$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: CHUju8mc0e9l8nn+byBI0ko3Tvdv1Fd54rbFsz51m8U= Subject key identifier: 82:5D:B1:FF:7C:4B:91:13:89:E9:A8:0C:01:76:A8:C8:59:E7:1C:BA Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 0939DB223243514835F61E463E8A11B0C3B2A37F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 7F Signing time: Thu 03 Apr 2025 23:41:00 +0000 Manifest this update: Thu 03 Apr 2025 23:36:00 +0000 Manifest next update: Mon 07 Apr 2025 10:13:00 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: vLAjDs4vgT6nfPi1Z1DF1zKJulwcNgzgUjbYeoJK+Do=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: LkrFwqOPpzs5zV0cqzRbshMZbX2t2BtkJfrTGNSvUxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:39:db:22:32:43:51:48:35:f6:1e:46:3e:8a:11:b0:c3:b2:a3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Apr 3 23:36:00 2025 GMT Not After : Apr 7 10:13:00 2025 GMT Subject: CN=825DB1FF7C4B911389E9A80C0176A8C859E71CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:4a:5b:a5:f8:46:e6:a0:8a:41:2b:2e:d1: c3:46:0b:9d:12:3d:f2:08:cc:4e:35:59:ad:c0:f1: 26:83:97:e2:f6:d6:4c:a6:ed:cf:88:2c:9b:ae:d1: aa:5c:32:29:a5:42:e7:b7:98:f6:a2:b0:e9:72:9a: b5:b2:3c:c9:e0:50:7e:65:53:58:65:18:41:0b:6f: 99:01:63:3a:3d:84:91:73:d3:23:dc:d8:64:7d:7c: d9:01:0a:d9:0a:35:98:a2:42:af:36:a9:39:e1:39: ed:23:d6:da:db:01:12:74:7f:86:6a:ec:cf:03:b6: 1c:8f:5a:7d:34:c3:38:da:58:41:5a:e1:a9:d6:43: db:40:62:14:2a:da:2e:00:58:20:1d:ed:47:da:9d: ec:d3:38:8f:ba:3c:c3:94:63:a0:4b:fd:c5:b6:7b: 94:04:7d:c7:e3:8f:e8:27:46:19:67:2d:ee:0a:87: cf:21:7a:7f:c5:1b:98:dc:89:e7:42:6b:63:39:e0: 95:e2:1e:7b:7a:cc:74:e8:de:55:e2:24:94:6a:10: b9:75:40:30:86:54:61:dc:b9:a6:75:8b:ca:20:d1: 34:3b:cc:4e:a4:22:55:b6:0b:35:d8:a7:d8:01:02: 02:1c:e7:32:5c:6e:28:a2:64:df:7e:c0:60:d8:4e: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:B1:FF:7C:4B:91:13:89:E9:A8:0C:01:76:A8:C8:59:E7:1C:BA X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:47:49:6b:2f:c3:79:bf:38:a7:6a:ba:c4:a1:e5:2f:ac:5f: 10:ec:9c:10:28:aa:2d:0c:df:f8:86:8b:03:54:e4:1d:32:f7: d5:54:5c:05:df:cd:e4:86:0b:7e:86:88:6d:1b:af:7f:94:46: ff:3d:74:6c:2b:42:42:2f:f7:85:11:ad:1b:3a:da:bd:d4:7d: dc:0f:5b:de:bf:18:9a:f9:02:04:e7:f8:72:eb:fa:73:53:58: a8:65:9e:85:df:bb:68:52:dd:96:94:20:c6:04:20:10:f1:08: ba:5d:5b:aa:64:71:57:fe:be:4c:77:51:32:3c:86:bc:dc:01: cc:36:92:80:cd:61:48:34:75:d1:16:87:69:42:af:e8:c9:9b: 9c:43:5c:c3:ea:94:91:67:b4:3f:78:5c:e4:8b:56:2a:2b:ac: 29:ed:78:57:24:22:d8:31:00:b9:b1:71:f8:18:e9:6c:ad:77: 36:84:36:a7:02:8c:70:43:85:0c:07:26:56:cb:a0:1b:98:6f: 1d:60:6d:0d:1a:67:0c:bf:b2:5c:65:b7:14:41:4a:41:e8:61: bf:7e:05:5c:da:82:fb:21:85:31:ce:14:40:c4:66:7f:b4:b8: f7:57:a0:3d:f7:d1:fb:90:94:1b:da:9b:94:49:e4:72:02:14: b8:02:2d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTnbIjJDUUg19h5GPooRsMOyo38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA0MDMyMzM2MDBaFw0yNTA0MDcxMDEzMDBaMDMxMTAvBgNV BAMTKDgyNURCMUZGN0M0QjkxMTM4OUU5QTgwQzAxNzZBOEM4NTlFNzFDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEkpbpfhG5qCKQSsu0cNGC50S PfIIzE41Wa3A8SaDl+L21kym7c+ILJuu0apcMimlQue3mPaisOlymrWyPMngUH5l U1hlGEELb5kBYzo9hJFz0yPc2GR9fNkBCtkKNZiiQq82qTnhOe0j1trbARJ0f4Zq 7M8DthyPWn00wzjaWEFa4anWQ9tAYhQq2i4AWCAd7UfanezTOI+6PMOUY6BL/cW2 e5QEfcfjj+gnRhlnLe4Kh88hen/FG5jciedCa2M54JXiHnt6zHTo3lXiJJRqELl1 QDCGVGHcuaZ1i8og0TQ7zE6kIlW2CzXYp9gBAgIc5zJcbiiiZN9+wGDYTjG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgl2x/3xLkROJ6agMAXaoyFnnHLowHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1HSWsvw3m/OKdqusSh5S+sXxDsnBAoqi0M 3/iGiwNU5B0y99VUXAXfzeSGC36GiG0br3+URv89dGwrQkIv94URrRs62r3UfdwP W96/GJr5AgTn+HLr+nNTWKhlnoXfu2hS3ZaUIMYEIBDxCLpdW6pkcVf+vkx3UTI8 hrzcAcw2koDNYUg0ddEWh2lCr+jJm5xDXMPqlJFntD94XOSLViorrCnteFckItgx ALmxcfgY6WytdzaENqcCjHBDhQwHJlbLoBuYbx1gbQ0aZwy/slxltxRBSkHoYb9+ BVzagvshhTHOFEDEZn+0uPdXoD330fuQlBvam5RJ5HICFLgCLcE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:18 2025 by rpki-client