$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: QM6SUysnJ04ohazveDdldbPg/AtGkKJJMMD++ttQvPk= Subject key identifier: 18:77:B5:2F:1D:9C:FB:84:EB:28:5E:29:D8:56:D3:E8:0E:3D:EC:FA Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 0D59F156EEDEA465AF42E004C79749E6AE50C7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 01AF Signing time: Sun 01 Jun 2025 13:30:49 +0000 Manifest this update: Sun 01 Jun 2025 13:25:49 +0000 Manifest next update: Wed 04 Jun 2025 20:24:49 +0000 Files and hashes: 1: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: j2g+OwI2GFCTDxt0kKv5C+UYOxrrb0xHYJN0qJS/GcI=) 2: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:59:f1:56:ee:de:a4:65:af:42:e0:04:c7:97:49:e6:ae:50:c7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Jun 1 13:25:49 2025 GMT Not After : Jun 4 20:24:49 2025 GMT Subject: CN=1877B52F1D9CFB84EB285E29D856D3E80E3DECFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:ed:8f:07:db:0a:d1:2f:88:b4:d4:aa:69: 4c:ec:0e:1e:36:85:c5:59:93:cf:24:a3:c0:0b:f3: e7:57:c6:63:c3:e7:3c:7a:82:35:95:89:84:7d:d2: a9:3d:6a:5f:48:e7:c7:06:bc:a1:1a:6a:8a:8b:97: e6:fe:ea:ec:19:08:97:95:89:ad:59:19:9e:09:be: e1:79:9e:2b:54:96:ae:87:4c:f7:f4:dc:dc:af:5f: 75:f1:c0:f9:a4:17:d9:10:fb:a3:61:2a:e1:c0:f9: c3:3c:61:bc:95:7e:50:a4:05:d2:70:d9:ac:b5:92: e2:be:a8:6f:1c:ff:eb:6d:df:74:cf:00:5f:75:2a: 2f:a2:5e:8f:4e:4f:92:20:02:41:b0:25:da:f3:b5: 46:96:b9:35:c3:ff:d2:48:34:5e:32:8e:cd:f3:c5: 4e:36:4b:8c:7e:1d:de:23:7f:b2:eb:4c:3b:27:66: 9f:2b:94:bf:f2:bc:eb:12:4a:5f:7b:0d:56:d8:5b: 7f:ae:c7:a6:aa:4e:f7:59:93:40:42:88:9f:89:a5: b1:b1:51:fd:98:da:b7:b0:29:38:4a:0e:1c:fb:45: 43:2b:d2:f2:3c:07:a7:a8:7e:c9:73:0c:85:e8:5f: 51:db:80:3c:98:dc:45:6e:d0:e3:a0:48:59:58:47: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:77:B5:2F:1D:9C:FB:84:EB:28:5E:29:D8:56:D3:E8:0E:3D:EC:FA X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:eb:6c:5b:cb:43:f1:e7:8c:99:df:63:ed:9b:02:81:b9:c4: f2:a5:5d:01:ea:ad:31:86:34:ec:2d:55:f4:15:cd:2b:89:97: fb:85:99:06:35:ab:80:f9:1f:ab:f4:c4:ea:8a:95:27:c1:c5: 89:e0:fb:e9:1a:b4:3f:4f:e8:32:ba:7b:a6:ce:cc:63:a2:ef: a6:a3:24:3d:cf:27:f8:89:9d:bd:73:7a:a9:68:f4:bf:8b:9d: 0a:1c:90:37:0e:5d:77:90:ba:8a:c1:f8:3e:a3:23:a5:ae:9c: ce:d8:6a:cf:da:2e:80:78:af:18:82:3f:77:57:c3:87:c1:e5: 53:fd:4e:90:f0:6e:e3:fe:1e:64:1f:a6:0f:a9:ae:3e:55:da: 17:72:57:3c:ac:12:1d:2c:51:32:5c:2d:cd:81:17:4a:80:91: 66:1a:b9:5c:f0:2a:fe:ab:db:f4:3e:4a:f8:a8:b5:76:51:fe: e6:14:b4:17:47:96:f4:bc:d3:d4:b8:4a:28:9c:fa:84:bd:93: de:e4:24:fe:20:7c:5a:fe:fc:9e:c5:39:dd:fe:b4:c4:f8:d7: b9:49:44:4d:b2:7c:89:79:d0:8c:dd:43:7c:bd:d1:21:f1:a7: a6:1d:40:4d:34:22:32:34:98:66:e0:94:b9:e8:94:6d:ec:81: f3:72:96:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVnxVu7epGWvQuAEx5dJ5q5Qx7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA2MDExMzI1NDlaFw0yNTA2MDQyMDI0NDlaMDMxMTAvBgNV BAMTKDE4NzdCNTJGMUQ5Q0ZCODRFQjI4NUUyOUQ4NTZEM0U4MEUzREVDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdO2PB9sK0S+ItNSqaUzsDh42 hcVZk88ko8AL8+dXxmPD5zx6gjWViYR90qk9al9I58cGvKEaaoqLl+b+6uwZCJeV ia1ZGZ4JvuF5nitUlq6HTPf03NyvX3XxwPmkF9kQ+6NhKuHA+cM8YbyVflCkBdJw 2ay1kuK+qG8c/+tt33TPAF91Ki+iXo9OT5IgAkGwJdrztUaWuTXD/9JINF4yjs3z xU42S4x+Hd4jf7LrTDsnZp8rlL/yvOsSSl97DVbYW3+ux6aqTvdZk0BCiJ+JpbGx Uf2Y2rewKThKDhz7RUMr0vI8B6eofslzDIXoX1HbgDyY3EVu0OOgSFlYR79NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHe1Lx2c+4TrKF4p2FbT6A497PowHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvrbFvLQ/HnjJnfY+2bAoG5xPKlXQHqrTGG NOwtVfQVzSuJl/uFmQY1q4D5H6v0xOqKlSfBxYng++katD9P6DK6e6bOzGOi76aj JD3PJ/iJnb1zeqlo9L+LnQockDcOXXeQuorB+D6jI6WunM7Yas/aLoB4rxiCP3dX w4fB5VP9TpDwbuP+HmQfpg+prj5V2hdyVzysEh0sUTJcLc2BF0qAkWYauVzwKv6r 2/Q+SviotXZR/uYUtBdHlvS809S4Siic+oS9k97kJP4gfFr+/J7FOd3+tMT417lJ RE2yfIl50IzdQ3y90SHxp6YdQE00IjI0mGbglLnolG3sgfNylu8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:27 2025 by rpki-client