$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: LC3k46ceyca7zcz0xAiD8W3A10YZHdK9Dqq8mdSUlM0= Subject key identifier: 95:2B:D0:62:89:2F:98:2A:35:19:05:83:09:4E:C5:46:2F:E9:1A:F6 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 53D9A0C04D1C527FBCDBFC767004148F7BD03E16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01B7 Signing time: Wed 12 Mar 2025 11:30:35 +0000 Manifest this update: Wed 12 Mar 2025 11:25:35 +0000 Manifest next update: Sat 15 Mar 2025 19:56:35 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: 78htT/cAPEPhvotCzk7v5c6r/DFuqwu3mCjsCZkBbXI=) 2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: lkOBGNn2AJWIi+TpBDjIZfkm3ctiv119XuzaX4+/4fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 19:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d9:a0:c0:4d:1c:52:7f:bc:db:fc:76:70:04:14:8f:7b:d0:3e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Mar 12 11:25:35 2025 GMT Not After : Mar 15 19:56:35 2025 GMT Subject: CN=952BD062892F982A35190583094EC5462FE91AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:4c:ab:03:ec:3d:b2:57:f3:56:98:a0:17: ac:bc:71:d0:d3:93:9c:ef:37:d3:18:81:b7:f2:3b: 22:6c:dd:17:eb:a1:a4:e6:9a:dc:3c:60:32:21:0a: 68:58:0f:16:4f:37:42:28:6a:b1:d9:b3:43:3c:c5: ff:b0:a4:dd:34:cf:e8:78:96:7d:9e:10:d1:63:b6: 0b:7a:e8:46:da:6e:da:09:a7:75:48:33:e9:5c:dc: ac:06:e9:5a:1e:e3:c8:d6:e3:45:8f:93:93:a1:45: 2d:dc:af:4c:69:a2:51:b0:5f:21:19:72:80:30:60: 7c:c2:2f:ce:7d:30:19:d9:15:26:74:38:2f:93:e9: 2a:19:2c:8d:0e:7c:4f:c9:a8:49:2a:23:58:e3:6d: 09:04:03:37:5f:8c:aa:4e:d7:0d:df:03:75:0d:21: 41:cc:d4:28:18:4b:f0:c6:30:82:ae:2e:2e:ed:c2: 84:67:7e:d0:f5:04:a1:d3:74:ef:03:09:3b:68:fe: 84:92:66:c7:99:1a:b0:6e:5c:66:26:cb:b6:2b:78: 60:29:3c:87:50:5c:e6:3a:4b:fd:e6:6d:51:e8:d9: 1e:37:e5:41:21:98:f6:62:b8:da:df:e6:66:1f:94: 5e:ac:60:b3:ec:a5:26:eb:26:e9:da:d1:02:b4:e3: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:D0:62:89:2F:98:2A:35:19:05:83:09:4E:C5:46:2F:E9:1A:F6 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:25:e6:a1:00:ca:2e:5b:f7:5d:aa:ae:df:d4:ad:7a:70:57: c6:dd:dd:b8:b3:a6:33:13:39:a5:37:0f:a2:c8:30:b1:81:81: 91:23:97:f4:77:d2:74:08:ec:dc:07:c5:34:32:ef:02:53:7f: 10:f6:29:fd:c5:46:72:33:00:fd:c5:96:59:9a:24:ce:df:5e: c0:6c:d1:69:8d:db:c4:be:10:9a:16:db:33:bf:96:07:1c:71: b5:5a:6b:9f:80:91:ec:b2:cc:5a:bc:0d:68:c4:b2:9b:3e:0e: a2:1f:7f:f9:28:dc:43:70:d2:41:2c:52:f4:6a:d2:f1:17:2d: ac:05:46:b3:04:68:97:8e:cf:d3:40:5a:17:aa:c5:0c:79:0b: 7c:99:c3:d2:cc:a2:ea:6a:0f:a6:8b:d5:4d:65:a1:03:56:34: 17:24:28:a9:21:72:e1:af:50:4e:83:23:9e:a9:02:15:9d:bb: 59:54:62:40:24:7f:5c:1e:9f:ba:a8:25:1f:c9:80:f8:1b:aa: af:45:53:a5:2c:c4:6f:8d:e7:19:13:1a:3a:8a:c3:47:1b:fd: 42:3b:f3:2c:8e:ef:23:0b:06:67:2f:5c:8f:61:16:c3:98:9f: 89:b9:a5:74:08:a7:4b:85:6b:10:29:29:d2:00:b7:2d:65:39: e7:e8:39:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9mgwE0cUn+82/x2cAQUj3vQPhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTAzMTIxMTI1MzVaFw0yNTAzMTUxOTU2MzVaMDMxMTAvBgNV BAMTKDk1MkJEMDYyODkyRjk4MkEzNTE5MDU4MzA5NEVDNTQ2MkZFOTFBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8kyrA+w9slfzVpigF6y8cdDT k5zvN9MYgbfyOyJs3RfroaTmmtw8YDIhCmhYDxZPN0IoarHZs0M8xf+wpN00z+h4 ln2eENFjtgt66EbabtoJp3VIM+lc3KwG6Voe48jW40WPk5OhRS3cr0xpolGwXyEZ coAwYHzCL859MBnZFSZ0OC+T6SoZLI0OfE/JqEkqI1jjbQkEAzdfjKpO1w3fA3UN IUHM1CgYS/DGMIKuLi7twoRnftD1BKHTdO8DCTto/oSSZseZGrBuXGYmy7YreGAp PIdQXOY6S/3mbVHo2R435UEhmPZiuNrf5mYflF6sYLPspSbrJuna0QK04wvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlSvQYokvmCo1GQWDCU7FRi/pGvYwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYl5qEAyi5b912qrt/UrXpwV8bd3bizpjMT OaU3D6LIMLGBgZEjl/R30nQI7NwHxTQy7wJTfxD2Kf3FRnIzAP3FllmaJM7fXsBs 0WmN28S+EJoW2zO/lgcccbVaa5+AkeyyzFq8DWjEsps+DqIff/ko3ENw0kEsUvRq 0vEXLawFRrMEaJeOz9NAWheqxQx5C3yZw9LMoupqD6aL1U1loQNWNBckKKkhcuGv UE6DI56pAhWdu1lUYkAkf1wen7qoJR/JgPgbqq9FU6UsxG+N5xkTGjqKw0cb/UI7 8yyO7yMLBmcvXI9hFsOYn4m5pXQIp0uFaxApKdIAty1lOefoOS0= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:51 2025 by rpki-client