$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: 2bnmqldEIsWdfy3XXQXHH77JRimm/2Bf6eU4g0W2e6Y= Subject key identifier: 52:AC:4E:45:A1:07:2D:4B:49:B3:2F:1C:BC:03:1E:00:CD:CA:C7:DD Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 411DE59DF77003F2DA48E3CE536EA3684554ADAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: B6 Signing time: Wed 06 Aug 2025 17:21:05 +0000 Manifest this update: Wed 06 Aug 2025 17:16:05 +0000 Manifest next update: Sat 09 Aug 2025 18:56:05 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: bdSvehVaVb+nGuDbfYpjZwhc/WuPAPpYE8TPunFzWUo=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1d:e5:9d:f7:70:03:f2:da:48:e3:ce:53:6e:a3:68:45:54:ad:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Aug 6 17:16:05 2025 GMT Not After : Aug 9 18:56:05 2025 GMT Subject: CN=52AC4E45A1072D4B49B32F1CBC031E00CDCAC7DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a0:34:e6:66:15:62:96:ed:fc:22:ae:c1:94: ff:39:2c:57:ea:44:e1:59:17:c8:b9:56:d4:57:11: 77:d9:a5:82:1f:b8:db:d5:7f:ef:6a:d6:63:cb:18: b5:78:95:ea:51:b1:aa:22:8a:bd:72:39:bb:55:9a: 87:36:07:f1:79:7d:79:e8:f7:f6:4f:44:6c:01:8e: d2:6c:36:4f:15:a8:bd:2b:5d:1e:a7:33:e4:89:66: 74:81:6b:e0:e4:39:ea:d9:d4:59:be:e1:c5:ad:40: e0:b3:18:79:9c:15:8e:07:69:24:5e:72:ad:0f:6a: 3d:58:c1:a8:94:d7:d9:88:91:48:12:ba:3e:a1:29: 35:d3:04:5c:96:e7:12:34:b9:53:7e:dd:2a:c1:5a: 7c:5c:72:5f:d8:4b:bf:72:d6:b1:39:97:9f:5e:97: c1:71:a8:63:5b:59:cc:85:b6:f9:9a:fd:cc:11:4d: 1f:8d:8a:28:7e:8d:a7:e0:08:85:c1:45:26:43:1e: 32:bc:13:e6:05:3b:43:37:22:d8:7f:6b:34:82:ca: 6b:a6:51:40:7a:1f:0e:b0:fe:f6:8c:0b:c2:25:c3: 20:81:9f:77:4e:ab:a1:b5:cc:b6:5e:b0:4f:ea:39: 83:cb:6b:e9:61:aa:1e:51:d0:79:c4:7a:e7:08:7a: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AC:4E:45:A1:07:2D:4B:49:B3:2F:1C:BC:03:1E:00:CD:CA:C7:DD X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:87:ce:c3:c4:f8:3e:06:be:8d:85:9c:c5:c0:86:50:b3:97: 02:92:23:d6:7c:1f:aa:a6:36:c8:81:3d:f5:9d:1a:a8:5d:de: 3c:23:e1:bc:11:42:4c:ad:45:d5:74:28:94:03:4f:36:10:cd: 16:7b:0b:60:4f:87:3d:43:38:e5:af:ce:36:d2:1d:ee:5d:45: 50:cc:e2:91:ab:c0:4d:e1:6e:f6:c5:d6:a2:f7:e7:cb:48:da: dc:d3:a7:6e:8c:56:c0:e0:82:36:da:5c:b2:ff:77:55:91:cc: 76:9c:2c:47:48:91:0d:93:d4:e9:a9:88:9d:5b:ad:ac:b1:df: fb:41:d0:16:ec:d1:45:d7:2c:ae:3c:61:2c:cd:bb:35:1d:1a: 04:c9:ca:5a:70:1c:1f:53:33:b1:a7:d9:ea:56:51:88:47:54: ad:83:90:f6:1e:8b:da:25:13:28:fc:44:a7:2b:d6:18:43:10: 24:2a:a6:2b:bc:7b:ca:ae:eb:35:08:c6:10:5a:f4:7d:92:16: 32:2f:12:c7:25:7c:93:f9:f5:72:f2:df:7f:8f:6f:7a:05:f1: d0:d8:5d:d9:b7:2e:28:d5:98:92:33:97:d0:59:a5:56:51:65: fe:e5:cc:60:13:66:f4:47:a3:0a:36:5c:eb:ae:cb:78:03:06: 17:c3:f8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQR3lnfdwA/LaSOPOU26jaEVUra4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA4MDYxNzE2MDVaFw0yNTA4MDkxODU2MDVaMDMxMTAvBgNV BAMTKDUyQUM0RTQ1QTEwNzJENEI0OUIzMkYxQ0JDMDMxRTAwQ0RDQUM3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1oDTmZhVilu38Iq7BlP85LFfq ROFZF8i5VtRXEXfZpYIfuNvVf+9q1mPLGLV4lepRsaoiir1yObtVmoc2B/F5fXno 9/ZPRGwBjtJsNk8VqL0rXR6nM+SJZnSBa+DkOerZ1Fm+4cWtQOCzGHmcFY4HaSRe cq0Paj1YwaiU19mIkUgSuj6hKTXTBFyW5xI0uVN+3SrBWnxccl/YS79y1rE5l59e l8FxqGNbWcyFtvma/cwRTR+Niih+jafgCIXBRSZDHjK8E+YFO0M3Ith/azSCymum UUB6Hw6w/vaMC8IlwyCBn3dOq6G1zLZesE/qOYPLa+lhqh5R0HnEeucIeprlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqxORaEHLUtJsy8cvAMeAM3Kx90wHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiHzsPE+D4Gvo2FnMXAhlCzlwKSI9Z8H6qm NsiBPfWdGqhd3jwj4bwRQkytRdV0KJQDTzYQzRZ7C2BPhz1DOOWvzjbSHe5dRVDM 4pGrwE3hbvbF1qL358tI2tzTp26MVsDggjbaXLL/d1WRzHacLEdIkQ2T1OmpiJ1b rayx3/tB0Bbs0UXXLK48YSzNuzUdGgTJylpwHB9TM7Gn2epWUYhHVK2DkPYei9ol Eyj8RKcr1hhDECQqpiu8e8qu6zUIxhBa9H2SFjIvEsclfJP59XLy33+Pb3oF8dDY Xdm3LijVmJIzl9BZpVZRZf7lzGATZvRHowo2XOuuy3gDBhfD+FU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:54 2025 by rpki-client