$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: bSRj8XF2fGwMDd5Sm1BvfXwvmUIc7Es5nbi6fltQ9s8= Subject key identifier: CD:E0:CE:BE:9F:02:63:DB:6C:83:C4:B9:96:3F:86:B1:A2:10:CC:B3 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 3F228C23383C8DB91D6943E7C4DB23E881A53DF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0439 Signing time: Mon 12 May 2025 03:52:05 +0000 Manifest this update: Mon 12 May 2025 03:47:05 +0000 Manifest next update: Thu 15 May 2025 14:49:05 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 2: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: 3Iq0NYVomwFNcyBtJfs86+n56+bLsQ4UdSGc4t/lK/c=) 3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 05:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:22:8c:23:38:3c:8d:b9:1d:69:43:e7:c4:db:23:e8:81:a5:3d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: May 12 03:47:05 2025 GMT Not After : May 15 14:49:05 2025 GMT Subject: CN=CDE0CEBE9F0263DB6C83C4B9963F86B1A210CCB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:bf:f3:9b:bb:09:1f:55:f5:ab:99:cf:50: 03:02:e3:58:0f:f1:80:ac:9d:94:a7:81:84:0d:4e: 93:5c:ca:07:2f:ce:e6:c4:8d:c3:6b:1c:46:a5:a8: 91:d8:c3:41:11:10:e1:50:22:1a:24:5b:ed:2d:f2: 22:99:d8:16:20:dd:46:ce:ff:ea:cd:7c:8d:b1:55: 53:e2:8c:d0:cc:32:c8:0c:de:a3:40:8b:6c:a8:81: 35:94:a7:59:b3:dd:87:2a:de:8d:d4:9b:53:1e:2e: ee:08:cf:97:74:be:4f:71:ca:e3:13:cc:5d:87:f5: a7:ff:22:1f:aa:15:70:47:51:bc:60:37:3c:69:d8: a3:54:9f:3a:17:28:7b:88:5e:15:6c:4c:ee:e3:43: 32:16:8f:66:97:f7:9c:4c:4a:02:56:6a:44:c6:86: b7:97:94:fb:bc:86:f1:ac:2b:08:d4:23:7e:18:a6: d2:0f:1c:64:01:82:8f:af:a4:f3:9c:63:f2:fd:1f: ee:df:ed:be:5c:ff:3b:7c:ac:ba:a8:07:d1:74:09: 3d:cb:80:2a:f3:55:b8:99:df:99:c3:36:20:6a:9e: 2c:00:86:e0:24:aa:53:fc:cf:b8:44:fc:38:63:a7: 39:0e:e1:96:ac:aa:cc:cb:be:f9:ac:6b:2a:6b:e8: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:CE:BE:9F:02:63:DB:6C:83:C4:B9:96:3F:86:B1:A2:10:CC:B3 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4b:53:da:a4:52:c5:ec:73:ce:cd:73:75:bd:25:09:89:cb: e4:96:5f:8f:15:2a:f0:22:35:f6:b0:37:3c:59:71:3a:1b:51: 47:f9:77:5a:0a:0e:0e:6c:79:1d:cb:ee:22:60:9c:f0:81:54: b0:39:b8:b1:fa:34:b9:5c:e9:7b:fc:4f:be:de:62:55:58:26: 9c:4f:1b:78:dd:08:b9:bf:1e:c0:74:7c:b6:2d:2a:78:fe:91: bf:c9:2b:a1:6a:db:4d:b3:24:d3:20:34:8f:9b:72:d1:de:c6: be:b7:2b:7d:40:17:15:9f:3e:4a:0d:b3:21:3d:e6:3a:37:e8: 06:a7:0d:7d:bc:6d:6b:e7:2d:de:88:8e:f1:60:8e:b3:d5:35: 1d:d1:65:c0:4f:89:34:04:fe:97:11:7d:39:f3:01:8b:21:6b: 01:40:c7:b5:91:25:46:80:1f:0c:49:92:72:0f:9c:b6:7a:20: b3:08:99:83:0c:5c:31:7f:0e:87:25:f2:bb:8e:c1:80:18:c2: ab:ec:b3:4d:c2:23:4d:c6:5f:83:8f:b1:b8:da:d3:19:19:c2: eb:30:7e:7a:d5:f7:29:4a:72:4d:79:cd:aa:d3:25:6f:62:5a: 42:86:d5:67:28:d9:d7:02:19:32:79:25:01:e3:fe:63:2c:8c: 06:7c:73:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyKMIzg8jbkdaUPnxNsj6IGlPfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTA1MTIwMzQ3MDVaFw0yNTA1MTUxNDQ5MDVaMDMxMTAvBgNV BAMTKENERTBDRUJFOUYwMjYzREI2QzgzQzRCOTk2M0Y4NkIxQTIxMENDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+b/zm7sJH1X1q5nPUAMC41gP 8YCsnZSngYQNTpNcygcvzubEjcNrHEalqJHYw0EREOFQIhokW+0t8iKZ2BYg3UbO /+rNfI2xVVPijNDMMsgM3qNAi2yogTWUp1mz3Ycq3o3Um1MeLu4Iz5d0vk9xyuMT zF2H9af/Ih+qFXBHUbxgNzxp2KNUnzoXKHuIXhVsTO7jQzIWj2aX95xMSgJWakTG hreXlPu8hvGsKwjUI34YptIPHGQBgo+vpPOcY/L9H+7f7b5c/zt8rLqoB9F0CT3L gCrzVbiZ35nDNiBqniwAhuAkqlP8z7hE/DhjpzkO4ZasqszLvvmsaypr6IINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzeDOvp8CY9tsg8S5lj+GsaIQzLMwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJLU9qkUsXsc87Nc3W9JQmJy+SWX48VKvAi NfawNzxZcTobUUf5d1oKDg5seR3L7iJgnPCBVLA5uLH6NLlc6Xv8T77eYlVYJpxP G3jdCLm/HsB0fLYtKnj+kb/JK6Fq202zJNMgNI+bctHexr63K31AFxWfPkoNsyE9 5jo36AanDX28bWvnLd6IjvFgjrPVNR3RZcBPiTQE/pcRfTnzAYshawFAx7WRJUaA HwxJknIPnLZ6ILMImYMMXDF/Docl8ruOwYAYwqvss03CI03GX4OPsbja0xkZwusw fnrV9ylKck15zarTJW9iWkKG1Wco2dcCGTJ5JQHj/mMsjAZ8cyU= -----END CERTIFICATE-----Generated at Mon May 12 07:58:10 2025 by rpki-client