$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: ydlyLK4Tw8xBjiLsnc/4Jp2s6saK3oSuBqAiXfcBXWo= Subject key identifier: 7F:C5:4C:0C:7A:C0:E5:88:E2:26:26:15:4A:5C:43:10:96:9A:CC:7B Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 2F1778AC540EEBD51F9253871A0EC9B4BD10D2A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01C1 Signing time: Fri 04 Apr 2025 23:41:23 +0000 Manifest this update: Fri 04 Apr 2025 23:36:23 +0000 Manifest next update: Tue 08 Apr 2025 03:10:23 +0000 Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 5QmpoA9m0mmWsLSv00ogy7OAuITKadv3G3HLB3Oky3o=) 2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: ISrOEulUKu6hC/tqDfJgt9Ii7SKXCHurOt3+MfhUPqA=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: NUPlEw08Zx7YoeB4OqO+Ox+lwPcpmhcKsBziz0RYTAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:17:78:ac:54:0e:eb:d5:1f:92:53:87:1a:0e:c9:b4:bd:10:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Apr 4 23:36:23 2025 GMT Not After : Apr 8 03:10:23 2025 GMT Subject: CN=7FC54C0C7AC0E588E22626154A5C4310969ACC7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1d:ce:9d:84:5b:57:67:8a:6c:7e:92:7b:89: de:52:96:20:5a:1f:a4:cf:1a:7a:48:ec:d6:f8:4e: eb:4b:61:cb:d4:5a:0c:b8:d7:52:f6:00:83:86:38: cc:c1:64:45:af:7c:2f:dc:df:75:0b:45:bc:9c:6b: 62:33:b0:a1:1f:28:68:e8:fc:51:3a:ef:72:c1:42: 5f:fd:a7:a7:65:51:4b:77:9e:46:45:75:f2:22:94: 00:f9:46:f1:e3:71:79:b4:9c:3f:da:1c:41:3b:ff: 76:e3:55:3c:ea:7c:e6:b4:df:c4:95:ef:c5:50:f1: a5:6b:e2:a7:5a:0e:64:f4:72:e5:01:f3:0e:cf:31: 91:4e:75:49:3c:34:3d:3e:b3:93:7c:fd:0e:08:4c: 9c:2e:48:bc:58:d4:aa:7c:b8:92:39:6e:fb:8f:e7: ca:f2:0c:e0:ee:71:19:df:0a:72:ab:8a:3f:f0:60: aa:49:6e:c7:1f:6d:d0:c0:8a:a8:e1:3b:29:75:d1: ac:4e:3f:c1:27:c8:7f:9d:f8:d0:9e:69:5f:84:ab: 1b:1d:dd:b1:7c:29:e5:1d:98:33:74:9a:1c:dc:c1: e7:21:db:1e:88:61:ee:8e:28:ac:76:b2:88:ba:6c: 11:32:03:d3:3a:7f:ef:2f:39:03:59:7f:ea:92:bf: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C5:4C:0C:7A:C0:E5:88:E2:26:26:15:4A:5C:43:10:96:9A:CC:7B X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:54:da:c1:a7:a3:d7:3a:05:9f:86:94:23:cf:e8:7a:e8:4e: 2f:0c:28:f9:3f:33:2c:48:38:31:eb:f5:37:8b:26:cf:3f:e1: a6:26:cc:4f:45:88:13:88:aa:9f:ed:9c:ea:5f:3c:6f:38:a0: 2b:ab:9a:00:d8:a6:7d:fd:5f:2f:aa:9f:17:4d:d1:dd:f8:41: d0:f5:8f:de:32:ee:df:7f:9f:3d:41:db:c2:8d:56:9e:4e:42: db:97:71:6b:c3:ae:7a:23:37:8f:91:cf:a7:c7:5f:70:4b:4c: db:87:6b:a8:c7:11:3d:2e:d0:c4:29:63:cf:8e:5f:ff:7b:56: 02:ba:89:28:ae:da:8c:8f:a2:b1:2f:83:33:37:26:f8:64:26: ce:18:67:9c:8f:8d:13:79:96:a1:e9:13:a9:48:67:ee:11:2a: 2b:cd:b6:ff:1c:ed:5c:92:4a:ab:47:87:d7:fb:fb:49:cd:e1: 3d:ba:21:d1:8c:1e:a7:2d:83:6d:16:ba:87:59:d9:91:6a:a9: 88:7f:64:56:5d:4b:c7:6f:ee:ec:d6:5e:b3:bf:b4:4a:6e:5c: 18:30:ed:72:ea:6b:53:b3:98:61:1a:29:aa:5d:77:91:46:78: a2:2b:a7:bd:03:cb:eb:d5:3d:72:59:57:fc:15:5d:d5:26:7c: a3:f8:e1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxd4rFQO69UfklOHGg7JtL0Q0qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA0MDQyMzM2MjNaFw0yNTA0MDgwMzEwMjNaMDMxMTAvBgNV BAMTKDdGQzU0QzBDN0FDMEU1ODhFMjI2MjYxNTRBNUM0MzEwOTY5QUNDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHc6dhFtXZ4psfpJ7id5SliBa H6TPGnpI7Nb4TutLYcvUWgy411L2AIOGOMzBZEWvfC/c33ULRbyca2IzsKEfKGjo /FE673LBQl/9p6dlUUt3nkZFdfIilAD5RvHjcXm0nD/aHEE7/3bjVTzqfOa038SV 78VQ8aVr4qdaDmT0cuUB8w7PMZFOdUk8ND0+s5N8/Q4ITJwuSLxY1Kp8uJI5bvuP 58ryDODucRnfCnKrij/wYKpJbscfbdDAiqjhOyl10axOP8EnyH+d+NCeaV+Eqxsd 3bF8KeUdmDN0mhzcwech2x6IYe6OKKx2soi6bBEyA9M6f+8vOQNZf+qSv1NBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf8VMDHrA5YjiJiYVSlxDEJaazHswHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBU2sGno9c6BZ+GlCPP6HroTi8MKPk/MyxI ODHr9TeLJs8/4aYmzE9FiBOIqp/tnOpfPG84oCurmgDYpn39Xy+qnxdN0d34QdD1 j94y7t9/nz1B28KNVp5OQtuXcWvDrnojN4+Rz6fHX3BLTNuHa6jHET0u0MQpY8+O X/97VgK6iSiu2oyPorEvgzM3JvhkJs4YZ5yPjRN5lqHpE6lIZ+4RKivNtv8c7VyS SqtHh9f7+0nN4T26IdGMHqctg20WuodZ2ZFqqYh/ZFZdS8dv7uzWXrO/tEpuXBgw 7XLqa1OzmGEaKapdd5FGeKIrp70Dy+vVPXJZV/wVXdUmfKP44YM= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:05 2025 by rpki-client