$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: PQyzOrg/RHB3clddtTAHfvusK9VPG7XPe+wqBzvhOq8= Subject key identifier: A6:69:19:BE:F4:6E:C9:FD:3F:DF:20:C7:B6:45:6D:40:B4:E0:BE:F8 Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 3F8BE203CF0346CB6E9510094F5D38EF65BDC279 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 021E Signing time: Sat 10 May 2025 23:31:23 +0000 Manifest this update: Sat 10 May 2025 23:26:23 +0000 Manifest next update: Wed 14 May 2025 06:55:23 +0000 Files and hashes: 1: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: frCYT0bRSBqQ8W7wPJ/lziF0mzjQ0haMVi5YnfJgRi8=) 2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=) 3: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=) 4: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) 5: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8b:e2:03:cf:03:46:cb:6e:95:10:09:4f:5d:38:ef:65:bd:c2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: May 10 23:26:23 2025 GMT Not After : May 14 06:55:23 2025 GMT Subject: CN=A66919BEF46EC9FD3FDF20C7B6456D40B4E0BEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:b6:56:87:e4:84:d7:b8:9e:df:33:c0:64: 58:c6:43:5b:52:7f:69:1b:1b:bc:dd:c8:c3:85:b1: 39:83:23:92:16:79:b7:f9:f0:b1:32:78:34:ad:09: 00:01:a4:bd:bc:b9:fb:35:79:7b:1c:e3:c3:7f:52: e3:d5:3f:fa:2e:4d:cd:d2:e4:b3:5e:83:30:aa:04: 21:72:7b:aa:83:a8:a4:7a:c2:5d:38:9e:dc:4f:5b: 6e:bb:bd:03:4e:48:73:f4:c7:4b:bd:52:4f:57:2f: 4e:15:1e:8b:1f:3f:3a:63:47:0b:60:6f:04:29:ac: 98:78:2d:23:a3:38:e1:b8:f5:eb:94:73:ea:04:ec: db:da:c8:c1:40:16:09:fb:05:d2:f6:f0:d4:10:d0: ff:65:65:fd:56:f4:30:dc:59:e5:68:cc:84:92:d4: c9:eb:32:43:09:1e:d4:a6:ce:6a:c0:27:31:fb:b0: 80:9d:06:87:d0:16:74:a1:a8:76:6a:fa:aa:24:08: 02:4c:36:70:1a:41:18:e2:70:6f:74:b3:24:31:b5: 8e:ef:c8:92:f5:18:17:4f:d3:81:c6:4b:23:83:0a: ec:40:af:cb:c7:c2:c6:97:0d:5c:24:f0:1a:a0:24: e5:e2:ef:03:e1:54:c2:1e:eb:dd:f6:1d:34:33:8b: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:69:19:BE:F4:6E:C9:FD:3F:DF:20:C7:B6:45:6D:40:B4:E0:BE:F8 X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:18:bc:43:49:f9:95:84:5a:db:a0:3a:53:7f:8f:ee:d2:09: 9f:4e:ce:46:8d:77:73:d0:4a:e9:73:f4:e3:4e:4e:ab:20:34: d8:ca:ad:cf:bd:46:76:fb:60:f7:f1:3c:e8:1e:8f:17:67:27: f9:8e:02:79:cc:b5:16:29:ce:60:fd:8f:6b:a9:6f:24:f3:a0: aa:8c:a0:2f:2e:6a:f2:ce:9c:8d:b9:1b:83:84:38:85:5e:6f: c3:8b:c4:5a:9f:1e:b1:c8:4d:a2:66:bd:f7:62:1b:a2:bf:4e: 13:6a:c1:58:ba:23:b7:5f:35:0a:10:e6:bb:7d:19:f6:6a:1f: 73:fc:db:19:50:45:d4:95:45:ff:79:2e:31:06:15:a3:57:13: e7:7c:9c:19:3c:f5:28:58:3d:81:78:71:18:9f:9b:62:17:29: 17:4b:fa:c2:91:1b:48:18:53:d0:cd:2c:c8:69:93:90:e0:84: b9:74:d0:c6:02:d4:af:26:84:e6:49:47:84:7b:f0:e5:41:ce: a3:3f:11:83:31:a2:c5:f4:82:53:70:51:14:e5:19:24:b9:81: 48:4a:c5:cc:66:2a:22:64:5b:07:79:6e:a3:fd:3e:a4:3f:d6: 8c:92:1f:5e:d4:dc:7b:8f:f1:ef:73:25:4a:b5:c2:68:01:20: 63:3f:63:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4viA88DRstulRAJT10472W9wnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTA1MTAyMzI2MjNaFw0yNTA1MTQwNjU1MjNaMDMxMTAvBgNV BAMTKEE2NjkxOUJFRjQ2RUM5RkQzRkRGMjBDN0I2NDU2RDQwQjRFMEJFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+7ZWh+SE17ie3zPAZFjGQ1tS f2kbG7zdyMOFsTmDI5IWebf58LEyeDStCQABpL28ufs1eXsc48N/UuPVP/ouTc3S 5LNegzCqBCFye6qDqKR6wl04ntxPW267vQNOSHP0x0u9Uk9XL04VHosfPzpjRwtg bwQprJh4LSOjOOG49euUc+oE7NvayMFAFgn7BdL28NQQ0P9lZf1W9DDcWeVozISS 1MnrMkMJHtSmzmrAJzH7sICdBofQFnShqHZq+qokCAJMNnAaQRjicG90syQxtY7v yJL1GBdP04HGSyODCuxAr8vHwsaXDVwk8BqgJOXi7wPhVMIe6932HTQzi+jVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpmkZvvRuyf0/3yDHtkVtQLTgvvgwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMYvENJ+ZWEWtugOlN/j+7SCZ9OzkaNd3PQ Sulz9ONOTqsgNNjKrc+9Rnb7YPfxPOgejxdnJ/mOAnnMtRYpzmD9j2upbyTzoKqM oC8uavLOnI25G4OEOIVeb8OLxFqfHrHITaJmvfdiG6K/ThNqwVi6I7dfNQoQ5rt9 GfZqH3P82xlQRdSVRf95LjEGFaNXE+d8nBk89ShYPYF4cRifm2IXKRdL+sKRG0gY U9DNLMhpk5DghLl00MYC1K8mhOZJR4R78OVBzqM/EYMxosX0glNwURTlGSS5gUhK xcxmKiJkWwd5bqP9PqQ/1oySH17U3HuP8e9zJUq1wmgBIGM/Y2M= -----END CERTIFICATE-----Generated at Sun May 11 14:37:46 2025 by rpki-client