$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: Z+pcTsnzahbvAdBSEC0NzbEf2ZHRUEUbn6PXaodqoY8= Subject key identifier: F6:D1:0F:79:40:9F:B5:6D:47:B5:17:33:6D:0A:EB:85:EA:E9:29:3F Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 255CD6FF585775F1F78FAF721D74B644D29328CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 05:41:17 +0000 Manifest this update: Sat 05 Apr 2025 05:36:17 +0000 Manifest next update: Tue 08 Apr 2025 10:41:17 +0000 Files and hashes: 1: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: clOOS2UHgiK1XdM7aZazMvJvGgOo73bVQrDZ1oe6k8c=) 2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: SE91KCthotRrX/AsP1qesUPqNUCPFEcuGMcgZjQqeBU=) 3: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: camVG8YTRqTweKlcZy8jQk69igR0QMu7Stz+LUnJEDI=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: tetctb3x0jo2tKS9PhsP2mOyqUJEiXGEiR7qL9F7+V4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5c:d6:ff:58:57:75:f1:f7:8f:af:72:1d:74:b6:44:d2:93:28:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Apr 5 05:36:17 2025 GMT Not After : Apr 8 10:41:17 2025 GMT Subject: CN=F6D10F79409FB56D47B517336D0AEB85EAE9293F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:ba:39:fb:d7:b4:8e:11:a9:a0:7b:e5:a0: 4d:a5:2d:a6:1a:99:48:eb:db:7c:dc:df:7c:4c:24: 3b:7f:2d:86:bb:90:e4:45:77:4f:92:f9:4f:d4:11: a0:7f:4e:53:f0:29:cd:eb:05:a5:fa:6d:bc:45:eb: d1:c0:b2:bc:36:a9:00:7f:3e:d8:1c:49:46:01:6b: 62:e4:06:d1:b1:c0:7a:45:cf:5f:26:9b:02:18:70: 06:d0:71:5d:3f:f1:67:77:6e:64:88:d1:59:76:eb: e3:31:56:b6:0d:82:13:80:7a:3a:0d:ff:fd:be:fd: 7c:b1:85:a7:eb:e2:e9:36:96:73:00:eb:30:ab:82: 78:7c:09:7c:fa:05:cb:d9:b9:58:31:e9:eb:2e:53: f8:66:5c:18:14:ee:1e:db:c0:70:b4:9f:d7:2d:ba: 6e:96:29:f9:c6:1c:e6:97:9f:a8:60:ca:b6:f5:f2: 24:1d:6f:3a:99:44:50:58:ea:26:14:ed:e1:99:5a: 01:af:d7:cd:96:fc:0b:47:dc:45:7e:70:8e:33:bf: 4b:d2:43:7c:c6:bc:3f:3d:7b:2b:ad:b4:c6:ec:a6: 8a:a9:86:7b:88:9d:fc:4f:77:57:3f:10:47:41:43: 68:2f:01:3f:96:78:64:50:25:3b:7a:b3:a5:35:04: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:0F:79:40:9F:B5:6D:47:B5:17:33:6D:0A:EB:85:EA:E9:29:3F X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bf:53:3b:84:8a:90:1b:1d:2e:c9:aa:c2:b9:cb:c7:e3:53: 3f:0b:76:6d:40:a6:bf:e8:b8:31:ed:63:20:24:62:18:da:ce: 4e:d4:3e:16:52:f7:b5:fe:de:18:88:75:56:e5:55:9c:f5:85: ec:26:32:2b:d3:ff:4f:f9:1b:5e:b4:ba:22:d1:63:f6:b6:14: e0:97:fd:50:f9:80:1f:05:fd:60:07:40:59:d9:4f:d5:f3:a0: c3:54:3b:e1:50:4e:1f:f9:b9:a9:ef:b5:b7:f3:3f:38:25:2a: cc:5d:98:db:61:2a:ea:83:44:1d:2a:58:65:ca:c3:6d:92:bf: 50:97:24:e9:41:61:e4:e1:1f:d2:51:1e:51:a7:31:f6:70:76: 0c:c4:4e:6e:e9:43:ce:d2:26:a8:b6:8e:55:0c:a7:a2:ac:0e: 18:8d:d3:36:84:68:5d:c8:ab:f8:64:5c:3a:d0:6a:ad:dd:a5: c3:d2:cb:1c:02:a8:07:ec:72:e0:fc:25:4e:9f:26:72:64:14: c9:f9:ca:cc:16:fd:4c:b6:a9:e8:4c:ce:a9:7b:92:43:1c:2b: be:8c:c9:27:5c:36:c6:cf:de:f7:92:15:15:51:02:33:29:d2: f0:9b:4d:34:94:4f:48:5b:07:aa:01:d1:af:c5:3c:13:e3:e8: c9:b0:c7:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVzW/1hXdfH3j69yHXS2RNKTKM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA0MDUwNTM2MTdaFw0yNTA0MDgxMDQxMTdaMDMxMTAvBgNV BAMTKEY2RDEwRjc5NDA5RkI1NkQ0N0I1MTczMzZEMEFFQjg1RUFFOTI5M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWro5+9e0jhGpoHvloE2lLaYa mUjr23zc33xMJDt/LYa7kORFd0+S+U/UEaB/TlPwKc3rBaX6bbxF69HAsrw2qQB/ PtgcSUYBa2LkBtGxwHpFz18mmwIYcAbQcV0/8Wd3bmSI0Vl26+MxVrYNghOAejoN //2+/Xyxhafr4uk2lnMA6zCrgnh8CXz6BcvZuVgx6esuU/hmXBgU7h7bwHC0n9ct um6WKfnGHOaXn6hgyrb18iQdbzqZRFBY6iYU7eGZWgGv182W/AtH3EV+cI4zv0vS Q3zGvD89eyuttMbspoqphnuInfxPd1c/EEdBQ2gvAT+WeGRQJTt6s6U1BDPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9tEPeUCftW1HtRczbQrrherpKT8wHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy/UzuEipAbHS7JqsK5y8fjUz8Ldm1Apr/o uDHtYyAkYhjazk7UPhZS97X+3hiIdVblVZz1hewmMivT/0/5G160uiLRY/a2FOCX /VD5gB8F/WAHQFnZT9XzoMNUO+FQTh/5uanvtbfzPzglKsxdmNthKuqDRB0qWGXK w22Sv1CXJOlBYeThH9JRHlGnMfZwdgzETm7pQ87SJqi2jlUMp6KsDhiN0zaEaF3I q/hkXDrQaq3dpcPSyxwCqAfscuD8JU6fJnJkFMn5yswW/Uy2qehMzql7kkMcK76M ySdcNsbP3veSFRVRAjMp0vCbTTSUT0hbB6oB0a/FPBPj6Mmwx78= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:15 2025 by rpki-client