$ rpki-client -vvf repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft File: BD685C24FF8F432543C3E583484044A44E53067B.mft (raw, json) Hash identifier: 3InTRw9d5KZXhofbzMrhkM39zWylKJuOLi4V8u16ro0= Subject key identifier: 99:23:1C:2C:69:B4:7B:83:39:A6:23:30:C3:E6:EB:E5:7E:37:76:EE Authority key identifier: BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B Certificate issuer: /CN=BD685C24FF8F432543C3E583484044A44E53067B Certificate serial: 18384851C6B0D2F91217C2C058D559AC3BE69BD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft Manifest number: 04 Signing time: Sun 02 Nov 2025 22:21:16 +0000 Manifest this update: Sun 02 Nov 2025 22:16:16 +0000 Manifest next update: Thu 06 Nov 2025 04:50:16 +0000 Files and hashes: 1: BD685C24FF8F432543C3E583484044A44E53067B.crl (hash: s2pf6jc3Qtl6lO+y2VHo7RbGFRA/XzfYvZdX41lvSEg=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: dhpkhk04ab2tWVnfTiYy7HAwnFkFS5/nKq6B26Ta2Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:38:48:51:c6:b0:d2:f9:12:17:c2:c0:58:d5:59:ac:3b:e6:9b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD685C24FF8F432543C3E583484044A44E53067B Validity Not Before: Nov 2 22:16:16 2025 GMT Not After : Nov 6 04:50:16 2025 GMT Subject: CN=99231C2C69B47B8339A62330C3E6EBE57E3776EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:d7:f2:cd:a2:55:d3:6f:ac:82:89:fa:25: c5:c8:61:bd:80:4f:61:4a:34:7c:26:c9:d9:bb:8a: 1d:80:e0:4f:e1:5c:93:76:f9:25:07:9b:97:54:a8: 4f:d8:9d:8e:e2:a8:69:67:8a:04:1d:06:f7:8e:70: f2:3d:f5:c7:97:ed:a8:49:fc:70:fc:14:0d:c5:93: 96:3d:cd:87:eb:18:6e:54:63:8a:d3:e0:06:2d:8a: 44:95:12:5a:d4:9d:6c:9f:a9:04:3b:9b:a9:cb:1c: 07:86:ef:06:8c:61:0a:c6:25:ec:c0:76:cb:b0:2f: 63:e8:c3:db:40:32:6f:d9:22:1c:80:91:da:f9:ac: 36:64:09:cd:a0:29:b6:61:c9:46:4f:7c:ca:ca:50: 80:27:d6:ee:75:56:07:d0:4d:29:dc:31:7b:df:70: f2:cb:9a:3b:b6:e6:12:a6:e5:ad:ac:3e:97:91:6d: e9:07:40:1f:10:8e:de:64:46:f5:db:b1:49:6e:0c: 9b:c2:70:41:9c:99:35:b9:8a:ea:52:f2:7a:a4:1e: 52:3e:c0:9c:1e:c1:0e:85:e8:fc:ac:72:86:60:23: 66:91:9c:b7:48:d8:43:ad:76:2b:b8:e3:d0:33:5e: 3a:01:3f:bf:6d:82:54:9d:f5:c6:4c:a6:71:13:a1: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:23:1C:2C:69:B4:7B:83:39:A6:23:30:C3:E6:EB:E5:7E:37:76:EE X509v3 Authority Key Identifier: keyid:BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7a:c9:27:8c:98:ad:3c:b7:75:6f:b5:54:f4:04:c8:2a:69: 10:b3:98:c9:53:a9:d2:24:fe:a3:4c:92:e2:4b:f6:74:71:be: a0:26:b6:4c:2b:84:e3:02:33:57:64:fe:a7:d2:9a:aa:1e:4b: 28:85:60:3d:44:21:e2:77:94:9e:99:cf:2f:15:2b:ff:c9:27: 64:a1:d1:f3:f5:6e:1c:97:8f:16:73:66:81:55:3f:76:e0:a9: 9a:cc:ea:14:6a:df:ea:06:8e:1d:57:34:12:3d:30:e9:37:a9: 5b:2a:d5:1f:4a:52:66:4a:5a:88:12:f2:5a:c3:2f:8f:51:61: 91:29:73:d2:90:28:79:c0:79:bd:3b:d9:25:19:6e:e5:fe:2f: 52:1e:ea:65:fc:5c:1e:de:76:f3:19:82:d7:10:3a:24:05:43: 23:b4:8f:59:ab:0a:6f:73:a4:c0:c0:86:15:af:2c:0e:f0:73: d4:d3:40:02:7d:7a:77:3e:b6:c6:b3:46:37:a9:59:3f:e8:dc: a4:17:19:ed:10:8c:95:fa:69:c1:b0:26:9f:5b:dc:01:62:1e: 37:99:be:c0:03:95:4b:a5:a4:64:53:7b:03:e7:ac:49:e1:9b: 20:13:35:79:36:df:6b:a3:82:83:ba:f2:cf:6b:06:f2:98:d8: 24:b2:18:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDhIUcaw0vkSF8LAWNVZrDvmm9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0 RTUzMDY3QjAeFw0yNTExMDIyMjE2MTZaFw0yNTExMDYwNDUwMTZaMDMxMTAvBgNV BAMTKDk5MjMxQzJDNjlCNDdCODMzOUE2MjMzMEMzRTZFQkU1N0UzNzc2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLi9fyzaJV02+sgon6JcXIYb2A T2FKNHwmydm7ih2A4E/hXJN2+SUHm5dUqE/YnY7iqGlnigQdBveOcPI99ceX7ahJ /HD8FA3Fk5Y9zYfrGG5UY4rT4AYtikSVElrUnWyfqQQ7m6nLHAeG7waMYQrGJezA dsuwL2Pow9tAMm/ZIhyAkdr5rDZkCc2gKbZhyUZPfMrKUIAn1u51VgfQTSncMXvf cPLLmju25hKm5a2sPpeRbekHQB8Qjt5kRvXbsUluDJvCcEGcmTW5iupS8nqkHlI+ wJwewQ6F6PyscoZgI2aRnLdI2EOtdiu449AzXjoBP79tglSd9cZMpnEToZHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSMcLGm0e4M5piMww+br5X43du4wHwYDVR0j BBgwFoAUvWhcJP+PQyVDw+WDSEBEpE5TBnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGJmODY0MS1iZjcwLTRlM2YtOTg3MS1lZTI2YTMzZGIzYTIvMC9CRDY4NUMyNEZG OEY0MzI1NDNDM0U1ODM0ODQwNDRBNDRFNTMwNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0RTUz MDY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0 QTQ0RTUzMDY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD16ySeMmK08t3VvtVT0BMgqaRCzmMlTqdIk /qNMkuJL9nRxvqAmtkwrhOMCM1dk/qfSmqoeSyiFYD1EIeJ3lJ6Zzy8VK//JJ2Sh 0fP1bhyXjxZzZoFVP3bgqZrM6hRq3+oGjh1XNBI9MOk3qVsq1R9KUmZKWogS8lrD L49RYZEpc9KQKHnAeb072SUZbuX+L1Ie6mX8XB7edvMZgtcQOiQFQyO0j1mrCm9z pMDAhhWvLA7wc9TTQAJ9enc+tsazRjepWT/o3KQXGe0QjJX6acGwJp9b3AFiHjeZ vsADlUulpGRTewPnrEnhmyATNXk232ujgoO68s9rBvKY2CSyGLo= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:57 2025 by rpki-client