$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: lKI1CbJqaW6FPYE2AA0iGaeeIz+Gj1SIy5h0xj8ZneA= Subject key identifier: C7:1D:D1:FD:95:C6:8B:12:95:6F:74:36:DB:CA:B0:78:94:78:B1:28 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 19DA5BC881A78B71DD9C066F55E46033DC11A61A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 49 Signing time: Tue 05 Aug 2025 13:52:01 +0000 Manifest this update: Tue 05 Aug 2025 13:47:01 +0000 Manifest next update: Fri 08 Aug 2025 22:26:01 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: NnOVnujE179+PHUyy+pzOkgNJKHvQwmAk0sffQqgT9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:da:5b:c8:81:a7:8b:71:dd:9c:06:6f:55:e4:60:33:dc:11:a6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Aug 5 13:47:01 2025 GMT Not After : Aug 8 22:26:01 2025 GMT Subject: CN=C71DD1FD95C68B12956F7436DBCAB0789478B128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:04:85:45:32:b8:53:4d:3f:66:96:0b:4d: 19:b1:a6:62:01:38:bb:2d:2d:d3:25:a5:60:83:56: 98:86:17:b2:ed:ed:5b:6d:87:5e:54:2d:80:cb:b4: 81:3d:ba:3c:a2:5d:82:52:8d:76:59:d6:a7:cb:96: 46:f0:22:b9:7c:b5:96:3b:5c:7e:96:e6:3d:d0:81: 88:cd:75:18:df:17:76:f8:23:86:b0:8c:07:89:06: c3:6f:d6:55:b0:4e:c6:cd:9c:0a:7b:26:d5:5b:58: c1:ef:78:a6:39:b3:7d:cd:29:3f:ef:bd:23:ec:13: f5:34:9e:25:c4:ba:4c:11:d9:63:d4:58:4e:b0:a0: 5a:3f:df:1f:28:3e:06:b7:1a:d9:3b:17:28:da:cd: bb:ca:e4:c8:73:1e:f3:5c:e4:cf:62:f6:c0:58:fa: 7f:2b:b1:29:94:1e:40:0a:0b:12:d9:79:49:d1:93: 79:be:c2:0c:af:d0:3a:1e:08:25:88:d6:bf:a9:f7: b9:7f:ed:8f:88:8e:0d:56:20:ce:0a:d3:d1:ec:9c: 94:90:6d:2e:a2:29:3f:ff:a9:07:8c:f3:51:21:ca: 3f:28:ec:9e:77:6e:97:fe:e2:59:81:a4:17:60:4a: ce:da:84:ed:de:d9:c8:05:3e:f5:99:be:3c:60:65: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1D:D1:FD:95:C6:8B:12:95:6F:74:36:DB:CA:B0:78:94:78:B1:28 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:24:bc:7c:02:3b:a2:bd:51:2c:ed:ca:19:82:39:2e:4c:32: a3:a5:b5:c3:a2:69:f6:ec:12:a0:d4:c9:1f:8b:7d:b8:24:a1: 17:27:7d:41:96:6d:c5:cb:38:a7:29:87:ac:87:00:6a:b0:e8: 83:c3:7a:3d:11:aa:b7:af:bb:51:01:ea:3d:57:96:73:fc:af: a0:53:b6:49:d3:24:b1:c6:b1:6c:53:7b:35:2b:1d:cd:55:3e: f2:69:a4:96:46:98:83:25:8a:2c:e2:b7:a1:4d:1e:ba:f3:67: 96:f9:f8:f5:f3:0b:0b:59:a1:b1:48:34:95:3b:8e:e2:89:a0: 38:f4:d9:5f:b7:fc:47:b1:50:ca:07:cf:19:1a:13:88:1a:1d: 3e:5f:47:07:e4:e0:39:ec:fa:f2:a1:f1:bc:7a:04:77:40:2b: ee:c0:a8:8a:e6:6c:cf:06:a9:ca:cc:9e:81:57:45:03:1a:ad: 43:ca:34:d9:1d:cf:58:4e:e2:82:66:89:94:39:7f:e3:e5:2d: be:dd:3b:5e:07:1e:1d:35:ae:58:87:8e:e6:de:f3:0f:a3:c1: 13:2d:18:ae:54:df:2f:fd:43:85:65:15:60:73:1d:fe:a1:0e: 6f:99:32:42:56:c2:b1:0d:f5:7f:8f:42:62:98:9f:6a:59:31: 4d:c9:db:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdpbyIGni3HdnAZvVeRgM9wRphowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTA4MDUxMzQ3MDFaFw0yNTA4MDgyMjI2MDFaMDMxMTAvBgNV BAMTKEM3MUREMUZEOTVDNjhCMTI5NTZGNzQzNkRCQ0FCMDc4OTQ3OEIxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzASFRTK4U00/ZpYLTRmxpmIB OLstLdMlpWCDVpiGF7Lt7Vtth15ULYDLtIE9ujyiXYJSjXZZ1qfLlkbwIrl8tZY7 XH6W5j3QgYjNdRjfF3b4I4awjAeJBsNv1lWwTsbNnAp7JtVbWMHveKY5s33NKT/v vSPsE/U0niXEukwR2WPUWE6woFo/3x8oPga3Gtk7FyjazbvK5MhzHvNc5M9i9sBY +n8rsSmUHkAKCxLZeUnRk3m+wgyv0DoeCCWI1r+p97l/7Y+Ijg1WIM4K09HsnJSQ bS6iKT//qQeM81Ehyj8o7J53bpf+4lmBpBdgSs7ahO3e2cgFPvWZvjxgZRtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxx3R/ZXGixKVb3Q228qweJR4sSgwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADskvHwCO6K9USztyhmCOS5MMqOltcOiafbs EqDUyR+LfbgkoRcnfUGWbcXLOKcph6yHAGqw6IPDej0Rqrevu1EB6j1XlnP8r6BT tknTJLHGsWxTezUrHc1VPvJppJZGmIMliizit6FNHrrzZ5b5+PXzCwtZobFINJU7 juKJoDj02V+3/EexUMoHzxkaE4gaHT5fRwfk4Dns+vKh8bx6BHdAK+7AqIrmbM8G qcrMnoFXRQMarUPKNNkdz1hO4oJmiZQ5f+PlLb7dO14HHh01rliHjube8w+jwRMt GK5U3y/9Q4VlFWBzHf6hDm+ZMkJWwrEN9X+PQmKYn2pZMU3J2+c= -----END CERTIFICATE-----Generated at Thu Aug 7 11:06:48 2025 by rpki-client