$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: o4qhc5v4TBB2xx+ZA7HZ7/39LSh7IiZu5BC8bq7dfCg= Subject key identifier: 06:49:CF:BC:8C:32:19:EB:2E:3A:3B:FB:F0:AF:19:9C:88:11:0F:BD Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 581170F0407FB5FF2148BAEA04516DA5FADED818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02BA Signing time: Fri 04 Apr 2025 00:51:48 +0000 Manifest this update: Fri 04 Apr 2025 00:46:48 +0000 Manifest next update: Mon 07 Apr 2025 11:34:48 +0000 Files and hashes: 1: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=) 2: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=) 3: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: hqRiq1pKXxbmOabUl4VSzIgH5KILmRVEBFuGiVtvs5w=) 4: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=) 5: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:11:70:f0:40:7f:b5:ff:21:48:ba:ea:04:51:6d:a5:fa:de:d8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Apr 4 00:46:48 2025 GMT Not After : Apr 7 11:34:48 2025 GMT Subject: CN=0649CFBC8C3219EB2E3A3BFBF0AF199C88110FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:f3:57:59:42:d8:c7:5f:7f:0a:45:87:5e: 04:20:c2:f1:ee:45:42:72:80:f1:b2:a6:fa:b9:d3: 4e:8b:f5:2f:8c:84:b0:5f:8c:97:a2:02:28:c1:a7: 15:20:f0:31:a0:1a:f4:9e:5d:69:02:31:22:cf:ff: c3:e2:02:f1:32:76:5a:30:f7:52:53:4b:b0:7d:95: 39:c5:c4:8b:d7:80:ed:c9:57:13:50:ba:11:64:20: 22:4c:f2:f2:fd:7e:f2:77:d3:34:02:74:50:c7:20: df:0e:28:3a:7a:93:bf:89:ba:cb:72:c9:3c:18:05: 2b:81:3d:27:12:3e:16:81:6f:41:df:01:7a:0a:2d: 1e:68:7e:3e:98:d9:7c:17:fb:08:7a:61:f7:69:d9: 0c:f7:60:20:73:da:7e:0c:f9:52:89:da:07:67:5f: 54:cc:02:89:91:d9:23:5c:4d:82:e4:93:15:1d:f0: fc:73:08:89:f7:49:6c:24:28:55:70:bf:03:e6:80: 35:91:0e:ff:cd:8b:0c:62:58:cd:75:5b:7a:7d:09: a6:79:6f:5a:98:bc:76:3c:5e:af:8f:0a:fa:50:ca: fd:0e:fb:6a:f0:5d:e0:82:43:25:cf:f6:2e:c9:6f: 31:9d:56:17:4d:ff:1d:3d:36:d8:45:6a:76:e2:f8: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:CF:BC:8C:32:19:EB:2E:3A:3B:FB:F0:AF:19:9C:88:11:0F:BD X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:50:2a:7b:a6:43:10:6b:de:06:62:b9:25:c7:8a:05:da:aa: ae:47:9c:e5:32:95:62:21:d6:fa:44:71:b7:ef:44:0a:67:4c: 9b:68:a5:5a:82:67:3e:ff:79:23:96:8b:fd:42:89:92:56:b5: a8:67:b9:56:dd:0f:ff:a1:d1:8c:cb:74:35:a2:7f:eb:78:a4: 4a:98:87:aa:ca:71:f8:8b:97:64:e3:cb:92:75:2d:b5:20:48: 12:0d:a1:45:9f:27:6f:4e:c5:83:68:4c:b5:32:56:38:46:34: b9:b1:24:8d:64:4b:56:8a:8f:49:c0:ff:40:3f:d2:4e:48:eb: eb:67:1a:e5:4b:03:45:71:21:c7:4a:82:28:f4:56:96:2a:73: 50:84:e1:44:22:a0:a6:2e:a7:18:e9:ae:3a:8c:31:b9:ce:32: ed:39:44:3d:97:72:9d:25:33:b7:4f:6c:df:4e:81:1a:72:24: fe:f8:52:be:5d:16:a9:61:3d:54:20:37:75:3b:a2:aa:3b:8d: 6e:4e:b7:9f:40:7c:54:c5:f2:db:e9:ae:b8:fc:df:d5:70:44: d3:be:b8:f5:b1:af:48:28:4d:75:ed:0d:6e:86:19:5e:a5:8d: a0:ee:21:20:38:9b:8e:b6:05:5d:5d:ce:73:e2:b1:d9:0c:8a: 29:7f:a6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBFw8EB/tf8hSLrqBFFtpfre2BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA0MDQwMDQ2NDhaFw0yNTA0MDcxMTM0NDhaMDMxMTAvBgNV BAMTKDA2NDlDRkJDOEMzMjE5RUIyRTNBM0JGQkYwQUYxOTlDODgxMTBGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGf/NXWULYx19/CkWHXgQgwvHu RUJygPGypvq5006L9S+MhLBfjJeiAijBpxUg8DGgGvSeXWkCMSLP/8PiAvEydlow 91JTS7B9lTnFxIvXgO3JVxNQuhFkICJM8vL9fvJ30zQCdFDHIN8OKDp6k7+Justy yTwYBSuBPScSPhaBb0HfAXoKLR5ofj6Y2XwX+wh6Yfdp2Qz3YCBz2n4M+VKJ2gdn X1TMAomR2SNcTYLkkxUd8PxzCIn3SWwkKFVwvwPmgDWRDv/NiwxiWM11W3p9CaZ5 b1qYvHY8Xq+PCvpQyv0O+2rwXeCCQyXP9i7JbzGdVhdN/x09NthFanbi+JCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBknPvIwyGesuOjv78K8ZnIgRD70wHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpQKnumQxBr3gZiuSXHigXaqq5HnOUylWIh 1vpEcbfvRApnTJtopVqCZz7/eSOWi/1CiZJWtahnuVbdD/+h0YzLdDWif+t4pEqY h6rKcfiLl2Tjy5J1LbUgSBINoUWfJ29OxYNoTLUyVjhGNLmxJI1kS1aKj0nA/0A/ 0k5I6+tnGuVLA0VxIcdKgij0VpYqc1CE4UQioKYupxjprjqMMbnOMu05RD2Xcp0l M7dPbN9OgRpyJP74Ur5dFqlhPVQgN3U7oqo7jW5Ot59AfFTF8tvprrj839VwRNO+ uPWxr0goTXXtDW6GGV6ljaDuISA4m462BV1dznPisdkMiil/prQ= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:53 2025 by rpki-client