$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft File: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft (raw, json) Hash identifier: Zv9spmAKfUnNA6hSaOS3bPEe65SUNMZnYff70GsEAj0= Subject key identifier: C5:6B:D5:B1:14:24:0E:BD:F2:EE:F5:77:50:F3:01:BD:D9:DC:D8:6A Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Certificate serial: 2427F90FC9405C35E88F4B07D0F4A3F9285CF4D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft Manifest number: C0 Signing time: Thu 07 Aug 2025 02:20:50 +0000 Manifest this update: Thu 07 Aug 2025 02:15:50 +0000 Manifest next update: Sun 10 Aug 2025 13:26:50 +0000 Files and hashes: 1: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: Hz+bwv5TeiqLZz4vHu5RdAv/BqFZcBIfsejW6ExngYw=) 2: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl (hash: OCvgEZky4zn1rYvkYgr+whYOctbyzO0Hcq9FfZK9mT4=) 3: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: pleM7zjt401D1BJf2sqrcL6s2yWcWR5KklAwpJnySCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 13:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:27:f9:0f:c9:40:5c:35:e8:8f:4b:07:d0:f4:a3:f9:28:5c:f4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Validity Not Before: Aug 7 02:15:50 2025 GMT Not After : Aug 10 13:26:50 2025 GMT Subject: CN=C56BD5B114240EBDF2EEF57750F301BDD9DCD86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:6c:d7:1d:a9:14:3e:a2:d2:39:92:cd:c8: 65:d7:23:ad:88:51:3a:c5:6f:77:bc:f0:71:68:19: 1c:83:6b:9d:29:ee:15:cc:5f:5f:63:54:91:0a:1d: 0b:e9:60:3f:a8:80:b9:d2:3d:07:d5:8f:75:ac:c7: 76:5b:f7:f9:5b:31:f3:c7:02:f0:31:f6:3c:6e:73: 77:06:97:ed:3b:7a:a5:9b:55:01:a5:b8:e8:f7:d7: 66:55:c4:6d:6e:c8:4f:13:df:83:9e:b2:5c:3b:b0: 75:54:7e:42:de:15:28:66:ef:fc:43:60:4d:75:7c: bd:c7:31:c1:c1:94:7f:62:40:34:cc:5a:39:05:8c: 80:99:9b:07:5c:70:e2:01:c9:1a:f0:01:c5:6d:ea: a0:9b:aa:e6:b1:ff:8f:c7:8b:1f:b4:6a:49:c9:dd: 72:43:e1:78:62:4e:28:6e:d8:a4:34:39:a0:77:4b: 28:eb:92:25:cb:47:93:d6:69:8a:20:3d:4b:4c:cf: 62:b3:5d:c8:89:10:ae:4c:d0:58:c6:b7:92:ef:4c: f9:fe:35:46:35:62:91:05:cb:37:a0:a5:8e:12:2c: 6d:ed:06:c9:d7:f3:b5:8e:cb:03:38:38:87:bc:b4: 86:9e:e6:15:3d:73:df:24:cc:55:cf:3f:84:1a:c3: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:D5:B1:14:24:0E:BD:F2:EE:F5:77:50:F3:01:BD:D9:DC:D8:6A X509v3 Authority Key Identifier: keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:12:b8:54:05:04:cb:e1:09:28:81:86:c8:53:17:b9:8f:be: 37:01:34:05:c9:21:10:6c:0e:49:23:9d:77:18:06:56:9a:ef: d0:ee:d8:bc:68:7c:fe:87:33:a1:0f:55:54:13:53:13:56:55: 6e:20:6f:73:4c:44:3c:d9:0a:58:a1:1f:12:73:69:c2:a0:4e: 65:aa:be:bd:d8:44:90:62:1e:ac:4d:c4:ca:60:16:33:ec:5f: 25:3d:9b:38:ac:ae:6e:95:7d:34:4a:b2:09:25:6a:a1:a2:3d: 7c:73:59:d6:b0:29:ff:74:75:33:df:86:75:6f:08:50:c9:46: 25:96:a9:7d:27:75:2b:31:cc:96:bd:11:d2:b3:30:6e:21:5b: 8f:93:46:f6:47:16:ea:4f:e8:f8:f5:77:4c:b6:08:c5:5e:57: b9:52:52:1c:b3:7f:6f:5a:75:28:b9:6e:bd:88:14:1e:b6:fa: c6:26:06:e4:f9:fd:40:14:b0:b9:0d:9a:93:29:46:5a:77:fa: 7f:3b:94:89:cb:7a:e2:3d:73:13:1b:be:9d:fb:27:c9:d9:64: 0a:b3:7e:18:33:28:43:e2:0b:6d:c5:90:35:54:26:94:11:a2: 03:7a:a5:f1:10:5b:45:b1:f5:69:4c:af:d3:95:b1:c5:c8:15: a6:b7:ec:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCf5D8lAXDXoj0sH0PSj+Shc9NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RF NTY4ODI0NDAeFw0yNTA4MDcwMjE1NTBaFw0yNTA4MTAxMzI2NTBaMDMxMTAvBgNV BAMTKEM1NkJENUIxMTQyNDBFQkRGMkVFRjU3NzUwRjMwMUJERDlEQ0Q4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FWzXHakUPqLSOZLNyGXXI62I UTrFb3e88HFoGRyDa50p7hXMX19jVJEKHQvpYD+ogLnSPQfVj3Wsx3Zb9/lbMfPH AvAx9jxuc3cGl+07eqWbVQGluOj312ZVxG1uyE8T34Oeslw7sHVUfkLeFShm7/xD YE11fL3HMcHBlH9iQDTMWjkFjICZmwdccOIByRrwAcVt6qCbquax/4/Hix+0aknJ 3XJD4XhiTihu2KQ0OaB3SyjrkiXLR5PWaYogPUtMz2KzXciJEK5M0FjGt5LvTPn+ NUY1YpEFyzegpY4SLG3tBsnX87WOywM4OIe8tIae5hU9c98kzFXPP4Qaw6vbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWvVsRQkDr3y7vV3UPMBvdnc2GowHwYDVR0j BBgwFoAUvKDB71pKs670JeFauJoZzeVogkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmU3ZGFjYy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC9CQ0EwQzFFRjVB NEFCM0FFRjQyNUUxNUFCODlBMTlDREU1Njg4MjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RFNTY4 ODI0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5 Q0RFNTY4ODI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAESuFQFBMvhCSiBhshTF7mPvjcBNAXJIRBs DkkjnXcYBlaa79Du2LxofP6HM6EPVVQTUxNWVW4gb3NMRDzZClihHxJzacKgTmWq vr3YRJBiHqxNxMpgFjPsXyU9mzisrm6VfTRKsgklaqGiPXxzWdawKf90dTPfhnVv CFDJRiWWqX0ndSsxzJa9EdKzMG4hW4+TRvZHFupP6Pj1d0y2CMVeV7lSUhyzf29a dSi5br2IFB62+sYmBuT5/UAUsLkNmpMpRlp3+n87lInLeuI9cxMbvp37J8nZZAqz fhgzKEPiC23FkDVUJpQRogN6pfEQW0Wx9WlMr9OVscXIFaa37MY= -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:17 2025 by rpki-client