$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: xRF5F0YH9lC8qESadKvFC6ZyBC3/VNjTJIoqdNiRW6A= Subject key identifier: 31:3B:6A:88:5A:58:FE:C7:11:D1:DB:BD:66:0D:3D:8F:E1:92:A1:5E Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 6332304B667DCD6756F2000045A833C827AD3D0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 39 Signing time: Tue 01 Jul 2025 01:31:49 +0000 Manifest this update: Tue 01 Jul 2025 01:26:49 +0000 Manifest next update: Fri 04 Jul 2025 03:40:49 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: 12dXA47h7N2rqsM2csipEcaqXEQP1vc/2dX7dhndB+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:32:30:4b:66:7d:cd:67:56:f2:00:00:45:a8:33:c8:27:ad:3d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Jul 1 01:26:49 2025 GMT Not After : Jul 4 03:40:49 2025 GMT Subject: CN=313B6A885A58FEC711D1DBBD660D3D8FE192A15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:b5:94:68:c4:01:df:c2:96:7c:4b:f4:ee: 4f:2a:6c:06:58:9f:ad:b4:be:5b:8f:63:60:42:85: 38:af:4f:b7:34:67:51:79:37:e8:6f:76:59:60:95: 3a:70:7e:8f:95:d1:c1:29:ca:dd:31:4b:c6:6b:24: 8a:3d:3f:b6:49:f0:62:7a:1b:6b:fc:21:36:ff:ea: 46:8a:46:ea:c7:65:8c:0a:b6:36:17:b8:6a:82:43: 22:f4:a4:b9:bc:b5:00:c9:50:c1:cb:41:37:8c:fc: 28:cd:e1:82:68:c3:d5:20:4a:43:f3:13:d8:bd:ae: 04:8b:e4:10:ba:72:61:d2:69:be:c4:31:94:4b:57: 9e:9f:d0:30:01:0a:c2:1f:6c:9b:fa:b6:10:c3:8b: 78:18:49:99:4b:b3:ad:91:02:1b:25:9c:d6:60:2b: 40:d4:51:09:52:7c:06:02:c7:3a:12:e7:be:ab:d5: c1:a2:f1:9b:b7:50:9b:5c:e7:12:df:fa:11:0d:64: c9:9f:7c:92:69:fb:d2:50:48:90:9b:54:42:ef:6f: fc:bd:f1:2b:39:40:62:d7:b3:74:bf:ba:dc:80:29: 23:e3:65:b2:1d:7a:55:bd:34:48:6b:28:f1:73:99: a3:ff:8e:75:0b:72:be:9e:ea:b4:47:a4:31:89:50: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3B:6A:88:5A:58:FE:C7:11:D1:DB:BD:66:0D:3D:8F:E1:92:A1:5E X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c2:e5:76:d7:18:23:c8:fc:6a:5a:05:6d:e5:c7:21:a3:5a: 87:41:46:fb:bd:15:ed:f2:c6:89:99:fe:fc:f7:a6:1d:88:0c: 8c:cd:d4:01:d1:89:88:0c:d1:f7:51:9a:d7:66:85:c3:bc:ef: 88:54:c4:97:54:09:3f:d3:4e:15:68:d1:7e:4c:ba:15:81:61: 96:8e:72:b6:65:d2:61:3f:d4:76:53:0e:94:6e:94:cd:7c:f8: f9:7e:da:40:fe:9f:a6:50:b1:83:ab:39:25:d2:ac:5c:bb:1c: 72:1d:5a:7d:bc:ae:fe:d9:ab:81:91:2b:ce:b7:93:ee:98:b2: 5c:9f:6f:17:5b:f8:22:cb:56:8c:5e:e1:e9:79:32:a4:fe:4f: 5d:cb:bb:82:37:b8:f3:bc:4e:05:e8:5e:41:15:ab:a8:f5:85: 0a:36:05:31:b0:2a:05:c3:b3:32:99:c4:a0:ee:70:dd:bc:ae: 1f:90:b2:fc:9e:7f:b2:54:a2:e8:63:d1:8b:66:42:5c:ee:cd: e1:51:aa:47:69:f0:30:93:95:9d:1c:92:c9:77:69:a8:71:c3: e3:ca:b4:00:18:1f:de:f2:4f:b4:91:28:9f:83:64:ea:4b:a6: 68:48:6d:fd:91:57:ac:83:1d:f6:8f:9f:dd:d4:63:72:ed:1e: 09:cd:d7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzIwS2Z9zWdW8gAARagzyCetPQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTA3MDEwMTI2NDlaFw0yNTA3MDQwMzQwNDlaMDMxMTAvBgNV BAMTKDMxM0I2QTg4NUE1OEZFQzcxMUQxREJCRDY2MEQzRDhGRTE5MkExNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGLWUaMQB38KWfEv07k8qbAZY n620vluPY2BChTivT7c0Z1F5N+hvdllglTpwfo+V0cEpyt0xS8ZrJIo9P7ZJ8GJ6 G2v8ITb/6kaKRurHZYwKtjYXuGqCQyL0pLm8tQDJUMHLQTeM/CjN4YJow9UgSkPz E9i9rgSL5BC6cmHSab7EMZRLV56f0DABCsIfbJv6thDDi3gYSZlLs62RAhslnNZg K0DUUQlSfAYCxzoS576r1cGi8Zu3UJtc5xLf+hENZMmffJJp+9JQSJCbVELvb/y9 8Ss5QGLXs3S/utyAKSPjZbIdelW9NEhrKPFzmaP/jnULcr6e6rRHpDGJUPN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMTtqiFpY/scR0du9Zg09j+GSoV4wHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbC5XbXGCPI/GpaBW3lxyGjWodBRvu9Fe3y xomZ/vz3ph2IDIzN1AHRiYgM0fdRmtdmhcO874hUxJdUCT/TThVo0X5MuhWBYZaO crZl0mE/1HZTDpRulM18+Pl+2kD+n6ZQsYOrOSXSrFy7HHIdWn28rv7Zq4GRK863 k+6Yslyfbxdb+CLLVoxe4el5MqT+T13Lu4I3uPO8TgXoXkEVq6j1hQo2BTGwKgXD szKZxKDucN28rh+Qsvyef7JUouhj0YtmQlzuzeFRqkdp8DCTlZ0cksl3aahxw+PK tAAYH97yT7SRKJ+DZOpLpmhIbf2RV6yDHfaPn93UY3LtHgnN14Q= -----END CERTIFICATE-----Generated at Tue Jul 1 05:00:52 2025 by rpki-client