$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: fPVi0WQYTz9VdeFApZKf9XTNYHsnammEoH2bPCdAg0c= Subject key identifier: 40:FC:19:15:19:6D:B7:7A:AF:B3:74:A9:0D:EA:C1:54:A4:BB:C2:91 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 7CA2E938DC3074F81D4D2FA82861620EEBD767C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: A5 Signing time: Sat 28 Jun 2025 21:01:00 +0000 Manifest this update: Sat 28 Jun 2025 20:56:00 +0000 Manifest next update: Wed 02 Jul 2025 02:55:00 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: kG8dZWFtz/ZFcUI0J0KCL1Lig32M1ekvMvSAnVx40LQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a2:e9:38:dc:30:74:f8:1d:4d:2f:a8:28:61:62:0e:eb:d7:67:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Jun 28 20:56:00 2025 GMT Not After : Jul 2 02:55:00 2025 GMT Subject: CN=40FC1915196DB77AAFB374A90DEAC154A4BBC291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:02:75:38:13:53:02:f5:27:f2:40:1e:98: 4e:42:a8:27:e1:8c:3d:cf:f8:e9:41:8a:7d:01:01: 02:1a:85:28:c3:53:b0:9e:9c:b8:e1:51:01:5e:78: 1d:e5:25:69:a4:8f:89:b7:f6:49:fb:25:eb:46:83: a5:a5:91:c4:1f:25:8a:d0:d7:bd:03:67:81:0c:81: a4:19:d1:b9:e1:65:1b:60:39:4d:73:ce:b1:6c:ab: 05:2a:7b:a9:f6:c2:75:18:c5:ff:f4:4e:55:d6:49: 17:a7:7b:2f:2b:b7:19:6a:55:96:c8:ed:f8:6c:c7: 10:64:28:9d:e0:84:1f:5d:3e:b7:4c:2b:c3:80:b5: 6e:0e:07:e9:0b:72:fb:9a:bf:48:ac:91:6a:c8:06: 2c:80:e0:57:bd:da:c1:21:e3:75:41:32:9c:19:f9: dd:5b:cc:c1:d0:0d:c6:a5:56:64:b4:b6:39:00:a3: af:93:ca:4e:62:6e:a6:63:37:2d:56:36:a3:c6:7d: d8:88:1f:ab:09:4c:fc:3c:f7:7d:7b:29:8b:5f:28: 1c:ee:f3:64:de:58:3b:3c:f8:41:48:b9:d6:d4:7f: cf:9d:89:9c:f3:a0:a6:92:bb:43:dd:63:ad:80:e6: 3b:be:70:62:f8:4c:a4:29:6a:14:33:68:4e:27:5d: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FC:19:15:19:6D:B7:7A:AF:B3:74:A9:0D:EA:C1:54:A4:BB:C2:91 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7c:96:19:d6:7e:20:75:43:43:23:51:b8:21:0e:ac:f5:17: d2:8a:49:82:45:3a:06:c1:e2:72:b3:20:c1:e6:5e:77:7f:91: 10:f1:cc:72:b5:fe:9f:d1:06:df:d7:53:93:80:c5:78:d8:e4: 64:19:62:f3:22:a8:31:fa:48:d3:19:6b:d9:2d:f0:be:91:b6: 4b:32:5a:f3:a5:17:3b:1a:9d:00:d8:d6:f7:78:5d:5d:97:7f: 12:be:c4:43:5b:e5:71:03:02:c6:bf:9d:3a:20:31:9a:75:44: 33:56:91:5f:a5:4a:b1:7d:37:d6:73:ba:ac:85:89:ef:9a:01: 5d:05:dd:43:8e:c1:1c:0a:a8:99:4f:cb:12:87:cc:b6:05:29: 36:a5:e3:b0:86:8e:1a:c6:1e:66:b8:cc:5a:4f:c4:b7:f5:de: ea:b7:75:d0:b4:89:79:23:31:ca:ed:16:d3:50:6a:a2:3f:b8: dc:47:1d:67:8b:60:1f:ea:1b:02:3b:55:ce:7e:31:19:2c:9d: 64:46:c7:9c:48:09:1e:83:a7:9a:a3:ed:3a:44:c8:80:b0:13: 0d:21:9e:fe:51:14:c0:18:58:34:70:81:97:c2:34:9b:9c:fd: 3f:3e:f0:5d:5d:42:1c:f7:5a:99:13:12:c8:55:a9:29:73:3f: 09:12:fe:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKLpONwwdPgdTS+oKGFiDuvXZ8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA2MjgyMDU2MDBaFw0yNTA3MDIwMjU1MDBaMDMxMTAvBgNV BAMTKDQwRkMxOTE1MTk2REI3N0FBRkIzNzRBOTBERUFDMTU0QTRCQkMyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8gJ1OBNTAvUn8kAemE5CqCfh jD3P+OlBin0BAQIahSjDU7CenLjhUQFeeB3lJWmkj4m39kn7JetGg6WlkcQfJYrQ 170DZ4EMgaQZ0bnhZRtgOU1zzrFsqwUqe6n2wnUYxf/0TlXWSReney8rtxlqVZbI 7fhsxxBkKJ3ghB9dPrdMK8OAtW4OB+kLcvuav0iskWrIBiyA4Fe92sEh43VBMpwZ +d1bzMHQDcalVmS0tjkAo6+Tyk5ibqZjNy1WNqPGfdiIH6sJTPw89317KYtfKBzu 82TeWDs8+EFIudbUf8+diZzzoKaSu0PdY62A5ju+cGL4TKQpahQzaE4nXZe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPwZFRltt3qvs3SpDerBVKS7wpEwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh8lhnWfiB1Q0MjUbghDqz1F9KKSYJFOgbB 4nKzIMHmXnd/kRDxzHK1/p/RBt/XU5OAxXjY5GQZYvMiqDH6SNMZa9kt8L6Rtksy WvOlFzsanQDY1vd4XV2XfxK+xENb5XEDAsa/nTogMZp1RDNWkV+lSrF9N9ZzuqyF ie+aAV0F3UOOwRwKqJlPyxKHzLYFKTal47CGjhrGHma4zFpPxLf13uq3ddC0iXkj McrtFtNQaqI/uNxHHWeLYB/qGwI7Vc5+MRksnWRGx5xICR6Dp5qj7TpEyICwEw0h nv5RFMAYWDRwgZfCNJuc/T8+8F1dQhz3WpkTEshVqSlzPwkS/jc= -----END CERTIFICATE-----Generated at Mon Jun 30 06:22:33 2025 by rpki-client