$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft File: BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json) Hash identifier: wIVpYTcWXghBzOmWz84RG43VDoSIuIJ42mnZLT6VNBQ= Subject key identifier: 33:08:A4:4F:72:9E:57:71:6D:66:EF:C9:15:6D:5E:B0:89:3A:9D:DA Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 Certificate issuer: /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Certificate serial: 4ECA2F72346CFE99125D022CAD36097C653C9007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft Manifest number: 04E7 Signing time: Sun 15 Jun 2025 06:31:19 +0000 Manifest this update: Sun 15 Jun 2025 06:26:19 +0000 Manifest next update: Wed 18 Jun 2025 10:51:19 +0000 Files and hashes: 1: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: 7PxedSipsNTZyiV9fxG1frgwTkAEJ+zZ1V+jTL4oKzQ=) 2: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: IzocfQbAm6re271rkdggFPq3VGCEGAEeE3AdaJEm7ps=) 3: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: 8j0jRsDzFx9gAhfck8T4zhTfxl09chfxnR3KSNz+QGw=) 4: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: 4b/VN8UtlW7yEkSBXzIvjgsb3t13WioO5+7l+tm/Aus=) 5: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: JGFlFhH6nweNzgQ11TLkyB/qqq3QQSYaNP8bQViVV64=) 6: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: pbhhW/T4QYFpANmSbko4Pn15Hrxc5CLsjrjH+moakkM=) 7: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: BlERiRMKFqkgyqTsj7YKl6ODg1kHmptUNWRLGRCZ1OE=) 8: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: v92EWX5PrX2ocfEiVVqNZStsTUP7VHqvGQh9Jsm+CN4=) 9: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: vPGDL5Uz+m1Ri6z0hdVmq01za5aH2UUg8pKyvgRNgpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ca:2f:72:34:6c:fe:99:12:5d:02:2c:ad:36:09:7c:65:3c:90:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Validity Not Before: Jun 15 06:26:19 2025 GMT Not After : Jun 18 10:51:19 2025 GMT Subject: CN=3308A44F729E57716D66EFC9156D5EB0893A9DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:30:b9:ba:76:5b:1f:7c:28:9b:cf:77:cf: a6:07:ed:56:84:a7:99:9a:f1:c2:e6:75:09:86:5b: 21:f2:4f:55:66:1e:b4:f4:0e:ac:b6:45:c0:4a:10: b9:eb:fa:22:15:a0:da:95:7d:28:a2:0b:ff:44:8c: dc:a6:59:7f:80:5a:1c:11:66:e8:34:90:a5:e7:84: 47:92:05:be:65:69:0a:9f:6e:05:91:95:13:40:f4: d2:03:f7:a4:44:92:d4:8d:36:59:e3:6a:b3:80:ab: e3:6b:f3:3b:67:aa:31:7f:06:a1:1b:2c:49:e9:87: 78:f9:e7:ac:2e:c8:31:cf:83:39:64:c9:55:2d:35: 17:e6:69:ea:97:d4:d6:c1:a5:64:11:07:a5:c5:e5: fd:66:c9:57:59:6f:c9:7f:c4:ca:7e:70:d6:90:fd: 6c:63:1d:5b:f1:98:aa:4b:f7:c4:6c:e1:23:c4:14: c7:8a:0b:04:8e:dc:e7:06:10:74:16:da:0b:a1:3b: 7e:35:01:b6:7f:1b:e0:bd:7e:67:ef:83:bb:3a:d1: fa:ab:15:03:29:c2:44:77:3e:5c:c2:cc:63:5f:aa: 4c:93:ae:18:fd:60:b3:e6:01:2d:4f:8c:12:38:fd: 18:9c:e6:5e:bf:d1:06:e2:2e:05:36:09:18:59:45: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:08:A4:4F:72:9E:57:71:6D:66:EF:C9:15:6D:5E:B0:89:3A:9D:DA X509v3 Authority Key Identifier: keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:71:b7:21:e4:ce:6d:e2:11:8f:30:1b:38:ab:f8:86:28:fa: 43:a6:76:34:5a:9f:ed:e0:65:8b:76:76:b2:bb:69:7e:50:a5: ca:3e:39:db:ff:f4:7b:9d:01:a8:5c:c6:90:8b:8f:ce:f3:49: 70:1e:76:93:f1:64:f9:42:81:03:b3:fc:4c:a1:60:30:ce:43: 94:28:94:55:01:9e:0c:b4:64:37:9d:d5:e5:04:89:77:6f:b7: af:8b:20:c7:00:ea:2e:b5:4c:e7:2f:33:43:93:57:be:5e:d5: 31:d7:b9:50:13:b2:6c:25:1f:a1:88:d7:50:7e:a6:aa:09:51: c7:db:43:f5:73:56:8a:ef:db:ea:30:95:f1:41:f4:0f:9a:fd: 52:e5:a9:25:97:83:3f:46:3b:58:86:5c:ee:4a:86:4f:c2:ba: bd:cf:d0:89:69:8c:f4:4c:65:4e:27:6b:d6:88:a1:0b:f1:fa: c3:ad:b5:b6:13:8f:d3:2e:55:d8:af:38:ce:5a:94:36:0f:3d: 49:ec:21:79:55:a9:82:fb:45:ac:45:d8:f2:b2:f3:eb:4a:a0: 9a:16:4e:8c:cc:ff:c5:22:6a:cb:4b:2d:9d:1b:4a:2d:a2:6d: 5b:b2:14:90:8e:81:fe:b6:3e:86:f9:4d:81:8b:30:cd:7d:c7: 60:e5:7e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsovcjRs/pkSXQIsrTYJfGU8kAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy MDdGQTMzNzAeFw0yNTA2MTUwNjI2MTlaFw0yNTA2MTgxMDUxMTlaMDMxMTAvBgNV BAMTKDMzMDhBNDRGNzI5RTU3NzE2RDY2RUZDOTE1NkQ1RUIwODkzQTlEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbzC5unZbH3wom893z6YH7VaE p5ma8cLmdQmGWyHyT1VmHrT0Dqy2RcBKELnr+iIVoNqVfSiiC/9EjNymWX+AWhwR Zug0kKXnhEeSBb5laQqfbgWRlRNA9NID96REktSNNlnjarOAq+Nr8ztnqjF/BqEb LEnph3j556wuyDHPgzlkyVUtNRfmaeqX1NbBpWQRB6XF5f1myVdZb8l/xMp+cNaQ /WxjHVvxmKpL98Rs4SPEFMeKCwSO3OcGEHQW2guhO341AbZ/G+C9fmfvg7s60fqr FQMpwkR3PlzCzGNfqkyTrhj9YLPmAS1PjBI4/Ric5l6/0QbiLgU2CRhZRUTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMwikT3KeV3FtZu/JFW1esIk6ndowHwYDVR0j BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5 MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5 OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBxtyHkzm3iEY8wGzir+IYo+kOmdjRan+3g ZYt2drK7aX5Qpco+Odv/9HudAahcxpCLj87zSXAedpPxZPlCgQOz/EyhYDDOQ5Qo lFUBngy0ZDed1eUEiXdvt6+LIMcA6i61TOcvM0OTV75e1THXuVATsmwlH6GI11B+ pqoJUcfbQ/VzVorv2+owlfFB9A+a/VLlqSWXgz9GO1iGXO5Khk/Cur3P0IlpjPRM ZU4na9aIoQvx+sOttbYTj9MuVdivOM5alDYPPUnsIXlVqYL7RaxF2PKy8+tKoJoW TozM/8UiastLLZ0bSi2ibVuyFJCOgf62Pob5TYGLMM19x2DlfkY= -----END CERTIFICATE-----Generated at Tue Jun 17 01:37:42 2025 by rpki-client