$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft File: BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json) Hash identifier: qbrZRuzB3raaTaFMKwf8L7HQi9M2N7ldcZt2gW5DsYw= Subject key identifier: 65:64:B2:50:E7:DB:9F:C3:77:53:B6:01:30:A0:44:CF:7F:68:19:E9 Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 Certificate issuer: /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Certificate serial: 7E3C4A489C9F1D1F8C633EF125FB70C19F6AF34F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft Manifest number: 04FE Signing time: Tue 05 Aug 2025 21:31:21 +0000 Manifest this update: Tue 05 Aug 2025 21:26:21 +0000 Manifest next update: Sat 09 Aug 2025 00:27:21 +0000 Files and hashes: 1: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: v92EWX5PrX2ocfEiVVqNZStsTUP7VHqvGQh9Jsm+CN4=) 2: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: JGFlFhH6nweNzgQ11TLkyB/qqq3QQSYaNP8bQViVV64=) 3: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: IzocfQbAm6re271rkdggFPq3VGCEGAEeE3AdaJEm7ps=) 4: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: sNT4bELrUuPAzqt85AgkEK/uxOvFAhpJ2mkXS2I3gdo=) 5: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: vPGDL5Uz+m1Ri6z0hdVmq01za5aH2UUg8pKyvgRNgpw=) 6: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: BlERiRMKFqkgyqTsj7YKl6ODg1kHmptUNWRLGRCZ1OE=) 7: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: 7PxedSipsNTZyiV9fxG1frgwTkAEJ+zZ1V+jTL4oKzQ=) 8: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: 8j0jRsDzFx9gAhfck8T4zhTfxl09chfxnR3KSNz+QGw=) 9: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: pbhhW/T4QYFpANmSbko4Pn15Hrxc5CLsjrjH+moakkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3c:4a:48:9c:9f:1d:1f:8c:63:3e:f1:25:fb:70:c1:9f:6a:f3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Validity Not Before: Aug 5 21:26:21 2025 GMT Not After : Aug 9 00:27:21 2025 GMT Subject: CN=6564B250E7DB9FC37753B60130A044CF7F6819E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ef:12:89:02:2f:13:58:e9:6b:f2:f2:f7:43: 84:f6:75:8e:dd:c8:f3:10:48:1f:32:e1:48:64:79: 73:2b:24:ca:86:69:d5:06:48:86:00:e4:fe:a1:71: 3d:45:99:27:9f:95:94:9e:f5:99:43:7a:fa:c4:9b: 5b:04:3a:60:44:ea:43:cf:66:13:d7:1b:b0:d6:7d: 8d:1c:3c:99:14:d2:8e:61:08:62:3a:0a:54:ef:a2: 10:7c:db:2d:01:39:fb:93:92:7f:43:15:f9:4f:dc: 48:7b:b3:93:88:0b:70:23:92:be:50:59:29:85:76: 5d:63:4e:32:6f:02:ab:e9:af:0a:2b:e2:39:71:7f: d2:eb:27:fe:54:04:a9:d4:34:19:ea:73:62:75:07: d0:33:46:a8:99:3e:ec:a6:98:0f:8d:7b:49:01:1a: 73:ff:0b:ac:3a:d1:e8:1f:a6:d7:e7:77:39:a9:77: e1:41:43:a9:ba:dd:00:d0:52:b5:0e:9c:97:e3:76: 34:3a:eb:0a:41:24:2c:b5:71:d7:cd:ae:26:55:69: 37:88:f2:1a:33:4d:76:81:9d:69:26:7e:ba:b7:18: d6:7d:9a:6f:95:8d:d3:64:cf:eb:d7:7c:e8:ca:2e: 61:58:d0:c4:d4:a0:27:a3:78:1f:ea:a2:4e:cd:94: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:64:B2:50:E7:DB:9F:C3:77:53:B6:01:30:A0:44:CF:7F:68:19:E9 X509v3 Authority Key Identifier: keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1b:30:8e:48:c4:a6:b3:61:3a:91:a2:4d:1d:1e:07:07:de: b2:5e:23:0d:45:70:2a:2d:8f:46:ff:a9:4f:44:b1:09:a0:c8: 54:4e:c8:d6:29:d7:e4:9c:a2:66:84:83:d4:ed:62:99:d2:4b: 43:ee:4e:d7:6b:50:e6:2f:a0:77:70:66:7d:12:98:85:f8:a6: 9d:5d:e5:84:17:96:a5:f7:47:b6:52:99:a5:e0:f2:82:c5:a7: 72:0c:19:56:c3:e8:82:41:88:d9:be:c6:ec:14:d0:7e:a4:97: dc:72:54:f8:72:71:f8:e4:b1:de:45:cf:68:4b:f5:a2:90:e5: 84:a2:61:bf:1a:04:4c:20:29:45:a4:67:23:62:02:5a:0f:a1: e8:95:a5:63:3e:02:d5:40:06:65:4b:a1:01:05:66:c3:62:3f: a3:0f:91:af:a2:05:98:98:65:d9:64:65:be:6c:44:0d:94:c1: ba:d1:ce:d9:12:f6:45:58:39:df:3c:ba:a2:e0:73:c0:03:ce: 57:a3:d6:80:56:1c:ac:1c:21:93:8e:d5:f2:7b:bf:d0:58:47: c3:54:32:33:11:27:b8:ad:66:ce:9c:ea:55:73:4d:23:f9:e5: ef:0d:00:5d:69:fc:6a:57:57:83:88:d3:85:ee:f1:73:ec:8e: f7:a5:ae:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjxKSJyfHR+MYz7xJftwwZ9q808wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy MDdGQTMzNzAeFw0yNTA4MDUyMTI2MjFaFw0yNTA4MDkwMDI3MjFaMDMxMTAvBgNV BAMTKDY1NjRCMjUwRTdEQjlGQzM3NzUzQjYwMTMwQTA0NENGN0Y2ODE5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7xKJAi8TWOlr8vL3Q4T2dY7d yPMQSB8y4UhkeXMrJMqGadUGSIYA5P6hcT1FmSeflZSe9ZlDevrEm1sEOmBE6kPP ZhPXG7DWfY0cPJkU0o5hCGI6ClTvohB82y0BOfuTkn9DFflP3Eh7s5OIC3Ajkr5Q WSmFdl1jTjJvAqvprwor4jlxf9LrJ/5UBKnUNBnqc2J1B9AzRqiZPuymmA+Ne0kB GnP/C6w60egfptfndzmpd+FBQ6m63QDQUrUOnJfjdjQ66wpBJCy1cdfNriZVaTeI 8hozTXaBnWkmfrq3GNZ9mm+VjdNkz+vXfOjKLmFY0MTUoCejeB/qok7NlISLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWSyUOfbn8N3U7YBMKBEz39oGekwHwYDVR0j BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5 MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5 OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUbMI5IxKazYTqRok0dHgcH3rJeIw1FcCot j0b/qU9EsQmgyFROyNYp1+ScomaEg9TtYpnSS0PuTtdrUOYvoHdwZn0SmIX4pp1d 5YQXlqX3R7ZSmaXg8oLFp3IMGVbD6IJBiNm+xuwU0H6kl9xyVPhycfjksd5Fz2hL 9aKQ5YSiYb8aBEwgKUWkZyNiAloPoeiVpWM+AtVABmVLoQEFZsNiP6MPka+iBZiY ZdlkZb5sRA2UwbrRztkS9kVYOd88uqLgc8ADzlej1oBWHKwcIZOO1fJ7v9BYR8NU MjMRJ7itZs6c6lVzTSP55e8NAF1p/GpXV4OI04Xu8XPsjvelrjU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:09 2025 by rpki-client