$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: QfR/Kh1BS359hzLlkFTZU5YhmpFXQp4v80DMK/FFj/E= Subject key identifier: F9:34:5D:C7:74:BA:74:FD:E3:30:C7:F3:20:01:13:C4:90:45:8A:C3 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 461080A32B5CECD1C3DA688EC5A42FFE4C74BB86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 0330 Signing time: Sun 15 Jun 2025 06:51:42 +0000 Manifest this update: Sun 15 Jun 2025 06:46:42 +0000 Manifest next update: Wed 18 Jun 2025 13:07:42 +0000 Files and hashes: 1: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 2: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: 34PoSJBVE1L4t6bbwB7Gl2bHiCOl84OcEeP1qRD+Vy4=) 4: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:10:80:a3:2b:5c:ec:d1:c3:da:68:8e:c5:a4:2f:fe:4c:74:bb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Jun 15 06:46:42 2025 GMT Not After : Jun 18 13:07:42 2025 GMT Subject: CN=F9345DC774BA74FDE330C7F3200113C490458AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:65:6e:90:b8:12:13:b8:7a:be:08:fd:1c: 18:cf:77:a9:30:2c:c1:87:5a:1e:8e:af:d6:64:18: cf:94:c5:d0:ad:e7:9e:ce:34:9f:00:35:79:33:bc: d0:37:ac:46:47:87:2c:d1:46:92:36:33:71:4c:fd: b5:80:d8:27:b7:66:1e:cd:d5:5d:37:b1:6b:db:43: 28:9a:db:1e:67:01:b0:d3:4b:dc:68:27:5f:9b:e0: a5:48:14:69:22:43:37:b7:83:f8:30:5f:4d:a3:cc: 37:83:02:57:54:95:39:58:9f:6f:bd:0f:5f:0c:6b: 9e:3f:21:54:a0:a9:66:4f:ee:f8:b7:a1:b7:d1:dd: 95:9c:88:d9:44:ef:3c:65:cb:45:59:8c:27:89:3d: 04:5c:c1:b9:4f:05:2f:08:b3:cb:b4:97:bc:fc:d6: ba:37:6e:b7:25:bc:8f:43:0b:17:1c:e5:99:34:e5: 2b:7e:48:eb:85:02:a0:24:01:a0:4d:f9:df:3a:93: 8e:eb:81:69:8e:d8:6b:f2:1b:be:f5:e5:57:39:c9: 48:83:cd:11:18:a5:00:ce:d8:db:2a:e3:ab:c5:3c: 93:1d:9e:97:97:7d:19:93:ab:fe:56:98:b6:53:a3: 0c:69:37:fa:9d:cc:e5:6c:88:0b:7f:af:93:75:13: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:34:5D:C7:74:BA:74:FD:E3:30:C7:F3:20:01:13:C4:90:45:8A:C3 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:53:61:66:42:ef:6f:c2:f9:41:e7:85:63:0d:14:90:b1: de:58:1d:9c:23:eb:75:33:7d:e2:af:99:50:60:4b:f6:72:54: 35:c2:0b:ae:81:84:2f:e5:dc:96:38:41:9c:05:43:ee:79:b3: ed:ca:80:1c:65:62:9b:7d:32:0a:a6:74:4e:25:2d:93:71:8b: ce:39:3d:a6:02:98:81:37:01:4b:e5:70:77:76:65:38:85:a1: 7d:ad:18:ed:28:77:59:02:ac:2a:65:40:6a:cb:c9:11:45:d4: d0:c4:07:92:bb:83:4d:ec:df:1d:eb:57:e9:00:62:d7:b4:61: 35:e0:ef:19:df:2a:2a:5c:ce:75:a8:74:5a:20:a1:b3:08:e9: 6d:c9:ee:d1:e4:61:19:98:17:60:e4:2d:a4:92:3d:5a:74:b5: 5e:25:35:cc:d6:09:c5:52:19:01:cb:bf:8a:51:ef:cc:10:3c: f5:64:e9:18:6c:51:72:a0:d5:10:da:a1:b5:22:1d:b1:b0:ab: 86:d8:cb:09:25:2e:ee:59:22:3d:b7:e6:be:07:2d:e5:bd:46: 7d:8e:10:ff:f1:82:80:c5:fb:fc:24:d1:83:c6:37:af:3a:66: 5c:1c:6e:22:2a:74:60:dc:34:ec:dc:11:9c:a5:13:c3:28:c6: 91:f2:f8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhCAoytc7NHD2miOxaQv/kx0u4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA2MTUwNjQ2NDJaFw0yNTA2MTgxMzA3NDJaMDMxMTAvBgNV BAMTKEY5MzQ1REM3NzRCQTc0RkRFMzMwQzdGMzIwMDExM0M0OTA0NThBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5EGVukLgSE7h6vgj9HBjPd6kw LMGHWh6Or9ZkGM+UxdCt557ONJ8ANXkzvNA3rEZHhyzRRpI2M3FM/bWA2Ce3Zh7N 1V03sWvbQyia2x5nAbDTS9xoJ1+b4KVIFGkiQze3g/gwX02jzDeDAldUlTlYn2+9 D18Ma54/IVSgqWZP7vi3obfR3ZWciNlE7zxly0VZjCeJPQRcwblPBS8Is8u0l7z8 1ro3brclvI9DCxcc5Zk05St+SOuFAqAkAaBN+d86k47rgWmO2GvyG7715Vc5yUiD zREYpQDO2Nsq46vFPJMdnpeXfRmTq/5WmLZTowxpN/qdzOVsiAt/r5N1E6VnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+TRdx3S6dP3jMMfzIAETxJBFisMwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkAU2FmQu9vwvlB54VjDRSQsd5YHZwj63Uz feKvmVBgS/ZyVDXCC66BhC/l3JY4QZwFQ+55s+3KgBxlYpt9MgqmdE4lLZNxi845 PaYCmIE3AUvlcHd2ZTiFoX2tGO0od1kCrCplQGrLyRFF1NDEB5K7g03s3x3rV+kA Yte0YTXg7xnfKipcznWodFogobMI6W3J7tHkYRmYF2DkLaSSPVp0tV4lNczWCcVS GQHLv4pR78wQPPVk6RhsUXKg1RDaobUiHbGwq4bYywklLu5ZIj235r4HLeW9Rn2O EP/xgoDF+/wk0YPGN686ZlwcbiIqdGDcNOzcEZylE8MoxpHy+FU= -----END CERTIFICATE-----Generated at Tue Jun 17 14:34:01 2025 by rpki-client