$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: Ymya0eoVGIsGiRSJhwtReOau7DFhQ6uDD8VwpvMTqb4= Subject key identifier: 83:2B:34:13:70:24:E7:C5:A2:47:21:6C:6E:00:EB:D8:C3:4D:1D:A5 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 630E3846768050835071C37D30776750D5456085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: 9B Signing time: Mon 03 Nov 2025 16:11:02 +0000 Manifest this update: Mon 03 Nov 2025 16:06:02 +0000 Manifest next update: Thu 06 Nov 2025 18:07:02 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=) 2: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: s5j2SjOTNG/mvTY1vOUYbFNS5AVsUZo/Pu6dR2VrSmQ=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0e:38:46:76:80:50:83:50:71:c3:7d:30:77:67:50:d5:45:60:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Nov 3 16:06:02 2025 GMT Not After : Nov 6 18:07:02 2025 GMT Subject: CN=832B34137024E7C5A247216C6E00EBD8C34D1DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:35:b3:59:4f:88:cc:38:67:85:90:22:84: cc:4a:81:b5:b1:aa:ff:f4:7f:1b:fb:ad:7f:78:0d: 09:76:44:e9:a9:d1:fe:de:1c:a7:23:97:5e:af:84: 6b:d2:2a:39:a0:c7:da:15:64:e3:1a:9b:55:74:bd: 04:cc:b5:f4:39:92:fb:8d:6a:d3:a1:85:df:99:b4: bb:93:f4:8e:b9:3a:e8:6c:6a:8e:14:bd:cb:a2:df: e0:fc:ef:01:01:92:8d:48:c0:d5:d9:07:4b:1e:89: 0a:5e:89:6c:9b:94:9a:27:a6:4a:41:ee:58:21:de: 3d:dd:78:5c:16:ba:47:b5:d2:b1:6b:91:6c:45:3e: 80:c4:d2:09:53:5f:e8:e3:26:d8:e1:4d:9f:90:e0: dc:25:3a:6e:b7:1d:4b:a7:4f:f4:4d:2e:03:6d:df: 6c:2a:1e:9e:7f:59:16:75:f3:58:f3:6d:68:81:87: 1a:1c:95:f8:4b:23:50:2a:13:fb:99:0b:42:fb:5a: 6d:a0:6d:19:f3:07:e4:81:0b:5f:a7:dc:ab:d0:a3: 63:93:20:65:6c:20:6a:bd:c0:43:f2:1e:8e:ff:41: 88:79:b1:02:10:9b:cb:72:b9:eb:ef:45:1d:e7:99: ec:21:63:a0:9f:44:da:da:a6:e9:8d:41:c1:f3:df: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2B:34:13:70:24:E7:C5:A2:47:21:6C:6E:00:EB:D8:C3:4D:1D:A5 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b8:0f:87:ee:41:5e:29:a9:76:4d:3c:25:e2:1f:30:50:c6: 25:b6:7e:92:50:98:6b:b3:5c:19:ff:aa:9f:30:1f:f5:5a:b9: 44:cd:d8:ce:5b:00:bf:f3:a0:77:02:23:95:a8:91:55:8b:40: 7f:e6:e3:db:75:72:1d:19:28:a9:55:60:31:eb:f5:cd:5c:50: 71:c0:fe:cf:1a:0a:cf:eb:6b:f8:17:1f:9c:3e:1e:47:df:a5: 9d:dd:04:2f:14:21:63:73:b4:99:ab:47:a9:bc:d6:83:92:d1: 1d:2c:7a:be:e1:ba:d6:b1:ad:a6:9d:32:c1:2f:b3:43:ae:56: 5e:a9:d7:c4:56:c2:36:c3:a9:8c:0f:43:a0:06:08:a3:28:55: 8d:65:ef:0c:fa:d1:d3:6d:c0:f0:3b:72:ab:40:ce:c0:6e:3a: db:fa:70:d6:fb:bd:75:08:d6:61:5c:8b:5c:1c:b3:29:ab:19: a5:32:a2:f6:19:3f:93:e8:05:f5:0e:3d:11:90:77:bc:d7:e0: 77:4f:2b:b6:20:8c:d9:d3:df:cf:da:f9:e7:62:8b:14:34:41: f2:04:46:bf:ab:28:3f:de:4f:98:4a:a6:ca:a1:dc:32:7c:50: 61:44:6d:f5:c2:25:9d:ed:c9:0c:af:b3:d1:a9:40:6d:91:66: 67:83:8e:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYw44RnaAUINQccN9MHdnUNVFYIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTExMDMxNjA2MDJaFw0yNTExMDYxODA3MDJaMDMxMTAvBgNV BAMTKDgzMkIzNDEzNzAyNEU3QzVBMjQ3MjE2QzZFMDBFQkQ4QzM0RDFEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpDWzWU+IzDhnhZAihMxKgbWx qv/0fxv7rX94DQl2ROmp0f7eHKcjl16vhGvSKjmgx9oVZOMam1V0vQTMtfQ5kvuN atOhhd+ZtLuT9I65Ouhsao4Uvcui3+D87wEBko1IwNXZB0seiQpeiWyblJonpkpB 7lgh3j3deFwWuke10rFrkWxFPoDE0glTX+jjJtjhTZ+Q4NwlOm63HUunT/RNLgNt 32wqHp5/WRZ181jzbWiBhxoclfhLI1AqE/uZC0L7Wm2gbRnzB+SBC1+n3KvQo2OT IGVsIGq9wEPyHo7/QYh5sQIQm8tyuevvRR3nmewhY6CfRNrapumNQcHz39DXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgys0E3Ak58WiRyFsbgDr2MNNHaUwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm4D4fuQV4pqXZNPCXiHzBQxiW2fpJQmGuz XBn/qp8wH/VauUTN2M5bAL/zoHcCI5WokVWLQH/m49t1ch0ZKKlVYDHr9c1cUHHA /s8aCs/ra/gXH5w+HkffpZ3dBC8UIWNztJmrR6m81oOS0R0ser7hutaxraadMsEv s0OuVl6p18RWwjbDqYwPQ6AGCKMoVY1l7wz60dNtwPA7cqtAzsBuOtv6cNb7vXUI 1mFci1wcsymrGaUyovYZP5PoBfUOPRGQd7zX4HdPK7YgjNnT38/a+ediixQ0QfIE Rr+rKD/eT5hKpsqh3DJ8UGFEbfXCJZ3tyQyvs9GpQG2RZmeDjkA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:46 2025 by rpki-client