$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: oCPreDvovGwzB4UzgHgXUkSEIQ4Wsr3ZSxUhJ2WxLbs= Subject key identifier: D4:0A:69:43:70:71:AF:DE:D7:D4:F6:5B:83:B0:90:04:5F:A0:63:A1 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 2E5989C7692958F2166DF994C4F4BF7CB5F5BA7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 0320 Signing time: Sat 10 May 2025 12:01:42 +0000 Manifest this update: Sat 10 May 2025 11:56:42 +0000 Manifest next update: Tue 13 May 2025 18:52:42 +0000 Files and hashes: 1: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: jEdXFcG5tyvKhVXiRgDeq/NqBiJgaScnF8/EBkq1bUg=) 2: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 3: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 4: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:59:89:c7:69:29:58:f2:16:6d:f9:94:c4:f4:bf:7c:b5:f5:ba:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: May 10 11:56:42 2025 GMT Not After : May 13 18:52:42 2025 GMT Subject: CN=D40A69437071AFDED7D4F65B83B090045FA063A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:ef:f0:eb:11:42:1a:7e:f0:5e:e2:7d:b5: 18:db:df:ec:d2:ad:cc:16:a1:7c:ee:be:73:03:53: 17:1e:cd:f4:f5:78:43:fb:cd:9e:92:ba:2a:75:25: 1c:c2:6e:95:bd:fb:be:fa:07:6d:c8:6c:64:3e:90: 5e:a5:c7:31:bc:6b:20:65:9b:5d:e2:97:d1:fe:ce: ca:86:58:6e:b6:05:b5:94:e3:7e:70:8b:a6:43:41: 07:3a:73:b7:1d:2a:1b:c7:fa:0c:9d:4e:a8:cd:88: 12:45:bd:2f:e2:ae:8f:2f:f2:92:e6:87:29:04:aa: 3f:9a:23:89:6c:6a:7b:e8:30:21:63:d9:6f:58:06: b4:60:eb:78:49:2e:d7:0c:81:17:a0:91:0d:46:b5: fa:9a:89:56:c4:d6:ca:ca:f2:f4:08:c8:73:e1:93: 8b:c5:0a:d5:21:b9:35:87:04:df:84:28:8c:88:37: 57:5f:64:05:b5:ad:c7:ea:3e:ad:ec:37:74:cf:6b: 3b:ca:ab:a8:58:78:d1:eb:8c:3c:37:54:be:c0:72: 7e:c8:9a:d9:2c:77:6a:0f:4d:9a:77:66:6c:7b:6b: f5:25:1a:e5:fb:52:d0:38:8f:d0:32:68:52:a4:4b: 3e:c5:98:62:c6:a1:38:cc:6e:d9:e8:25:7a:34:a1: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0A:69:43:70:71:AF:DE:D7:D4:F6:5B:83:B0:90:04:5F:A0:63:A1 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:71:df:61:8f:98:c8:1f:42:9c:16:7c:f4:7e:b0:81:ef:4e: 9e:58:04:5e:fe:ef:7e:cf:f5:5d:59:c4:e0:d5:f5:21:20:38: 1a:68:45:e7:8f:aa:ce:1d:6d:c9:38:c1:c0:1e:bb:48:ca:45: 05:2c:d8:93:52:3c:87:14:8f:7b:30:c3:96:2b:60:f1:06:72: af:a4:95:7f:f1:88:1f:7d:e6:c7:27:d1:d8:45:b4:9f:28:c6: 88:80:ca:44:5c:86:f9:ab:3f:76:d9:e6:00:2b:55:b3:03:24: b3:f6:40:57:5d:4a:05:7e:1c:9e:7a:e9:16:d5:a9:1a:52:a3: 12:71:25:ae:e6:2c:bc:c4:90:a9:0d:15:66:08:20:66:2c:5a: 85:35:1f:ee:11:dc:b9:bf:d4:5b:f7:9f:e9:1e:a6:9f:9c:55: 1d:f2:03:db:1a:e5:aa:aa:55:7a:3d:ae:1b:00:7e:6c:ac:cc: 6f:ce:d2:a4:0c:3a:9a:8a:f3:d1:82:c6:a5:ed:5c:25:8d:ed: 50:9a:cc:31:8b:b2:85:ed:43:4d:ff:b6:a8:ec:35:61:23:bc: 23:66:87:e1:bd:de:3c:8b:10:2c:ce:aa:5f:b4:49:c8:df:54: 18:20:b5:ad:c0:01:73:b5:43:98:43:e6:45:87:ed:b0:a0:ff: 7c:78:85:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlmJx2kpWPIWbfmUxPS/fLX1unowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA1MTAxMTU2NDJaFw0yNTA1MTMxODUyNDJaMDMxMTAvBgNV BAMTKEQ0MEE2OTQzNzA3MUFGREVEN0Q0RjY1QjgzQjA5MDA0NUZBMDYzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbe/w6xFCGn7wXuJ9tRjb3+zS rcwWoXzuvnMDUxcezfT1eEP7zZ6Suip1JRzCbpW9+776B23IbGQ+kF6lxzG8ayBl m13il9H+zsqGWG62BbWU435wi6ZDQQc6c7cdKhvH+gydTqjNiBJFvS/iro8v8pLm hykEqj+aI4lsanvoMCFj2W9YBrRg63hJLtcMgRegkQ1GtfqaiVbE1srK8vQIyHPh k4vFCtUhuTWHBN+EKIyIN1dfZAW1rcfqPq3sN3TPazvKq6hYeNHrjDw3VL7Acn7I mtksd2oPTZp3Zmx7a/UlGuX7UtA4j9AyaFKkSz7FmGLGoTjMbtnoJXo0oZ27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1AppQ3Bxr97X1PZbg7CQBF+gY6EwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpx32GPmMgfQpwWfPR+sIHvTp5YBF7+737P 9V1ZxODV9SEgOBpoReePqs4dbck4wcAeu0jKRQUs2JNSPIcUj3sww5YrYPEGcq+k lX/xiB995scn0dhFtJ8oxoiAykRchvmrP3bZ5gArVbMDJLP2QFddSgV+HJ566RbV qRpSoxJxJa7mLLzEkKkNFWYIIGYsWoU1H+4R3Lm/1Fv3n+kepp+cVR3yA9sa5aqq VXo9rhsAfmyszG/O0qQMOpqK89GCxqXtXCWN7VCazDGLsoXtQ03/tqjsNWEjvCNm h+G93jyLECzOql+0ScjfVBggta3AAXO1Q5hD5kWH7bCg/3x4hXQ= -----END CERTIFICATE-----Generated at Sat May 10 22:10:23 2025 by rpki-client