$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: oAfg60/VAa/iOPxSg6a9qxYJKmXuHoJZW+gX9Jx/dEA= Subject key identifier: C2:12:96:F2:B6:B7:02:ED:4D:09:15:C3:EE:C1:54:85:89:2F:76:24 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 5E1D5879A22363E3E9D6751CA34CDA8DD25A8522 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01F8 Signing time: Mon 04 Aug 2025 12:50:37 +0000 Manifest this update: Mon 04 Aug 2025 12:45:37 +0000 Manifest next update: Thu 07 Aug 2025 17:08:37 +0000 Files and hashes: 1: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) 2: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: Ie9FeUFxsffonfmMsvsL7NT4ufW9obxF5B17TmNi6LM=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 17:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1d:58:79:a2:23:63:e3:e9:d6:75:1c:a3:4c:da:8d:d2:5a:85:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Aug 4 12:45:37 2025 GMT Not After : Aug 7 17:08:37 2025 GMT Subject: CN=C21296F2B6B702ED4D0915C3EEC15485892F7624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:15:3b:5a:0a:e3:a5:83:bc:64:25:bc:45: c9:8e:5d:26:57:55:32:78:a4:95:b3:0c:87:73:3b: 37:cb:ac:af:9f:1a:fe:fc:7c:e9:e4:32:d5:1f:18: 64:48:c5:bd:99:37:55:92:8b:3b:38:f5:85:76:b0: 51:54:d3:1e:23:5c:61:89:ac:77:b6:c8:d4:44:6e: 4e:c6:10:c4:5b:aa:f5:51:e1:d3:f5:f4:34:a6:92: f2:29:6d:74:c3:f9:85:17:7f:85:2e:38:36:4b:84: 01:32:64:29:39:e9:c5:89:c5:40:f6:19:63:69:9f: 5c:5f:12:e0:07:fc:0f:96:cf:01:3e:d7:2f:93:8a: 5c:7c:ff:b3:bf:ae:2f:81:3b:eb:29:b3:ad:79:0f: a5:c8:a0:49:a4:a4:76:33:1a:d2:3f:6a:cf:f1:69: 8f:63:ed:5b:77:0d:3d:7f:db:39:2f:1c:10:83:e9: a0:5a:59:ab:d1:86:4a:07:84:57:95:6b:d2:6f:b8: 1c:92:23:11:70:b0:0a:c3:53:bf:68:5d:67:69:4a: 0b:bf:10:3d:a7:c0:14:0f:9b:8d:5c:83:91:34:f1: 52:53:c1:d3:7d:51:62:a7:b8:f0:c3:6a:a2:7a:93: 08:26:34:f4:58:0b:fd:8d:a8:79:04:88:1f:f3:ff: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:12:96:F2:B6:B7:02:ED:4D:09:15:C3:EE:C1:54:85:89:2F:76:24 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9d:26:3a:46:67:aa:1d:09:e5:5f:b2:0a:a7:5a:7c:37:f5: b7:67:1e:87:51:ee:d6:b2:76:77:03:7a:b9:96:21:3a:24:ba: 2f:17:c5:c8:c5:42:97:00:45:c5:a2:0a:fa:d3:c5:6b:3c:aa: 4f:2a:5e:50:04:3e:5c:27:ad:92:cf:c2:dc:d6:7e:f4:77:2f: 50:5f:e6:80:66:e5:12:45:4b:bd:8d:a8:6f:55:b9:ab:a3:76: ff:53:da:d9:da:a5:e7:16:f6:09:e6:21:9c:16:7b:20:c3:5c: c7:ba:ca:7a:f4:bd:d3:ee:dd:a4:45:7d:40:7f:88:71:a6:a7: 76:28:12:69:72:90:9a:42:3d:17:14:2b:8e:06:41:94:17:6b: f0:4b:ad:32:8c:90:cf:3b:3c:b3:85:31:ce:47:33:3a:fe:da: 13:4b:72:ea:b1:4f:19:b0:97:95:d3:f5:b8:b5:be:12:8d:9c: 56:95:67:3f:d3:89:0c:37:a1:75:ba:ee:d8:f1:b2:59:e1:84: 10:c0:5f:a7:a7:cf:3c:cd:98:61:23:0e:b8:3c:4c:60:7a:7d: ca:bf:ae:d2:01:23:3c:85:06:42:a7:f8:50:e5:95:4b:d7:a6: 75:19:16:0b:f1:0b:75:fc:9d:5e:d7:c7:13:d7:98:a0:ac:fe: 03:a8:48:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh1YeaIjY+Pp1nUco0zajdJahSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA4MDQxMjQ1MzdaFw0yNTA4MDcxNzA4MzdaMDMxMTAvBgNV BAMTKEMyMTI5NkYyQjZCNzAyRUQ0RDA5MTVDM0VFQzE1NDg1ODkyRjc2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiRU7WgrjpYO8ZCW8RcmOXSZX VTJ4pJWzDIdzOzfLrK+fGv78fOnkMtUfGGRIxb2ZN1WSizs49YV2sFFU0x4jXGGJ rHe2yNREbk7GEMRbqvVR4dP19DSmkvIpbXTD+YUXf4UuODZLhAEyZCk56cWJxUD2 GWNpn1xfEuAH/A+WzwE+1y+Tilx8/7O/ri+BO+sps615D6XIoEmkpHYzGtI/as/x aY9j7Vt3DT1/2zkvHBCD6aBaWavRhkoHhFeVa9JvuBySIxFwsArDU79oXWdpSgu/ ED2nwBQPm41cg5E08VJTwdN9UWKnuPDDaqJ6kwgmNPRYC/2NqHkEiB/z/yY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhKW8ra3Au1NCRXD7sFUhYkvdiQwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+dJjpGZ6odCeVfsgqnWnw39bdnHodR7tay dncDermWITokui8XxcjFQpcARcWiCvrTxWs8qk8qXlAEPlwnrZLPwtzWfvR3L1Bf 5oBm5RJFS72NqG9Vuaujdv9T2tnapecW9gnmIZwWeyDDXMe6ynr0vdPu3aRFfUB/ iHGmp3YoEmlykJpCPRcUK44GQZQXa/BLrTKMkM87PLOFMc5HMzr+2hNLcuqxTxmw l5XT9bi1vhKNnFaVZz/TiQw3oXW67tjxslnhhBDAX6enzzzNmGEjDrg8TGB6fcq/ rtIBIzyFBkKn+FDllUvXpnUZFgvxC3X8nV7XxxPXmKCs/gOoSGk= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:14 2025 by rpki-client