$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: LRGxqz/+QXAwu4sCc9sII53xHcU8krQlScW/U0cszbQ= Subject key identifier: 8E:24:A2:C4:45:10:51:89:1E:23:70:AD:FF:80:5C:39:0D:34:74:96 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 77D3B902E3A5DC344CFBD5A189595A6D4F856643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04D2 Signing time: Mon 12 May 2025 12:50:48 +0000 Manifest this update: Mon 12 May 2025 12:45:48 +0000 Manifest next update: Thu 15 May 2025 22:04:48 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: Nk5ck1AseyuNcjCEwHjdfNpidrWP95VM7DoxprfK5Rc=) 2: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: A23I7fqnPXhBPRczLk5QNBh0X32BPlyjicsamPzFLkk=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: v/nBtfCY9D5aSZNWsWdccc/TtDC4JCIjqRl1Ud4KShs=) 5: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 6: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: WEOUyrjdm5MHLBlul4TfoQsPYZiEC6VkTMRCL8M+beg=) 7: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: Wbn9My1ucMfOguw2GnUhjyYF5n1ZB+h7swMH+RDSHvM=) 8: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: LrjOipA7XUKqMLrdnSSirCwj9idRRnzkNFyMQLbNrPk=) 9: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: 2eHMbsun56NqfmKlpFAG+zy53c2fesECLK8xZvpMLw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d3:b9:02:e3:a5:dc:34:4c:fb:d5:a1:89:59:5a:6d:4f:85:66:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: May 12 12:45:48 2025 GMT Not After : May 15 22:04:48 2025 GMT Subject: CN=8E24A2C4451051891E2370ADFF805C390D347496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0b:c1:4d:87:ad:6e:c5:23:0b:7e:fc:38:37: 21:ed:18:dd:61:12:a9:bb:77:95:6e:16:32:3f:e1: 60:a3:a3:61:f2:7c:75:de:1a:62:1b:ef:85:25:9e: 61:0d:e3:8a:e5:c9:a4:9e:e1:e5:9d:d1:f5:9b:72: c7:2e:42:f5:34:ab:e6:42:fa:ce:0a:fb:93:87:97: 26:c3:6e:aa:e9:d3:f8:c7:dd:c8:6b:ab:af:52:16: 57:2e:ca:84:c1:e1:25:b9:0c:aa:8d:50:31:8a:c5: 96:93:8c:57:6d:9d:03:25:ba:36:d4:1f:9e:62:5c: da:d3:84:3f:54:e4:d2:4c:ce:5f:62:dc:93:37:91: c4:1c:82:cf:4a:d9:63:1c:79:ce:06:22:a3:e1:6a: 02:ef:8d:ca:21:dd:7d:e4:86:96:98:2a:6f:20:00: c9:7f:52:02:ef:d9:e8:dd:31:7d:78:4b:0f:6a:b9: 6c:3a:11:3b:c0:92:b2:26:29:12:5a:a3:cb:30:16: 04:41:4e:f1:0e:25:54:c8:1c:30:1a:72:d9:04:63: 5f:3b:34:53:77:9a:25:56:b0:e1:6e:98:f4:a2:77: 40:f2:6f:ca:ba:e6:7a:29:40:56:aa:0e:39:c6:65: e8:10:4f:ee:2d:de:b0:45:d3:81:c4:08:51:06:64: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:24:A2:C4:45:10:51:89:1E:23:70:AD:FF:80:5C:39:0D:34:74:96 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b7:a2:66:a8:81:8d:90:4c:2e:35:a1:d8:5f:02:6b:4d:ca: ad:16:c3:bf:36:b8:97:3b:bf:3d:ff:75:36:a1:16:e3:1e:9f: b5:ec:ba:90:a5:3d:5b:ef:00:78:09:aa:c5:35:0d:0e:c2:fb: c1:c4:46:b3:23:fd:10:43:74:06:07:0d:17:0e:43:da:ff:94: 30:9a:66:a1:20:b1:5d:60:ac:66:f5:47:49:ff:06:29:89:8d: 9a:68:e1:a5:a2:40:37:e0:62:5b:21:86:68:26:2f:75:52:52: 0b:63:8a:f6:d4:a0:d2:f5:fe:61:ef:1e:12:be:1f:72:bc:7c: e8:7d:4b:9f:b0:b6:db:a0:94:55:d2:26:fa:71:6d:6f:2e:87: 1b:8d:52:b3:70:b3:db:25:41:10:d7:dd:c6:47:ab:1e:f8:6d: a9:a4:2b:e8:64:8a:3e:28:3d:a5:0f:d2:46:7e:2e:dd:4c:f6: 78:89:eb:57:80:68:24:58:82:1f:fe:ef:8f:6c:26:2a:8c:cf: ea:2c:c4:40:28:5f:26:1b:b1:d7:ba:53:4a:ac:e4:a5:5e:aa: e7:77:f3:76:cd:35:e6:03:72:be:05:f0:eb:5a:85:ca:7f:ae: 2d:4d:29:af:bb:94:8c:94:1c:38:1f:5f:f0:2b:96:67:69:56: dc:c1:32:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9O5AuOl3DRM+9WhiVlabU+FZkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA1MTIxMjQ1NDhaFw0yNTA1MTUyMjA0NDhaMDMxMTAvBgNV BAMTKDhFMjRBMkM0NDUxMDUxODkxRTIzNzBBREZGODA1QzM5MEQzNDc0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgC8FNh61uxSMLfvw4NyHtGN1h Eqm7d5VuFjI/4WCjo2HyfHXeGmIb74UlnmEN44rlyaSe4eWd0fWbcscuQvU0q+ZC +s4K+5OHlybDbqrp0/jH3chrq69SFlcuyoTB4SW5DKqNUDGKxZaTjFdtnQMlujbU H55iXNrThD9U5NJMzl9i3JM3kcQcgs9K2WMcec4GIqPhagLvjcoh3X3khpaYKm8g AMl/UgLv2ejdMX14Sw9quWw6ETvAkrImKRJao8swFgRBTvEOJVTIHDAactkEY187 NFN3miVWsOFumPSid0Dyb8q65nopQFaqDjnGZegQT+4t3rBF04HECFEGZBe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiSixEUQUYkeI3Ct/4BcOQ00dJYwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq3omaogY2QTC41odhfAmtNyq0Ww782uJc7 vz3/dTahFuMen7XsupClPVvvAHgJqsU1DQ7C+8HERrMj/RBDdAYHDRcOQ9r/lDCa ZqEgsV1grGb1R0n/BimJjZpo4aWiQDfgYlshhmgmL3VSUgtjivbUoNL1/mHvHhK+ H3K8fOh9S5+wttuglFXSJvpxbW8uhxuNUrNws9slQRDX3cZHqx74bamkK+hkij4o PaUP0kZ+Lt1M9niJ61eAaCRYgh/+749sJiqMz+osxEAoXyYbsde6U0qs5KVequd3 83bNNeYDcr4F8Otahcp/ri1NKa+7lIyUHDgfX/ArlmdpVtzBMq0= -----END CERTIFICATE-----Generated at Mon May 12 23:57:06 2025 by rpki-client