$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: DXOdvoZxkp7+2ZAVAVMDQ/jtJMoUA6/s5gruY3PrFNk= Subject key identifier: C4:B5:09:07:10:63:C6:F2:FC:66:AA:E4:5F:AD:A5:20:C1:71:07:DF Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 52A4C7B613EEB14ED850D6C006E706FE27D2A42B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02D4 Signing time: Mon 02 Jun 2025 23:32:46 +0000 Manifest this update: Mon 02 Jun 2025 23:27:46 +0000 Manifest next update: Fri 06 Jun 2025 01:34:46 +0000 Files and hashes: 1: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=) 2: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=) 3: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: g7XpeXYEZieWA/mXbLT4+VYPcb52PpuGOLb69b/Wvx0=) 4: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=) 5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 01:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:c7:b6:13:ee:b1:4e:d8:50:d6:c0:06:e7:06:fe:27:d2:a4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Jun 2 23:27:46 2025 GMT Not After : Jun 6 01:34:46 2025 GMT Subject: CN=C4B509071063C6F2FC66AAE45FADA520C17107DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:5e:50:88:c8:9a:d8:5f:e7:46:e6:0a:8e: b2:9b:88:f1:6d:24:58:fc:ea:e1:ef:92:11:28:ae: 42:c6:9d:ae:41:86:b8:58:01:a9:3a:c4:dd:b8:ba: 7f:4c:e7:d9:29:50:46:66:77:24:a4:48:21:55:63: 51:d0:46:a0:d3:03:fa:56:3e:3a:c0:89:4e:fe:67: d4:98:35:eb:cd:9b:38:11:a7:c1:b0:6f:c9:26:41: 5f:bc:ad:f5:70:49:f5:d0:1c:11:cc:81:a8:53:84: 95:9b:56:ea:d4:5f:5f:1c:02:c2:ce:bf:d4:e3:23: f9:b8:2c:d5:01:73:82:06:e7:28:d3:1b:92:2f:9b: aa:f9:6c:32:5a:0f:a8:9e:8a:cc:9e:22:97:cf:79: 1b:da:92:73:57:f8:12:b6:77:70:17:92:f0:ed:ec: 7a:c9:c6:04:e7:6a:6c:36:da:11:24:0c:1b:cc:b0: 29:2c:0c:47:90:6d:89:dc:a9:a5:e9:f2:54:b8:34: b6:0b:7a:2b:e8:db:b9:9e:84:3a:27:d1:c5:a5:0b: 70:71:f2:bf:ca:74:e1:51:8c:7d:cb:b3:e6:e9:25: 48:b0:79:ba:35:f1:55:99:5a:9c:5b:3e:d3:f8:ba: 02:33:24:07:b0:51:80:96:eb:0b:9e:c6:98:c3:50: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:09:07:10:63:C6:F2:FC:66:AA:E4:5F:AD:A5:20:C1:71:07:DF X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d0:ae:5a:5f:1f:e0:fc:3a:23:47:15:d6:b8:39:11:d3:ff: 3f:21:8e:6e:20:d3:e6:e9:60:96:4a:54:59:33:18:65:cb:8e: 61:9d:75:ad:65:b9:c1:e1:ff:04:fb:e4:00:3c:89:1d:f7:47: 65:a6:45:06:ea:51:32:21:a6:48:61:7b:b4:7a:33:f1:f4:c1: de:78:91:e8:2f:b7:a5:74:89:da:0c:a1:31:60:f8:eb:ef:e3: 32:d8:4d:b4:8b:b3:9f:28:e9:7a:7a:15:a6:86:fb:55:97:76: cb:0f:ce:5e:21:af:51:63:23:dd:ee:d2:85:85:a5:6b:f2:e8: f0:e7:e4:0a:cd:6d:43:0e:46:d1:7d:83:45:0a:c4:33:1e:82: 4e:17:ed:b9:1b:88:ec:e4:ff:fd:bb:a1:9a:7f:d8:24:4f:03: 2e:82:6a:36:07:ab:68:90:c6:8f:3d:44:2f:aa:67:2a:6d:44: d1:1f:42:1b:a2:db:a3:c6:c3:f1:3b:45:09:c8:34:00:03:57: 91:50:10:10:9d:ac:a0:a5:09:3b:ab:3f:da:62:ac:b9:1d:ba: 19:04:a5:d1:df:05:8e:1d:14:90:07:f4:81:4a:2a:c9:02:1d: 8e:14:75:75:a3:51:2b:dd:85:81:6d:38:0d:55:85:92:11:dd: 4a:80:4e:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqTHthPusU7YUNbABucG/ifSpCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA2MDIyMzI3NDZaFw0yNTA2MDYwMTM0NDZaMDMxMTAvBgNV BAMTKEM0QjUwOTA3MTA2M0M2RjJGQzY2QUFFNDVGQURBNTIwQzE3MTA3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjl5QiMia2F/nRuYKjrKbiPFt JFj86uHvkhEorkLGna5BhrhYAak6xN24un9M59kpUEZmdySkSCFVY1HQRqDTA/pW PjrAiU7+Z9SYNevNmzgRp8Gwb8kmQV+8rfVwSfXQHBHMgahThJWbVurUX18cAsLO v9TjI/m4LNUBc4IG5yjTG5Ivm6r5bDJaD6ieisyeIpfPeRvaknNX+BK2d3AXkvDt 7HrJxgTnamw22hEkDBvMsCksDEeQbYncqaXp8lS4NLYLeivo27mehDon0cWlC3Bx 8r/KdOFRjH3Ls+bpJUiwebo18VWZWpxbPtP4ugIzJAewUYCW6wuexpjDUCT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxLUJBxBjxvL8ZqrkX62lIMFxB98wHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjQrlpfH+D8OiNHFda4ORHT/z8hjm4g0+bp YJZKVFkzGGXLjmGdda1lucHh/wT75AA8iR33R2WmRQbqUTIhpkhhe7R6M/H0wd54 kegvt6V0idoMoTFg+Ovv4zLYTbSLs58o6Xp6FaaG+1WXdssPzl4hr1FjI93u0oWF pWvy6PDn5ArNbUMORtF9g0UKxDMegk4X7bkbiOzk//27oZp/2CRPAy6CajYHq2iQ xo89RC+qZyptRNEfQhui26PGw/E7RQnINAADV5FQEBCdrKClCTurP9pirLkduhkE pdHfBY4dFJAH9IFKKskCHY4UdXWjUSvdhYFtOA1VhZIR3UqATmk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:58 2025 by rpki-client