$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: OFVf93XXiLg9Lu0vQPoF5+9bd03YDhp3dRb+D+f7GJ4= Subject key identifier: 30:CD:5D:72:A8:F4:CC:54:5E:49:E5:CE:66:4D:FE:6B:B8:BF:72:CC Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 725B9522866F4111F99A2B5F5F20439CA312A750 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04F9 Signing time: Fri 08 Aug 2025 14:30:49 +0000 Manifest this update: Fri 08 Aug 2025 14:25:49 +0000 Manifest next update: Mon 11 Aug 2025 15:45:49 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 2: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: bfeyLq5aTLKf3aPbHEuRCWm6IkkNv2ZH3FMqwH58WQc=) 3: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 4: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 5: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 6: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 7: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 8: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 9: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5b:95:22:86:6f:41:11:f9:9a:2b:5f:5f:20:43:9c:a3:12:a7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Aug 8 14:25:49 2025 GMT Not After : Aug 11 15:45:49 2025 GMT Subject: CN=30CD5D72A8F4CC545E49E5CE664DFE6BB8BF72CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:02:60:29:02:c5:47:92:e0:22:81:56:48: 9c:e2:34:a7:ee:2c:d1:ae:df:41:26:51:aa:4f:69: 71:76:43:69:fe:f3:91:75:a4:92:42:cf:b1:37:f7: 2c:df:ce:53:55:9d:17:a7:18:b6:6e:3f:69:49:b4: e1:a6:7b:e6:aa:4a:de:f5:59:5e:79:5a:b9:5c:94: 5c:6b:f7:f7:06:77:b5:1a:cc:75:25:8d:7c:c3:f3: 12:94:fa:77:a6:c0:ce:d6:b0:7b:31:04:11:a9:59: 46:70:28:03:94:a7:c5:6a:a0:b6:2b:80:c8:14:84: f6:5f:d6:1e:cd:2a:05:b2:94:52:ad:c3:f8:3b:f5: 95:87:f0:1f:38:fe:1b:a5:f7:fc:18:e9:36:ed:d6: 86:43:c6:44:83:7c:ed:e9:66:0e:c2:e2:74:b0:65: c7:58:2c:a3:e2:62:c9:ab:d4:1a:ed:fa:ef:c9:19: 8b:af:3e:e3:a0:8a:14:ee:66:e6:32:b2:61:28:5f: 78:3b:8f:da:fe:2d:4b:c6:56:6b:c2:0a:9c:0c:66: 49:24:25:8f:79:94:48:1b:6a:b4:52:f8:f5:9d:52: 05:24:66:f8:f0:44:74:7d:6c:7f:78:22:b5:04:c3: 9a:14:88:cb:9a:cc:f1:9b:ba:f5:8f:18:6d:95:51: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CD:5D:72:A8:F4:CC:54:5E:49:E5:CE:66:4D:FE:6B:B8:BF:72:CC X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ab:46:35:40:09:10:21:a6:9f:aa:78:78:ec:3e:f3:73:1b: 7a:91:38:42:fb:d6:1d:ad:45:df:9e:85:d1:3b:9c:6d:e4:4b: a6:df:92:31:6c:50:f8:71:d4:22:7b:11:0e:2d:63:9a:eb:ed: 6c:73:ec:f1:70:fe:34:0b:9d:ea:d7:7f:71:53:21:16:64:f3: a4:a8:e3:28:74:cf:d0:b3:76:0f:7a:a4:9e:77:ee:a7:78:9d: 1e:91:0c:76:25:34:81:5c:f5:43:7f:73:ac:5a:e0:a9:68:2e: 3a:d4:cd:b8:8f:9d:34:a9:7b:a9:b5:1b:b8:5a:c6:bd:32:b1: ef:65:e5:d6:16:95:6f:4d:2a:49:f1:dc:99:81:89:97:80:cd: 8e:e4:50:49:51:4a:39:db:51:85:6f:ee:a3:a5:da:29:29:45: fd:a6:53:88:47:11:ff:c9:92:cb:f7:fb:cc:80:68:2f:0f:b0: 64:80:37:8d:c2:32:ec:50:51:fd:10:c5:4b:a6:84:83:6b:c1: 78:56:29:68:1e:32:bb:94:30:c4:01:11:a5:e9:87:2e:09:d3: 28:4e:ae:81:12:bd:e3:2d:cd:fc:00:5a:d5:a4:af:98:60:da: 88:c9:8b:0a:ae:4d:30:c5:85:12:6a:3a:16:c2:ef:16:e3:d6: e3:9d:3f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcluVIoZvQRH5mitfXyBDnKMSp1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA4MDgxNDI1NDlaFw0yNTA4MTExNTQ1NDlaMDMxMTAvBgNV BAMTKDMwQ0Q1RDcyQThGNENDNTQ1RTQ5RTVDRTY2NERGRTZCQjhCRjcyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9AJgKQLFR5LgIoFWSJziNKfu LNGu30EmUapPaXF2Q2n+85F1pJJCz7E39yzfzlNVnRenGLZuP2lJtOGme+aqSt71 WV55WrlclFxr9/cGd7UazHUljXzD8xKU+nemwM7WsHsxBBGpWUZwKAOUp8VqoLYr gMgUhPZf1h7NKgWylFKtw/g79ZWH8B84/hul9/wY6Tbt1oZDxkSDfO3pZg7C4nSw ZcdYLKPiYsmr1Brt+u/JGYuvPuOgihTuZuYysmEoX3g7j9r+LUvGVmvCCpwMZkkk JY95lEgbarRS+PWdUgUkZvjwRHR9bH94IrUEw5oUiMuazPGbuvWPGG2VUZmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMM1dcqj0zFReSeXOZk3+a7i/cswwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABirRjVACRAhpp+qeHjsPvNzG3qROEL71h2t Rd+ehdE7nG3kS6bfkjFsUPhx1CJ7EQ4tY5rr7Wxz7PFw/jQLnerXf3FTIRZk86So 4yh0z9Czdg96pJ537qd4nR6RDHYlNIFc9UN/c6xa4KloLjrUzbiPnTSpe6m1G7ha xr0yse9l5dYWlW9NKknx3JmBiZeAzY7kUElRSjnbUYVv7qOl2ikpRf2mU4hHEf/J ksv3+8yAaC8PsGSAN43CMuxQUf0QxUumhINrwXhWKWgeMruUMMQBEaXphy4J0yhO roESveMtzfwAWtWkr5hg2ojJiwquTTDFhRJqOhbC7xbj1uOdPxM= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:48 2025 by rpki-client