$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: p3JES6Vb/MSEx00p6FscaVAezl4HoCE2p2Pd+5cu94k= Subject key identifier: A9:BC:DD:18:04:9F:90:59:A9:43:7E:B3:A8:5C:A6:3B:4A:5B:CF:AA Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 5891CCE33C4CABF7B447ED95BE99FEE0945236BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01A1 Signing time: Tue 03 Jun 2025 07:10:46 +0000 Manifest this update: Tue 03 Jun 2025 07:05:46 +0000 Manifest next update: Fri 06 Jun 2025 18:53:46 +0000 Files and hashes: 1: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: zh3AclnZAMqqaqL4sMx7lsQH7NZocSWIlDYkzAwMKa0=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:91:cc:e3:3c:4c:ab:f7:b4:47:ed:95:be:99:fe:e0:94:52:36:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Jun 3 07:05:46 2025 GMT Not After : Jun 6 18:53:46 2025 GMT Subject: CN=A9BCDD18049F9059A9437EB3A85CA63B4A5BCFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:bd:47:24:86:2e:0a:ce:2b:f0:e2:68:bd: ec:5c:b4:6b:54:d8:ce:e9:b0:37:59:b9:64:37:0a: c7:36:0d:34:d6:2c:20:f4:72:d4:bc:0e:ab:b6:2d: f3:54:9d:cf:12:67:c3:6c:d3:47:eb:ae:35:dd:76: 03:1e:ee:ea:19:95:ad:a7:38:8d:91:2e:3b:6b:6e: 77:cf:ad:df:e5:af:57:50:4d:97:78:c1:1f:c6:e2: 87:f8:63:e5:62:a0:23:95:6d:19:10:f6:e1:12:16: c0:69:2f:a1:af:33:c9:41:81:a9:2d:21:0a:82:70: 32:d9:a0:cb:0b:3d:b4:2d:e7:c9:97:23:09:ba:4d: fd:2b:c9:7c:64:2e:c8:bc:c0:d7:be:cf:90:19:62: 4b:6a:1c:25:7e:45:e0:6a:69:94:bf:d5:8a:e0:9b: 2b:17:3f:f6:4c:88:6e:64:01:18:49:4d:97:6a:14: 3a:c0:8f:c8:3a:b1:72:7d:19:68:7f:09:88:86:c0: d2:76:25:d0:70:f7:d6:43:68:95:30:44:9c:f7:5a: 16:6d:50:43:b8:f8:82:b8:1d:2a:45:d0:59:f6:cd: 1c:c0:1f:90:61:3e:7c:3a:a3:90:b7:1e:08:47:35: c6:da:f2:b4:fe:98:ed:29:12:61:1e:f2:c2:9d:31: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BC:DD:18:04:9F:90:59:A9:43:7E:B3:A8:5C:A6:3B:4A:5B:CF:AA X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:46:2b:18:ef:b1:3f:4c:5c:db:39:36:16:7b:49:ed:4c:2e: 65:52:4d:99:0b:e5:c3:d8:c1:9b:68:58:74:dc:2b:9d:26:d8: a0:5f:7e:01:fe:c5:44:5e:f4:75:1a:b3:c2:d7:3e:c6:fc:0f: b5:f2:7d:ee:3f:15:54:11:f5:a1:0f:0a:2f:76:d1:93:64:c2: 00:d6:32:66:91:1d:fa:f0:bd:b7:d9:52:3b:71:8e:e5:38:4b: 55:42:4f:66:d9:3a:fe:26:1c:9f:c5:b6:4d:73:07:a5:cc:ce: 69:d6:af:4e:93:c6:7a:52:31:16:dd:cb:c8:67:be:5b:a2:5e: 1e:2d:60:19:5f:0b:5e:69:c9:a2:09:68:6c:19:11:93:8c:37: b5:a4:29:4b:93:4f:e9:33:1c:45:e3:de:43:26:32:c1:aa:51: 78:a0:0c:78:5f:43:1c:3b:fa:f3:bd:e1:c3:a4:17:0f:57:fc: 93:d5:19:0d:df:71:df:eb:1a:5e:a8:a6:57:f8:44:fe:09:62: 7e:f4:af:e3:32:b7:f3:35:0f:66:fc:c6:78:ba:ae:57:35:e4: 5a:c7:2f:4b:6f:38:4e:d9:48:97:d3:06:d5:71:99:cb:21:be: 87:3e:75:02:1b:e1:55:58:2b:5d:46:59:04:f0:fc:06:57:77: 21:a4:a3:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJHM4zxMq/e0R+2Vvpn+4JRSNrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA2MDMwNzA1NDZaFw0yNTA2MDYxODUzNDZaMDMxMTAvBgNV BAMTKEE5QkNERDE4MDQ5RjkwNTlBOTQzN0VCM0E4NUNBNjNCNEE1QkNGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/L1HJIYuCs4r8OJovexctGtU 2M7psDdZuWQ3Csc2DTTWLCD0ctS8Dqu2LfNUnc8SZ8Ns00frrjXddgMe7uoZla2n OI2RLjtrbnfPrd/lr1dQTZd4wR/G4of4Y+VioCOVbRkQ9uESFsBpL6GvM8lBgakt IQqCcDLZoMsLPbQt58mXIwm6Tf0ryXxkLsi8wNe+z5AZYktqHCV+ReBqaZS/1Yrg mysXP/ZMiG5kARhJTZdqFDrAj8g6sXJ9GWh/CYiGwNJ2JdBw99ZDaJUwRJz3WhZt UEO4+IK4HSpF0Fn2zRzAH5BhPnw6o5C3HghHNcba8rT+mO0pEmEe8sKdMWIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbzdGASfkFmpQ36zqFymO0pbz6owHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBGKxjvsT9MXNs5NhZ7Se1MLmVSTZkL5cPY wZtoWHTcK50m2KBffgH+xURe9HUas8LXPsb8D7Xyfe4/FVQR9aEPCi920ZNkwgDW MmaRHfrwvbfZUjtxjuU4S1VCT2bZOv4mHJ/Ftk1zB6XMzmnWr06TxnpSMRbdy8hn vluiXh4tYBlfC15pyaIJaGwZEZOMN7WkKUuTT+kzHEXj3kMmMsGqUXigDHhfQxw7 +vO94cOkFw9X/JPVGQ3fcd/rGl6oplf4RP4JYn70r+Myt/M1D2b8xni6rlc15FrH L0tvOE7ZSJfTBtVxmcshvoc+dQIb4VVYK11GWQTw/AZXdyGkowQ= -----END CERTIFICATE-----Generated at Thu Jun 5 19:22:24 2025 by rpki-client