$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: bjA3m4U9Q5mBUkwNpEr1CgFY1+d1jsZwUFk4Knclplk= Subject key identifier: 37:4A:00:90:3C:74:5C:01:6E:61:8F:DC:60:DB:D1:97:A2:BD:EF:22 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 0468DF6273C1B1A442E33DBC54F80227E3E36943 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0449 Signing time: Mon 16 Jun 2025 18:52:03 +0000 Manifest this update: Mon 16 Jun 2025 18:47:03 +0000 Manifest next update: Fri 20 Jun 2025 05:35:03 +0000 Files and hashes: 1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) 2: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: BLcZfc/nNkPp7IfCNWb+WOnOUiLmWtaBWNBWlOFzzjE=) 3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:68:df:62:73:c1:b1:a4:42:e3:3d:bc:54:f8:02:27:e3:e3:69:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Jun 16 18:47:03 2025 GMT Not After : Jun 20 05:35:03 2025 GMT Subject: CN=374A00903C745C016E618FDC60DBD197A2BDEF22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:dc:5e:e9:29:33:b3:14:98:f3:90:a7:27: 89:b0:79:3a:b2:26:b1:6b:b0:7b:79:9d:3a:46:65: 3b:39:4f:4a:68:ed:33:b6:aa:1a:01:73:8d:12:9f: 1c:22:5d:40:69:9a:65:dc:ab:a4:f5:11:39:57:85: 07:2a:ae:ef:07:d5:eb:20:29:5c:5f:fe:15:dc:fc: ab:1c:b8:87:ac:6c:be:1e:cc:f7:6c:80:9a:26:22: 54:07:6f:f6:bf:7f:a1:eb:bd:04:e1:98:c7:36:e9: 67:df:47:da:66:e8:ab:8f:1d:c3:d6:8b:88:94:bc: a9:f5:d7:f0:1f:92:1e:9b:76:45:5b:3d:96:1a:94: 2e:4b:76:23:9d:7d:89:e6:da:92:d6:28:4f:e9:9f: df:a5:3b:8b:4f:52:84:60:68:40:86:bd:67:2f:a3: b9:a5:e2:5b:f2:e8:e3:55:82:4c:6b:48:c6:b0:9c: 0b:85:71:ca:b5:72:3f:1d:8a:8f:9e:8f:2d:0e:08: cb:89:0d:87:0e:ce:32:e6:2c:92:f2:a1:e6:f2:0a: 8b:0d:13:a9:a7:6d:05:b1:7c:a6:f9:96:47:d1:77: b2:05:31:c2:0c:8f:55:6f:3d:4b:07:cf:cd:31:ef: 30:f2:d1:d6:53:ae:b4:9b:ba:56:63:2c:19:87:9d: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:00:90:3C:74:5C:01:6E:61:8F:DC:60:DB:D1:97:A2:BD:EF:22 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:78:34:24:9e:ef:d6:9a:3b:5f:0a:61:36:16:8c:11:40:7d: 0e:2f:17:92:75:f4:ae:55:93:5e:97:ea:87:e6:0c:b7:dc:69: 12:30:a2:57:c4:77:f0:6e:ba:05:d3:51:e6:6a:03:dc:4d:14: d5:4d:a8:a1:ad:5f:6b:e0:af:82:4d:6b:2d:fb:28:1c:d1:26: 55:92:e5:b4:c5:4a:d0:f7:cc:89:0d:ac:58:0e:5b:ce:7e:3d: c9:75:01:cb:1f:da:ad:26:f9:78:4c:86:50:72:17:6f:da:79: 0c:81:61:3f:18:16:76:6a:5f:1f:bc:f7:22:b4:bf:e6:36:1c: d4:48:4b:3d:5c:a8:22:24:84:1d:fa:2a:e7:a6:38:f2:69:d1: 62:51:60:45:7a:3c:76:36:0b:20:82:0f:50:64:7e:77:c7:80: 7d:32:78:85:52:1c:09:b3:10:02:5f:dc:8d:ee:32:be:df:7a: 1e:a4:28:b0:da:b7:d9:42:e2:1d:6a:80:e2:46:43:c0:99:7c: 4e:8e:56:55:82:1f:96:b7:cd:db:5d:87:b4:ad:88:46:77:04: 43:d1:a0:a4:f6:1f:35:d6:a5:ca:39:96:e2:e2:6c:9a:a0:64: 37:fc:4a:22:43:26:77:d5:48:6c:d0:24:d8:1d:ca:9d:3c:79: dc:90:59:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGjfYnPBsaRC4z28VPgCJ+PjaUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTA2MTYxODQ3MDNaFw0yNTA2MjAwNTM1MDNaMDMxMTAvBgNV BAMTKDM3NEEwMDkwM0M3NDVDMDE2RTYxOEZEQzYwREJEMTk3QTJCREVGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdtxe6SkzsxSY85CnJ4mweTqy JrFrsHt5nTpGZTs5T0po7TO2qhoBc40SnxwiXUBpmmXcq6T1ETlXhQcqru8H1esg KVxf/hXc/KscuIesbL4ezPdsgJomIlQHb/a/f6HrvQThmMc26WffR9pm6KuPHcPW i4iUvKn11/Afkh6bdkVbPZYalC5LdiOdfYnm2pLWKE/pn9+lO4tPUoRgaECGvWcv o7ml4lvy6ONVgkxrSMawnAuFccq1cj8dio+ejy0OCMuJDYcOzjLmLJLyoebyCosN E6mnbQWxfKb5lkfRd7IFMcIMj1VvPUsHz80x7zDy0dZTrrSbulZjLBmHnb6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0oAkDx0XAFuYY/cYNvRl6K97yIwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAER4NCSe79aaO18KYTYWjBFAfQ4vF5J19K5V k16X6ofmDLfcaRIwolfEd/BuugXTUeZqA9xNFNVNqKGtX2vgr4JNay37KBzRJlWS 5bTFStD3zIkNrFgOW85+Pcl1Acsf2q0m+XhMhlByF2/aeQyBYT8YFnZqXx+89yK0 v+Y2HNRISz1cqCIkhB36KuemOPJp0WJRYEV6PHY2CyCCD1BkfnfHgH0yeIVSHAmz EAJf3I3uMr7feh6kKLDat9lC4h1qgOJGQ8CZfE6OVlWCH5a3zdtdh7StiEZ3BEPR oKT2HzXWpco5luLibJqgZDf8SiJDJnfVSGzQJNgdyp08edyQWW8= -----END CERTIFICATE-----Generated at Tue Jun 17 15:59:21 2025 by rpki-client