$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: n+jlUBI+0HYqvFLIf6x14yz1aMiDxB/V+Lu/bXg5DMI= Subject key identifier: B7:0B:F3:C3:D0:F6:39:86:97:B1:6C:3A:9A:3E:C5:C8:30:AF:7D:0B Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 55341D30FED76DEFB1A323EDD338C45FF907B7C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 044A Signing time: Fri 09 May 2025 18:31:59 +0000 Manifest this update: Fri 09 May 2025 18:26:59 +0000 Manifest next update: Tue 13 May 2025 02:11:59 +0000 Files and hashes: 1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=) 3: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: JW5Phcati0+M0thjmrVhtAVNH4p0pnoIlHIUQ8EYNLY=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:34:1d:30:fe:d7:6d:ef:b1:a3:23:ed:d3:38:c4:5f:f9:07:b7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: May 9 18:26:59 2025 GMT Not After : May 13 02:11:59 2025 GMT Subject: CN=B70BF3C3D0F6398697B16C3A9A3EC5C830AF7D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:d3:e3:31:85:83:89:2a:17:45:9d:ca:72: fa:d4:5a:04:b9:dc:5a:42:d1:ed:c9:09:87:2a:05: 81:2e:c1:60:53:af:75:98:19:5d:be:fe:03:99:42: b8:88:3f:0e:5d:4f:1f:25:9a:b6:62:1e:28:c9:6e: df:1d:56:67:99:e1:ec:80:8b:bf:3a:a9:ee:fd:eb: e1:89:78:20:e5:9b:ba:e9:f1:44:fc:c3:5b:f8:91: 39:1d:09:1d:40:d2:53:49:77:38:e0:4e:48:dd:78: 87:cf:9c:19:5a:94:bc:6d:fa:62:37:5d:6c:9a:5a: 9d:d5:0e:a0:8d:9c:9f:5b:7f:2e:69:ef:aa:0a:4b: 36:85:39:33:b8:65:d4:47:2e:0e:e7:a6:13:c8:25: c3:5e:50:69:2f:70:73:35:a5:b8:9c:a1:c3:23:35: 68:7a:2e:60:59:90:c5:52:91:82:77:a7:8e:75:a0: 84:db:67:e7:d1:58:7d:9c:91:b1:7f:3b:bc:f0:73: ba:1c:98:d8:35:3f:59:85:2e:f3:88:d2:4b:c9:45: 89:5e:45:b4:12:c4:31:70:db:b7:bc:2e:5e:15:81: 4e:c2:f1:54:d0:76:77:b3:9a:5c:4a:e2:a0:3c:c6: d1:a5:96:74:24:d8:d5:d4:9d:21:c8:70:1c:76:07: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0B:F3:C3:D0:F6:39:86:97:B1:6C:3A:9A:3E:C5:C8:30:AF:7D:0B X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:73:48:54:4b:dd:57:57:48:b7:8a:75:24:10:f5:dd:29:1c: 33:bb:2a:1b:bb:1f:57:1e:97:7b:36:ab:e7:3f:f8:f7:e8:8b: f2:bf:ab:5c:f0:a9:b9:7b:5c:db:11:b0:42:c4:21:5c:9d:32: 56:00:87:b0:6c:b6:b2:a7:84:5f:95:99:08:9f:a4:1d:f5:41: e9:90:09:fd:17:6f:86:55:4e:5c:d6:cf:51:5e:3f:75:e1:46: a7:dd:63:e2:08:f9:0d:26:20:27:ec:02:7a:60:be:9a:de:fb: 6e:53:47:62:36:86:ce:6d:da:c2:a9:0c:b6:23:ac:21:d0:4e: 17:2b:09:fe:de:e2:fe:4b:e0:f0:c5:24:d8:c3:cc:a7:37:76: 1e:20:7e:10:bb:65:da:0a:89:39:64:16:55:7a:2e:52:19:17: ca:4e:66:7c:4b:0b:1a:ce:6a:f0:f3:4d:1f:48:9d:74:e6:57: c3:28:33:b7:9e:28:70:26:c1:53:12:f0:f0:3a:c3:a0:c8:0a: 91:87:71:5c:48:af:fe:a1:de:a5:38:f6:ca:19:b0:3f:1f:b6: bc:c6:2c:bd:4b:e9:e8:12:5b:b9:f7:7a:7c:cf:21:11:1b:b1: 9a:f8:86:a7:5e:a7:d8:9f:2d:af:6f:30:91:f9:cd:22:19:66: d4:21:38:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTQdMP7Xbe+xoyPt0zjEX/kHt8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTA1MDkxODI2NTlaFw0yNTA1MTMwMjExNTlaMDMxMTAvBgNV BAMTKEI3MEJGM0MzRDBGNjM5ODY5N0IxNkMzQTlBM0VDNUM4MzBBRjdEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJU9PjMYWDiSoXRZ3KcvrUWgS5 3FpC0e3JCYcqBYEuwWBTr3WYGV2+/gOZQriIPw5dTx8lmrZiHijJbt8dVmeZ4eyA i786qe796+GJeCDlm7rp8UT8w1v4kTkdCR1A0lNJdzjgTkjdeIfPnBlalLxt+mI3 XWyaWp3VDqCNnJ9bfy5p76oKSzaFOTO4ZdRHLg7nphPIJcNeUGkvcHM1pbicocMj NWh6LmBZkMVSkYJ3p451oITbZ+fRWH2ckbF/O7zwc7ocmNg1P1mFLvOI0kvJRYle RbQSxDFw27e8Ll4VgU7C8VTQdnezmlxK4qA8xtGllnQk2NXUnSHIcBx2B/bjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwvzw9D2OYaXsWw6mj7FyDCvfQswHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtzSFRL3VdXSLeKdSQQ9d0pHDO7Khu7H1ce l3s2q+c/+Pfoi/K/q1zwqbl7XNsRsELEIVydMlYAh7BstrKnhF+VmQifpB31QemQ Cf0Xb4ZVTlzWz1FeP3XhRqfdY+II+Q0mICfsAnpgvpre+25TR2I2hs5t2sKpDLYj rCHQThcrCf7e4v5L4PDFJNjDzKc3dh4gfhC7ZdoKiTlkFlV6LlIZF8pOZnxLCxrO avDzTR9InXTmV8MoM7eeKHAmwVMS8PA6w6DICpGHcVxIr/6h3qU49soZsD8ftrzG LL1L6egSW7n3enzPIREbsZr4hqdep9ifLa9vMJH5zSIZZtQhOMw= -----END CERTIFICATE-----Generated at Sat May 10 10:13:27 2025 by rpki-client