$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: Fo8G09AzdTBAciYUMr1l2rRU2hfxuVKqrDaIEUn9A7c= Subject key identifier: 5F:98:F6:1E:5F:6D:13:4A:4C:C7:B5:EA:8F:C7:8A:0A:C7:62:5C:90 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 01A1E4E29AFE7853D4ECA3FBB1F9DA3CFD1999FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 8A Signing time: Mon 28 Apr 2025 11:20:59 +0000 Manifest this update: Mon 28 Apr 2025 11:15:59 +0000 Manifest next update: Thu 01 May 2025 13:18:59 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: I/y9kJ90T1908iKF00x83WokpsrU3F38UpbBv+PQDFE=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: LkrFwqOPpzs5zV0cqzRbshMZbX2t2BtkJfrTGNSvUxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:e4:e2:9a:fe:78:53:d4:ec:a3:fb:b1:f9:da:3c:fd:19:99:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Apr 28 11:15:59 2025 GMT Not After : May 1 13:18:59 2025 GMT Subject: CN=5F98F61E5F6D134A4CC7B5EA8FC78A0AC7625C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:63:ad:3d:ff:5b:ea:02:4a:74:2b:bb:48: 4b:ff:40:39:13:50:be:b1:ee:06:e4:d8:f6:7b:5f: b8:31:b0:df:29:e0:8c:f8:57:60:c4:f7:5f:8f:0a: d4:e3:72:8c:f1:2d:5f:6c:ac:1e:48:60:54:67:1e: df:3d:b8:2b:60:12:6e:b2:9e:2d:0c:3a:48:57:96: fb:2c:5b:0c:05:87:eb:8f:5c:73:4e:47:f8:86:31: 02:d1:8e:73:b7:1e:71:73:69:37:69:9c:c8:54:9a: 1f:17:71:f8:03:29:22:01:51:74:4f:8e:c2:0e:1b: 8c:ba:31:eb:55:ff:23:7f:59:0e:da:76:09:9f:dc: ce:69:d1:f2:a2:a2:35:64:cb:00:dc:14:d8:88:7a: da:be:c0:90:bd:77:b3:8c:ed:e4:87:8f:90:45:f5: 72:89:bd:a8:52:66:56:23:4a:c0:f9:73:2f:68:d9: e6:de:65:b0:e8:1d:2d:d0:f4:36:38:ae:3e:ab:73: 5a:c4:5f:3f:ea:fa:fa:12:cc:2e:15:33:2a:c8:a2: 28:e5:cc:44:d7:83:fd:10:86:86:35:5b:79:cf:00: 89:61:8b:21:78:61:71:0a:f7:39:93:33:cd:a3:58: 5e:50:b9:74:15:7c:56:d6:7c:68:60:be:98:d5:81: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:98:F6:1E:5F:6D:13:4A:4C:C7:B5:EA:8F:C7:8A:0A:C7:62:5C:90 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3a:5f:d8:a9:73:bd:e5:91:9e:44:6b:c6:2e:52:26:48:89: ba:05:04:f0:b9:b2:51:b8:cd:d3:aa:3a:0d:ed:70:cd:e3:78: 73:93:1e:b5:3d:53:8c:ea:3d:52:c9:e1:9a:38:f1:53:66:93: 4d:8a:36:0f:d6:82:f7:19:80:ad:b9:db:14:c7:d1:51:78:0e: 2c:0f:05:87:01:64:a6:5e:46:ca:49:08:a8:cc:75:07:4d:2a: e8:5f:1e:5e:eb:3e:f0:eb:85:69:5c:13:1c:65:6b:74:cd:76: 6a:df:ab:42:da:ab:72:fe:c7:12:70:cf:35:a5:6f:f0:96:bd: 13:c9:e7:c3:2c:85:5e:f4:22:95:56:fa:27:25:c8:e6:74:d8: 52:90:50:b8:72:ed:f0:c4:ef:e1:30:08:52:68:dd:40:01:c0: de:f0:b3:b5:ba:d0:a9:95:01:c2:a3:33:97:ab:b2:2c:dc:b7: 8f:ee:27:04:4a:a0:ed:f9:16:dc:b6:b5:90:ce:d5:90:75:fd: 86:3e:3d:08:df:a3:7a:45:ea:6e:53:c5:15:e7:5a:4f:9b:93: 16:4f:4f:27:24:c6:19:31:db:01:2e:80:69:75:c4:a8:84:6b: 7c:db:f9:c8:e2:32:73:37:33:0c:af:b9:dc:70:60:35:e3:d5: 2c:08:0a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaHk4pr+eFPU7KP7sfnaPP0Zmf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA0MjgxMTE1NTlaFw0yNTA1MDExMzE4NTlaMDMxMTAvBgNV BAMTKDVGOThGNjFFNUY2RDEzNEE0Q0M3QjVFQThGQzc4QTBBQzc2MjVDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfI2OtPf9b6gJKdCu7SEv/QDkT UL6x7gbk2PZ7X7gxsN8p4Iz4V2DE91+PCtTjcozxLV9srB5IYFRnHt89uCtgEm6y ni0MOkhXlvssWwwFh+uPXHNOR/iGMQLRjnO3HnFzaTdpnMhUmh8XcfgDKSIBUXRP jsIOG4y6MetV/yN/WQ7adgmf3M5p0fKiojVkywDcFNiIetq+wJC9d7OM7eSHj5BF 9XKJvahSZlYjSsD5cy9o2ebeZbDoHS3Q9DY4rj6rc1rEXz/q+voSzC4VMyrIoijl zETXg/0QhoY1W3nPAIlhiyF4YXEK9zmTM82jWF5QuXQVfFbWfGhgvpjVgU8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5j2Hl9tE0pMx7Xqj8eKCsdiXJAwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM6X9ipc73lkZ5Ea8YuUiZIiboFBPC5slG4 zdOqOg3tcM3jeHOTHrU9U4zqPVLJ4Zo48VNmk02KNg/WgvcZgK252xTH0VF4DiwP BYcBZKZeRspJCKjMdQdNKuhfHl7rPvDrhWlcExxla3TNdmrfq0Laq3L+xxJwzzWl b/CWvRPJ58MshV70IpVW+iclyOZ02FKQULhy7fDE7+EwCFJo3UABwN7ws7W60KmV AcKjM5ersizct4/uJwRKoO35Fty2tZDO1ZB1/YY+PQjfo3pF6m5TxRXnWk+bkxZP Tyckxhkx2wEugGl1xKiEa3zb+cjiMnM3MwyvudxwYDXj1SwICi8= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:35 2025 by rpki-client