$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: IxltR0VATyoIuuuhdGCVhye5Z71AZEJ1792mU460lxo= Subject key identifier: F7:0B:6A:5D:BB:BF:3F:99:61:D8:1C:4A:B2:07:DD:A3:DA:5E:9C:84 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 4B0A5D951C6E71AEB913D6602A46D6C9FDB20D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 01CD Signing time: Fri 06 Jun 2025 19:01:32 +0000 Manifest this update: Fri 06 Jun 2025 18:56:32 +0000 Manifest next update: Mon 09 Jun 2025 23:09:32 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: BFF7uRtrm3fDLFtGj2f50AFVKIhSoeRrv/9m0Sz0Wmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0a:5d:95:1c:6e:71:ae:b9:13:d6:60:2a:46:d6:c9:fd:b2:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Jun 6 18:56:32 2025 GMT Not After : Jun 9 23:09:32 2025 GMT Subject: CN=F70B6A5DBBBF3F9961D81C4AB207DDA3DA5E9C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e7:8c:7e:de:41:51:05:13:f7:8b:1e:79:83: f4:42:48:bc:61:e9:75:85:68:7e:1c:d4:58:2b:df: 09:0b:66:e8:0c:47:f7:60:9d:9a:22:72:64:d5:f0: 6b:35:02:ee:1b:d0:4b:72:e9:8e:f6:fe:b8:dc:e7: 66:72:32:bb:66:d1:59:ff:f6:b9:e1:5b:ff:9e:e2: 6b:49:8b:83:1d:70:f7:9f:b8:6a:4a:7a:89:d2:7a: 30:b6:3e:88:fc:78:5a:61:9d:66:3b:05:c8:50:bc: b9:b0:1f:87:b3:21:e1:ef:04:bd:3f:bd:d0:57:1d: db:0a:b9:16:b6:9f:9c:a8:f7:6b:71:9d:49:77:db: 27:7d:2a:34:d5:08:8a:d4:f2:6e:6c:ed:49:d2:84: c9:de:79:7a:57:47:3c:94:3f:50:ef:1f:3a:eb:94: 6f:a7:25:62:38:6c:30:12:95:ca:79:21:06:33:10: 58:38:c2:5d:55:88:cf:3f:73:e7:d0:ee:82:c4:07: b2:31:e9:ef:84:8c:7d:f6:84:2b:b7:5a:85:4c:95: 59:80:d1:c4:d0:de:88:27:a4:ca:46:91:c1:8d:61: 51:a9:39:b8:14:25:36:d4:67:df:e0:b6:0c:15:96: dc:ab:44:32:4f:02:a5:e5:2b:e0:c5:c9:0e:c9:b2: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:6A:5D:BB:BF:3F:99:61:D8:1C:4A:B2:07:DD:A3:DA:5E:9C:84 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:82:8f:1d:2f:c0:1d:69:4a:9d:d7:33:98:8d:5f:af:0c:fe: 7f:9a:06:08:64:87:b5:26:80:2d:16:a7:43:7a:24:3a:bf:8f: 97:0c:71:4e:df:af:f2:3c:93:9a:83:96:81:98:bb:0a:16:0c: 37:ae:bb:23:53:46:e4:1c:bb:5b:c6:24:dd:ba:a8:8a:6d:b6: 9c:fd:aa:07:c1:05:39:1f:88:36:69:f1:ca:a5:e7:f4:7a:ed: 78:0d:50:28:a3:10:9f:b7:fc:72:37:c7:3b:50:97:3c:5d:5e: ce:91:e8:92:7d:dc:ee:0a:a4:95:4a:c2:76:ee:8e:03:2d:0a: c9:0a:b4:be:17:3e:f5:60:dd:88:ff:25:e3:02:3d:eb:13:0e: 13:15:27:c3:89:c7:0a:1a:d2:b5:ba:bf:c9:ca:b1:c9:26:ca: a4:2b:c3:21:dd:56:e9:7b:38:34:02:9b:c9:0f:e8:72:a7:9f: 1d:7b:14:78:86:78:1c:1d:9a:a7:1a:26:81:00:32:89:da:4e: 20:36:68:3f:36:3f:8c:82:f2:33:d3:4a:fa:62:23:a8:83:1c: 18:db:ff:49:df:f8:de:0e:d7:5b:d2:29:ce:33:18:f1:66:87: 4b:2f:14:ad:22:40:c8:e3:87:f2:81:a0:f3:30:9d:09:83:66: 4d:5d:b2:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwpdlRxuca65E9ZgKkbWyf2yDV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNTA2MDYxODU2MzJaFw0yNTA2MDkyMzA5MzJaMDMxMTAvBgNV BAMTKEY3MEI2QTVEQkJCRjNGOTk2MUQ4MUM0QUIyMDdEREEzREE1RTlDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe54x+3kFRBRP3ix55g/RCSLxh 6XWFaH4c1Fgr3wkLZugMR/dgnZoicmTV8Gs1Au4b0Ety6Y72/rjc52ZyMrtm0Vn/ 9rnhW/+e4mtJi4MdcPefuGpKeonSejC2Poj8eFphnWY7BchQvLmwH4ezIeHvBL0/ vdBXHdsKuRa2n5yo92txnUl32yd9KjTVCIrU8m5s7UnShMneeXpXRzyUP1DvHzrr lG+nJWI4bDASlcp5IQYzEFg4wl1ViM8/c+fQ7oLEB7Ix6e+EjH32hCu3WoVMlVmA 0cTQ3ognpMpGkcGNYVGpObgUJTbUZ9/gtgwVltyrRDJPAqXlK+DFyQ7JslbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9wtqXbu/P5lh2BxKsgfdo9penIQwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+Cjx0vwB1pSp3XM5iNX68M/n+aBghkh7Um gC0Wp0N6JDq/j5cMcU7fr/I8k5qDloGYuwoWDDeuuyNTRuQcu1vGJN26qIpttpz9 qgfBBTkfiDZp8cql5/R67XgNUCijEJ+3/HI3xztQlzxdXs6R6JJ93O4KpJVKwnbu jgMtCskKtL4XPvVg3Yj/JeMCPesTDhMVJ8OJxwoa0rW6v8nKsckmyqQrwyHdVul7 ODQCm8kP6HKnnx17FHiGeBwdmqcaJoEAMonaTiA2aD82P4yC8jPTSvpiI6iDHBjb /0nf+N4O11vSKc4zGPFmh0svFK0iQMjjh/KBoPMwnQmDZk1dsls= -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:25 2025 by rpki-client