgm/Beg/y3zgF4oWADtSI4Z1EFPNL3NweQ w0ja6dgnKatC1rlrD3TLA1VcV0Ktl/JNdkO/DhNd3mV0k8Fjs3v45lbxqywj9xkL aVrzC02uFcA6j067RgYAU01K0DmjWR5ExicRpsUsEkyt9iOcvDybzPpGJ9AN6OuX GvbkPibnMlWLW9UNPhTzqIJciKgolE/yRjh7tW+YG28HKd/XtOGMEA84iupzALHK Tul8jb3+idFOB9HOP5CN/P6K5z/WqgBVkVAS/N3WMEL36RK4OlBjZHCXcRCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUba9Zs71upiLEJRoJFMDdaYX7bwwwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQxMglSYmCF52bMPgUry2QWgjMc518QePCm g3xa8BJFoABibmE3wm2j8VXH/HU99JC6Eofq+ckz5P6rmjoYJCVmnsXZjgzsBjjL wlJ4Zl7Jnl10gREnrk642A4JLeK7Ec0ILHDMKFq3xP0w6orgHnMQ74lQgnRRVsDq cCI0w789XJnaHDwPv9oRhwr8p0g4WMi7Ptmd40rKI1dtmGL7p1oF7PcLSP/boj70 G2IoWUWKvi9f/V2vR1jgODWqIfIT4RsmVL8iajccUdXoEMx9H5zbTxgtAkV4vuFG qeoVY+gCkeEaDKwBVQHZb8lp/SgzEwvyBJtovtrouGB6JDZAV+I= -----END CERTIFICATE-----Generated at Fri Aug 8 00:10:28 2025 by rpki-client