$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: BLXsSHv2kMLsdsJ6zyXYGZIYTn0bi8DuvJUVmS7lTrI= Subject key identifier: D1:0E:45:C1:13:5B:9D:44:D8:47:A3:0A:2F:06:57:3C:E8:D9:17:42 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 795BA21D7AA45D96F38A6CD2352E73BC9CF1924E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02F2 Signing time: Wed 06 Aug 2025 12:11:52 +0000 Manifest this update: Wed 06 Aug 2025 12:06:52 +0000 Manifest next update: Sat 09 Aug 2025 22:29:52 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 3: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: rcham1s6bz/2V/QIT05qbA3o5RYz7vhsVYXxDE/sm1Y=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5b:a2:1d:7a:a4:5d:96:f3:8a:6c:d2:35:2e:73:bc:9c:f1:92:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Aug 6 12:06:52 2025 GMT Not After : Aug 9 22:29:52 2025 GMT Subject: CN=D10E45C1135B9D44D847A30A2F06573CE8D91742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:1f:ea:1a:d4:b7:54:38:28:3f:ca:bf:d4: 25:93:e9:1a:3e:fb:90:11:b9:8b:e9:73:6d:4f:f9: a6:70:51:2b:bf:97:89:e2:05:17:2b:fa:52:bc:38: f1:26:82:7d:7f:18:74:1f:20:62:aa:13:92:fa:60: 8e:eb:b7:d0:47:15:ca:50:e6:98:95:75:6c:ad:6e: 69:37:48:88:22:10:7c:c7:78:91:43:2f:b6:f1:52: aa:ef:9e:f2:ae:74:d6:bb:d0:d0:fe:de:79:14:fd: 1c:28:68:1f:25:be:e1:7e:da:0d:ab:1f:9e:f6:14: 2a:44:e3:08:46:c5:ee:7e:05:61:f8:dd:2c:8e:7c: b9:8e:75:dc:c4:a6:b4:52:60:5b:7d:7b:38:54:87: fc:fc:96:d0:9c:92:b3:dd:50:41:cc:4a:f4:c2:47: ac:b4:7f:6c:72:56:06:f9:59:12:4c:0c:ce:46:36: 44:49:35:78:3c:9e:90:63:02:69:d8:9c:43:a4:a1: 02:21:7d:34:07:7a:53:af:7e:1d:9b:6a:b1:ab:9d: b6:7d:2a:17:f9:09:5e:81:ed:89:61:73:b9:15:69: 74:1d:3d:35:fd:db:e9:d1:9c:59:94:24:c2:42:77: de:65:c1:b0:f0:60:3d:54:f0:28:cc:d1:8c:15:37: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0E:45:C1:13:5B:9D:44:D8:47:A3:0A:2F:06:57:3C:E8:D9:17:42 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:60:6c:40:34:6c:96:40:07:b5:98:51:b1:37:fc:78:51: 5b:67:44:8f:6d:b8:8e:a3:3b:68:a0:8e:ad:c2:7e:95:3d:76: 3c:9d:a2:cb:8d:71:3f:0b:a4:a9:7a:ab:d5:3c:3f:0e:7c:03: e9:97:26:ab:f2:b9:5a:26:ba:0b:34:4d:b9:85:44:94:2f:68: 1c:5f:c7:3f:31:b7:e6:5b:46:08:65:88:01:dd:d9:23:64:81: 30:9a:f2:26:d8:4e:aa:3b:dc:bc:25:66:71:76:cc:ae:e0:14: 2f:bb:7b:59:61:e7:2d:ac:2e:3d:25:ce:13:9a:23:ee:f4:5b: cb:04:6a:d8:52:ee:8e:9a:68:e7:31:b4:d2:cf:21:31:4c:cb: fb:01:9c:87:34:07:f1:88:2a:fd:4d:56:7d:18:a5:95:ff:2a: fd:6d:e6:32:e0:da:a8:16:23:14:25:67:6d:23:1d:7e:aa:ec: 54:31:35:04:d3:de:7b:ac:2e:0c:96:3c:fc:e2:ee:a4:ee:29: bf:b2:73:41:01:5b:4c:59:f5:45:34:c5:13:74:da:13:07:81: c0:29:aa:6e:20:79:af:b8:26:d8:1b:d9:ae:3c:16:0a:d0:9e: b0:58:a5:5a:5e:1d:6d:bc:02:d6:64:b0:9f:39:7d:b8:e3:90: ca:3d:c6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVuiHXqkXZbzimzSNS5zvJzxkk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA4MDYxMjA2NTJaFw0yNTA4MDkyMjI5NTJaMDMxMTAvBgNV BAMTKEQxMEU0NUMxMTM1QjlENDREODQ3QTMwQTJGMDY1NzNDRThEOTE3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxB/qGtS3VDgoP8q/1CWT6Ro+ +5ARuYvpc21P+aZwUSu/l4niBRcr+lK8OPEmgn1/GHQfIGKqE5L6YI7rt9BHFcpQ 5piVdWytbmk3SIgiEHzHeJFDL7bxUqrvnvKudNa70ND+3nkU/RwoaB8lvuF+2g2r H572FCpE4whGxe5+BWH43SyOfLmOddzEprRSYFt9ezhUh/z8ltCckrPdUEHMSvTC R6y0f2xyVgb5WRJMDM5GNkRJNXg8npBjAmnYnEOkoQIhfTQHelOvfh2barGrnbZ9 Khf5CV6B7Ylhc7kVaXQdPTX92+nRnFmUJMJCd95lwbDwYD1U8CjM0YwVNzYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Q5FwRNbnUTYR6MKLwZXPOjZF0IwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPAYGxANGyWQAe1mFGxN/x4UVtnRI9tuI6j O2igjq3CfpU9djydosuNcT8LpKl6q9U8Pw58A+mXJqvyuVomugs0TbmFRJQvaBxf xz8xt+ZbRghliAHd2SNkgTCa8ibYTqo73LwlZnF2zK7gFC+7e1lh5y2sLj0lzhOa I+70W8sEathS7o6aaOcxtNLPITFMy/sBnIc0B/GIKv1NVn0YpZX/Kv1t5jLg2qgW IxQlZ20jHX6q7FQxNQTT3nusLgyWPPzi7qTuKb+yc0EBW0xZ9UU0xRN02hMHgcAp qm4gea+4Jtgb2a48FgrQnrBYpVpeHW28AtZksJ85fbjjkMo9xpU= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:36 2025 by rpki-client