$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: Yy9PcM5w35VMaRkIrmClmKxxvmuqK80HFz4rHmH9YLE= Subject key identifier: 4F:7C:CA:3A:DC:40:7F:9E:9F:AE:54:74:7D:75:6B:01:33:CC:8E:2F Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 10B7AFDF8736A620704653C94CC685CF4DFDF0DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01D0 Signing time: Wed 07 May 2025 15:40:37 +0000 Manifest this update: Wed 07 May 2025 15:35:37 +0000 Manifest next update: Sat 10 May 2025 23:24:37 +0000 Files and hashes: 1: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: lkOBGNn2AJWIi+TpBDjIZfkm3ctiv119XuzaX4+/4fI=) 2: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: LJXr87vEpvd2IhwhI7/37OKSi62RHyKPuLcktcGtFno=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 23:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b7:af:df:87:36:a6:20:70:46:53:c9:4c:c6:85:cf:4d:fd:f0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: May 7 15:35:37 2025 GMT Not After : May 10 23:24:37 2025 GMT Subject: CN=4F7CCA3ADC407F9E9FAE54747D756B0133CC8E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:b3:61:da:b3:d1:ac:b2:a4:6a:81:48:54: a9:4e:9e:66:48:7a:30:9f:c4:1f:33:4c:d3:68:63: 93:e6:1f:86:74:61:9d:85:b0:f6:25:52:3f:96:d3: 0c:48:f4:66:ac:bd:e5:e9:72:de:39:5d:29:28:9b: 99:0e:8a:94:31:ec:b5:22:31:b0:72:a3:6c:36:7e: c1:92:6d:33:70:a4:57:cc:99:d1:c2:da:92:24:ca: 38:bd:74:82:b2:56:c2:02:9e:32:2d:51:5e:c7:f3: a1:61:c2:1c:83:0e:9f:2d:61:92:95:48:42:17:52: 64:29:a8:3e:01:6f:ec:1b:20:8d:67:d9:b0:78:81: 57:cc:3d:13:c6:fc:4e:00:5c:47:86:e9:90:3f:8b: c8:58:6f:eb:77:91:f5:b7:db:00:d4:15:1c:b5:72: fb:4c:4c:67:05:d1:ff:94:05:fd:bb:f7:03:bb:39: 92:33:c5:76:7a:c6:3f:8a:aa:45:af:a5:df:7f:a7: 27:09:4f:d7:70:8b:ef:83:2f:38:37:e0:76:df:4d: 21:52:91:84:a4:23:54:38:aa:0d:7f:44:a9:be:24: fd:3d:6e:13:72:89:3b:f2:60:da:f5:57:e4:81:2c: 9b:91:3d:54:6c:f2:51:17:e5:8d:62:e5:a9:0d:0e: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:CA:3A:DC:40:7F:9E:9F:AE:54:74:7D:75:6B:01:33:CC:8E:2F X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ca:fb:43:d2:2e:41:a6:5a:6b:f8:3a:90:79:58:18:91:7f: 9f:e7:2d:11:af:d7:b2:84:e8:d6:20:2f:55:a2:ec:11:bb:e3: 81:42:e5:f8:4a:77:06:da:15:5b:ce:cb:81:ce:38:7a:49:ce: ed:27:85:ea:a5:8f:96:43:98:32:11:83:d9:a9:d8:80:a8:21: 82:ed:87:b9:b5:e1:c5:86:d6:ed:de:c2:b3:3a:b4:76:48:05: ae:9d:c0:9f:c1:7c:cc:ca:33:78:47:96:6c:7c:ad:f9:96:e6: 5f:a4:3f:dc:c5:89:02:24:b1:3b:07:9d:62:73:97:52:b2:86: 32:ed:59:cc:a8:27:03:07:90:59:69:06:e3:4e:a9:53:75:db: 84:36:82:2a:95:ba:d4:58:36:1a:ae:8a:42:02:41:d3:3c:79: 7e:d2:39:d3:a4:d3:ce:33:45:a9:a4:3d:58:90:2b:56:40:78: 1a:e1:7f:a8:08:fd:38:40:57:33:27:b8:6e:b4:c6:91:07:93: de:fa:4d:fb:41:92:ca:4f:ef:ad:39:a3:c5:58:65:eb:ff:f0: 65:ea:42:d3:8a:74:74:44:2e:37:f1:e4:52:80:a9:c8:fc:46: e5:9c:87:af:df:01:48:91:04:a6:95:9d:7c:aa:40:97:5e:01: 16:6d:4e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELev34c2piBwRlPJTMaFz0398NowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA1MDcxNTM1MzdaFw0yNTA1MTAyMzI0MzdaMDMxMTAvBgNV BAMTKDRGN0NDQTNBREM0MDdGOUU5RkFFNTQ3NDdENzU2QjAxMzNDQzhFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpbNh2rPRrLKkaoFIVKlOnmZI ejCfxB8zTNNoY5PmH4Z0YZ2FsPYlUj+W0wxI9GasveXpct45XSkom5kOipQx7LUi MbByo2w2fsGSbTNwpFfMmdHC2pIkyji9dIKyVsICnjItUV7H86FhwhyDDp8tYZKV SEIXUmQpqD4Bb+wbII1n2bB4gVfMPRPG/E4AXEeG6ZA/i8hYb+t3kfW32wDUFRy1 cvtMTGcF0f+UBf279wO7OZIzxXZ6xj+KqkWvpd9/pycJT9dwi++DLzg34HbfTSFS kYSkI1Q4qg1/RKm+JP09bhNyiTvyYNr1V+SBLJuRPVRs8lEX5Y1i5akNDvCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3zKOtxAf56frlR0fXVrATPMji8wHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLK+0PSLkGmWmv4OpB5WBiRf5/nLRGv17KE 6NYgL1Wi7BG744FC5fhKdwbaFVvOy4HOOHpJzu0nheqlj5ZDmDIRg9mp2ICoIYLt h7m14cWG1u3ewrM6tHZIBa6dwJ/BfMzKM3hHlmx8rfmW5l+kP9zFiQIksTsHnWJz l1KyhjLtWcyoJwMHkFlpBuNOqVN124Q2giqVutRYNhquikICQdM8eX7SOdOk084z RamkPViQK1ZAeBrhf6gI/ThAVzMnuG60xpEHk976TftBkspP7605o8VYZev/8GXq QtOKdHRELjfx5FKAqcj8RuWch6/fAUiRBKaVnXyqQJdeARZtTiQ= -----END CERTIFICATE-----Generated at Thu May 8 02:48:33 2025 by rpki-client