$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: HYrEc/T2M/d9hiw1y0OEj/zxPxPDBzQn+18w+PeiXeM= Subject key identifier: B3:14:56:0F:47:8F:1B:7E:1D:6F:81:D0:02:10:2D:5A:2C:C6:7C:30 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 47730FBF4F8D2C9A3529649527C39DF01DB62EBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01DC Signing time: Mon 02 Jun 2025 06:30:36 +0000 Manifest this update: Mon 02 Jun 2025 06:25:36 +0000 Manifest next update: Thu 05 Jun 2025 17:45:36 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: Uy7GM98TkovCtWvKznjUwlhpUKZRSL+i+EUHmNlqw1s=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:73:0f:bf:4f:8d:2c:9a:35:29:64:95:27:c3:9d:f0:1d:b6:2e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Jun 2 06:25:36 2025 GMT Not After : Jun 5 17:45:36 2025 GMT Subject: CN=B314560F478F1B7E1D6F81D002102D5A2CC67C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:21:91:79:6e:c3:e5:c0:96:cd:fb:ca:90: 81:4d:f0:08:d9:dd:86:9a:1b:18:da:37:c4:20:1f: 9a:91:76:71:1c:6f:82:94:c7:c5:fe:95:0f:72:90: 2b:03:27:f7:35:13:ff:95:62:6a:25:1e:be:8d:28: 75:83:da:d5:65:cf:94:39:1d:22:c3:5a:28:2d:f5: 7d:6c:22:1d:da:90:02:73:67:9c:0e:21:25:f4:d8: a8:ef:d8:7b:ac:fe:01:dd:4c:c3:41:22:d2:33:0f: e3:8a:38:c7:59:f9:a5:d9:72:2d:48:35:4c:26:79: 6b:a2:f7:35:b7:8a:36:df:80:db:88:a4:fe:78:f0: 7b:c1:d1:b8:86:5d:9b:2c:92:29:b6:c1:2b:5c:1c: 90:c4:1e:1c:d8:49:3f:64:2e:27:dd:c2:36:18:51: 89:d7:12:d8:8a:a6:ee:aa:d4:10:be:08:8d:10:56: d8:04:6f:ec:53:69:e4:23:25:47:2a:99:65:00:0f: 01:cd:aa:c1:cd:41:31:0e:1e:46:36:6d:6b:59:90: bb:6a:22:62:46:d2:6c:79:31:67:b7:a2:9f:2b:57: 8e:b1:81:7b:7b:cb:0c:af:09:13:95:01:64:44:86: 7f:85:18:ff:10:0f:67:a4:33:4f:2c:02:a4:09:93: b9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:14:56:0F:47:8F:1B:7E:1D:6F:81:D0:02:10:2D:5A:2C:C6:7C:30 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5c:70:81:a6:eb:b4:e3:b1:30:96:fa:bb:61:ac:05:0f:d8: 86:d0:fc:9e:28:6e:3b:87:d3:69:c7:5c:4b:85:b1:7b:a9:7a: a6:f0:34:3a:86:20:a5:c1:ac:67:6b:51:7f:cb:9e:d7:19:95: a6:3d:ee:19:bc:f1:05:bb:e7:f2:91:dd:88:7e:bd:8c:3c:d3: c3:5a:d9:85:7f:27:58:47:52:14:0d:fb:34:18:ea:cd:75:1d: 4a:aa:99:38:ea:b6:64:98:6c:9f:98:46:f2:14:ab:5c:44:db: bb:86:0c:62:58:ec:ca:f5:a2:47:06:b9:ce:31:31:8d:d5:96: db:5e:c9:22:3a:b8:df:b5:54:8b:cd:92:1b:cf:13:65:e9:c0: 75:d8:67:7f:ea:a3:50:09:ba:ae:e2:b7:d7:fd:4f:80:d3:fc: 05:aa:31:1a:b3:b2:70:c5:93:6e:e4:63:d5:d5:c4:cd:64:af: 65:a3:b7:fe:ca:36:22:17:b1:50:5d:5b:6d:8f:b4:8c:1d:73: 6d:e3:bc:93:12:f9:cd:c5:f7:d1:40:05:3c:79:b6:cd:93:5e: 9c:4f:54:58:6e:68:5d:80:10:e0:31:40:f0:4f:14:f4:02:b3: 27:c2:17:1b:a7:19:a0:7c:94:db:cd:76:ef:0e:52:b8:c1:34: 54:85:80:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3MPv0+NLJo1KWSVJ8Od8B22Lr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA2MDIwNjI1MzZaFw0yNTA2MDUxNzQ1MzZaMDMxMTAvBgNV BAMTKEIzMTQ1NjBGNDc4RjFCN0UxRDZGODFEMDAyMTAyRDVBMkNDNjdDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2diGReW7D5cCWzfvKkIFN8AjZ 3YaaGxjaN8QgH5qRdnEcb4KUx8X+lQ9ykCsDJ/c1E/+VYmolHr6NKHWD2tVlz5Q5 HSLDWigt9X1sIh3akAJzZ5wOISX02Kjv2Hus/gHdTMNBItIzD+OKOMdZ+aXZci1I NUwmeWui9zW3ijbfgNuIpP548HvB0biGXZsskim2wStcHJDEHhzYST9kLifdwjYY UYnXEtiKpu6q1BC+CI0QVtgEb+xTaeQjJUcqmWUADwHNqsHNQTEOHkY2bWtZkLtq ImJG0mx5MWe3op8rV46xgXt7ywyvCROVAWREhn+FGP8QD2ekM08sAqQJk7nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsxRWD0ePG34db4HQAhAtWizGfDAwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtccIGm67TjsTCW+rthrAUP2IbQ/J4objuH 02nHXEuFsXupeqbwNDqGIKXBrGdrUX/LntcZlaY97hm88QW75/KR3Yh+vYw808Na 2YV/J1hHUhQN+zQY6s11HUqqmTjqtmSYbJ+YRvIUq1xE27uGDGJY7Mr1okcGuc4x MY3VltteySI6uN+1VIvNkhvPE2XpwHXYZ3/qo1AJuq7it9f9T4DT/AWqMRqzsnDF k27kY9XVxM1kr2Wjt/7KNiIXsVBdW22PtIwdc23jvJMS+c3F99FABTx5ts2TXpxP VFhuaF2AEOAxQPBPFPQCsyfCFxunGaB8lNvNdu8OUrjBNFSFgLg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:29 2025 by rpki-client