$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: Yo0T0EE/g8V4Pw09ojNdfhqltZrDXyYdMtiB4yxaDJo= Subject key identifier: 58:AE:ED:18:5C:25:1C:A4:A4:51:C0:15:66:02:46:CD:57:B5:B2:81 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 6987DBA7046291A5EC146D915D944F63B2BFA584 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 0162 Signing time: Sun 06 Apr 2025 22:41:09 +0000 Manifest this update: Sun 06 Apr 2025 22:36:09 +0000 Manifest next update: Thu 10 Apr 2025 04:03:09 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 2: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: TUSZQPdyo5cGKJqmsH8CxH6DUG1Qj8GBUHYfzNv7w0g=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) 4: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:87:db:a7:04:62:91:a5:ec:14:6d:91:5d:94:4f:63:b2:bf:a5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Apr 6 22:36:09 2025 GMT Not After : Apr 10 04:03:09 2025 GMT Subject: CN=58AEED185C251CA4A451C015660246CD57B5B281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:1e:01:3a:6d:04:89:e9:a0:71:1c:04:53: 75:a5:f1:6a:b1:7a:af:11:51:7a:ef:56:04:38:1d: 39:fd:8e:eb:45:b5:62:31:e7:06:39:a4:61:b6:2d: f4:6f:57:ab:7f:29:47:33:49:5c:1e:b9:34:60:57: 1b:7a:cd:31:54:51:d7:f8:31:c7:fb:18:5f:21:67: a0:1d:3d:ea:f9:f2:e9:f0:d3:54:34:41:79:75:ce: 13:c5:55:f1:29:6d:2f:42:c6:f2:67:63:7d:4d:ab: 1c:52:5d:2b:23:7c:18:9e:d0:73:53:df:75:82:6f: ba:55:e7:87:e2:59:3e:94:0d:41:11:e8:ce:f1:b8: 5f:85:02:57:25:0d:d1:08:0f:b1:9f:36:9d:f7:36: 2f:a8:98:99:4c:8d:c7:42:c3:b4:fb:23:3d:b6:74: 3f:d9:4d:d9:89:3e:55:01:0d:43:73:3f:f5:6f:1b: 42:39:b4:48:12:f3:3a:ea:cf:3d:db:57:4f:c9:ba: 41:ae:2a:af:12:1e:76:98:15:e7:2d:a9:c4:22:af: 05:d6:45:4a:44:d1:e7:54:35:2f:52:f2:00:09:df: e0:50:cf:be:8e:ed:91:2f:8c:63:fc:1d:94:2f:2e: 67:81:47:0c:e0:49:6a:dc:a7:55:ea:41:14:d8:b1: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AE:ED:18:5C:25:1C:A4:A4:51:C0:15:66:02:46:CD:57:B5:B2:81 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:db:9d:ac:6a:c2:6d:ba:dd:4b:8d:6d:9a:53:5f:5b:5e:bd: e8:70:f9:27:2e:d2:41:c8:df:46:80:0d:46:bf:a6:c5:5a:6b: 17:4c:c7:99:04:9b:d0:be:ca:da:7d:51:7c:9e:30:d1:05:d4: d0:ba:de:09:dd:40:6f:9a:e7:44:c3:0a:47:97:8a:2a:5d:6b: 02:86:ff:88:cc:7e:e4:2c:12:c1:6d:1c:5d:b4:31:a4:f1:d1: 09:e9:fc:8a:f7:92:93:18:34:59:c8:b3:c7:fe:d7:6c:90:29: 39:15:ee:f9:ea:81:8c:0a:53:7c:92:9b:fd:f2:25:75:c8:09: 37:62:38:d4:b5:2a:18:27:ba:5c:c3:50:25:1e:f3:e6:d4:21: 3e:f7:a1:66:5c:ca:dd:e4:99:42:6c:2c:37:6d:c6:f7:08:4e: 53:5e:04:88:79:da:1a:9d:8e:23:6d:a1:bf:9b:d2:2e:ff:b6: ad:dd:16:24:1d:74:b6:c0:94:0f:bd:e7:8a:b0:5b:09:f0:d1: 33:7d:a6:d5:14:67:4e:17:9a:47:af:c6:27:c9:74:8a:f2:30: 3d:09:f6:47:a7:29:d4:64:5f:2a:5a:7d:49:ee:b2:f4:ae:2c: 7a:b0:dd:e4:b5:49:37:91:2d:06:72:37:ee:29:23:20:7e:0c: d2:37:bd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYfbpwRikaXsFG2RXZRPY7K/pYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA0MDYyMjM2MDlaFw0yNTA0MTAwNDAzMDlaMDMxMTAvBgNV BAMTKDU4QUVFRDE4NUMyNTFDQTRBNDUxQzAxNTY2MDI0NkNENTdCNUIyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VB4BOm0EiemgcRwEU3Wl8Wqx eq8RUXrvVgQ4HTn9jutFtWIx5wY5pGG2LfRvV6t/KUczSVweuTRgVxt6zTFUUdf4 Mcf7GF8hZ6AdPer58unw01Q0QXl1zhPFVfEpbS9CxvJnY31NqxxSXSsjfBie0HNT 33WCb7pV54fiWT6UDUER6M7xuF+FAlclDdEID7GfNp33Ni+omJlMjcdCw7T7Iz22 dD/ZTdmJPlUBDUNzP/VvG0I5tEgS8zrqzz3bV0/JukGuKq8SHnaYFectqcQirwXW RUpE0edUNS9S8gAJ3+BQz76O7ZEvjGP8HZQvLmeBRwzgSWrcp1XqQRTYsazBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWK7tGFwlHKSkUcAVZgJGzVe1soEwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXbnaxqwm263UuNbZpTX1tevehw+Scu0kHI 30aADUa/psVaaxdMx5kEm9C+ytp9UXyeMNEF1NC63gndQG+a50TDCkeXiipdawKG /4jMfuQsEsFtHF20MaTx0Qnp/Ir3kpMYNFnIs8f+12yQKTkV7vnqgYwKU3ySm/3y JXXICTdiONS1KhgnulzDUCUe8+bUIT73oWZcyt3kmUJsLDdtxvcITlNeBIh52hqd jiNtob+b0i7/tq3dFiQddLbAlA+954qwWwnw0TN9ptUUZ04XmkevxifJdIryMD0J 9kenKdRkXypafUnusvSuLHqw3eS1STeRLQZyN+4pIyB+DNI3vXU= -----END CERTIFICATE-----Generated at Mon Apr 7 01:10:48 2025 by rpki-client