$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: jK+zb6oxZCxcgJS+fQ+tTeuXASWSyqjg5P1snjGMF24= Subject key identifier: DA:DB:7C:52:4D:7E:08:F9:FB:7B:87:B0:C9:AF:B2:01:1B:17:78:79 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 57DB37284CAF782EE8268567CAB05181A482F50C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 9A Signing time: Tue 03 Jun 2025 13:21:58 +0000 Manifest this update: Tue 03 Jun 2025 13:16:58 +0000 Manifest next update: Fri 06 Jun 2025 16:13:58 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: n/S9iLjf/db4N9lGK/Mn4hEs8qiqHnpDqwrVtlXCtCQ=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: LkrFwqOPpzs5zV0cqzRbshMZbX2t2BtkJfrTGNSvUxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:db:37:28:4c:af:78:2e:e8:26:85:67:ca:b0:51:81:a4:82:f5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Jun 3 13:16:58 2025 GMT Not After : Jun 6 16:13:58 2025 GMT Subject: CN=DADB7C524D7E08F9FB7B87B0C9AFB2011B177879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:91:41:97:c7:63:df:c4:77:bc:04:60:c8: 88:c7:27:bc:3b:5c:9e:67:80:29:7e:d2:93:73:77: 12:4a:59:6d:cd:14:6f:08:af:cf:73:ab:8f:5c:70: 63:df:e8:a9:51:dd:29:0b:b9:c1:5d:c4:ac:18:ba: 64:a2:5e:dd:29:e8:7a:3f:ab:6c:95:a4:05:d4:b7: ef:1e:be:c8:99:c0:3b:91:7c:bb:f1:43:de:9a:be: 4d:07:ae:4d:a5:4d:f8:44:00:bf:3e:b0:38:ed:61: 01:44:24:b4:a2:50:19:57:35:19:a2:b9:92:b0:83: a2:7a:db:3b:e0:0b:f9:5b:3b:e0:15:a3:f4:12:59: d0:f8:6a:c2:d2:c4:c4:ba:38:b9:b0:3c:73:8f:96: 97:b6:dc:50:7a:a5:e8:ac:18:85:a6:6e:5c:84:5b: 00:2a:12:b5:85:bb:14:8c:da:05:c9:de:a8:9e:df: 53:22:08:9c:c1:86:d6:33:0f:42:eb:3e:79:d8:46: 2c:4d:25:d8:09:f5:c3:50:4d:db:cb:4c:40:94:5d: 14:8d:8d:2a:d8:00:7b:0b:aa:af:f5:a2:d9:6e:1e: 3b:57:69:47:7d:2c:ed:00:c8:fe:20:1c:2b:81:23: 85:53:15:45:ef:95:79:27:1d:f0:f8:6a:c8:bc:74: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DB:7C:52:4D:7E:08:F9:FB:7B:87:B0:C9:AF:B2:01:1B:17:78:79 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:26:45:f0:87:d9:50:f3:05:cb:db:61:9e:d0:d4:97:31:78: 2e:aa:e1:50:0c:fc:c9:de:3d:21:dc:cc:3c:a3:81:77:aa:f9: 33:63:6c:d2:a5:e5:7a:4e:15:85:62:af:10:d1:77:31:ed:15: 27:d5:95:e8:2b:2d:64:34:e4:c8:0c:b8:b7:2a:46:d3:ce:8f: b8:72:bd:c4:23:b0:2f:86:97:c0:cf:9f:a9:26:f1:26:42:e2: 94:47:86:db:0e:5c:d9:75:48:b5:02:b6:d8:98:ca:29:54:d8: 43:e2:cf:27:cf:37:e8:30:fa:ca:6f:47:4f:a1:de:cf:e6:01: bc:c6:3f:68:5d:48:2d:b0:5b:7a:f1:03:a6:84:f4:dd:d7:63: 41:06:53:c9:be:13:92:21:bf:d7:26:07:71:89:57:7a:ee:4e: 82:e0:94:57:e3:e4:f6:fb:f2:9f:17:85:f1:d5:9f:c1:6c:74: c7:4a:d7:9a:df:3c:30:cd:69:4e:cd:d4:6b:84:93:e7:a7:90: 0f:30:91:58:33:cd:13:f1:11:53:96:63:f4:b7:78:3c:75:9f: 38:43:79:e6:41:68:c2:ef:c7:47:8c:28:ab:68:f6:88:bd:c4: 50:2d:ac:77:c6:38:fd:f4:f8:19:30:10:ed:d9:99:80:3a:90: 8a:6d:8a:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9s3KEyveC7oJoVnyrBRgaSC9QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA2MDMxMzE2NThaFw0yNTA2MDYxNjEzNThaMDMxMTAvBgNV BAMTKERBREI3QzUyNEQ3RTA4RjlGQjdCODdCMEM5QUZCMjAxMUIxNzc4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBO5FBl8dj38R3vARgyIjHJ7w7 XJ5ngCl+0pNzdxJKWW3NFG8Ir89zq49ccGPf6KlR3SkLucFdxKwYumSiXt0p6Ho/ q2yVpAXUt+8evsiZwDuRfLvxQ96avk0Hrk2lTfhEAL8+sDjtYQFEJLSiUBlXNRmi uZKwg6J62zvgC/lbO+AVo/QSWdD4asLSxMS6OLmwPHOPlpe23FB6peisGIWmblyE WwAqErWFuxSM2gXJ3qie31MiCJzBhtYzD0LrPnnYRixNJdgJ9cNQTdvLTECUXRSN jSrYAHsLqq/1otluHjtXaUd9LO0AyP4gHCuBI4VTFUXvlXknHfD4asi8dCC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2tt8Uk1+CPn7e4ewya+yARsXeHkwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgmRfCH2VDzBcvbYZ7Q1JcxeC6q4VAM/Mne PSHczDyjgXeq+TNjbNKl5XpOFYVirxDRdzHtFSfVlegrLWQ05MgMuLcqRtPOj7hy vcQjsC+Gl8DPn6km8SZC4pRHhtsOXNl1SLUCttiYyilU2EPizyfPN+gw+spvR0+h 3s/mAbzGP2hdSC2wW3rxA6aE9N3XY0EGU8m+E5Ihv9cmB3GJV3ruToLglFfj5Pb7 8p8XhfHVn8FsdMdK15rfPDDNaU7N1GuEk+enkA8wkVgzzRPxEVOWY/S3eDx1nzhD eeZBaMLvx0eMKKto9oi9xFAtrHfGOP30+BkwEO3ZmYA6kIptiqc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:24 2025 by rpki-client