$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: pHgMTQWkHbNRLijy8xjk8HmoHtewJrQT0dBHYvkJXWE= Subject key identifier: B3:C7:87:DC:B8:26:DE:52:EC:20:3C:FB:EC:5C:60:9C:45:31:8A:10 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 2D042BFC6E44DB417D777A5C899726864E82654B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01CC Signing time: Sun 27 Apr 2025 20:51:23 +0000 Manifest this update: Sun 27 Apr 2025 20:46:23 +0000 Manifest next update: Thu 01 May 2025 04:54:23 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: Qh5iXUaLz085YiAao5lIIV9guQY+sWYceEeZZ6zBDJs=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) 3: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: pjZ1uqfXLs7YWscAhuzFJC5ykbIYKGDwoglwpw5XV3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 04:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:04:2b:fc:6e:44:db:41:7d:77:7a:5c:89:97:26:86:4e:82:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Apr 27 20:46:23 2025 GMT Not After : May 1 04:54:23 2025 GMT Subject: CN=B3C787DCB826DE52EC203CFBEC5C609C45318A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:15:c2:5e:e8:f3:c6:c0:3e:86:04:82:86: a6:d6:e9:f6:5f:16:bc:a6:43:6a:bd:66:25:83:d0: a3:3c:5d:77:5e:62:bf:94:8b:d3:cf:29:1b:07:ea: a8:cd:d0:3b:e6:d2:ae:0e:b8:e5:85:0b:de:70:7b: 3b:e7:76:d7:47:37:b6:9d:33:a3:b2:cb:c6:a6:08: ec:d1:3c:96:39:a7:a4:b3:b5:e4:5a:f1:eb:c3:03: fb:b4:14:26:ac:38:94:58:25:85:94:c9:c0:20:f8: 49:ea:a0:2a:ca:08:81:d8:2d:b5:d7:32:b3:ad:f6: 41:6d:63:c7:7c:62:c9:25:66:32:73:4a:62:66:b5: 87:5c:74:21:54:82:ad:ba:11:3c:bb:45:6d:bd:99: 6b:83:a3:82:a0:68:6b:54:09:76:3f:3e:01:e6:45: 75:ff:83:38:76:6e:6b:ae:b8:5d:b9:fc:e9:26:9d: 17:57:5e:d7:de:f5:1d:19:eb:f8:13:14:1f:76:5c: 6c:60:53:63:e0:d3:38:5e:a5:95:c6:b5:7b:da:40: 21:f0:64:8c:dc:ca:82:ad:dd:bc:61:c9:b2:d7:41: c0:1e:83:89:48:82:65:46:f6:9f:ff:bd:e1:2f:5b: 38:9b:b2:57:69:eb:5e:87:82:e5:5b:8a:6f:b0:10: 08:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C7:87:DC:B8:26:DE:52:EC:20:3C:FB:EC:5C:60:9C:45:31:8A:10 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9e:0b:cd:ad:8d:1c:22:8e:20:32:b7:10:b6:79:b5:86:93: 8d:7f:5b:d6:bc:66:14:c9:78:04:11:23:a7:e4:1a:26:5a:a1: 1a:52:19:d9:e3:02:5d:88:09:b0:f0:f4:96:70:67:3d:be:c6: f4:5b:51:0c:b2:90:85:ca:34:9d:a3:d2:b6:09:1a:d6:66:5d: 4f:b4:a9:68:85:a2:5c:a5:f4:12:73:8b:b5:53:46:47:26:36: 74:13:2b:1c:f7:a6:26:3b:91:c3:5c:1d:b8:02:d0:ad:b4:23: 93:bf:77:bd:42:35:95:c2:e4:9e:7d:67:a1:85:6d:45:27:64: ee:49:85:01:4b:5d:de:e6:05:ed:5e:9b:74:85:31:3b:00:2a: 1e:82:9e:8b:23:80:46:96:47:a0:27:7e:09:fc:49:96:f3:7b: de:a5:9e:cf:86:46:64:ef:68:ff:9d:e7:ed:7d:eb:8a:1e:2c: e4:db:2c:21:08:64:f6:2c:2a:ea:f9:f9:5e:61:bf:73:a9:cf: 7a:3b:90:25:ad:74:27:8c:5f:07:d3:4d:d4:7b:b3:a2:52:3e: ff:c5:57:b1:eb:ac:40:71:8e:fd:47:87:dd:32:fc:3a:d5:f5: 52:f4:ac:f3:2b:7e:a6:36:6a:09:d3:a9:57:a9:7a:82:10:a4: 69:ef:34:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQQr/G5E20F9d3pciZcmhk6CZUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA0MjcyMDQ2MjNaFw0yNTA1MDEwNDU0MjNaMDMxMTAvBgNV BAMTKEIzQzc4N0RDQjgyNkRFNTJFQzIwM0NGQkVDNUM2MDlDNDUzMThBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SRXCXujzxsA+hgSChqbW6fZf FrymQ2q9ZiWD0KM8XXdeYr+Ui9PPKRsH6qjN0Dvm0q4OuOWFC95wezvndtdHN7ad M6Oyy8amCOzRPJY5p6SzteRa8evDA/u0FCasOJRYJYWUycAg+EnqoCrKCIHYLbXX MrOt9kFtY8d8YsklZjJzSmJmtYdcdCFUgq26ETy7RW29mWuDo4KgaGtUCXY/PgHm RXX/gzh2bmuuuF25/OkmnRdXXtfe9R0Z6/gTFB92XGxgU2Pg0zhepZXGtXvaQCHw ZIzcyoKt3bxhybLXQcAeg4lIgmVG9p//veEvWzibsldp616HguVbim+wEAgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs8eH3Lgm3lLsIDz77FxgnEUxihAwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaeC82tjRwijiAytxC2ebWGk41/W9a8ZhTJ eAQRI6fkGiZaoRpSGdnjAl2ICbDw9JZwZz2+xvRbUQyykIXKNJ2j0rYJGtZmXU+0 qWiFolyl9BJzi7VTRkcmNnQTKxz3piY7kcNcHbgC0K20I5O/d71CNZXC5J59Z6GF bUUnZO5JhQFLXd7mBe1em3SFMTsAKh6CnosjgEaWR6Anfgn8SZbze96lns+GRmTv aP+d5+1964oeLOTbLCEIZPYsKur5+V5hv3Opz3o7kCWtdCeMXwfTTdR7s6JSPv/F V7HrrEBxjv1Hh90y/DrV9VL0rPMrfqY2agnTqVepeoIQpGnvNDw= -----END CERTIFICATE-----Generated at Wed Apr 30 01:12:29 2025 by rpki-client