$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: 7B5LR7USErQsOH/9hvqiapa4wtyOXhq1h2NU1Rq7pdY= Subject key identifier: 04:29:8F:CC:2F:96:CE:48:0B:79:B5:4E:A5:AB:C9:D1:8D:C2:4A:59 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 1F1C477AFBAC0EF9B48E96B65E55232A25C0D1DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: AD Signing time: Sat 14 Jun 2025 06:01:08 +0000 Manifest this update: Sat 14 Jun 2025 05:56:08 +0000 Manifest next update: Tue 17 Jun 2025 12:57:08 +0000 Files and hashes: 1: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) 2: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: dwqE8+SE+KeycWNO6CcNdI75OLGxmrSFWsXFiEdzEUA=) 3: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) 4: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1c:47:7a:fb:ac:0e:f9:b4:8e:96:b6:5e:55:23:2a:25:c0:d1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Jun 14 05:56:08 2025 GMT Not After : Jun 17 12:57:08 2025 GMT Subject: CN=04298FCC2F96CE480B79B54EA5ABC9D18DC24A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:cc:b8:17:9d:65:6a:a9:0a:1b:2d:47:ad: ba:e7:45:ad:ab:6e:ae:a7:99:87:00:86:59:e4:00: e8:24:4e:11:ed:c3:29:58:61:47:3e:d9:d3:59:96: 72:18:32:86:cf:25:69:f1:ad:ca:9b:a7:6a:85:50: 2b:94:0e:1a:2f:3e:78:3b:9b:09:bd:d6:c3:ed:2b: 85:59:f4:ff:ec:e5:49:ae:d7:ca:66:74:7e:39:75: 4a:8e:05:ba:99:c9:21:25:f8:17:15:3e:bf:1b:4a: b9:82:e4:18:a7:15:84:81:3e:96:db:ae:73:bb:13: 69:a2:b4:01:3e:a7:8e:62:66:52:21:61:7b:8f:a6: f8:7b:e3:85:40:65:f8:eb:70:71:24:88:e0:a6:43: 28:46:71:09:33:6a:2c:58:99:ce:67:d1:b2:a8:eb: 23:1b:22:e4:9f:bc:db:fc:f6:41:51:bc:51:ce:ae: 89:98:b1:d6:dc:0c:b1:58:2b:27:2b:13:d6:78:51: 8d:a9:ef:bf:cf:d1:fe:71:b4:82:43:d9:e0:1c:fa: 07:75:23:54:52:81:bf:67:f8:d4:06:4f:ff:db:f4: a3:6f:b3:06:0d:55:e7:ec:11:29:bb:3b:13:db:92: 6b:81:09:5d:21:55:1c:19:bf:d2:42:c5:53:cb:06: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:8F:CC:2F:96:CE:48:0B:79:B5:4E:A5:AB:C9:D1:8D:C2:4A:59 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7f:ed:3e:b9:46:e2:c9:27:03:d0:a3:c3:1c:d6:d6:cc:a9: 37:e0:18:7d:b2:d6:5b:41:a5:83:8d:db:38:13:be:f6:67:5c: 35:b7:bc:17:dd:08:33:2d:8d:d4:98:79:36:b7:69:f2:bd:c3: 53:09:32:b6:74:b3:1d:75:ce:34:a6:d4:5a:11:7e:6f:ab:56: 73:f6:cb:c5:41:e7:2b:27:54:0c:22:1f:a7:59:de:33:35:08: 5b:4e:66:0f:a8:5b:5a:8d:fe:41:ef:fd:f1:66:ca:2b:40:56: fe:e4:2c:30:5c:b5:13:ee:83:87:fe:8c:12:0f:fd:7a:d5:8d: 95:6a:37:4d:1a:e5:07:b0:b8:3e:d5:21:16:bf:79:0d:ca:39: 08:70:6e:df:c2:a0:f6:4a:dd:e7:8a:9a:ac:54:0d:5f:6e:08: 7d:bc:ca:3f:63:b7:f6:22:11:34:dc:ed:5e:fc:a8:9f:d0:d9: c1:49:d8:eb:27:1c:20:0a:18:43:02:0a:70:e0:8f:6c:30:85: db:54:d5:6a:fa:02:52:65:84:b5:98:a0:70:32:b7:b3:66:e6: c6:6f:dc:c8:85:41:94:a1:89:55:21:df:a2:17:48:e6:ce:46: 7f:6e:08:af:33:4e:b5:63:77:d5:36:f3:0d:34:2d:6f:b2:3f: 28:82:81:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxxHevusDvm0jpa2XlUjKiXA0dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNTA2MTQwNTU2MDhaFw0yNTA2MTcxMjU3MDhaMDMxMTAvBgNV BAMTKDA0Mjk4RkNDMkY5NkNFNDgwQjc5QjU0RUE1QUJDOUQxOERDMjRBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQsy4F51laqkKGy1HrbrnRa2r bq6nmYcAhlnkAOgkThHtwylYYUc+2dNZlnIYMobPJWnxrcqbp2qFUCuUDhovPng7 mwm91sPtK4VZ9P/s5Umu18pmdH45dUqOBbqZySEl+BcVPr8bSrmC5BinFYSBPpbb rnO7E2mitAE+p45iZlIhYXuPpvh744VAZfjrcHEkiOCmQyhGcQkzaixYmc5n0bKo 6yMbIuSfvNv89kFRvFHOromYsdbcDLFYKycrE9Z4UY2p77/P0f5xtIJD2eAc+gd1 I1RSgb9n+NQGT//b9KNvswYNVefsESm7OxPbkmuBCV0hVRwZv9JCxVPLBoc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBCmPzC+WzkgLebVOpavJ0Y3CSlkwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF/7T65RuLJJwPQo8Mc1tbMqTfgGH2y1ltB pYON2zgTvvZnXDW3vBfdCDMtjdSYeTa3afK9w1MJMrZ0sx11zjSm1FoRfm+rVnP2 y8VB5ysnVAwiH6dZ3jM1CFtOZg+oW1qN/kHv/fFmyitAVv7kLDBctRPug4f+jBIP /XrVjZVqN00a5QewuD7VIRa/eQ3KOQhwbt/CoPZK3eeKmqxUDV9uCH28yj9jt/Yi ETTc7V78qJ/Q2cFJ2OsnHCAKGEMCCnDgj2wwhdtU1Wr6AlJlhLWYoHAyt7Nm5sZv 3MiFQZShiVUh36IXSObORn9uCK8zTrVjd9U28w00LW+yPyiCgdA= -----END CERTIFICATE-----Generated at Sun Jun 15 22:04:11 2025 by rpki-client