$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: DrUyh8tc22gMdCUwJw5POH4PPP0q1ngL3zxwvLR8mA0= Subject key identifier: 27:46:75:2F:0A:F7:0F:F6:74:48:85:DD:95:73:24:52:F6:B7:72:5B Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 4F84A68D01685B8B7F9159DBA7863AF8C40B97CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 017B Signing time: Mon 02 Jun 2025 22:02:05 +0000 Manifest this update: Mon 02 Jun 2025 21:57:05 +0000 Manifest next update: Thu 05 Jun 2025 23:13:05 +0000 Files and hashes: 1: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) 3: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: rFct6x/Hd6JmXECJhFB02E0rWHE3CvW0quYmeQk/H/I=) 4: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:84:a6:8d:01:68:5b:8b:7f:91:59:db:a7:86:3a:f8:c4:0b:97:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Jun 2 21:57:05 2025 GMT Not After : Jun 5 23:13:05 2025 GMT Subject: CN=2746752F0AF70FF6744885DD95732452F6B7725B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:cb:0c:ba:cd:32:88:0f:e5:a8:da:8e:8f: 99:2b:86:14:40:05:89:42:93:7c:c2:c1:ae:a0:9c: 8c:09:4e:4a:a6:fb:ae:13:f8:21:49:ea:4c:05:0d: 02:0a:16:33:c7:14:8a:06:83:45:bb:7f:76:4c:82: b0:36:4c:c3:67:b5:8b:44:6b:8e:9c:3a:2b:3c:5f: e3:09:fd:24:58:3a:a9:8a:f5:e5:c0:0c:08:c2:d5: 56:84:29:4f:44:76:66:99:ed:0f:a4:83:c3:d9:ec: d1:9b:2b:f0:4b:73:74:7c:ff:9c:aa:32:6d:d1:09: 8a:da:93:12:8d:16:e5:d8:31:81:72:13:11:3a:0a: 79:6c:86:51:d2:29:15:25:c2:9f:86:79:a7:c4:11: 7e:f5:56:d1:95:42:5f:f0:14:ee:86:17:c5:c5:9c: b0:aa:95:7e:c3:d2:23:16:e0:8e:9f:8c:bb:fb:f6: 15:e6:3b:02:a5:df:41:8d:68:f6:92:35:d8:a3:c5: 06:01:2b:9a:9d:21:bb:96:67:45:8a:9b:10:1c:15: 77:0d:9f:01:cc:d1:e2:28:a7:d5:26:b9:10:3d:bd: e3:83:6e:b5:5f:02:22:d7:c5:aa:d3:d8:ba:f2:13: 8f:07:4e:ae:61:32:5e:fb:04:76:a5:64:0d:68:35: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:46:75:2F:0A:F7:0F:F6:74:48:85:DD:95:73:24:52:F6:B7:72:5B X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:eb:43:ef:58:e2:2e:2f:ed:18:89:9c:3e:d6:47:5c:21:83: 40:37:33:4c:cc:7f:fe:0f:32:36:5c:5c:2c:4d:c1:16:8f:19: e6:f5:83:5c:4d:c4:af:ab:21:25:43:83:bf:63:36:81:d2:50: 40:ca:ec:f8:26:6b:0e:03:9b:3a:9d:5f:8b:12:64:ff:b8:c8: 10:30:2c:96:e0:18:11:31:86:d1:43:af:65:19:da:1b:b9:4c: 2f:9a:74:b7:51:36:66:79:2b:5e:6e:37:83:f6:14:bd:aa:3e: 7e:9d:45:46:87:40:73:8f:5a:96:71:60:11:e6:d8:ab:e1:13: 34:ab:a7:5f:e0:b6:e0:7c:34:1f:9f:ee:b4:fe:33:c9:db:3c: 4b:ca:57:df:5d:70:c3:a6:66:13:0e:4a:b5:84:59:93:59:13: ab:f5:4c:8a:c9:c1:f8:cd:1d:c3:3f:af:6d:54:5d:df:99:fb: e3:f8:eb:34:c0:e0:4d:b9:64:77:28:4e:54:71:f4:30:a5:f6: e9:59:81:6b:f4:ba:ef:54:57:6c:a7:4a:9f:ac:82:76:11:1d: 24:43:0f:18:87:93:d1:32:81:b0:6c:ed:17:b1:93:2d:20:a0: 5b:d5:14:70:7d:4d:86:e3:99:c6:fa:7d:c2:55:28:4a:c6:18: 99:ae:30:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4SmjQFoW4t/kVnbp4Y6+MQLl84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA2MDIyMTU3MDVaFw0yNTA2MDUyMzEzMDVaMDMxMTAvBgNV BAMTKDI3NDY3NTJGMEFGNzBGRjY3NDQ4ODVERDk1NzMyNDUyRjZCNzcyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYssMus0yiA/lqNqOj5krhhRA BYlCk3zCwa6gnIwJTkqm+64T+CFJ6kwFDQIKFjPHFIoGg0W7f3ZMgrA2TMNntYtE a46cOis8X+MJ/SRYOqmK9eXADAjC1VaEKU9EdmaZ7Q+kg8PZ7NGbK/BLc3R8/5yq Mm3RCYrakxKNFuXYMYFyExE6CnlshlHSKRUlwp+GeafEEX71VtGVQl/wFO6GF8XF nLCqlX7D0iMW4I6fjLv79hXmOwKl30GNaPaSNdijxQYBK5qdIbuWZ0WKmxAcFXcN nwHM0eIop9UmuRA9veODbrVfAiLXxarT2LryE48HTq5hMl77BHalZA1oNcBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0Z1Lwr3D/Z0SIXdlXMkUva3clswHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnrQ+9Y4i4v7RiJnD7WR1whg0A3M0zMf/4P MjZcXCxNwRaPGeb1g1xNxK+rISVDg79jNoHSUEDK7Pgmaw4DmzqdX4sSZP+4yBAw LJbgGBExhtFDr2UZ2hu5TC+adLdRNmZ5K15uN4P2FL2qPn6dRUaHQHOPWpZxYBHm 2KvhEzSrp1/gtuB8NB+f7rT+M8nbPEvKV99dcMOmZhMOSrWEWZNZE6v1TIrJwfjN HcM/r21UXd+Z++P46zTA4E25ZHcoTlRx9DCl9ulZgWv0uu9UV2ynSp+sgnYRHSRD DxiHk9EygbBs7Rexky0goFvVFHB9TYbjmcb6fcJVKErGGJmuMHc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:47 2025 by rpki-client