$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: aZfEpNKcTp5LFBLvJAE48aI/M0Abx93RQ2URfy5Ay7k= Subject key identifier: 93:11:CB:78:70:FC:9F:AC:77:50:3A:3D:F6:E9:6D:4D:D8:56:15:B1 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 38906E196D45FC100B4BFC88BA49CF175A93DCA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01A8 Signing time: Thu 19 Jun 2025 12:00:45 +0000 Manifest this update: Thu 19 Jun 2025 11:55:45 +0000 Manifest next update: Sun 22 Jun 2025 17:02:45 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) 3: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: 9A55zPfdbimfclOkiWfEpcxKejhmkJU8RDHFWlO3ZqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 13:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:90:6e:19:6d:45:fc:10:0b:4b:fc:88:ba:49:cf:17:5a:93:dc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Jun 19 11:55:45 2025 GMT Not After : Jun 22 17:02:45 2025 GMT Subject: CN=9311CB7870FC9FAC77503A3DF6E96D4DD85615B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:3a:56:3e:e3:2c:3f:24:6e:91:16:12:aa: b5:35:50:f9:ba:1c:63:50:cd:f6:b8:c5:a3:d3:01: c7:cd:de:d2:14:bb:d7:ff:6b:06:a4:62:f8:c0:eb: b4:96:f3:8d:16:c6:ae:4c:9b:c8:1f:00:58:c9:dd: 15:09:5f:1c:a3:62:ce:bd:81:95:e8:2a:ad:03:eb: 37:4d:73:74:de:ec:06:2d:a1:af:4c:03:da:99:91: 81:44:a9:ed:ab:a2:77:86:85:19:71:07:dd:e4:b0: 39:fc:3b:f5:da:47:0f:88:05:8f:0a:ab:2b:e5:63: 2b:92:cc:a3:3f:85:be:1b:6b:ea:f2:97:6f:78:5c: d2:97:8f:92:8f:6f:6d:9f:5d:be:c5:79:23:7e:09: 51:1b:dc:c4:ae:bb:20:7f:8d:51:2c:e6:12:29:4d: a2:b2:00:24:11:21:cf:cf:05:e9:d7:7a:3f:9a:39: 82:28:e1:a4:2b:77:ee:09:39:e2:83:37:6d:5b:0e: d9:0a:bc:92:ef:7b:9a:75:a6:db:3d:cd:ef:32:84: 51:d4:6f:44:12:72:12:07:58:48:33:b5:2f:18:33: 9b:84:4d:85:f4:37:ec:58:4f:c6:38:f2:34:f4:2f: 6e:6f:95:8e:ae:63:10:8c:60:a9:b7:1c:87:d3:d4: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:11:CB:78:70:FC:9F:AC:77:50:3A:3D:F6:E9:6D:4D:D8:56:15:B1 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a1:cc:54:de:f6:66:a5:a5:61:3d:48:5a:a7:b2:cb:e9:e0: 9c:be:2c:43:be:d7:ae:43:77:6c:4b:64:ba:4f:73:fa:65:71: 2b:16:8b:25:20:40:e9:d8:0c:4e:f0:99:06:39:98:64:2b:49: f0:62:3e:2a:c8:3a:22:16:52:03:c7:e5:cb:bd:da:05:e8:db: ea:20:5f:09:f0:10:f8:a0:95:1f:39:9c:c5:9e:8a:0e:a4:ea: ef:b7:e7:cb:85:b8:fc:49:3c:2a:14:d0:f5:7d:a9:9c:af:74: 6b:08:65:5b:88:1e:61:81:43:01:e4:1d:0b:0a:16:33:0f:a2: 8c:24:1c:85:2f:b5:1e:78:58:34:89:08:9b:84:cd:a6:0e:d7: 84:8c:be:a4:2a:37:d0:d8:e3:81:4e:64:57:6e:0f:04:ed:03: fd:b4:92:10:94:f3:f9:7a:79:6e:b9:b5:ab:92:58:5e:9b:95: 96:66:86:39:29:93:9a:c6:77:e5:ac:e8:22:ad:d6:05:b3:58: 7e:b3:88:b8:b3:73:6a:14:d5:41:3c:8a:f2:55:f6:f8:71:ea: 9c:df:ac:c5:c7:33:3d:24:53:cd:9f:00:09:81:04:60:48:62: f8:6a:eb:a6:8c:e7:29:2b:52:aa:cb:72:2f:0d:73:67:f9:be: 7e:9f:92:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJBuGW1F/BALS/yIuknPF1qT3KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA2MTkxMTU1NDVaFw0yNTA2MjIxNzAyNDVaMDMxMTAvBgNV BAMTKDkzMTFDQjc4NzBGQzlGQUM3NzUwM0EzREY2RTk2RDRERDg1NjE1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07jpWPuMsPyRukRYSqrU1UPm6 HGNQzfa4xaPTAcfN3tIUu9f/awakYvjA67SW840Wxq5Mm8gfAFjJ3RUJXxyjYs69 gZXoKq0D6zdNc3Te7AYtoa9MA9qZkYFEqe2roneGhRlxB93ksDn8O/XaRw+IBY8K qyvlYyuSzKM/hb4ba+ryl294XNKXj5KPb22fXb7FeSN+CVEb3MSuuyB/jVEs5hIp TaKyACQRIc/PBenXej+aOYIo4aQrd+4JOeKDN21bDtkKvJLve5p1pts9ze8yhFHU b0QSchIHWEgztS8YM5uETYX0N+xYT8Y48jT0L25vlY6uYxCMYKm3HIfT1FHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxHLeHD8n6x3UDo99ultTdhWFbEwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuhzFTe9malpWE9SFqnssvp4Jy+LEO+165D d2xLZLpPc/plcSsWiyUgQOnYDE7wmQY5mGQrSfBiPirIOiIWUgPH5cu92gXo2+og XwnwEPiglR85nMWeig6k6u+358uFuPxJPCoU0PV9qZyvdGsIZVuIHmGBQwHkHQsK FjMPoowkHIUvtR54WDSJCJuEzaYO14SMvqQqN9DY44FOZFduDwTtA/20khCU8/l6 eW65tauSWF6blZZmhjkpk5rGd+Ws6CKt1gWzWH6ziLizc2oU1UE8ivJV9vhx6pzf rMXHMz0kU82fAAmBBGBIYvhq66aM5ykrUqrLci8Nc2f5vn6fkjY= -----END CERTIFICATE-----Generated at Thu Jun 19 22:16:43 2025 by rpki-client