$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: sDLcpkhriG4/pn2oqyqSQ6GyruSzt0zWcSkNuGFCIDA= Subject key identifier: AC:F3:9B:A1:08:6E:5A:F5:D2:35:94:DB:37:22:5C:5F:63:B3:12:06 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 75C34960F1D6C3A4E3E685802EB5F4E417E5BAF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0443 Signing time: Tue 03 Jun 2025 12:43:43 +0000 Manifest this update: Tue 03 Jun 2025 12:38:43 +0000 Manifest next update: Fri 06 Jun 2025 18:32:43 +0000 Files and hashes: 1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) 2: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: NKXv1I8qUlasOVTqVk9lwzOpE6v/0o2voRLYbaf8ga0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c3:49:60:f1:d6:c3:a4:e3:e6:85:80:2e:b5:f4:e4:17:e5:ba:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Jun 3 12:38:43 2025 GMT Not After : Jun 6 18:32:43 2025 GMT Subject: CN=ACF39BA1086E5AF5D23594DB37225C5F63B31206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:fe:09:5e:fc:1e:a8:15:36:12:e8:a0:36: dd:c8:61:5e:14:77:bd:3b:08:f2:af:bb:02:f3:48: 4a:b9:17:c8:73:15:2c:f5:3b:a1:2b:32:d9:79:ea: ec:b2:d0:1b:0b:90:62:88:1e:f4:6c:96:00:bd:7b: b6:42:84:84:6a:81:98:ff:09:34:9a:ae:35:55:1d: cd:2d:7c:6f:8d:f6:05:ad:af:ba:d0:c8:93:10:f1: 1b:8c:11:2b:90:4d:a9:9b:d1:cc:95:b8:f8:1d:6c: a8:f9:ca:30:97:3b:11:23:54:8e:50:cd:98:36:10: 9b:d3:27:f1:b7:25:ec:3a:29:8a:d1:80:c9:b0:c3: 4b:cd:b2:0c:f8:3c:b9:cd:2c:e2:f3:b7:fb:29:f1: 25:5d:66:80:56:eb:25:34:ab:dc:94:90:d2:f6:b7: 33:db:90:53:0d:80:7b:b7:0d:98:d0:ec:2b:d1:ae: df:94:fe:76:e2:bf:e5:98:f2:14:cd:c6:d9:ec:92: 71:64:31:f1:06:dc:66:25:a2:53:e3:a2:81:9a:11: 29:42:a0:4e:c5:3f:da:9f:b1:ce:00:16:b8:26:d0: 81:00:cc:53:fd:43:56:30:90:e9:36:41:d8:b7:e2: 26:fe:5d:9e:3b:7a:bf:63:45:88:07:da:0d:6f:f6: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:9B:A1:08:6E:5A:F5:D2:35:94:DB:37:22:5C:5F:63:B3:12:06 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:1b:7d:15:6e:eb:b5:69:5e:3a:87:90:cb:d5:16:1e:6b:7d: 54:e7:7e:02:a2:cc:c8:cc:fb:02:36:d6:ce:42:3d:5f:c4:f2: 72:d6:d3:9d:49:47:52:86:a6:97:33:51:9f:a7:9d:c5:bf:72: 9f:7a:91:24:69:74:cf:52:e3:44:e4:d5:16:6a:a1:f2:48:66: 7a:d1:ac:16:54:c1:2b:06:c0:bc:04:8e:d4:17:1a:6f:8c:cc: c9:0b:34:23:aa:9f:7c:e1:0e:33:ff:52:4a:61:30:58:a7:06: 79:47:30:4d:3d:cd:3b:e4:53:4a:51:20:f2:01:24:3d:81:a6: 6a:d6:f7:86:d8:64:e1:59:6c:55:d3:bf:cc:03:52:04:3b:d2: 9c:15:b5:04:44:23:e0:51:ee:2b:31:91:68:9c:5b:b3:cf:4a: af:19:28:8d:e1:41:2f:c5:c8:23:b3:44:77:50:10:b6:1d:f5: fd:0f:a1:3a:a2:07:aa:e9:51:a4:c4:e4:84:d5:e5:90:8b:fa: 84:87:52:f1:a9:59:31:be:73:ef:cd:95:a0:fc:2a:3d:8c:46: a0:71:35:00:eb:49:09:07:a5:d4:0a:a7:b0:78:38:54:4a:2a: 8e:2f:ae:21:51:68:4b:8e:32:c4:48:1a:3c:3d:90:95:ee:d6: 25:87:1b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcNJYPHWw6Tj5oWALrX05BfluvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTA2MDMxMjM4NDNaFw0yNTA2MDYxODMyNDNaMDMxMTAvBgNV BAMTKEFDRjM5QkExMDg2RTVBRjVEMjM1OTREQjM3MjI1QzVGNjNCMzEyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NP4JXvweqBU2EuigNt3IYV4U d707CPKvuwLzSEq5F8hzFSz1O6ErMtl56uyy0BsLkGKIHvRslgC9e7ZChIRqgZj/ CTSarjVVHc0tfG+N9gWtr7rQyJMQ8RuMESuQTamb0cyVuPgdbKj5yjCXOxEjVI5Q zZg2EJvTJ/G3Jew6KYrRgMmww0vNsgz4PLnNLOLzt/sp8SVdZoBW6yU0q9yUkNL2 tzPbkFMNgHu3DZjQ7CvRrt+U/nbiv+WY8hTNxtnsknFkMfEG3GYlolPjooGaESlC oE7FP9qfsc4AFrgm0IEAzFP9Q1YwkOk2Qdi34ib+XZ47er9jRYgH2g1v9u8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPOboQhuWvXSNZTbNyJcX2OzEgYwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwbfRVu67VpXjqHkMvVFh5rfVTnfgKizMjM +wI21s5CPV/E8nLW051JR1KGppczUZ+nncW/cp96kSRpdM9S40Tk1RZqofJIZnrR rBZUwSsGwLwEjtQXGm+MzMkLNCOqn3zhDjP/UkphMFinBnlHME09zTvkU0pRIPIB JD2BpmrW94bYZOFZbFXTv8wDUgQ70pwVtQREI+BR7isxkWicW7PPSq8ZKI3hQS/F yCOzRHdQELYd9f0PoTqiB6rpUaTE5ITV5ZCL+oSHUvGpWTG+c+/NlaD8Kj2MRqBx NQDrSQkHpdQKp7B4OFRKKo4vriFRaEuOMsRIGjw9kJXu1iWHG7g= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:57 2025 by rpki-client