$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: 1/3o8bZiEYl1HSKlBOFIu3oyUhYGEx648MyCHwRCTVo= Subject key identifier: 32:56:20:B6:5F:D1:1A:8E:50:51:DE:77:A4:BD:BE:52:AA:87:07:E3 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 231006D79C2859443887E651E16561DC57C5BB16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 12:31:19 +0000 Manifest this update: Wed 04 Jun 2025 12:26:19 +0000 Manifest next update: Sat 07 Jun 2025 16:19:19 +0000 Files and hashes: 1: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: PzfsZAc3MKh+rSpgUwtT/PLJS/npEUcuhtIEz+uGgPM=) 2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 3: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:10:06:d7:9c:28:59:44:38:87:e6:51:e1:65:61:dc:57:c5:bb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Jun 4 12:26:19 2025 GMT Not After : Jun 7 16:19:19 2025 GMT Subject: CN=325620B65FD11A8E5051DE77A4BDBE52AA8707E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:bb:e1:36:7e:2c:22:2b:33:9c:d1:8d:3e: 6b:a2:16:a8:f7:98:46:e6:42:2d:89:24:f1:e6:16: 2a:46:ad:52:2c:e6:c4:6c:2b:6f:9d:24:f1:82:74: 8b:b2:67:90:a8:fc:92:71:52:db:b3:25:bb:47:e3: b3:d0:85:7b:33:60:d1:d0:c8:1a:d6:1c:5b:80:be: da:53:00:a1:41:bd:7a:ef:4c:5a:c0:a6:ad:8f:8a: 3b:f1:17:1e:6d:ee:0d:fc:52:4b:85:68:6a:f0:e0: fc:a2:c4:74:56:f2:ef:d1:d3:78:dc:ef:ee:07:d8: 37:be:d6:e7:c7:f3:cb:3a:e7:8f:cf:11:54:9e:6d: 88:e1:b6:8f:0a:0e:72:b2:28:62:70:92:6d:97:d1: 5a:ec:76:c5:6e:6c:e0:24:01:f0:e5:3f:71:28:6b: 02:d9:57:f1:00:54:48:16:f1:50:53:48:94:3d:96: 72:be:53:e2:9d:f3:37:21:c7:8f:ed:a8:94:10:94: 39:6e:55:86:e3:33:a6:a0:2e:e0:3e:ef:45:97:06: fd:64:eb:be:84:a9:21:e6:d0:91:23:e9:e6:e9:31: 35:a9:1e:4f:22:05:90:5b:93:ec:8f:33:f7:f1:cb: 40:4f:97:1d:8b:4d:61:6d:ce:de:67:24:d7:80:e7: f5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:20:B6:5F:D1:1A:8E:50:51:DE:77:A4:BD:BE:52:AA:87:07:E3 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:30:bd:b9:d9:96:00:ee:23:76:72:6c:b4:7a:8a:fa:72:04: 94:57:32:bf:e5:e0:e0:45:9f:11:5a:2a:b2:13:ad:72:4e:ef: 8c:a9:b3:a9:70:b4:2a:03:3e:d9:c8:af:cd:10:f5:43:88:75: 43:6e:55:ba:b3:05:d1:55:9e:c3:27:2a:74:db:47:e1:4d:1c: 43:a5:7a:a6:df:87:77:96:8b:3a:2e:64:d1:02:79:08:cc:3f: 1f:eb:b0:95:47:0e:9e:b5:aa:9a:b9:3a:df:a7:4e:77:02:0c: 24:76:f1:ff:d5:6c:d9:1a:09:87:ab:f0:29:78:1a:9a:96:2f: 6b:bc:81:d0:94:c8:05:21:52:1f:f5:8a:cb:fe:3f:9b:d1:bd: 71:42:53:e2:fa:c7:72:7d:3c:5e:0f:c9:c2:76:40:98:36:99: 96:bf:d9:62:07:23:d2:d7:b1:5f:cc:93:d1:81:88:9c:41:2c: e0:f7:3a:32:ea:04:ee:cf:56:ca:64:1a:ad:f1:4f:e9:67:67: 47:b4:4b:a5:99:aa:6a:99:8b:fb:d4:1d:cc:74:ef:29:e2:77: 60:bb:69:1a:0f:85:b5:67:fe:e6:50:32:5f:2c:50:ac:ac:b3: 11:62:4e:18:5c:ac:e5:ca:60:81:65:59:44:7d:7d:29:af:14: 9e:92:96:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxAG15woWUQ4h+ZR4WVh3FfFuxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA2MDQxMjI2MTlaFw0yNTA2MDcxNjE5MTlaMDMxMTAvBgNV BAMTKDMyNTYyMEI2NUZEMTFBOEU1MDUxREU3N0E0QkRCRTUyQUE4NzA3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXrvhNn4sIisznNGNPmuiFqj3 mEbmQi2JJPHmFipGrVIs5sRsK2+dJPGCdIuyZ5Co/JJxUtuzJbtH47PQhXszYNHQ yBrWHFuAvtpTAKFBvXrvTFrApq2PijvxFx5t7g38UkuFaGrw4PyixHRW8u/R03jc 7+4H2De+1ufH88s654/PEVSebYjhto8KDnKyKGJwkm2X0VrsdsVubOAkAfDlP3Eo awLZV/EAVEgW8VBTSJQ9lnK+U+Kd8zchx4/tqJQQlDluVYbjM6agLuA+70WXBv1k 676EqSHm0JEj6ebpMTWpHk8iBZBbk+yPM/fxy0BPlx2LTWFtzt5nJNeA5/UpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMlYgtl/RGo5QUd53pL2+UqqHB+MwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMwvbnZlgDuI3ZybLR6ivpyBJRXMr/l4OBF nxFaKrITrXJO74yps6lwtCoDPtnIr80Q9UOIdUNuVbqzBdFVnsMnKnTbR+FNHEOl eqbfh3eWizouZNECeQjMPx/rsJVHDp61qpq5Ot+nTncCDCR28f/VbNkaCYer8Cl4 GpqWL2u8gdCUyAUhUh/1isv+P5vRvXFCU+L6x3J9PF4PycJ2QJg2mZa/2WIHI9LX sV/Mk9GBiJxBLOD3OjLqBO7PVspkGq3xT+lnZ0e0S6WZqmqZi/vUHcx07ynid2C7 aRoPhbVn/uZQMl8sUKyssxFiThhcrOXKYIFlWUR9fSmvFJ6Slnk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:58 2025 by rpki-client