$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: mvPD1J4pl26Gnm9vAPZokFF8ybE+S3YKwnoggyK0/A8= Subject key identifier: 01:96:E9:EE:D1:03:3D:AD:B1:1D:8A:F3:EE:40:B9:AD:51:A7:50:D0 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 2CC3BC91DB22A2AF70168AF5C7E08293B484EC2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: C6 Signing time: Sat 09 Aug 2025 23:21:09 +0000 Manifest this update: Sat 09 Aug 2025 23:16:09 +0000 Manifest next update: Tue 12 Aug 2025 23:21:09 +0000 Files and hashes: 1: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: k7g5MlwKRB6GqaeuCyHFo4zwk6uIQC4JE0QvD+x2gL0=) 2: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) 4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c3:bc:91:db:22:a2:af:70:16:8a:f5:c7:e0:82:93:b4:84:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Aug 9 23:16:09 2025 GMT Not After : Aug 12 23:21:09 2025 GMT Subject: CN=0196E9EED1033DADB11D8AF3EE40B9AD51A750D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:d0:d8:42:9c:11:e0:33:27:1c:2e:09:a7: bc:2e:53:3a:10:f2:1d:f4:ab:8e:8b:b4:64:5a:d4: f6:2d:70:29:19:fc:ef:03:df:fc:ba:ad:14:aa:72: 46:9f:fc:20:d7:29:3d:6e:f3:e9:d9:58:03:40:cb: 16:6b:e6:42:4b:16:a0:a1:bf:3f:a1:7c:40:ec:43: bb:a2:3a:5d:dd:e6:5b:9b:d3:83:20:99:75:d8:6d: 44:8e:4e:a5:20:6e:00:1f:02:71:bc:ef:78:83:8c: 83:c4:93:06:5e:31:b4:7c:f3:2f:46:62:d5:db:8a: 2f:d5:7a:24:10:c9:32:d9:f5:35:e6:c0:c5:8c:01: 33:70:54:9e:72:cd:ec:66:08:40:b5:fc:08:65:c8: 51:46:c2:0b:1b:95:69:14:ab:72:dd:6a:9c:ec:3d: 72:dd:eb:78:42:3d:e7:3c:f3:7c:87:91:88:21:c9: 96:6b:5d:62:98:fe:3b:b6:f6:4c:5b:08:85:a4:34: c8:9a:97:d1:7b:4a:02:2f:2f:2d:b6:4d:c1:df:94: 83:28:72:d1:28:cd:12:2d:f3:7f:f7:32:76:70:dc: 0e:51:8b:54:54:6c:61:a1:68:ce:d0:ff:48:b1:13: e0:94:31:ad:15:eb:b4:7d:4c:aa:8f:72:c9:98:b7: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:E9:EE:D1:03:3D:AD:B1:1D:8A:F3:EE:40:B9:AD:51:A7:50:D0 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e4:33:29:3c:45:e0:c7:80:58:1e:1b:da:9b:a7:7c:0b:3b: 6f:e2:e0:40:9f:00:8c:1f:8e:fa:01:df:8f:73:38:69:06:f6: d9:5c:9e:45:e4:19:02:cd:95:71:21:08:10:a7:a4:b9:2e:eb: 28:89:f7:2d:a2:05:c9:b9:87:48:90:d2:de:16:00:0d:28:f3: 8a:04:ae:ce:18:1a:2a:4b:0e:c6:8d:95:c8:20:87:0c:3b:f5: 20:a0:c6:7d:c2:0e:ae:62:74:42:a5:9c:6b:e5:f6:0e:ec:63: 57:a0:6e:ab:91:75:e1:ea:60:99:de:1f:16:b9:ea:d1:c2:df: 22:a6:24:3c:83:ed:fc:61:c1:ae:ae:b4:67:8b:7e:20:56:98: e3:ca:14:5e:16:77:70:d5:5c:00:85:d9:5b:d6:e0:05:89:d1: 3a:87:75:40:67:e3:36:4a:7a:e1:f8:d7:82:e9:c3:0d:7f:e1: 28:02:99:97:e8:fb:b5:fc:6d:d3:f3:1e:b1:de:71:75:47:50: d7:93:3d:83:c0:72:bd:a8:27:a4:89:d4:52:7b:d6:e7:4d:d5: b4:f2:1e:42:6c:57:38:cc:da:0e:3a:8e:41:cc:5e:99:30:e3: 2e:13:ce:57:94:ab:77:bb:e6:73:70:e1:91:ea:60:cf:4e:4c: 30:f8:0d:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMO8kdsioq9wFor1x+CCk7SE7CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNTA4MDkyMzE2MDlaFw0yNTA4MTIyMzIxMDlaMDMxMTAvBgNV BAMTKDAxOTZFOUVFRDEwMzNEQURCMTFEOEFGM0VFNDBCOUFENTFBNzUwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmtDYQpwR4DMnHC4Jp7wuUzoQ 8h30q46LtGRa1PYtcCkZ/O8D3/y6rRSqckaf/CDXKT1u8+nZWANAyxZr5kJLFqCh vz+hfEDsQ7uiOl3d5lub04MgmXXYbUSOTqUgbgAfAnG873iDjIPEkwZeMbR88y9G YtXbii/VeiQQyTLZ9TXmwMWMATNwVJ5yzexmCEC1/AhlyFFGwgsblWkUq3Ldapzs PXLd63hCPec883yHkYghyZZrXWKY/ju29kxbCIWkNMial9F7SgIvLy22TcHflIMo ctEozRIt83/3MnZw3A5Ri1RUbGGhaM7Q/0ixE+CUMa0V67R9TKqPcsmYtzYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZbp7tEDPa2xHYrz7kC5rVGnUNAwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfkMyk8ReDHgFgeG9qbp3wLO2/i4ECfAIwf jvoB349zOGkG9tlcnkXkGQLNlXEhCBCnpLku6yiJ9y2iBcm5h0iQ0t4WAA0o84oE rs4YGipLDsaNlcgghww79SCgxn3CDq5idEKlnGvl9g7sY1egbquRdeHqYJneHxa5 6tHC3yKmJDyD7fxhwa6utGeLfiBWmOPKFF4Wd3DVXACF2VvW4AWJ0TqHdUBn4zZK euH414Lpww1/4SgCmZfo+7X8bdPzHrHecXVHUNeTPYPAcr2oJ6SJ1FJ71udN1bTy HkJsVzjM2g46jkHMXpkw4y4TzleUq3e75nNw4ZHqYM9OTDD4DV4= -----END CERTIFICATE-----Generated at Sun Aug 10 18:11:13 2025 by rpki-client