$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: AOpM7TkiwyxrUSa3njFNFUm+giWAXsUHxpmtYEp5pvY= Subject key identifier: 34:08:7F:5A:66:96:B0:66:64:63:AA:CE:A7:07:99:50:24:E9:E6:38 Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 67FB293EE5E3A4F4B0233A5968CD79B7F584EE4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 0438 Signing time: Mon 16 Jun 2025 20:50:56 +0000 Manifest this update: Mon 16 Jun 2025 20:45:56 +0000 Manifest next update: Fri 20 Jun 2025 07:40:56 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: wXlkmxwi7/34ddrk854GfkHymHTZJQyn7AeLJRM2mj8=) 2: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: bwkHoMcFkTxg1cprLBeFyt3e6yMZZa8kwMNQMpEMTkk=) 3: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: CbpO9HLqWPwca17ZGi+qREWbizPj6asmmyg30lkMW1I=) 4: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: 0N5j+ZERhxA6Ar8dT9/oyVhTL5hECc6nE7wFownHGuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fb:29:3e:e5:e3:a4:f4:b0:23:3a:59:68:cd:79:b7:f5:84:ee:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Jun 16 20:45:56 2025 GMT Not After : Jun 20 07:40:56 2025 GMT Subject: CN=34087F5A6696B0666463AACEA707995024E9E638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:8c:fa:33:36:65:18:c9:83:88:47:1f:f4: fd:cc:a4:6f:ad:6b:94:bb:2a:f6:29:55:a4:9b:07: b5:6c:27:3d:b9:4f:20:30:ea:e7:5a:7e:c2:66:ef: 6b:ce:47:e5:70:85:dd:90:70:4c:f0:99:38:dc:d4: 56:8d:1e:61:cc:6a:f3:44:2b:c4:96:32:0d:54:ab: 64:4a:56:0a:21:ce:06:e5:8b:56:35:89:65:6c:8f: 8d:be:55:2b:26:f2:f4:a9:bb:7b:22:4c:92:59:de: 22:88:4b:59:ef:d8:84:9f:2e:fd:b2:a5:dc:f1:51: f1:5c:c2:a8:3f:85:34:42:75:a0:4e:94:bd:f9:5a: f5:1f:0d:63:fb:3a:58:2a:96:ee:7e:ea:bb:13:16: 1f:07:be:b1:c1:3b:9f:5b:3a:30:a1:77:30:e0:ad: a1:91:0b:c8:d1:25:a3:cc:12:e4:ba:34:b1:95:97: 34:6e:90:fc:79:16:71:97:dd:af:05:77:d1:1f:a7: d1:13:b9:1e:51:11:77:f8:50:8f:76:ee:c7:0b:1f: f1:b4:ac:bd:21:47:4e:18:88:dd:b8:f6:35:22:7d: 44:1b:8b:37:61:67:44:12:6e:18:81:0a:ad:21:29: 5c:67:e6:8a:c8:25:c9:75:d2:4f:fb:8a:54:d6:f1: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:7F:5A:66:96:B0:66:64:63:AA:CE:A7:07:99:50:24:E9:E6:38 X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:a0:94:aa:56:93:80:33:71:f1:2c:d2:ad:c5:a4:65:c2: df:ca:72:03:c1:01:f8:66:54:81:34:94:f4:3b:56:d4:b6:c2: 83:a1:d6:0a:83:c1:3c:5b:0c:f5:11:20:1d:2f:7d:15:f7:92: 64:aa:3c:69:e9:cd:2d:ab:92:67:a9:d1:76:e9:8e:62:fd:96: cc:53:c3:45:58:ac:a5:93:a4:f7:a0:e7:c2:2d:2e:a2:52:15: 53:95:1e:25:3f:5f:da:e5:ff:fd:3c:76:b3:b3:ee:ab:ef:c2: 2f:96:d1:3a:da:77:80:1f:52:a2:ee:b2:c0:3a:8e:84:15:8e: 25:19:a7:41:5b:15:38:88:57:bb:61:11:95:01:e3:98:41:f8: d5:29:a1:9f:1f:aa:50:bd:70:94:f6:0c:86:6d:55:1a:31:06: 97:44:77:60:98:de:e9:4a:31:f3:70:76:10:0c:c6:b4:28:57: 14:5a:57:65:bc:d8:de:be:0c:9a:6a:97:79:fe:84:79:20:51: 1f:50:f0:c2:46:17:13:e1:b2:66:7a:4c:9e:00:5c:8c:4e:59: 4f:e7:5c:fe:b8:18:b8:c8:13:30:75:98:3c:a7:2b:96:93:8c: 37:70:28:3d:15:fd:01:79:0c:be:e5:14:b1:22:96:c7:88:64: 22:bd:88:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/spPuXjpPSwIzpZaM15t/WE7kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTA2MTYyMDQ1NTZaFw0yNTA2MjAwNzQwNTZaMDMxMTAvBgNV BAMTKDM0MDg3RjVBNjY5NkIwNjY2NDYzQUFDRUE3MDc5OTUwMjRFOUU2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mIz6MzZlGMmDiEcf9P3MpG+t a5S7KvYpVaSbB7VsJz25TyAw6udafsJm72vOR+Vwhd2QcEzwmTjc1FaNHmHMavNE K8SWMg1Uq2RKVgohzgbli1Y1iWVsj42+VSsm8vSpu3siTJJZ3iKIS1nv2ISfLv2y pdzxUfFcwqg/hTRCdaBOlL35WvUfDWP7Olgqlu5+6rsTFh8HvrHBO59bOjChdzDg raGRC8jRJaPMEuS6NLGVlzRukPx5FnGX3a8Fd9Efp9ETuR5REXf4UI927scLH/G0 rL0hR04YiN249jUifUQbizdhZ0QSbhiBCq0hKVxn5orIJcl10k/7ilTW8ScpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAh/WmaWsGZkY6rOpweZUCTp5jgwHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFYoJSqVpOAM3HxLNKtxaRlwt/KcgPBAfhm VIE0lPQ7VtS2woOh1gqDwTxbDPURIB0vfRX3kmSqPGnpzS2rkmep0XbpjmL9lsxT w0VYrKWTpPeg58ItLqJSFVOVHiU/X9rl//08drOz7qvvwi+W0Trad4AfUqLussA6 joQVjiUZp0FbFTiIV7thEZUB45hB+NUpoZ8fqlC9cJT2DIZtVRoxBpdEd2CY3ulK MfNwdhAMxrQoVxRaV2W82N6+DJpql3n+hHkgUR9Q8MJGFxPhsmZ6TJ4AXIxOWU/n XP64GLjIEzB1mDynK5aTjDdwKD0V/QF5DL7lFLEilseIZCK9iG0= -----END CERTIFICATE-----Generated at Tue Jun 17 13:25:54 2025 by rpki-client