$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: OiY8LTNPgN3mTwf4+7uO1atH6DFcQnAktGuLAD/9HWo= Subject key identifier: B3:48:1A:C9:5E:0A:B6:CF:DA:D7:D9:DF:D1:31:CD:34:53:A5:B7:35 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 17F7168AADAFA963119D668B8C2C481B3AEF8715 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 0426 Signing time: Mon 17 Feb 2025 12:02:00 +0000 Manifest this update: Mon 17 Feb 2025 11:57:00 +0000 Manifest next update: Thu 20 Feb 2025 16:23:00 +0000 Files and hashes: 1: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: tyjHQlJ6K7Cc46M4iUXtniqMgebt2zgh6GjH5fAgjto=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=) 3: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 16:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f7:16:8a:ad:af:a9:63:11:9d:66:8b:8c:2c:48:1b:3a:ef:87:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Feb 17 11:57:00 2025 GMT Not After : Feb 20 16:23:00 2025 GMT Subject: CN=B3481AC95E0AB6CFDAD7D9DFD131CD3453A5B735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:54:d2:34:8e:c3:1b:a3:85:0f:b6:b1:70: c9:81:73:0e:0b:5b:4d:77:15:de:79:b3:b5:04:b0: ee:5a:3f:ff:18:00:f8:1e:7a:99:db:c3:18:2e:b9: da:cf:d1:08:54:e0:53:f1:bf:89:6e:9a:07:fc:53: 5b:82:98:8f:cf:61:17:af:bc:96:1b:5b:7e:75:67: cf:b3:3d:b4:ab:25:13:b3:b2:78:a6:eb:95:e2:16: 5a:94:b8:7f:2a:ab:c6:f0:bf:44:61:08:02:ad:7d: c1:79:77:d9:b0:c4:5d:dd:24:79:ce:2f:b1:a7:8a: 6d:86:75:82:2e:45:97:71:ec:75:93:39:78:08:f6: 15:fc:80:dc:f2:f4:fe:22:c3:0e:89:b8:1c:7c:88: 0f:e6:d1:47:95:22:6a:c7:2b:50:65:ae:41:3a:4c: 24:45:86:92:d6:dc:dc:74:70:ca:8f:ac:03:c2:b4: e4:d2:c2:9c:5d:2f:5a:d7:04:66:0e:6a:fc:4d:37: 9a:1c:4d:b7:55:03:32:9c:dd:43:0d:6c:0e:c4:58: b8:cc:60:17:34:dc:9c:f0:a7:fe:e1:fb:90:69:95: bc:dc:ff:ad:46:c5:77:61:21:57:f5:f0:a8:8f:e5: 4d:b4:e7:30:95:a6:34:10:ae:ce:ae:6e:09:10:2e: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:48:1A:C9:5E:0A:B6:CF:DA:D7:D9:DF:D1:31:CD:34:53:A5:B7:35 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b0:ac:71:8b:70:3e:d1:56:44:0b:9e:db:34:b3:f9:e0:ed: fd:92:51:c4:5d:e2:41:b0:bb:c6:a8:67:e2:9f:90:9b:60:bb: 5e:eb:c0:2f:09:d4:5f:9a:0e:57:14:79:58:17:5e:6b:5a:c5: 11:42:0d:c9:f3:cd:b6:39:43:b0:4e:99:5f:0d:3a:d5:ac:bc: 0e:0e:3c:86:97:4c:c7:36:95:74:ae:7e:f6:dd:23:e9:e0:5a: 3e:c5:91:4a:1e:03:80:b1:2c:5e:46:c5:5b:50:91:4c:3b:ce: 03:3b:85:42:83:6e:bf:1c:d1:1d:ed:02:1d:e0:b8:5a:00:6e: 8c:19:98:a8:b8:5e:fe:8b:fe:07:ba:01:99:df:d2:b6:91:18: da:72:46:ee:e3:0d:6e:1f:71:87:04:22:a4:e2:fc:02:6d:85: 9d:66:8f:ac:6a:e0:93:70:56:dd:13:87:bd:e4:bb:58:e2:9c: 51:fd:f8:92:1b:39:52:c5:92:70:b6:59:be:96:0d:a7:9b:a3: 11:8c:ac:77:cd:df:77:f4:ff:e1:85:0d:e5:de:70:7a:12:86: 4d:4a:25:04:a7:a0:f6:c6:c9:99:ba:b5:b0:df:66:62:5a:8b: ed:34:f0:5a:11:5f:cb:1b:4e:42:6d:66:1d:d6:26:62:33:a4: 1c:88:55:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/cWiq2vqWMRnWaLjCxIGzrvhxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTAyMTcxMTU3MDBaFw0yNTAyMjAxNjIzMDBaMDMxMTAvBgNV BAMTKEIzNDgxQUM5NUUwQUI2Q0ZEQUQ3RDlERkQxMzFDRDM0NTNBNUI3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjVTSNI7DG6OFD7axcMmBcw4L W013Fd55s7UEsO5aP/8YAPgeepnbwxguudrP0QhU4FPxv4lumgf8U1uCmI/PYRev vJYbW351Z8+zPbSrJROzsnim65XiFlqUuH8qq8bwv0RhCAKtfcF5d9mwxF3dJHnO L7Gnim2GdYIuRZdx7HWTOXgI9hX8gNzy9P4iww6JuBx8iA/m0UeVImrHK1BlrkE6 TCRFhpLW3Nx0cMqPrAPCtOTSwpxdL1rXBGYOavxNN5ocTbdVAzKc3UMNbA7EWLjM YBc03Jzwp/7h+5Bplbzc/61GxXdhIVf18KiP5U205zCVpjQQrs6ubgkQLvjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs0gayV4Kts/a19nf0THNNFOltzUwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHewrHGLcD7RVkQLnts0s/ng7f2SUcRd4kGw u8aoZ+KfkJtgu17rwC8J1F+aDlcUeVgXXmtaxRFCDcnzzbY5Q7BOmV8NOtWsvA4O PIaXTMc2lXSufvbdI+ngWj7FkUoeA4CxLF5GxVtQkUw7zgM7hUKDbr8c0R3tAh3g uFoAbowZmKi4Xv6L/ge6AZnf0raRGNpyRu7jDW4fcYcEIqTi/AJthZ1mj6xq4JNw Vt0Th73ku1jinFH9+JIbOVLFknC2Wb6WDaeboxGMrHfN33f0/+GFDeXecHoShk1K JQSnoPbGyZm6tbDfZmJai+008FoRX8sbTkJtZh3WJmIzpByIVTM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:25:09 2025 by rpki-client