$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: zCAog5l9B5vGf1EaUw9qRhdI6NQiH0g2SyBaFoh/DJU= Subject key identifier: C5:6B:6A:A0:13:D8:A8:B2:C5:A5:D4:A7:C9:1A:F1:2F:7D:94:02:EB Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 012B3D3CC93D566D4F8865F0B31225340F714882 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01DF Signing time: Thu 05 Jun 2025 14:31:24 +0000 Manifest this update: Thu 05 Jun 2025 14:26:24 +0000 Manifest next update: Sun 08 Jun 2025 23:13:24 +0000 Files and hashes: 1: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: aJzT1JbovZ+MWJTu3hMqJLmRsVKqQDLjyidw9LEIopA=) 2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: Qh5iXUaLz085YiAao5lIIV9guQY+sWYceEeZZ6zBDJs=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2b:3d:3c:c9:3d:56:6d:4f:88:65:f0:b3:12:25:34:0f:71:48:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Jun 5 14:26:24 2025 GMT Not After : Jun 8 23:13:24 2025 GMT Subject: CN=C56B6AA013D8A8B2C5A5D4A7C91AF12F7D9402EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:71:15:7d:d1:4b:32:e2:1d:2f:8d:c2:3d: 8e:91:60:ab:c1:41:76:47:98:57:9f:48:d4:06:9a: 8e:7e:5e:03:ab:dd:18:d4:f6:11:13:24:ba:41:9e: fe:88:12:70:c3:e7:98:8f:c3:15:de:bd:78:6a:99: 71:53:88:2d:36:1b:39:09:8a:7a:76:a4:d3:10:96: 70:44:40:7a:35:59:fa:e4:f5:15:10:7f:fd:1e:c1: 4f:c0:bf:40:08:0c:2c:99:ef:6e:2a:0a:e6:88:70: 28:c2:62:fd:9f:f9:8e:f1:83:89:c8:f7:34:52:9a: 1d:8d:a9:9e:50:8c:77:80:89:4d:95:57:64:f4:17: 06:55:c7:5a:76:e9:f6:cc:3e:36:d0:a1:74:ea:e6: 28:7d:ff:55:82:2e:7b:1f:be:a5:83:bc:c2:28:8f: 44:57:6d:e3:3b:76:b4:6e:76:e7:26:b3:bb:5d:48: 7f:84:f8:8a:08:67:33:94:c7:f6:ba:96:e6:7e:50: 57:c5:91:39:8c:37:85:85:5c:24:a9:97:7f:38:97: 4d:d6:ed:f6:af:68:16:01:23:c0:ff:8a:68:bd:2e: fd:89:8a:00:09:9e:d7:18:f2:41:50:4a:6c:91:eb: 70:bb:ec:92:99:52:e7:88:9e:5d:43:3f:45:bc:49: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:6A:A0:13:D8:A8:B2:C5:A5:D4:A7:C9:1A:F1:2F:7D:94:02:EB X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:e6:2c:39:9d:34:08:bf:ae:97:ad:9c:a7:8b:3c:36:da: 12:d3:e2:a6:64:20:18:4d:e7:4a:c3:85:b3:a2:3a:72:61:40: de:43:31:d9:25:8a:8b:63:d3:12:1d:9b:be:9a:a3:86:d7:a5: 3a:0f:cc:fe:d5:b5:31:43:e3:ae:cd:86:77:0f:2f:7f:bb:28: cb:ca:7e:5d:72:02:34:f8:72:71:77:96:68:10:e3:73:b8:f2: f0:dd:69:0c:82:6e:07:56:03:80:f5:fa:15:78:68:8a:24:4b: 43:50:47:af:00:06:90:3d:30:61:d5:1e:95:20:f2:79:ed:21: c5:66:b3:22:81:c0:ac:02:81:9d:d2:30:6f:ff:df:48:14:69: 04:ef:c9:33:4c:d5:2a:dc:cf:84:66:f4:4f:f2:87:12:0f:16: da:d8:46:2f:c4:ee:9a:3e:aa:7a:e9:fa:65:d9:1e:ef:f7:e7: 75:74:eb:8f:03:e0:14:c9:21:a6:38:29:0b:13:40:10:b3:04: 2d:79:9b:13:61:f5:12:31:ad:73:8d:2f:26:55:79:c0:5b:df: fa:f3:f8:6d:03:1c:40:60:03:3d:45:2f:01:1d:1a:29:51:7b: 53:94:c2:68:33:94:ed:f7:3a:b5:f9:74:97:47:01:47:2a:71: 6f:58:76:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASs9PMk9Vm1PiGXwsxIlNA9xSIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA2MDUxNDI2MjRaFw0yNTA2MDgyMzEzMjRaMDMxMTAvBgNV BAMTKEM1NkI2QUEwMTNEOEE4QjJDNUE1RDRBN0M5MUFGMTJGN0Q5NDAyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZHEVfdFLMuIdL43CPY6RYKvB QXZHmFefSNQGmo5+XgOr3RjU9hETJLpBnv6IEnDD55iPwxXevXhqmXFTiC02GzkJ inp2pNMQlnBEQHo1Wfrk9RUQf/0ewU/Av0AIDCyZ724qCuaIcCjCYv2f+Y7xg4nI 9zRSmh2NqZ5QjHeAiU2VV2T0FwZVx1p26fbMPjbQoXTq5ih9/1WCLnsfvqWDvMIo j0RXbeM7drRuducms7tdSH+E+IoIZzOUx/a6luZ+UFfFkTmMN4WFXCSpl384l03W 7favaBYBI8D/imi9Lv2JigAJntcY8kFQSmyR63C77JKZUueInl1DP0W8SaF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWtqoBPYqLLFpdSnyRrxL32UAuswHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLV5iw5nTQIv66XrZynizw22hLT4qZkIBhN 50rDhbOiOnJhQN5DMdkliotj0xIdm76ao4bXpToPzP7VtTFD467NhncPL3+7KMvK fl1yAjT4cnF3lmgQ43O48vDdaQyCbgdWA4D1+hV4aIokS0NQR68ABpA9MGHVHpUg 8nntIcVmsyKBwKwCgZ3SMG//30gUaQTvyTNM1Srcz4Rm9E/yhxIPFtrYRi/E7po+ qnrp+mXZHu/353V0648D4BTJIaY4KQsTQBCzBC15mxNh9RIxrXONLyZVecBb3/rz +G0DHEBgAz1FLwEdGilRe1OUwmgzlO33OrX5dJdHAUcqcW9Ydpw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:47 2025 by rpki-client