$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: x+Pqx49r0WcWkxKDDjBcU5B6E4dRtu3o9LAeNWnOn+E= Subject key identifier: 05:32:D4:7F:2D:2F:17:75:2E:AF:B7:6A:86:99:C0:D2:EC:B1:15:98 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 529EFE652831FE7A33C7F0E6AF93EBFCFDB54EE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01BF Signing time: Sun 10 Aug 2025 12:40:46 +0000 Manifest this update: Sun 10 Aug 2025 12:35:46 +0000 Manifest next update: Wed 13 Aug 2025 15:53:46 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) 3: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: MtYRCJAA1UVvXBqN387wLwhgSywFcApV2AmfU7BpYpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9e:fe:65:28:31:fe:7a:33:c7:f0:e6:af:93:eb:fc:fd:b5:4e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Aug 10 12:35:46 2025 GMT Not After : Aug 13 15:53:46 2025 GMT Subject: CN=0532D47F2D2F17752EAFB76A8699C0D2ECB11598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:4f:85:18:bf:29:cf:01:17:63:5a:ff:93: 00:1d:e1:79:57:1d:e7:6b:af:22:69:9f:ee:81:b1: 0e:18:4c:f4:bc:a0:82:50:08:96:db:06:1b:5b:7a: 46:6c:6d:e0:68:3e:bc:3f:e4:2e:1b:c2:2e:3b:92: ac:91:f8:59:20:5b:88:e6:fc:01:58:da:a4:11:79: 49:4b:42:d6:e0:af:9a:c2:2e:66:c8:c8:23:ae:95: 83:51:66:8c:ff:0a:5a:16:c9:23:63:91:06:66:a2: b6:73:f8:55:8c:d5:5f:5e:6c:b9:bd:28:fe:ad:cf: 59:09:99:52:d2:04:33:a1:78:13:ae:83:4a:2c:e5: e3:80:29:b3:61:ec:22:88:04:1a:5e:48:62:83:bc: b0:a9:46:ea:02:90:4b:18:f4:04:53:53:92:a6:0f: d0:b3:f1:66:24:06:07:a4:91:27:24:2a:c7:6f:25: 74:5f:32:dc:3c:7b:1b:2c:20:8d:52:7b:c9:e4:e8: f7:3f:a1:92:81:7e:76:94:86:f9:6c:bd:cb:84:24: 25:95:b8:6a:9c:39:1b:03:1e:d4:90:2f:e4:bb:72: f4:fc:e7:01:5c:ae:1f:93:0f:ff:0f:0a:35:07:81: 4e:1c:29:a3:a9:92:5f:9b:b9:a5:76:4b:d0:cf:0a: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:32:D4:7F:2D:2F:17:75:2E:AF:B7:6A:86:99:C0:D2:EC:B1:15:98 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:86:b6:e1:9e:e4:b5:39:88:9c:6b:79:5a:de:ce:d2:ae:ad: 04:4d:4c:38:96:45:50:0d:af:28:27:6c:30:16:8c:c8:f0:db: 1f:89:b1:1f:f1:b4:c5:d7:56:90:65:24:2d:03:9c:34:a7:d0: b3:ef:55:1e:9e:de:df:b0:cc:46:c8:5d:a7:2c:ca:20:97:d7: 86:76:30:02:a0:b4:3d:ce:3a:95:51:ca:63:2d:71:74:99:b3: da:ec:be:10:ea:a4:06:ad:b9:9e:8b:cb:61:fa:3a:a9:50:c9: 59:0d:75:a3:84:f5:02:22:8d:cf:18:41:17:79:5c:5b:85:a7: 45:d0:ed:3f:80:e7:42:18:75:51:84:da:58:22:e4:64:73:33: db:de:4d:f7:1a:9b:ff:51:4b:b9:21:6b:7d:3d:36:4b:eb:9b: ed:2c:e4:0e:d4:3f:a0:5c:ba:61:f3:08:b9:c3:e9:4f:83:f3: dc:ee:1b:13:a6:56:63:88:4a:3c:b3:32:57:c3:ff:b5:36:97: b7:7e:7a:5f:c9:e3:9e:02:31:8b:1e:08:a3:88:ad:61:c0:79: eb:f1:77:0c:ff:c7:cd:fd:1b:47:f9:68:90:71:27:f6:ea:ad: 18:81:32:93:28:05:d6:5f:f4:c1:c1:4f:b7:fa:12:a7:53:7e: 04:8a:0e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUp7+ZSgx/nozx/Dmr5Pr/P21TuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA4MTAxMjM1NDZaFw0yNTA4MTMxNTUzNDZaMDMxMTAvBgNV BAMTKDA1MzJENDdGMkQyRjE3NzUyRUFGQjc2QTg2OTlDMEQyRUNCMTE1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwE+FGL8pzwEXY1r/kwAd4XlX HedrryJpn+6BsQ4YTPS8oIJQCJbbBhtbekZsbeBoPrw/5C4bwi47kqyR+FkgW4jm /AFY2qQReUlLQtbgr5rCLmbIyCOulYNRZoz/CloWySNjkQZmorZz+FWM1V9ebLm9 KP6tz1kJmVLSBDOheBOug0os5eOAKbNh7CKIBBpeSGKDvLCpRuoCkEsY9ARTU5Km D9Cz8WYkBgekkSckKsdvJXRfMtw8exssII1Se8nk6Pc/oZKBfnaUhvlsvcuEJCWV uGqcORsDHtSQL+S7cvT85wFcrh+TD/8PCjUHgU4cKaOpkl+buaV2S9DPCoqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTLUfy0vF3Uur7dqhpnA0uyxFZgwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaGtuGe5LU5iJxreVreztKurQRNTDiWRVAN rygnbDAWjMjw2x+JsR/xtMXXVpBlJC0DnDSn0LPvVR6e3t+wzEbIXacsyiCX14Z2 MAKgtD3OOpVRymMtcXSZs9rsvhDqpAatuZ6Ly2H6OqlQyVkNdaOE9QIijc8YQRd5 XFuFp0XQ7T+A50IYdVGE2lgi5GRzM9veTfcam/9RS7kha309Nkvrm+0s5A7UP6Bc umHzCLnD6U+D89zuGxOmVmOISjyzMlfD/7U2l7d+el/J454CMYseCKOIrWHAeevx dwz/x839G0f5aJBxJ/bqrRiBMpMoBdZf9MHBT7f6EqdTfgSKDuI= -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:53 2025 by rpki-client