$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: JjMiEMsi3Ht7sS4nUMf2P/qGhHN4tQllxcCAL+AiXUg= Subject key identifier: 85:E2:D0:D4:42:58:88:2C:41:BB:AA:96:92:CB:8A:98:26:3F:B3:98 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 20263F92BD383C496566FA9530085F7535AC6124 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 9F Signing time: Sat 14 Jun 2025 20:51:01 +0000 Manifest this update: Sat 14 Jun 2025 20:46:01 +0000 Manifest next update: Wed 18 Jun 2025 05:12:01 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: LkrFwqOPpzs5zV0cqzRbshMZbX2t2BtkJfrTGNSvUxE=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: gG5EppyDHgFXmE7T9OiVv1fbkRjxxg4sjIYZXKEqaww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:26:3f:92:bd:38:3c:49:65:66:fa:95:30:08:5f:75:35:ac:61:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Jun 14 20:46:01 2025 GMT Not After : Jun 18 05:12:01 2025 GMT Subject: CN=85E2D0D44258882C41BBAA9692CB8A98263FB398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:ef:6b:83:e8:38:d4:98:89:57:6e:fd:92: 0c:03:a4:89:f9:9c:0e:16:11:f6:89:74:c3:66:6a: ef:5b:c8:f9:8a:9d:46:1b:1e:87:eb:76:a9:83:eb: ff:76:ae:15:68:e9:a3:01:9e:8c:0a:fd:b2:55:b9: d2:e8:2e:f1:d2:eb:e8:96:41:74:62:7d:21:40:ef: e1:e7:7d:9f:d6:4e:37:31:ec:22:e7:39:6c:ad:fd: da:d0:00:4d:ec:b5:39:4a:58:3b:a3:82:c7:16:42: ca:54:9b:17:f6:a5:d8:14:b3:66:15:da:1c:83:cf: 52:62:0f:38:9e:88:23:3e:17:58:0c:fa:0d:52:b2: 66:62:f3:c3:10:ef:46:1f:4b:17:01:ac:37:7e:b6: 6f:4c:25:02:9e:8d:d2:63:b6:1b:2e:6e:df:2c:c6: ff:0b:f9:e1:37:c9:93:cc:14:72:fe:a5:e1:fc:18: b3:a7:01:60:54:22:b5:8d:7f:84:d1:3d:c0:81:68: 5a:94:c1:9f:6a:03:b8:b5:5d:84:c2:1a:79:53:e1: b3:3f:2b:11:83:fb:42:86:59:dd:9d:97:4c:4a:fc: fb:72:3c:57:e4:3e:71:2c:88:f2:61:19:e4:8d:60: cf:85:aa:e5:cc:28:e0:c1:3c:d3:83:5a:e2:52:0d: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E2:D0:D4:42:58:88:2C:41:BB:AA:96:92:CB:8A:98:26:3F:B3:98 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:f9:74:1e:40:a5:e2:73:ed:2b:b0:69:97:9b:34:0b:77:a7: a3:5d:6b:44:73:a6:f2:f8:e8:01:6b:75:85:e7:48:90:89:d2: b1:ee:02:54:00:0a:d4:a4:bb:11:3d:e8:14:3c:f7:04:b5:23: 88:66:48:82:ad:9c:06:92:73:49:1e:9a:73:bc:60:18:14:cf: be:c1:b2:da:f8:51:69:be:ee:00:d3:3a:22:47:97:7e:4a:e4: 6e:10:26:3b:72:8a:ce:9e:2b:bf:da:4f:ab:3b:d0:27:a0:d5: 09:29:2f:8d:a3:d6:69:36:d2:95:c4:5f:21:bf:8a:7c:51:83: 3c:85:70:f1:aa:8a:22:ba:6e:a3:f8:c3:26:aa:d3:18:4d:9d: 1d:67:23:32:03:ce:e4:a3:51:23:d8:3a:cd:4c:f1:5b:65:91: 21:06:3c:f9:e8:f8:7b:e4:d4:7d:08:d9:4d:40:b4:80:88:93: ed:b5:12:be:8d:50:8c:0b:cd:97:76:34:ac:8c:25:16:3b:6a: e4:1f:0e:6c:c5:d6:1f:40:2e:c3:00:96:e7:2e:bd:8d:a5:35: ae:9f:ff:f7:80:9e:47:37:01:10:82:2e:e8:d6:58:f0:38:82: b2:a4:19:d5:7f:28:6a:76:d8:1a:66:6a:d8:87:70:17:d1:53: 08:7b:8b:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICY/kr04PEllZvqVMAhfdTWsYSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA2MTQyMDQ2MDFaFw0yNTA2MTgwNTEyMDFaMDMxMTAvBgNV BAMTKDg1RTJEMEQ0NDI1ODg4MkM0MUJCQUE5NjkyQ0I4QTk4MjYzRkIzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKe9rg+g41JiJV279kgwDpIn5 nA4WEfaJdMNmau9byPmKnUYbHofrdqmD6/92rhVo6aMBnowK/bJVudLoLvHS6+iW QXRifSFA7+HnfZ/WTjcx7CLnOWyt/drQAE3stTlKWDujgscWQspUmxf2pdgUs2YV 2hyDz1JiDzieiCM+F1gM+g1SsmZi88MQ70YfSxcBrDd+tm9MJQKejdJjthsubt8s xv8L+eE3yZPMFHL+peH8GLOnAWBUIrWNf4TRPcCBaFqUwZ9qA7i1XYTCGnlT4bM/ KxGD+0KGWd2dl0xK/PtyPFfkPnEsiPJhGeSNYM+FquXMKODBPNODWuJSDd39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUheLQ1EJYiCxBu6qWksuKmCY/s5gwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOr5dB5ApeJz7SuwaZebNAt3p6Nda0RzpvL4 6AFrdYXnSJCJ0rHuAlQACtSkuxE96BQ89wS1I4hmSIKtnAaSc0kemnO8YBgUz77B str4UWm+7gDTOiJHl35K5G4QJjtyis6eK7/aT6s70Ceg1QkpL42j1mk20pXEXyG/ inxRgzyFcPGqiiK6bqP4wyaq0xhNnR1nIzIDzuSjUSPYOs1M8VtlkSEGPPno+Hvk 1H0I2U1AtICIk+21Er6NUIwLzZd2NKyMJRY7auQfDmzF1h9ALsMAlucuvY2lNa6f //eAnkc3ARCCLujWWPA4grKkGdV/KGp22BpmatiHcBfRUwh7i6Y= -----END CERTIFICATE-----Generated at Mon Jun 16 05:20:44 2025 by rpki-client