$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: ZzA52GcksMAGoOHqhY8Rg0bTvQ3AwY62iFDd83fuA/I= Subject key identifier: A8:FD:24:5D:31:B1:69:2F:46:98:90:73:4D:EA:AA:45:6C:5B:C2:5B Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 36AA77C4E7DC9E45DA68682179323EB0D75312F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 0186 Signing time: Tue 08 Apr 2025 02:40:43 +0000 Manifest this update: Tue 08 Apr 2025 02:35:43 +0000 Manifest next update: Fri 11 Apr 2025 10:07:43 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa (hash: 9DtyQOYPh7GLf+XRfVmsdw0aXiZ8+Ri4mucHCX341ag=) 2: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: 6jrVzTlKOLtm0N+odkEo7ZV6T4ISwfDWBiLQQU1iZmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 10:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:aa:77:c4:e7:dc:9e:45:da:68:68:21:79:32:3e:b0:d7:53:12:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Apr 8 02:35:43 2025 GMT Not After : Apr 11 10:07:43 2025 GMT Subject: CN=A8FD245D31B1692F469890734DEAAA456C5BC25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:65:0e:7c:ca:f0:10:dd:f5:39:c3:13:5c: 76:74:1e:a6:5f:08:25:78:db:7d:e3:9d:5d:96:6f: b5:9e:fa:72:21:50:bd:55:d2:f8:71:03:cf:1a:37: ed:b9:17:bb:a8:0f:82:80:e7:3e:39:56:c9:b6:33: e6:fd:72:e1:45:f1:5e:56:99:e2:cc:fc:06:23:b4: 2c:30:2a:d0:e6:00:b8:ac:c5:03:b1:f6:9b:24:3e: 79:43:e4:c9:1b:a0:d6:8c:a0:5c:3a:e8:df:df:24: d0:94:87:20:0e:8e:37:1a:c9:f9:0f:d9:bf:db:ab: 25:7e:27:f7:15:0d:17:37:0d:8c:09:4a:8a:86:10: 06:58:e2:24:87:9b:06:7a:f0:9c:87:c3:43:ed:f2: d3:9e:31:db:e1:01:1c:fb:44:e4:1e:6d:f4:54:5f: 19:5c:bc:bd:95:43:33:a1:fa:f7:44:ec:1e:7f:e8: 0b:04:c7:8c:e2:3d:be:b9:90:aa:cf:71:91:c6:68: 7f:c3:64:78:7c:36:cf:3a:ac:3b:a6:3d:16:b1:4d: d2:21:09:09:af:95:4c:cb:c8:5e:02:63:22:e5:95: 82:f7:93:74:8a:2f:ae:98:59:76:b9:13:ee:0c:9f: d4:f2:0e:4e:ea:8c:53:28:19:6c:ba:1f:79:0a:b6: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:24:5D:31:B1:69:2F:46:98:90:73:4D:EA:AA:45:6C:5B:C2:5B X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8e:0a:75:44:24:a7:1b:42:3a:6c:84:0f:f9:8a:e9:e5:ee: 78:5d:25:c3:4b:b3:d8:6b:05:61:a9:95:ca:a4:ef:cf:d0:f4: d7:8f:59:7d:d4:6d:42:0c:b3:9b:f1:f4:48:18:50:db:9d:1f: f5:d3:d7:50:91:be:2c:2e:e8:c1:d4:58:30:9a:9c:a4:92:1c: 31:14:64:60:d9:db:93:5b:c9:2a:5a:b5:8c:86:d8:d4:ef:cd: c5:f5:06:9f:db:fa:4b:86:56:33:0a:35:bc:27:68:b7:78:07: 8c:57:c6:e3:67:c4:f3:5f:30:b6:10:c4:97:aa:6f:83:75:40: 75:f9:23:2b:58:e7:63:29:2e:ce:8a:76:e1:89:a8:6c:32:ab: b0:ee:e9:7e:1e:fd:12:f7:0e:15:21:20:f8:99:3d:ac:82:c4: 9c:56:31:57:17:ef:b0:ee:aa:8f:07:99:20:fe:6c:36:90:83: 2f:58:f5:3b:ed:c1:4f:d3:11:b1:c5:3b:e4:2f:42:fb:e1:9b: b4:4c:2e:e6:0e:18:5a:6b:49:b1:d0:15:af:76:d4:01:ea:2e: 20:db:6f:81:4b:d8:43:29:3b:6f:db:5a:95:b1:bf:7b:8a:aa: 19:56:a4:15:25:0e:c5:c8:4e:36:f7:bf:d4:51:6a:1c:7f:af: 5d:07:d8:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqp3xOfcnkXaaGgheTI+sNdTEvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA0MDgwMjM1NDNaFw0yNTA0MTExMDA3NDNaMDMxMTAvBgNV BAMTKEE4RkQyNDVEMzFCMTY5MkY0Njk4OTA3MzRERUFBQTQ1NkM1QkMyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDds2UOfMrwEN31OcMTXHZ0HqZf CCV4233jnV2Wb7We+nIhUL1V0vhxA88aN+25F7uoD4KA5z45Vsm2M+b9cuFF8V5W meLM/AYjtCwwKtDmALisxQOx9pskPnlD5MkboNaMoFw66N/fJNCUhyAOjjcayfkP 2b/bqyV+J/cVDRc3DYwJSoqGEAZY4iSHmwZ68JyHw0Pt8tOeMdvhARz7ROQebfRU XxlcvL2VQzOh+vdE7B5/6AsEx4ziPb65kKrPcZHGaH/DZHh8Ns86rDumPRaxTdIh CQmvlUzLyF4CYyLllYL3k3SKL66YWXa5E+4Mn9TyDk7qjFMoGWy6H3kKtsDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqP0kXTGxaS9GmJBzTeqqRWxbwlswHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuOCnVEJKcbQjpshA/5iunl7nhdJcNLs9hr BWGplcqk78/Q9NePWX3UbUIMs5vx9EgYUNudH/XT11CRviwu6MHUWDCanKSSHDEU ZGDZ25NbySpatYyG2NTvzcX1Bp/b+kuGVjMKNbwnaLd4B4xXxuNnxPNfMLYQxJeq b4N1QHX5IytY52MpLs6KduGJqGwyq7Du6X4e/RL3DhUhIPiZPayCxJxWMVcX77Du qo8HmSD+bDaQgy9Y9TvtwU/TEbHFO+QvQvvhm7RMLuYOGFprSbHQFa921AHqLiDb b4FL2EMpO2/bWpWxv3uKqhlWpBUlDsXITjb3v9RRahx/r10H2Jo= -----END CERTIFICATE-----Generated at Tue Apr 8 14:02:15 2025 by rpki-client