$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: oBLnWSAr3+4rSiTrtm2FbRp71LD9e0KpYNDnY6sxE7g= Subject key identifier: 62:A1:51:88:83:45:9E:AF:96:AC:5C:AC:62:BE:2E:AE:F1:69:BB:E7 Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 15DEDE31A1C2EBC6CE232537800E4D84B11C90F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 0422 Signing time: Mon 28 Apr 2025 05:00:56 +0000 Manifest this update: Mon 28 Apr 2025 04:55:56 +0000 Manifest next update: Thu 01 May 2025 12:43:56 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: wXlkmxwi7/34ddrk854GfkHymHTZJQyn7AeLJRM2mj8=) 2: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: BZvTCqodAe2AJIqLPyHIjl4iRkWm0FTRpDAyfMVLPMM=) 3: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: bwkHoMcFkTxg1cprLBeFyt3e6yMZZa8kwMNQMpEMTkk=) 4: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: 0N5j+ZERhxA6Ar8dT9/oyVhTL5hECc6nE7wFownHGuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:de:de:31:a1:c2:eb:c6:ce:23:25:37:80:0e:4d:84:b1:1c:90:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Apr 28 04:55:56 2025 GMT Not After : May 1 12:43:56 2025 GMT Subject: CN=62A1518883459EAF96AC5CAC62BE2EAEF169BBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:25:67:a5:f2:e1:d3:7b:fa:c3:7f:08:0e:79: 5e:44:6d:c6:f2:6d:f7:b1:f3:ce:6e:12:ea:f3:fd: 36:ce:87:79:07:70:26:09:c5:72:c5:e7:2c:11:7b: cb:d5:b5:07:b9:fd:5d:16:15:d0:36:25:d1:55:69: 32:a7:b9:99:3d:e0:d4:58:55:58:1d:d3:65:09:c2: 8e:59:ba:2c:94:ae:18:72:d7:70:29:da:c2:73:83: ae:0c:6b:1c:68:d3:44:da:0d:68:04:54:9b:e3:ce: c7:80:4f:0f:d6:70:62:37:0e:8c:fb:bc:e2:9c:aa: ea:c0:cd:77:a7:e2:76:0e:0b:24:c7:ac:37:8e:84: ab:ec:d7:1f:95:75:18:ca:45:62:15:fe:d5:5c:45: 2d:5c:29:ff:b3:ce:34:af:dd:fd:48:c8:97:32:56: f9:80:cf:c4:6d:6c:b7:aa:8a:7c:f4:6a:37:b7:7b: af:3f:18:5f:8e:04:5b:21:a3:c9:c9:f5:c6:8a:68: 78:9c:af:cd:b1:3e:26:d2:29:55:30:9d:46:80:db: 3b:53:41:0a:a6:a2:c2:5d:54:a4:7a:23:8f:c3:e9: 14:48:02:7b:3a:3e:d6:cc:9c:6b:e5:60:88:4c:da: 79:ff:27:a2:63:c8:fd:fd:38:8f:7b:56:bd:31:e3: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A1:51:88:83:45:9E:AF:96:AC:5C:AC:62:BE:2E:AE:F1:69:BB:E7 X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:25:e9:f9:34:4b:e2:67:d6:20:fe:2d:49:22:dd:29:5a:1f: 4e:5f:03:89:87:2e:ce:88:a7:56:56:ea:f2:9f:33:c6:03:14: 02:1b:e1:16:96:a1:97:e0:e6:5a:02:93:06:39:69:85:98:e6: cd:1a:aa:ea:0d:86:51:02:e2:e9:73:16:03:55:43:b3:43:3b: 12:6c:b5:5a:ff:36:1b:2c:ac:c6:50:ce:75:bb:38:c0:24:1b: 7b:4a:dc:48:fd:ff:6d:47:cf:4e:b2:e6:50:d0:92:8b:47:3c: e4:cb:dd:df:e2:7a:99:cb:cf:e0:6e:75:83:58:2c:90:07:b2: 84:8a:70:e7:0e:a2:cc:92:eb:3d:60:a3:48:30:ee:33:e3:7d: 87:a9:92:d0:78:70:c4:67:81:54:79:5e:62:97:b8:80:60:33: b8:ff:0c:05:98:1d:99:48:58:7f:89:18:27:2f:78:98:60:ff: 6d:f7:21:88:a1:e6:49:ff:7e:f4:46:ca:00:5d:28:c1:37:cb: 82:92:fe:5a:bf:72:52:54:9b:d8:2e:bd:d7:dd:76:4b:ec:fc: 8c:9c:cb:11:da:78:57:33:1c:9f:42:49:4b:67:a0:64:46:7b: 47:7e:f4:da:49:52:88:cd:34:c4:76:85:e0:9e:3a:d6:c3:af: 6f:ab:76:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFd7eMaHC68bOIyU3gA5NhLEckPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTA0MjgwNDU1NTZaFw0yNTA1MDExMjQzNTZaMDMxMTAvBgNV BAMTKDYyQTE1MTg4ODM0NTlFQUY5NkFDNUNBQzYyQkUyRUFFRjE2OUJCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJWel8uHTe/rDfwgOeV5Ebcby bfex885uEurz/TbOh3kHcCYJxXLF5ywRe8vVtQe5/V0WFdA2JdFVaTKnuZk94NRY VVgd02UJwo5ZuiyUrhhy13Ap2sJzg64Maxxo00TaDWgEVJvjzseATw/WcGI3Doz7 vOKcqurAzXen4nYOCyTHrDeOhKvs1x+VdRjKRWIV/tVcRS1cKf+zzjSv3f1IyJcy VvmAz8RtbLeqinz0aje3e68/GF+OBFsho8nJ9caKaHicr82xPibSKVUwnUaA2ztT QQqmosJdVKR6I4/D6RRIAns6PtbMnGvlYIhM2nn/J6JjyP39OI97Vr0x48X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYqFRiINFnq+WrFysYr4urvFpu+cwHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkl6fk0S+Jn1iD+LUki3SlaH05fA4mHLs6I p1ZW6vKfM8YDFAIb4RaWoZfg5loCkwY5aYWY5s0aquoNhlEC4ulzFgNVQ7NDOxJs tVr/NhssrMZQznW7OMAkG3tK3Ej9/21Hz06y5lDQkotHPOTL3d/iepnLz+BudYNY LJAHsoSKcOcOosyS6z1go0gw7jPjfYepktB4cMRngVR5XmKXuIBgM7j/DAWYHZlI WH+JGCcveJhg/233IYih5kn/fvRGygBdKME3y4KS/lq/clJUm9guvdfddkvs/Iyc yxHaeFczHJ9CSUtnoGRGe0d+9NpJUojNNMR2heCeOtbDr2+rdrY= -----END CERTIFICATE-----Generated at Wed Apr 30 07:35:02 2025 by rpki-client