$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: /GezoEweXm+09tpV9YzqgpS+L8NlwfmkTGlaP4DJkyw= Subject key identifier: FD:9E:05:01:3D:8B:14:4D:87:69:DB:88:27:24:F0:22:0B:86:7E:44 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 5F27399F5132E1095D63EE4DD06BF3830EA0352F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 01D0 Signing time: Tue 29 Apr 2025 21:21:23 +0000 Manifest this update: Tue 29 Apr 2025 21:16:23 +0000 Manifest next update: Sat 03 May 2025 05:49:23 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: /qWK0LcoSyBB17DKdn5S/rBbFGOn/HEahhhfy2Twaq4=) 2: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 3: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 4: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: 9ispCh9i/tLkWusAMI8146jYep2gegO6SnlcXR3Rm3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 05:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:27:39:9f:51:32:e1:09:5d:63:ee:4d:d0:6b:f3:83:0e:a0:35:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Apr 29 21:16:23 2025 GMT Not After : May 3 05:49:23 2025 GMT Subject: CN=FD9E05013D8B144D8769DB882724F0220B867E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:ae:a5:4c:90:eb:f2:5d:bb:1a:13:91:cd: c0:91:5d:53:6c:e0:3c:da:4e:38:97:dd:5c:2d:ca: e8:e6:d8:b1:df:e0:70:bc:a3:02:82:ca:e2:91:0c: 15:31:27:4b:4c:8b:1b:85:5a:bc:e1:23:79:00:21: be:32:3d:a5:65:91:e8:61:56:56:b7:f8:fa:43:3c: 5e:28:34:41:36:17:58:78:4b:fb:d0:6d:a6:8a:09: b3:17:07:18:e1:bf:71:07:ea:21:9b:47:b4:c4:92: 34:8d:b4:5f:d2:94:5f:9a:1e:70:b7:7d:ca:08:20: f0:0f:7e:5e:ae:2b:af:29:b0:d7:42:4b:cf:ac:c7: 4c:58:0a:0f:c6:ac:93:4f:cb:50:9f:26:e2:13:af: 74:2a:b1:b1:c5:5f:7b:7e:86:04:70:90:50:7a:4b: c4:7c:97:3c:1d:a7:7b:dc:4b:ce:b8:1b:d1:d2:e3: 67:26:ce:51:c8:b4:7a:60:fb:ab:2a:4d:ef:f6:8c: e3:f3:10:cf:61:fa:f8:19:88:70:0b:41:62:4e:00: e1:24:80:a3:92:0d:e3:32:0e:20:de:63:9c:90:57: 96:4b:d7:93:cd:a5:ef:29:f5:9b:05:cd:24:86:a6: cf:38:ce:ea:56:63:6c:3d:1f:87:6e:0d:66:30:76: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9E:05:01:3D:8B:14:4D:87:69:DB:88:27:24:F0:22:0B:86:7E:44 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:19:72:3b:93:59:b6:a5:77:45:1f:c4:7b:ba:93:3c:0c: af:80:6d:4d:83:87:12:3f:79:e0:c6:77:d8:4f:fb:69:3e:1e: bc:9f:ba:20:6a:09:cd:0e:8c:38:19:5f:17:d9:8f:7a:76:52: e8:d3:a9:b1:e3:f9:29:65:79:ff:cd:ae:a4:30:97:f3:c3:18: c5:3f:2c:4f:af:7e:9c:c2:ea:28:7d:6f:52:34:20:79:07:ff: 09:af:b5:3e:7b:da:fc:1f:f6:27:31:16:ff:e7:cd:1b:2d:42: c6:85:f0:c1:e2:1b:34:1c:28:f5:78:36:0e:c1:3b:2e:bd:d4: e1:a6:76:a9:b9:01:87:77:cb:29:e6:d0:dd:eb:13:36:5e:13: dd:0c:73:0d:2b:c6:97:30:1b:fa:d9:cf:cd:89:07:4c:a1:da: ab:3e:14:5b:88:c1:37:2c:de:b7:49:70:8c:cb:2e:43:f9:48: 59:a1:a5:4f:de:c0:13:a6:a5:09:76:b0:20:fa:ab:df:a0:ab: 7c:a8:55:2d:bb:90:14:49:5a:e3:0f:d7:2c:62:f8:3e:6c:b2: 90:33:ce:df:ef:f4:54:79:c9:1d:f9:e3:2c:c0:4c:f2:a3:b5: 3b:d0:b9:bc:cb:bc:bf:c0:2e:73:98:57:60:44:5f:c5:82:81: e8:6b:75:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyc5n1Ey4QldY+5N0Gvzgw6gNS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTA0MjkyMTE2MjNaFw0yNTA1MDMwNTQ5MjNaMDMxMTAvBgNV BAMTKEZEOUUwNTAxM0Q4QjE0NEQ4NzY5REI4ODI3MjRGMDIyMEI4NjdFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWr66lTJDr8l27GhORzcCRXVNs 4DzaTjiX3Vwtyujm2LHf4HC8owKCyuKRDBUxJ0tMixuFWrzhI3kAIb4yPaVlkehh Vla3+PpDPF4oNEE2F1h4S/vQbaaKCbMXBxjhv3EH6iGbR7TEkjSNtF/SlF+aHnC3 fcoIIPAPfl6uK68psNdCS8+sx0xYCg/GrJNPy1CfJuITr3QqsbHFX3t+hgRwkFB6 S8R8lzwdp3vcS864G9HS42cmzlHItHpg+6sqTe/2jOPzEM9h+vgZiHALQWJOAOEk gKOSDeMyDiDeY5yQV5ZL15PNpe8p9ZsFzSSGps84zupWY2w9H4duDWYwdjzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Z4FAT2LFE2HaduIJyTwIguGfkQwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzeGXI7k1m2pXdFH8R7upM8DK+AbU2DhxI/ eeDGd9hP+2k+HryfuiBqCc0OjDgZXxfZj3p2UujTqbHj+Sllef/NrqQwl/PDGMU/ LE+vfpzC6ih9b1I0IHkH/wmvtT572vwf9icxFv/nzRstQsaF8MHiGzQcKPV4Ng7B Oy691OGmdqm5AYd3yynm0N3rEzZeE90Mcw0rxpcwG/rZz82JB0yh2qs+FFuIwTcs 3rdJcIzLLkP5SFmhpU/ewBOmpQl2sCD6q9+gq3yoVS27kBRJWuMP1yxi+D5sspAz zt/v9FR5yR354yzATPKjtTvQubzLvL/ALnOYV2BEX8WCgehrdb4= -----END CERTIFICATE-----Generated at Wed Apr 30 05:52:07 2025 by rpki-client