$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: PSYwf3T2Drjyeyz+TdMJycJlEeFL/F2yZyaXpTwoyPo= Subject key identifier: 35:C5:A8:3C:B1:F5:F7:5F:68:19:61:A0:E7:54:6A:6F:BE:7B:68:D9 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 24AB1D305AF7930EBF8337964C9DDA735E8666A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 016E Signing time: Sun 04 May 2025 02:21:10 +0000 Manifest this update: Sun 04 May 2025 02:16:10 +0000 Manifest next update: Wed 07 May 2025 13:36:10 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) 3: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: Nvl0Z0rRUa+XQ9q4eds8bC3Th20ynLWQSyNo/x/hFZo=) 4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 13:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ab:1d:30:5a:f7:93:0e:bf:83:37:96:4c:9d:da:73:5e:86:66:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: May 4 02:16:10 2025 GMT Not After : May 7 13:36:10 2025 GMT Subject: CN=35C5A83CB1F5F75F681961A0E7546A6FBE7B68D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:0b:84:cd:95:e6:79:b0:f5:59:97:a4:8a: 2a:0e:7c:a9:83:1f:db:e4:ef:84:61:70:33:22:0d: 0b:e8:db:5c:d8:5c:ef:60:2f:e5:20:26:ff:1b:7d: 4d:83:47:eb:5b:04:8a:14:af:d6:9c:ac:79:ed:fe: b8:c4:5b:b9:9b:5b:e0:4d:ec:dd:ab:92:38:1a:93: 7e:73:f3:cc:30:7d:35:ed:bf:ab:b5:f4:18:a0:af: e3:b2:88:c7:ca:c7:c7:1c:3c:aa:51:a8:27:45:2c: ef:d9:72:3b:d8:7f:2c:7d:b9:d4:27:a6:78:b9:6c: 16:59:2f:f7:65:28:d1:ca:a1:98:fc:96:02:21:93: f4:20:b1:81:df:23:94:39:91:a4:00:db:ae:94:5f: 19:ad:cf:f5:27:e3:1f:29:ff:d2:d1:03:df:ee:17: 55:97:c7:b4:49:82:35:e8:1f:73:0c:20:bb:7c:15: de:a3:23:27:91:b1:b3:d7:1d:99:78:28:8b:50:d0: b2:c0:80:6c:48:56:6b:12:1a:3a:e7:9e:22:b7:5d: 56:76:32:17:78:49:1c:a5:29:0a:5d:f8:ac:18:c5: 3b:02:69:33:f3:b7:20:cb:73:c2:db:2e:ce:42:51: 7c:9f:63:f5:24:6e:d3:65:7c:a9:80:c7:90:02:82: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C5:A8:3C:B1:F5:F7:5F:68:19:61:A0:E7:54:6A:6F:BE:7B:68:D9 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:c6:86:3c:3a:06:16:c9:63:4e:10:d2:34:08:e8:20:a2: 49:ea:88:ac:47:9c:79:fe:e0:a0:ac:7f:97:63:14:ec:92:78: 58:02:b6:37:33:36:2e:37:0b:a2:f2:ab:f7:c7:be:a0:58:a3: 02:c7:51:07:1c:8e:5b:66:a9:45:fa:c3:6d:3f:28:3a:ef:7b: a4:69:fa:12:dd:4c:94:fa:48:97:c2:2f:36:c4:60:06:4b:eb: 81:4a:ad:fb:8a:bf:1f:75:27:54:c2:23:4b:93:bb:b6:47:c4: 91:bb:7d:ea:73:1f:3a:17:d2:7c:86:30:19:cb:c5:50:23:97: f4:5a:7b:9a:a3:f7:7a:00:1c:76:2d:95:67:3b:15:2e:a1:39: c7:6d:c3:82:a2:9d:d5:75:a0:53:c1:5b:e9:e5:04:59:f1:f9: 0a:47:5a:1f:cc:05:df:1a:41:62:ce:ea:90:5b:c4:ac:64:bc: 94:49:0e:ba:a8:3e:d3:b1:69:da:39:6f:5a:d8:5f:eb:6c:d3: 1d:fd:67:cb:2c:cc:1f:b4:cb:a3:fb:d7:e8:bb:9f:35:06:ad: 07:70:d0:2e:8d:6e:6b:ca:ea:4e:84:7d:72:d4:fb:12:c8:15: 0f:ae:f6:1e:e2:60:ae:d9:de:9d:0f:82:48:3b:df:5b:7a:19: 52:30:96:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKsdMFr3kw6/gzeWTJ3ac16GZqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA1MDQwMjE2MTBaFw0yNTA1MDcxMzM2MTBaMDMxMTAvBgNV BAMTKDM1QzVBODNDQjFGNUY3NUY2ODE5NjFBMEU3NTQ2QTZGQkU3QjY4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkYAuEzZXmebD1WZekiioOfKmD H9vk74RhcDMiDQvo21zYXO9gL+UgJv8bfU2DR+tbBIoUr9acrHnt/rjEW7mbW+BN 7N2rkjgak35z88wwfTXtv6u19Bigr+OyiMfKx8ccPKpRqCdFLO/ZcjvYfyx9udQn pni5bBZZL/dlKNHKoZj8lgIhk/QgsYHfI5Q5kaQA266UXxmtz/Un4x8p/9LRA9/u F1WXx7RJgjXoH3MMILt8Fd6jIyeRsbPXHZl4KItQ0LLAgGxIVmsSGjrnniK3XVZ2 Mhd4SRylKQpd+KwYxTsCaTPztyDLc8LbLs5CUXyfY/UkbtNlfKmAx5ACgnZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcWoPLH1919oGWGg51Rqb757aNkwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkzxoY8OgYWyWNOENI0COggoknqiKxHnHn+ 4KCsf5djFOySeFgCtjczNi43C6Lyq/fHvqBYowLHUQccjltmqUX6w20/KDrve6Rp +hLdTJT6SJfCLzbEYAZL64FKrfuKvx91J1TCI0uTu7ZHxJG7fepzHzoX0nyGMBnL xVAjl/Rae5qj93oAHHYtlWc7FS6hOcdtw4KindV1oFPBW+nlBFnx+QpHWh/MBd8a QWLO6pBbxKxkvJRJDrqoPtOxado5b1rYX+ts0x39Z8sszB+0y6P71+i7nzUGrQdw 0C6NbmvK6k6EfXLU+xLIFQ+u9h7iYK7Z3p0Pgkg731t6GVIwlvk= -----END CERTIFICATE-----Generated at Tue May 6 09:56:29 2025 by rpki-client