$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: 5s7K9Xg1xv3b6bFKhhREFg6ICSU0aeRPOftD/IkJk5g= Subject key identifier: B6:AE:A6:0B:6A:B5:A4:BC:A5:9C:B4:49:91:8E:A6:04:75:ED:BD:B8 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 4AA948B9EB65FE1C451ADBEC6DA6CB6911F5207C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02C8 Signing time: Tue 06 May 2025 10:01:50 +0000 Manifest this update: Tue 06 May 2025 09:56:50 +0000 Manifest next update: Fri 09 May 2025 19:32:50 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: ek6gGRSJBDm02jsFXVpT12UYDa7q7bffT7NcS14W6Qc=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=) 5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 19:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a9:48:b9:eb:65:fe:1c:45:1a:db:ec:6d:a6:cb:69:11:f5:20:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: May 6 09:56:50 2025 GMT Not After : May 9 19:32:50 2025 GMT Subject: CN=B6AEA60B6AB5A4BCA59CB449918EA60475EDBDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:58:18:8e:96:e0:b9:32:ee:be:a3:a4:f3: 76:db:12:33:f1:bc:41:e5:e5:14:74:ca:c4:52:fe: c4:4a:cc:bf:c0:bc:bf:60:6e:93:48:ba:f7:8b:64: cb:b1:79:02:3d:fc:4d:df:a8:ce:e3:39:52:7e:4e: 7d:56:e9:70:81:c3:3f:c9:f8:31:a6:76:06:ba:d2: f2:a6:93:0d:e7:b1:4f:cb:38:3b:db:3f:31:de:ee: 07:ec:b7:10:04:3a:67:35:50:11:93:2e:37:48:f0: 52:3b:2d:d9:14:05:cf:ab:15:66:3c:5a:8a:59:12: 32:be:cc:bf:0c:91:67:ad:f1:d1:fd:3c:c5:e9:46: 4c:32:16:4b:db:4b:4d:88:74:1e:c7:a0:fc:04:ba: 59:6d:23:be:a3:ca:cf:94:14:0c:a9:36:0a:4f:6c: 56:8e:57:ab:ec:bb:75:59:85:a8:7e:97:2d:7c:95: 3e:1b:e4:2f:39:8d:58:65:e9:d5:25:19:fc:4a:05: 3b:91:e2:9a:78:92:3f:6d:3d:2e:10:3d:6e:e4:02: c2:42:cc:11:92:b6:96:85:f8:57:fd:e8:c2:dd:e6: 59:44:2d:c7:d1:d4:65:90:1d:bd:24:6c:ff:48:05: 61:9b:cd:a0:8b:d1:52:4f:25:2d:8b:e6:fc:da:0c: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AE:A6:0B:6A:B5:A4:BC:A5:9C:B4:49:91:8E:A6:04:75:ED:BD:B8 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:99:4f:c2:3c:b4:8b:6c:1c:eb:f4:cd:53:80:31:77:8d:7e: a1:91:bc:4f:a3:b1:4a:7c:c6:96:af:b5:17:c7:d9:e7:c6:3c: 7d:d8:3d:96:0e:63:3c:a3:49:5c:28:80:04:f1:30:d8:15:0d: 34:76:45:92:ca:48:ef:2a:ef:9d:49:a0:4a:50:7c:b5:ab:3f: 5c:8d:10:d9:31:33:df:67:50:70:ac:78:ab:dd:a1:de:15:b4: 02:a1:f3:dd:e0:72:39:4b:57:10:5a:6e:0d:8d:37:07:80:74: af:1f:d4:19:36:05:99:96:35:19:74:a0:d5:bf:1b:cd:94:0d: 88:69:cc:3a:e3:bd:b2:8c:05:d7:a5:e3:48:86:a5:73:1b:b6: 22:3d:80:55:07:d3:00:42:e1:51:ee:d2:e3:05:26:61:9b:06: 95:b1:7c:36:a2:46:14:53:82:98:23:5e:65:e7:c6:15:3c:b3: f6:aa:50:e9:03:d7:23:c8:02:15:2f:6e:24:88:ca:0f:76:f4: 72:e4:f2:01:9f:b1:e5:b9:16:f4:69:13:87:d1:62:ee:af:67: fb:bc:01:a9:5f:7d:21:3c:ec:30:b4:74:dd:fd:fa:d5:0d:91: 76:9f:5e:7f:86:c2:98:ba:96:57:07:e7:76:d2:ee:29:18:9f: 1a:67:66:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqlIuetl/hxFGtvsbabLaRH1IHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA1MDYwOTU2NTBaFw0yNTA1MDkxOTMyNTBaMDMxMTAvBgNV BAMTKEI2QUVBNjBCNkFCNUE0QkNBNTlDQjQ0OTkxOEVBNjA0NzVFREJEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAlgYjpbguTLuvqOk83bbEjPx vEHl5RR0ysRS/sRKzL/AvL9gbpNIuveLZMuxeQI9/E3fqM7jOVJ+Tn1W6XCBwz/J +DGmdga60vKmkw3nsU/LODvbPzHe7gfstxAEOmc1UBGTLjdI8FI7LdkUBc+rFWY8 WopZEjK+zL8MkWet8dH9PMXpRkwyFkvbS02IdB7HoPwEulltI76jys+UFAypNgpP bFaOV6vsu3VZhah+ly18lT4b5C85jVhl6dUlGfxKBTuR4pp4kj9tPS4QPW7kAsJC zBGStpaF+Ff96MLd5llELcfR1GWQHb0kbP9IBWGbzaCL0VJPJS2L5vzaDAKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtq6mC2q1pLylnLRJkY6mBHXtvbgwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuZT8I8tItsHOv0zVOAMXeNfqGRvE+jsUp8 xpavtRfH2efGPH3YPZYOYzyjSVwogATxMNgVDTR2RZLKSO8q751JoEpQfLWrP1yN ENkxM99nUHCseKvdod4VtAKh893gcjlLVxBabg2NNweAdK8f1Bk2BZmWNRl0oNW/ G82UDYhpzDrjvbKMBdel40iGpXMbtiI9gFUH0wBC4VHu0uMFJmGbBpWxfDaiRhRT gpgjXmXnxhU8s/aqUOkD1yPIAhUvbiSIyg929HLk8gGfseW5FvRpE4fRYu6vZ/u8 AalffSE87DC0dN39+tUNkXafXn+Gwpi6llcH53bS7ikYnxpnZrE= -----END CERTIFICATE-----Generated at Wed May 7 19:33:51 2025 by rpki-client