$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: Uz4PLAdAzZ1MSlAdSiEuslTXLHRInGEV65JslAnYgwo= Subject key identifier: E3:27:48:C0:91:84:F9:70:94:89:A1:6E:B6:24:CF:DB:51:76:0D:55 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 254779CA1467CEDC0627BA018EAC377815A09959 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: EC Signing time: Tue 04 Nov 2025 16:11:11 +0000 Manifest this update: Tue 04 Nov 2025 16:06:11 +0000 Manifest next update: Fri 07 Nov 2025 19:31:11 +0000 Files and hashes: 1: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: yO/+Bq8lsN4VU0eYNSMGdXThb5WWqXZbH+7EHKyKVQc=) 2: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) 3: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) 4: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:47:79:ca:14:67:ce:dc:06:27:ba:01:8e:ac:37:78:15:a0:99:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Nov 4 16:06:11 2025 GMT Not After : Nov 7 19:31:11 2025 GMT Subject: CN=E32748C09184F9709489A16EB624CFDB51760D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:70:6f:24:8f:d8:70:15:15:e7:14:c8:5b: 7e:28:6d:7d:ab:49:a1:93:89:d0:48:95:57:f3:dc: 41:28:b5:bd:14:a6:f8:05:54:bc:73:8b:47:4b:5d: 15:c6:31:c6:42:3e:6c:24:8f:63:36:40:89:33:15: ae:3f:2e:5e:4d:03:49:a7:cc:5e:28:44:4a:36:2c: c7:ca:95:8e:77:24:b6:2c:d1:6d:6b:f1:3f:62:30: cb:85:b3:3d:7b:75:16:93:47:bd:bd:8c:ad:a7:36: ff:af:fc:df:fd:c2:3d:49:99:14:e5:68:4e:af:ec: 05:8e:e6:f3:e2:5a:a5:9d:36:68:49:d8:9b:21:23: 16:dd:90:d0:b2:3f:b5:69:64:2e:1f:c2:b9:27:d4: 83:15:74:c2:ce:78:cb:2f:a5:8b:b9:16:58:2c:e7: 2a:6e:54:01:3d:a9:49:76:f4:89:58:d9:30:03:3b: 1c:13:61:9e:44:72:c9:3e:9d:99:6e:f5:97:f1:c8: 67:41:de:ac:a4:fe:59:2d:32:4b:94:3e:91:c3:3f: 9f:e0:13:d1:01:29:c9:1d:00:50:6d:91:e8:0c:71: d6:ce:07:60:a4:06:eb:7c:ae:fa:50:87:19:ca:3e: ef:54:64:94:12:f8:84:02:29:40:f1:e5:a7:29:33: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:48:C0:91:84:F9:70:94:89:A1:6E:B6:24:CF:DB:51:76:0D:55 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3f:92:df:dc:1c:32:f5:60:f4:d2:fb:dc:3f:35:fd:5b:7a: 2b:cf:01:4b:47:6e:4e:7e:d8:f8:51:fa:f0:5e:11:29:3d:07: 53:bf:4c:59:6b:eb:e2:fd:a4:7b:87:b4:cc:03:c1:01:8e:3f: d3:5a:96:f3:0c:96:5d:e8:06:26:94:db:8e:52:c4:0b:4b:01: 30:d4:6b:75:54:60:7b:04:8f:1d:c1:96:47:65:55:5c:3d:47: 36:20:67:e4:9e:cd:d4:6b:b8:62:0e:32:6a:f8:0c:f1:13:50: ea:c2:ba:b9:f9:4f:75:cb:32:fc:51:35:c7:b4:80:6a:7d:f3: 51:8d:83:6c:f3:af:b8:e5:bf:6b:31:29:23:ae:0d:e1:87:6f: 8e:2d:db:52:6b:3c:84:b3:2f:57:1e:73:4a:24:9c:b0:fe:dc: 30:11:e4:2d:4e:ad:0d:3b:72:d6:58:25:2e:30:e8:cf:53:42: 8d:ee:01:02:b5:96:9c:61:52:ed:59:99:33:fa:1f:94:20:54: ec:0e:dc:91:c4:a0:15:8d:2b:05:e6:a5:25:39:43:19:aa:6f: 53:f0:3a:cc:55:af:74:9f:56:93:46:66:e4:3e:42:a9:ff:97: 33:f1:83:eb:43:22:e2:83:05:b3:49:a1:84:4c:8b:c4:3d:97: 50:71:14:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUd5yhRnztwGJ7oBjqw3eBWgmVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNTExMDQxNjA2MTFaFw0yNTExMDcxOTMxMTFaMDMxMTAvBgNV BAMTKEUzMjc0OEMwOTE4NEY5NzA5NDg5QTE2RUI2MjRDRkRCNTE3NjBENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVXBvJI/YcBUV5xTIW34obX2r SaGTidBIlVfz3EEotb0UpvgFVLxzi0dLXRXGMcZCPmwkj2M2QIkzFa4/Ll5NA0mn zF4oREo2LMfKlY53JLYs0W1r8T9iMMuFsz17dRaTR729jK2nNv+v/N/9wj1JmRTl aE6v7AWO5vPiWqWdNmhJ2JshIxbdkNCyP7VpZC4fwrkn1IMVdMLOeMsvpYu5Flgs 5ypuVAE9qUl29IlY2TADOxwTYZ5Ecsk+nZlu9ZfxyGdB3qyk/lktMkuUPpHDP5/g E9EBKckdAFBtkegMcdbOB2CkBut8rvpQhxnKPu9UZJQS+IQCKUDx5acpM7VTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ydIwJGE+XCUiaFutiTP21F2DVUwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc/kt/cHDL1YPTS+9w/Nf1beivPAUtHbk5+ 2PhR+vBeESk9B1O/TFlr6+L9pHuHtMwDwQGOP9NalvMMll3oBiaU245SxAtLATDU a3VUYHsEjx3BlkdlVVw9RzYgZ+SezdRruGIOMmr4DPETUOrCurn5T3XLMvxRNce0 gGp981GNg2zzr7jlv2sxKSOuDeGHb44t21JrPISzL1cec0oknLD+3DAR5C1OrQ07 ctZYJS4w6M9TQo3uAQK1lpxhUu1ZmTP6H5QgVOwO3JHEoBWNKwXmpSU5Qxmqb1Pw OsxVr3SfVpNGZuQ+Qqn/lzPxg+tDIuKDBbNJoYRMi8Q9l1BxFOs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:39 2025 by rpki-client