$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: 9CmfpJ2OkpuDBfhbS6U038JQuykHKmBqYAJvCQSDkqw= Subject key identifier: 49:65:64:93:79:44:2D:B0:BB:31:8A:18:C1:FD:75:6E:95:82:5E:AB Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 6B64190EF81D69D58F9B6D1FFE96F880E4C9C56C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 0195 Signing time: Thu 03 Apr 2025 10:40:49 +0000 Manifest this update: Thu 03 Apr 2025 10:35:49 +0000 Manifest next update: Sun 06 Apr 2025 22:39:49 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: 3uDqvZnJT5MyI7au2L4sLM0Siis5icuIFt4t0Ghtnkg=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:64:19:0e:f8:1d:69:d5:8f:9b:6d:1f:fe:96:f8:80:e4:c9:c5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Apr 3 10:35:49 2025 GMT Not After : Apr 6 22:39:49 2025 GMT Subject: CN=4965649379442DB0BB318A18C1FD756E95825EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:b8:73:f2:25:a6:a6:64:9e:af:27:fb:85: e0:93:e1:17:bf:09:da:5d:e0:3c:70:1d:84:05:50: e0:6c:ed:b7:f4:5c:2f:57:36:de:f1:30:aa:83:8b: 4c:0d:a7:59:cb:9b:c8:3b:50:78:85:7c:db:cd:28: 70:56:a9:48:d5:45:5c:d7:3c:98:5e:7c:b2:45:b7: 4e:f7:80:44:84:a2:9e:d2:0f:9a:b4:9d:f4:7e:72: 2d:ac:49:74:00:0d:a3:5b:1d:56:28:ff:b9:e5:22: d6:a8:90:83:00:a9:7e:a8:a7:3c:77:35:cc:24:79: eb:02:e2:ef:f1:cb:58:a2:21:a4:8c:a3:07:9b:47: 2a:89:9b:65:a3:cb:6e:76:ef:1f:64:ff:8c:f7:68: 82:0f:f3:a5:9c:2a:f2:6b:2d:d9:a4:e4:a3:e1:24: 91:af:e4:5b:5f:b8:c3:37:03:4d:5b:3e:5c:c4:b8: 38:f3:9b:9e:4a:78:25:2c:2b:a0:9b:24:da:16:09: 06:af:88:e1:cd:c1:f6:0c:2b:ee:3b:a7:d9:0c:c4: d3:fa:4f:f2:cd:4c:75:1d:ec:cb:9f:01:12:ea:eb: f0:7d:45:35:d1:7a:b5:4d:22:49:ee:3e:11:02:f1: 28:da:0a:94:08:03:c8:26:c4:cd:b6:a1:9d:54:6e: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:64:93:79:44:2D:B0:BB:31:8A:18:C1:FD:75:6E:95:82:5E:AB X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:31:34:b6:48:f5:1d:19:86:77:33:b4:8d:48:86:02:15:9e: 51:48:59:c6:a8:a2:d3:ed:9e:da:f9:79:b1:2f:f8:27:3a:73: cc:0c:32:97:62:90:b7:91:ad:cd:32:87:5d:a4:b7:75:ed:67: 11:f0:52:c4:85:61:a1:a4:8d:86:4b:3b:da:4a:7e:58:7b:e8: 8d:3e:93:45:73:ef:6a:4a:59:66:70:d7:a2:84:1b:5b:c7:9e: 13:05:8c:80:76:a8:e5:11:64:b0:1f:1b:ea:74:18:81:f9:30: b0:09:82:da:d3:3f:46:34:a5:52:cb:b0:a0:a4:e2:c9:dc:a4: 60:24:2c:57:cc:7e:67:6c:0c:44:71:cd:d4:21:eb:5b:6b:4e: 0c:0e:e9:d7:76:a4:e2:36:e7:c1:60:2a:19:7d:12:6f:f9:e8: 55:c0:c2:81:ea:f0:ff:b6:46:98:6b:9d:5d:87:ea:0c:17:c0: b7:63:d2:75:b6:13:dc:eb:48:59:d5:d6:7c:03:a3:ff:7b:5d: 90:1d:b8:59:45:2b:3f:f4:26:59:cb:8a:b6:c8:bb:45:b6:72: 96:5e:3a:40:b0:46:28:7e:93:2a:71:0d:f6:b9:ca:53:68:60: 14:95:e9:57:f4:ae:00:b4:5d:3a:86:16:28:3a:d6:3e:99:15: 6c:42:50:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2QZDvgdadWPm20f/pb4gOTJxWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA0MDMxMDM1NDlaFw0yNTA0MDYyMjM5NDlaMDMxMTAvBgNV BAMTKDQ5NjU2NDkzNzk0NDJEQjBCQjMxOEExOEMxRkQ3NTZFOTU4MjVFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16rhz8iWmpmSeryf7heCT4Re/ Cdpd4DxwHYQFUOBs7bf0XC9XNt7xMKqDi0wNp1nLm8g7UHiFfNvNKHBWqUjVRVzX PJhefLJFt073gESEop7SD5q0nfR+ci2sSXQADaNbHVYo/7nlItaokIMAqX6opzx3 NcwkeesC4u/xy1iiIaSMowebRyqJm2Wjy2527x9k/4z3aIIP86WcKvJrLdmk5KPh JJGv5FtfuMM3A01bPlzEuDjzm55KeCUsK6CbJNoWCQaviOHNwfYMK+47p9kMxNP6 T/LNTHUd7MufARLq6/B9RTXRerVNIknuPhEC8SjaCpQIA8gmxM22oZ1UbprnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWVkk3lELbC7MYoYwf11bpWCXqswHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwxNLZI9R0ZhncztI1IhgIVnlFIWcaootPt ntr5ebEv+Cc6c8wMMpdikLeRrc0yh12kt3XtZxHwUsSFYaGkjYZLO9pKflh76I0+ k0Vz72pKWWZw16KEG1vHnhMFjIB2qOURZLAfG+p0GIH5MLAJgtrTP0Y0pVLLsKCk 4sncpGAkLFfMfmdsDERxzdQh61trTgwO6dd2pOI258FgKhl9Em/56FXAwoHq8P+2 RphrnV2H6gwXwLdj0nW2E9zrSFnV1nwDo/97XZAduFlFKz/0JlnLirbIu0W2cpZe OkCwRih+kypxDfa5ylNoYBSV6Vf0rgC0XTqGFig61j6ZFWxCUAU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:21 2025 by rpki-client