$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: na5Y5MuB4nrSl+S/3r3cpBLM3whsaFpjXZRZo671+2s= Subject key identifier: 52:12:DB:64:53:94:4C:AF:31:CF:87:57:C8:B0:56:8A:34:97:BA:36 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 3D3C4F59DC49ED7864097C5B646841D8A6788126 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 11:40:47 +0000 Manifest this update: Sun 15 Jun 2025 11:35:47 +0000 Manifest next update: Wed 18 Jun 2025 11:47:47 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 2: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 3: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 4: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 6: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 7: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: +GzC/HVV+hd+yGJfQyBcIFkdJmBV25ur2SynX1TY4is=) 8: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 9: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3c:4f:59:dc:49:ed:78:64:09:7c:5b:64:68:41:d8:a6:78:81:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jun 15 11:35:47 2025 GMT Not After : Jun 18 11:47:47 2025 GMT Subject: CN=5212DB6453944CAF31CF8757C8B0568A3497BA36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f7:86:d0:66:49:49:f0:09:9b:fc:db:3a:13: ff:f8:4e:c0:68:40:29:a0:f3:1c:3a:00:7f:38:eb: f6:8c:8c:ec:00:bd:2f:46:5a:1f:7b:6b:b7:4b:f4: e2:e0:61:ae:74:9b:93:a6:4c:e9:6d:fb:09:51:82: 7f:f3:7d:48:e9:8f:bf:d3:31:8c:7d:9a:93:ce:44: e5:a4:3f:3a:5c:05:23:eb:df:a7:7e:54:9c:0a:82: df:39:3c:44:5b:f9:70:c0:a7:62:d2:ff:f8:14:8b: 27:84:65:6c:e5:44:92:42:21:0a:59:09:4c:99:26: fb:61:59:c8:bd:88:73:5d:3c:a1:ff:21:9f:60:cd: a1:4b:6b:51:7f:ba:b6:3b:9c:2c:95:5b:34:1d:04: f1:77:4a:18:84:9b:a8:38:1c:2b:c4:02:58:a3:d5: fc:f5:2f:1d:cc:80:20:93:5a:39:20:6a:8e:8d:70: c0:69:d4:84:09:ad:a0:74:ef:dd:76:26:20:dd:63: b0:c6:75:00:e4:06:69:f0:10:51:8d:71:97:58:05: b0:f0:9c:53:29:6c:0e:4c:e6:66:6d:c6:ee:94:a7: f7:1d:ab:f0:7b:17:8c:a0:10:d4:c2:a4:29:66:73: 2f:bc:5e:71:5b:43:3a:82:6f:65:ef:77:c7:1d:aa: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:12:DB:64:53:94:4C:AF:31:CF:87:57:C8:B0:56:8A:34:97:BA:36 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:67:8b:09:df:01:9f:7d:dd:71:42:fb:df:7d:40:27:f3:99: a4:7d:44:3b:ee:56:95:28:ba:06:e8:a1:ce:24:f2:aa:16:54: 41:1a:7b:2a:15:81:62:76:6d:8f:54:f9:c0:97:4c:d6:62:c8: 3d:34:b3:b0:9d:96:6b:88:11:31:46:5d:88:0d:8f:cd:ac:9e: bb:e2:b1:b7:13:9e:bf:30:0d:31:0c:20:b6:9f:de:20:b5:79: 6e:35:d0:a9:be:a5:d5:f9:20:65:28:dd:f5:88:1c:32:07:00: 16:5b:07:e1:cf:02:e7:64:fc:9a:b4:90:c6:17:ec:c9:30:02: df:07:05:94:7a:fc:57:d7:61:a4:20:0e:3e:58:06:be:ce:e3: fa:84:cb:ab:35:97:8d:c3:3b:66:67:55:0d:a1:e8:30:6f:8e: 82:ac:41:66:7e:2f:35:89:0a:8f:04:0b:fa:b2:1a:b4:d2:48: a3:b7:09:84:d6:7c:2c:52:be:e6:ce:c1:98:09:d7:23:0d:15: 7e:62:e3:b1:c5:f8:99:df:93:35:cc:8d:e2:4a:23:ff:30:43: 1e:4f:ec:6d:af:a0:4b:55:34:ba:dd:b4:ed:4c:8a:47:17:71: d9:df:6e:32:f5:7c:59:95:7e:97:f5:35:5c:77:cc:d4:66:45: 92:3d:fb:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTxPWdxJ7XhkCXxbZGhB2KZ4gSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA2MTUxMTM1NDdaFw0yNTA2MTgxMTQ3NDdaMDMxMTAvBgNV BAMTKDUyMTJEQjY0NTM5NDRDQUYzMUNGODc1N0M4QjA1NjhBMzQ5N0JBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu94bQZklJ8Amb/Ns6E//4TsBo QCmg8xw6AH846/aMjOwAvS9GWh97a7dL9OLgYa50m5OmTOlt+wlRgn/zfUjpj7/T MYx9mpPOROWkPzpcBSPr36d+VJwKgt85PERb+XDAp2LS//gUiyeEZWzlRJJCIQpZ CUyZJvthWci9iHNdPKH/IZ9gzaFLa1F/urY7nCyVWzQdBPF3ShiEm6g4HCvEAlij 1fz1Lx3MgCCTWjkgao6NcMBp1IQJraB07912JiDdY7DGdQDkBmnwEFGNcZdYBbDw nFMpbA5M5mZtxu6Up/cdq/B7F4ygENTCpClmcy+8XnFbQzqCb2Xvd8cdqmEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhLbZFOUTK8xz4dXyLBWijSXujYwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlniwnfAZ993XFC+999QCfzmaR9RDvuVpUo ugbooc4k8qoWVEEaeyoVgWJ2bY9U+cCXTNZiyD00s7CdlmuIETFGXYgNj82snrvi sbcTnr8wDTEMILaf3iC1eW410Km+pdX5IGUo3fWIHDIHABZbB+HPAudk/Jq0kMYX 7MkwAt8HBZR6/FfXYaQgDj5YBr7O4/qEy6s1l43DO2ZnVQ2h6DBvjoKsQWZ+LzWJ Co8EC/qyGrTSSKO3CYTWfCxSvubOwZgJ1yMNFX5i47HF+JnfkzXMjeJKI/8wQx5P 7G2voEtVNLrdtO1MikcXcdnfbjL1fFmVfpf1NVx3zNRmRZI9+/c= -----END CERTIFICATE-----Generated at Tue Jun 17 07:05:58 2025 by rpki-client