$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: 1wojB7mcBmbmztYh2+XSHs1ZI4I80UaC1jP0vHaKBB0= Subject key identifier: E6:C2:B4:19:CB:98:C1:43:12:12:17:C8:2B:C7:C3:7D:59:71:70:82 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 6693C4DC01AA3E206FDE121FE6FDFA255DF8A10D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 04C2 Signing time: Fri 04 Apr 2025 12:42:02 +0000 Manifest this update: Fri 04 Apr 2025 12:37:02 +0000 Manifest next update: Mon 07 Apr 2025 12:43:02 +0000 Files and hashes: 1: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: rsfdocyFpYgLX4xY5BrOVq+dYwcQsrSghMZpqpv7JCY=) 2: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: 9aiJeF03F2zpo2d6gqr5nHFtBKsclixQaw3tnWJ265E=) 3: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: 8FHuasztaiBgjf8vTeP7NOsj9KO7tgGptX2jJQvDg4Q=) 4: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 1UvdjpJuUo4STbRNQdq27HbHQCfkWFnoyv90N7kJ1CM=) 5: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: iRjHonxZNqRpHeZ0vSjogTmxhWUG8ZWyfMHmIt7qmdQ=) 6: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: rSXd2zVNsQfeYhqMwMI59xS1/iLpAqSKWueoy0WyTzo=) 7: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: 2PTof7HgDvQH3uMSjoYHvBJnE/tgljHy1CUnxbc2tLE=) 8: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: aK01biYenKLezQd1JYxPRvNKJKDZxGCWS84l0P9T/2k=) 9: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:93:c4:dc:01:aa:3e:20:6f:de:12:1f:e6:fd:fa:25:5d:f8:a1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Apr 4 12:37:02 2025 GMT Not After : Apr 7 12:43:02 2025 GMT Subject: CN=E6C2B419CB98C143121217C82BC7C37D59717082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:be:3c:03:ff:ad:10:b4:29:f4:ac:d6:96: 98:90:1c:51:a9:fb:38:57:83:f6:eb:a0:c8:73:4f: 8d:86:5f:65:82:1b:62:9d:4a:30:ea:bd:c2:3f:b8: ef:7e:2a:76:ac:17:06:0f:41:a0:12:03:3f:6c:37: 5a:9c:3e:0d:9c:92:fc:05:00:49:34:89:8c:a8:1e: a2:6a:93:ac:c8:93:b9:3c:9b:92:d4:42:06:29:b6: d8:83:ed:5a:4c:41:ec:09:3f:e2:a5:62:bc:ba:e4: 39:ec:3e:bf:df:d7:18:29:28:d5:f6:c4:42:ef:b1: 94:d7:6e:93:4e:fe:33:ea:1c:65:34:4c:c1:a0:b1: cc:81:40:af:8b:dc:8d:05:d6:5a:5d:dd:d6:c0:08: f3:13:38:23:cf:73:d4:10:a0:81:96:85:dc:fd:57: 68:f0:61:9f:78:fd:07:6c:65:b9:b7:89:14:25:9c: fc:ce:1d:b0:27:2b:d0:cf:f6:fc:a8:08:49:58:77: 37:2b:85:82:08:55:ea:0d:d6:fe:7f:fa:e2:d6:26: c5:39:a6:6d:c6:14:8f:46:57:42:3d:55:8e:c5:bd: ae:62:23:75:c5:61:d9:97:1c:28:a4:15:be:5a:bb: 2c:02:92:a2:0e:25:c7:91:e7:3c:ec:c8:6d:5a:d1: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C2:B4:19:CB:98:C1:43:12:12:17:C8:2B:C7:C3:7D:59:71:70:82 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:eb:80:74:14:30:f3:b9:2b:13:30:1f:7c:1f:5f:53:58:e8: 60:ce:5b:a0:d3:7c:3c:1f:5b:fa:e9:eb:f6:9f:af:44:df:d3: 8a:49:94:7c:b0:c9:df:81:89:6f:87:d7:f3:ca:4d:4e:22:96: 57:f0:46:5f:92:38:ed:3a:d4:9a:88:ec:93:57:66:27:c1:de: 42:5d:6f:7d:c8:64:8b:9d:65:38:3e:bf:12:76:32:cb:33:e1: fd:95:f0:bf:79:64:5d:75:d7:59:dc:ef:82:ba:63:51:3d:8b: 58:1f:28:9f:06:04:a5:fd:3b:5b:7e:59:0b:39:c8:44:8b:38: c6:12:1e:45:a4:33:c2:0e:4a:5f:23:2d:75:86:2b:26:3a:55: 21:f0:06:23:4c:04:ec:f8:dc:32:9d:b3:27:32:e9:bd:60:0b: f0:f3:2d:e6:e9:0a:75:82:5e:9f:1c:c8:99:bb:ac:8b:0f:ec: cd:74:f5:88:df:30:08:da:c5:5c:08:f1:63:ed:f0:71:b9:95: 35:7f:af:4d:20:2c:68:8e:44:4e:44:9f:bd:b2:bb:a0:c8:06: 08:66:87:35:6a:c1:f9:23:77:c8:85:78:d7:4f:8d:e7:56:2c: 4d:68:d6:60:5a:15:51:af:c3:ed:7a:75:c5:9e:69:50:f9:e9: bf:ba:a8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpPE3AGqPiBv3hIf5v36JV34oQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA0MDQxMjM3MDJaFw0yNTA0MDcxMjQzMDJaMDMxMTAvBgNV BAMTKEU2QzJCNDE5Q0I5OEMxNDMxMjEyMTdDODJCQzdDMzdENTk3MTcwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHb48A/+tELQp9KzWlpiQHFGp +zhXg/broMhzT42GX2WCG2KdSjDqvcI/uO9+KnasFwYPQaASAz9sN1qcPg2ckvwF AEk0iYyoHqJqk6zIk7k8m5LUQgYpttiD7VpMQewJP+KlYry65DnsPr/f1xgpKNX2 xELvsZTXbpNO/jPqHGU0TMGgscyBQK+L3I0F1lpd3dbACPMTOCPPc9QQoIGWhdz9 V2jwYZ94/QdsZbm3iRQlnPzOHbAnK9DP9vyoCElYdzcrhYIIVeoN1v5/+uLWJsU5 pm3GFI9GV0I9VY7Fva5iI3XFYdmXHCikFb5auywCkqIOJceR5zzsyG1a0SZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5sK0GcuYwUMSEhfIK8fDfVlxcIIwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILrgHQUMPO5KxMwH3wfX1NY6GDOW6DTfDwf W/rp6/afr0Tf04pJlHywyd+BiW+H1/PKTU4illfwRl+SOO061JqI7JNXZifB3kJd b33IZIudZTg+vxJ2Mssz4f2V8L95ZF1111nc74K6Y1E9i1gfKJ8GBKX9O1t+WQs5 yESLOMYSHkWkM8IOSl8jLXWGKyY6VSHwBiNMBOz43DKdsycy6b1gC/DzLebpCnWC Xp8cyJm7rIsP7M109YjfMAjaxVwI8WPt8HG5lTV/r00gLGiORE5En72yu6DIBghm hzVqwfkjd8iFeNdPjedWLE1o1mBaFVGvw+16dcWeaVD56b+6qN4= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:26 2025 by rpki-client