$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: BPE6PG0t9mi2LsYuSAN7AwYWBz9m/Ub7DQUZdPEqE6U= Subject key identifier: 40:4E:5A:C0:A3:7B:62:7A:A6:C1:D9:5C:77:BF:D0:26:A2:C9:BD:23 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 0CE8D6A40791B803B636BF7FF489706E9AF6CEB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: 75 Signing time: Sat 09 Aug 2025 05:11:02 +0000 Manifest this update: Sat 09 Aug 2025 05:06:02 +0000 Manifest next update: Tue 12 Aug 2025 09:42:02 +0000 Files and hashes: 1: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: CxkqelTbdmoIU4qJpnIdajEAZYNDVKyqFUTFHtr0UKo=) 2: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oo6mbVmnsw7e/0gjMVSA14EiHwAIiPeTDgFb+zR54Og=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: WHnXa3+l2BVF9pDA34p2y5MPrgNJ1xOLxXqgijc3bbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 09:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e8:d6:a4:07:91:b8:03:b6:36:bf:7f:f4:89:70:6e:9a:f6:ce:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Aug 9 05:06:02 2025 GMT Not After : Aug 12 09:42:02 2025 GMT Subject: CN=404E5AC0A37B627AA6C1D95C77BFD026A2C9BD23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:c0:4b:36:b7:a8:18:f8:8f:bf:df:6f:c4: da:a6:7a:78:4c:a4:7c:d9:32:02:34:d4:31:3b:fb: dc:aa:e5:38:36:34:67:46:18:5c:63:fe:96:de:d2: 93:f9:48:09:62:56:cf:66:e5:1c:8b:d6:49:3f:55: 11:27:a2:1e:f5:28:14:a2:1d:07:e2:03:4a:4b:50: 83:0d:47:3a:29:b7:22:87:57:fa:9e:23:fe:a4:24: 15:b9:4d:2f:f2:38:07:3a:5a:d5:fa:e0:3b:fa:bf: 68:7e:ae:4b:0e:6c:17:9d:aa:5f:d6:1f:33:72:24: 8a:af:cb:15:b9:21:3c:aa:f3:9e:c0:3e:44:af:e4: 82:1f:dc:49:47:38:2f:19:1b:fe:f5:1a:54:86:4b: 3f:de:9e:bb:86:15:9b:a4:38:91:0e:89:a2:20:55: 21:96:8c:b6:c7:1a:ed:da:a5:20:28:57:2d:b3:c9: 54:d2:20:c0:31:58:cf:e0:21:0d:45:a6:71:e9:f3: 7d:e2:06:b8:8e:be:61:17:33:22:bb:1d:03:a0:ad: 98:5c:f9:7e:13:7e:19:37:a6:a0:1e:dc:e7:ea:67: 05:a1:a0:78:26:52:21:91:3f:de:64:9e:a8:54:72: f1:6b:ee:f5:05:60:a4:37:51:15:6a:df:2a:de:14: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:5A:C0:A3:7B:62:7A:A6:C1:D9:5C:77:BF:D0:26:A2:C9:BD:23 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:08:3b:ab:f9:31:08:08:89:81:6a:1a:ae:45:c7:7f:97:9a: d8:ef:62:74:2f:b9:d9:e0:e9:4e:83:46:2c:43:a4:0d:a4:ea: b0:22:b1:ed:b0:a2:07:16:3e:cd:c8:d8:b8:e1:cb:38:87:ac: f5:df:c7:df:99:33:0e:88:17:d0:42:34:c1:3f:95:b8:81:c5: 49:01:37:3a:ca:93:64:ff:f3:91:a0:71:dd:8c:54:ad:90:ed: d4:76:6d:0c:ee:ae:61:9a:66:77:c3:19:32:04:86:63:8d:73: b2:f7:ad:4e:ae:2f:c7:b1:91:85:28:a9:ca:a3:64:6a:e2:9d: b7:88:8d:ea:b3:b6:31:9a:88:53:fb:bb:13:40:09:29:40:85: c8:f4:7c:dd:76:3a:10:9f:c7:9b:b7:37:6b:91:bb:c9:72:6b: f2:97:03:bb:ff:c8:0b:e8:2d:e3:35:87:e7:4c:2c:32:56:b1: 8d:6f:ef:73:1e:56:cc:ac:3a:b8:3c:a3:e3:eb:e2:65:f4:36: a2:76:c8:fb:b4:34:d1:72:ec:bd:ee:62:21:2e:64:27:cb:5b: 07:5a:67:97:28:94:a8:39:e3:86:3a:79:3b:60:33:b0:15:1f: 1a:30:a6:11:8a:d7:5f:ef:01:4c:09:de:1c:cd:27:d0:3c:0b: ba:67:30:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOjWpAeRuAO2Nr9/9Ilwbpr2zrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTA4MDkwNTA2MDJaFw0yNTA4MTIwOTQyMDJaMDMxMTAvBgNV BAMTKDQwNEU1QUMwQTM3QjYyN0FBNkMxRDk1Qzc3QkZEMDI2QTJDOUJEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9S8BLNreoGPiPv99vxNqmenhM pHzZMgI01DE7+9yq5Tg2NGdGGFxj/pbe0pP5SAliVs9m5RyL1kk/VREnoh71KBSi HQfiA0pLUIMNRzoptyKHV/qeI/6kJBW5TS/yOAc6WtX64Dv6v2h+rksObBedql/W HzNyJIqvyxW5ITyq857APkSv5IIf3ElHOC8ZG/71GlSGSz/enruGFZukOJEOiaIg VSGWjLbHGu3apSAoVy2zyVTSIMAxWM/gIQ1FpnHp833iBriOvmEXMyK7HQOgrZhc +X4Tfhk3pqAe3OfqZwWhoHgmUiGRP95knqhUcvFr7vUFYKQ3URVq3yreFKlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQE5awKN7Ynqmwdlcd7/QJqLJvSMwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQIO6v5MQgIiYFqGq5Fx3+XmtjvYnQvudng 6U6DRixDpA2k6rAise2wogcWPs3I2LjhyziHrPXfx9+ZMw6IF9BCNME/lbiBxUkB NzrKk2T/85Ggcd2MVK2Q7dR2bQzurmGaZnfDGTIEhmONc7L3rU6uL8exkYUoqcqj ZGrinbeIjeqztjGaiFP7uxNACSlAhcj0fN12OhCfx5u3N2uRu8lya/KXA7v/yAvo LeM1h+dMLDJWsY1v73MeVsysOrg8o+Pr4mX0NqJ2yPu0NNFy7L3uYiEuZCfLWwda Z5colKg544Y6eTtgM7AVHxowphGK11/vAUwJ3hzNJ9A8C7pnMJo= -----END CERTIFICATE-----Generated at Sun Aug 10 15:57:17 2025 by rpki-client