$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: 7yp5m0kvdVrWRwO+B312plzifwxsfe5SD2/R2NnlqUQ= Subject key identifier: 57:67:1E:92:5A:B1:50:6F:1C:35:E4:9B:37:21:0F:04:2F:7F:04:EA Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 79C79C43C765C98AE6D738C18DEEFD074776E688 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 01E8 Signing time: Mon 04 Aug 2025 23:41:27 +0000 Manifest this update: Mon 04 Aug 2025 23:36:27 +0000 Manifest next update: Fri 08 Aug 2025 09:53:27 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: MIm2eYKyOMTvlvz4unuBtId9JWhB/xV/hf5kSBkq3u0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c7:9c:43:c7:65:c9:8a:e6:d7:38:c1:8d:ee:fd:07:47:76:e6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Aug 4 23:36:27 2025 GMT Not After : Aug 8 09:53:27 2025 GMT Subject: CN=57671E925AB1506F1C35E49B37210F042F7F04EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:52:32:41:48:83:71:3d:90:87:06:a8:2f: 50:22:9a:9b:90:c4:b4:56:57:80:1c:b7:1c:b6:44: f3:eb:4e:bc:c7:e3:ac:ee:b1:f6:fc:4c:bc:dc:06: a8:35:e1:4b:78:ee:43:e9:e3:c3:57:12:4a:1c:f4: 78:c1:94:18:8a:4d:a8:6d:97:8e:2f:3e:07:d7:8e: fe:74:8d:1f:62:e4:d5:bf:24:f3:8e:30:a8:d6:b5: 0f:61:86:3f:50:18:64:b6:b7:de:f8:03:bf:1c:3d: 88:cb:dd:0c:84:b6:b7:f1:3d:64:3b:f4:67:04:0c: 1e:ca:89:2f:df:e3:74:6e:d7:da:42:94:6d:f0:e7: e9:f2:23:58:8e:ba:6a:f1:1b:4c:a6:ff:99:54:9d: 1b:89:ef:97:3e:66:e0:95:32:ce:7a:e0:fd:81:06: dc:cf:8e:76:84:8f:ff:b4:23:54:74:2e:37:8c:c5: e4:2b:f2:6d:73:56:f0:48:dc:24:72:b3:67:c4:9c: ca:60:25:57:13:b6:ef:8b:82:db:6e:4f:d8:d2:50: b3:3e:63:1b:5f:f2:8b:fe:ec:56:67:db:1a:d3:31: bf:c2:02:71:e0:73:a3:0f:38:17:1a:89:84:52:d6: cf:09:ec:68:c8:24:b5:e5:fd:d8:b0:ba:35:0e:c5: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:1E:92:5A:B1:50:6F:1C:35:E4:9B:37:21:0F:04:2F:7F:04:EA X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:5d:e3:04:78:81:31:e2:59:34:6b:df:bb:24:47:4b:bb: 45:ad:d2:a0:1d:1d:c9:67:fa:ca:e6:5f:8e:c7:44:f6:98:4c: 5f:4f:b4:ee:0f:9f:c1:44:6d:fa:89:43:fd:ee:53:cc:26:55: d9:e6:ca:e0:a8:f9:51:5a:3a:9e:dd:60:1e:dd:f1:b9:16:f3: 1d:c2:8a:2b:54:e1:47:d0:b9:9f:d5:db:d7:a0:03:67:b5:d9: cb:aa:1f:de:1d:7e:6f:c5:29:06:75:91:71:53:cc:0b:0c:c4: c9:5c:12:62:38:18:56:44:02:8a:59:99:67:d8:8d:64:69:7d: 1c:f7:e5:d3:a9:1c:05:0a:58:a7:be:95:fe:a7:6a:0e:a2:ea: 62:8c:f4:ce:29:bb:86:4e:d7:d6:91:85:95:07:a6:31:1a:d8: 4f:eb:16:b4:81:1f:30:1e:4f:04:76:a8:e2:0b:d9:7b:f0:0e: c4:19:51:a6:97:8d:44:0b:7b:cf:2d:72:c0:d7:7c:02:59:5b: cc:13:cd:5f:b0:fd:4f:15:19:c8:4e:7f:77:b5:5c:83:4d:7c: 2e:64:14:77:0d:34:7b:0e:4c:f8:70:f4:6b:bf:38:0d:3d:ac: a0:9c:b9:94:55:b6:9f:17:66:95:3a:1d:45:67:62:c1:cf:39: d9:db:3f:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUececQ8dlyYrm1zjBje79B0d25ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNTA4MDQyMzM2MjdaFw0yNTA4MDgwOTUzMjdaMDMxMTAvBgNV BAMTKDU3NjcxRTkyNUFCMTUwNkYxQzM1RTQ5QjM3MjEwRjA0MkY3RjA0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8m1IyQUiDcT2QhwaoL1AimpuQ xLRWV4Actxy2RPPrTrzH46zusfb8TLzcBqg14Ut47kPp48NXEkoc9HjBlBiKTaht l44vPgfXjv50jR9i5NW/JPOOMKjWtQ9hhj9QGGS2t974A78cPYjL3QyEtrfxPWQ7 9GcEDB7KiS/f43Ru19pClG3w5+nyI1iOumrxG0ym/5lUnRuJ75c+ZuCVMs564P2B BtzPjnaEj/+0I1R0LjeMxeQr8m1zVvBI3CRys2fEnMpgJVcTtu+LgttuT9jSULM+ Yxtf8ov+7FZn2xrTMb/CAnHgc6MPOBcaiYRS1s8J7GjIJLXl/diwujUOxRA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2ceklqxUG8cNeSbNyEPBC9/BOowHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4tXeMEeIEx4lk0a9+7JEdLu0Wt0qAdHcln +srmX47HRPaYTF9PtO4Pn8FEbfqJQ/3uU8wmVdnmyuCo+VFaOp7dYB7d8bkW8x3C iitU4UfQuZ/V29egA2e12cuqH94dfm/FKQZ1kXFTzAsMxMlcEmI4GFZEAopZmWfY jWRpfRz35dOpHAUKWKe+lf6nag6i6mKM9M4pu4ZO19aRhZUHpjEa2E/rFrSBHzAe TwR2qOIL2XvwDsQZUaaXjUQLe88tcsDXfAJZW8wTzV+w/U8VGchOf3e1XINNfC5k FHcNNHsOTPhw9Gu/OA09rKCcuZRVtp8XZpU6HUVnYsHPOdnbP94= -----END CERTIFICATE-----Generated at Thu Aug 7 01:02:42 2025 by rpki-client