$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: rDaQhzk+bZ34BijtIzSYp3XijWOMiBebfeHigrHIaPA= Subject key identifier: 2D:FF:C7:4D:AB:11:AF:7E:A7:FD:0C:61:C0:4D:7A:9C:39:DF:F6:F3 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 6D0895888F99FDCB5E0BBAF8FA21F86684A4A19D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: 5D Signing time: Sun 15 Jun 2025 14:40:59 +0000 Manifest this update: Sun 15 Jun 2025 14:35:59 +0000 Manifest next update: Wed 18 Jun 2025 22:34:59 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oo6mbVmnsw7e/0gjMVSA14EiHwAIiPeTDgFb+zR54Og=) 2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: WHnXa3+l2BVF9pDA34p2y5MPrgNJ1xOLxXqgijc3bbM=) 3: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: yvcrbhTd7MNtPa9D5m8cnkjKhiA0lhHHfYvAVPvmvJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:08:95:88:8f:99:fd:cb:5e:0b:ba:f8:fa:21:f8:66:84:a4:a1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Jun 15 14:35:59 2025 GMT Not After : Jun 18 22:34:59 2025 GMT Subject: CN=2DFFC74DAB11AF7EA7FD0C61C04D7A9C39DFF6F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:43:59:36:47:3e:a2:53:3d:d4:18:da:d3:3a: 5c:07:37:38:01:ef:0d:00:1e:56:65:ec:5c:ca:45: ea:de:24:b4:f7:ec:f5:df:02:dc:94:36:1a:67:2a: dd:e7:3a:48:79:dc:07:25:b6:4d:77:98:c4:79:70: 3a:9b:2b:2b:58:43:6a:43:a9:96:e1:49:ce:c9:f3: e6:17:67:dc:d6:2d:bf:cf:be:25:1d:fd:ba:19:93: d9:8a:51:46:40:15:90:52:b5:16:d3:41:f6:9c:f0: f9:c9:2e:ec:37:3f:44:fa:dc:bf:11:31:bb:99:e3: cf:d3:57:1d:d5:3b:4a:02:dc:b1:2f:9a:eb:54:c9: 8c:a8:2e:5b:9c:b1:48:5d:f8:48:5e:72:21:f4:c8: 98:9b:e4:34:02:b5:00:5b:ab:03:71:65:35:29:a1: 1b:3d:02:f5:dc:84:5c:3d:ba:04:3e:3b:ac:6c:86: eb:08:8c:58:52:f0:d8:7e:b9:f8:34:45:6f:0a:65: 81:5b:b7:b2:c2:c5:6a:20:61:8b:95:d3:0d:41:6b: 6a:48:16:58:60:81:ba:3d:72:f3:fc:ac:86:c5:03: d9:fd:34:a5:2a:4a:83:7e:09:d4:36:eb:13:0e:02: 13:93:d2:42:e4:10:bf:6e:0e:6e:b7:e8:6f:cf:ea: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FF:C7:4D:AB:11:AF:7E:A7:FD:0C:61:C0:4D:7A:9C:39:DF:F6:F3 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b2:24:4c:21:a5:41:e3:60:b6:b3:53:21:67:44:61:d1:30: aa:22:9e:cb:91:00:c1:1e:2a:b0:74:ed:98:6c:f5:23:5c:28: 62:19:4d:b8:ea:87:75:fc:69:2e:5a:50:99:44:7b:8c:dd:75: f5:0a:8d:8f:27:f3:8e:dc:64:12:3f:f3:75:b9:31:ea:4f:89: 17:34:d8:4b:b2:3d:0d:a8:a3:d1:56:4a:d6:20:a2:8e:65:68: ae:d7:35:af:b9:48:44:b4:a2:f9:89:fd:98:b3:7b:82:01:bf: da:a1:fd:6b:fd:25:72:a2:57:84:18:25:81:b9:a1:c7:61:f7: 9f:42:21:14:21:5e:0b:32:09:ea:52:29:5d:3c:a6:fd:5c:78: 0c:cd:e7:e7:7f:6a:ad:0d:f8:0f:1f:9d:e7:e4:40:07:36:f5: 79:16:ff:c0:67:f4:60:bb:78:06:1b:e2:9c:d4:a7:e9:fc:c8: 4d:1c:b8:68:4e:da:9e:8e:c4:28:b9:de:3f:8e:e6:c8:6a:10: 1b:ab:61:2b:bb:70:ed:2a:72:31:16:e1:36:b8:b8:df:36:b6: 7d:2f:0c:7c:55:2e:db:68:a5:79:bf:79:f5:8e:20:ce:f5:cf: fc:6e:b1:60:c2:1c:fc:75:bf:d6:1f:5a:21:cf:3a:50:71:56: ce:38:cd:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQiViI+Z/cteC7r4+iH4ZoSkoZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTA2MTUxNDM1NTlaFw0yNTA2MTgyMjM0NTlaMDMxMTAvBgNV BAMTKDJERkZDNzREQUIxMUFGN0VBN0ZEMEM2MUMwNEQ3QTlDMzlERkY2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvQ1k2Rz6iUz3UGNrTOlwHNzgB 7w0AHlZl7FzKRereJLT37PXfAtyUNhpnKt3nOkh53Acltk13mMR5cDqbKytYQ2pD qZbhSc7J8+YXZ9zWLb/PviUd/boZk9mKUUZAFZBStRbTQfac8PnJLuw3P0T63L8R MbuZ48/TVx3VO0oC3LEvmutUyYyoLlucsUhd+EheciH0yJib5DQCtQBbqwNxZTUp oRs9AvXchFw9ugQ+O6xshusIjFhS8Nh+ufg0RW8KZYFbt7LCxWogYYuV0w1Ba2pI Flhggbo9cvP8rIbFA9n9NKUqSoN+CdQ26xMOAhOT0kLkEL9uDm636G/P6mmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULf/HTasRr36n/QxhwE16nDnf9vMwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGyJEwhpUHjYLazUyFnRGHRMKoinsuRAMEe KrB07Zhs9SNcKGIZTbjqh3X8aS5aUJlEe4zddfUKjY8n847cZBI/83W5MepPiRc0 2EuyPQ2oo9FWStYgoo5laK7XNa+5SES0ovmJ/Zize4IBv9qh/Wv9JXKiV4QYJYG5 ocdh959CIRQhXgsyCepSKV08pv1ceAzN5+d/aq0N+A8fnefkQAc29XkW/8Bn9GC7 eAYb4pzUp+n8yE0cuGhO2p6OxCi53j+O5shqEBurYSu7cO0qcjEW4Ta4uN82tn0v DHxVLttopXm/efWOIM71z/xusWDCHPx1v9YfWiHPOlBxVs44zT4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:03:33 2025 by rpki-client