$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: 2IkVn/raoCNoD3zoCJS5nR87OD0o5h7PhFCEv0S1gGw= Subject key identifier: F3:BA:AB:3F:6F:2B:B6:C8:FE:E7:EA:79:44:B0:0A:67:EE:6A:62:C0 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 644525F2A8C3369441942EF28E59317E0835B31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 036E Signing time: Sun 02 Nov 2025 18:41:42 +0000 Manifest this update: Sun 02 Nov 2025 18:36:42 +0000 Manifest next update: Thu 06 Nov 2025 02:31:42 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 2: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: yYqZdwiJHkhkA/zxSd/ezCUMU//BqGTBkmlG6aeN2M4=) 4: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:45:25:f2:a8:c3:36:94:41:94:2e:f2:8e:59:31:7e:08:35:b3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Nov 2 18:36:42 2025 GMT Not After : Nov 6 02:31:42 2025 GMT Subject: CN=F3BAAB3F6F2BB6C8FEE7EA7944B00A67EE6A62C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:71:f8:cc:e9:9f:22:46:5c:f3:f6:c8:37:87: 88:8f:c9:8b:7d:72:34:f2:fc:27:1f:73:2d:fb:d7: 4a:4c:ba:ff:c3:04:22:c6:d9:90:da:1b:67:36:84: e2:e5:96:08:41:05:4a:58:2d:56:28:2e:cf:fb:4b: 42:45:58:4b:ab:b0:e9:06:c0:f3:06:97:56:b5:b9: 96:ea:25:67:ad:57:a6:60:e7:20:6b:66:0f:b4:a7: 47:dc:06:7f:33:66:90:d1:ef:b9:d1:c1:31:3a:9e: 56:4d:45:b1:fc:de:30:e2:2f:eb:6a:6d:e2:c6:32: 21:d1:1f:ee:35:49:71:15:38:e6:93:50:5d:de:12: 61:86:a1:1c:7a:dd:9b:f7:5e:f7:5d:7e:d0:42:1e: 66:c1:9b:ee:27:65:8d:a0:f5:3b:5f:a2:76:78:48: 67:82:ea:ba:5b:06:c5:88:da:52:48:30:a5:f4:c9: 3d:52:4b:61:09:de:0a:d9:b8:d4:42:77:ab:d8:a5: 7a:72:32:9d:e3:d9:99:86:1a:12:9e:13:dd:14:53: 17:00:7e:f2:6c:f4:83:0a:6c:85:4e:c4:ed:91:1d: 65:83:85:1e:25:66:3d:4d:fa:6a:10:50:c3:5d:f8: 10:b1:ec:1c:c0:97:30:67:04:e1:38:e2:d9:5c:19: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:AB:3F:6F:2B:B6:C8:FE:E7:EA:79:44:B0:0A:67:EE:6A:62:C0 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f9:27:4d:74:ce:42:18:9e:0d:23:7c:40:9f:0a:fd:c5:15: c4:e3:e5:f9:db:29:1a:66:17:d8:ea:cc:ba:8c:d6:0d:6a:ce: e0:71:1e:6f:f1:33:53:2d:b4:f5:78:4a:a1:cb:4b:da:89:d5: 72:1e:a6:7c:c6:75:4a:b5:14:1d:7a:dc:c6:c8:70:9b:ea:72: ce:94:7e:a1:99:ed:ad:90:07:46:c3:6f:45:06:2c:10:6b:03: 1c:67:55:f1:ac:af:f2:ed:ad:a2:7e:b5:75:b8:3b:2a:9b:2c: 83:6a:ac:6a:90:ae:86:f9:7c:ad:7e:93:58:f7:f9:18:be:3d: 33:e2:8e:c8:3c:e4:7d:83:9f:90:b5:7c:19:95:0e:e6:5d:36: 59:57:aa:6c:a9:69:47:7e:20:f5:68:ab:71:21:4b:2f:76:65: f4:34:21:ec:57:14:fb:a0:22:8f:68:47:cb:f2:d3:96:70:1c: 6e:e6:85:92:61:e8:c2:93:12:5b:77:ed:53:18:af:2a:6a:46: df:48:bd:71:5c:de:99:d4:ac:e1:a4:17:33:0a:47:93:d1:00: 88:8a:c4:a5:87:07:02:32:ff:9d:e8:3f:06:37:83:47:31:39: 1d:d3:17:d8:45:d8:1d:e1:9e:54:f2:78:41:5c:38:84:3c:eb: c8:5a:66:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEUl8qjDNpRBlC7yjlkxfgg1sx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTExMDIxODM2NDJaFw0yNTExMDYwMjMxNDJaMDMxMTAvBgNV BAMTKEYzQkFBQjNGNkYyQkI2QzhGRUU3RUE3OTQ0QjAwQTY3RUU2QTYyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjcfjM6Z8iRlzz9sg3h4iPyYt9 cjTy/Ccfcy3710pMuv/DBCLG2ZDaG2c2hOLllghBBUpYLVYoLs/7S0JFWEursOkG wPMGl1a1uZbqJWetV6Zg5yBrZg+0p0fcBn8zZpDR77nRwTE6nlZNRbH83jDiL+tq beLGMiHRH+41SXEVOOaTUF3eEmGGoRx63Zv3XvddftBCHmbBm+4nZY2g9TtfonZ4 SGeC6rpbBsWI2lJIMKX0yT1SS2EJ3grZuNRCd6vYpXpyMp3j2ZmGGhKeE90UUxcA fvJs9IMKbIVOxO2RHWWDhR4lZj1N+moQUMNd+BCx7BzAlzBnBOE44tlcGT/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU87qrP28rtsj+5+p5RLAKZ+5qYsAwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb5J010zkIYng0jfECfCv3FFcTj5fnbKRpm F9jqzLqM1g1qzuBxHm/xM1MttPV4SqHLS9qJ1XIepnzGdUq1FB163MbIcJvqcs6U fqGZ7a2QB0bDb0UGLBBrAxxnVfGsr/LtraJ+tXW4OyqbLINqrGqQrob5fK1+k1j3 +Ri+PTPijsg85H2Dn5C1fBmVDuZdNllXqmypaUd+IPVoq3EhSy92ZfQ0IexXFPug Io9oR8vy05ZwHG7mhZJh6MKTElt37VMYrypqRt9IvXFc3pnUrOGkFzMKR5PRAIiK xKWHBwIy/53oPwY3g0cxOR3TF9hF2B3hnlTyeEFcOIQ868haZks= -----END CERTIFICATE-----Generated at Tue Nov 4 08:06:51 2025 by rpki-client