$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: NRhlVh58RhWWEtecScQ7K1sXlL0C+N/Is0zQPNQPkXs= Subject key identifier: 33:F0:D6:2D:39:9B:A6:EC:16:27:62:DC:88:A3:BA:EE:C2:67:02:9F Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 177E309DE28B9AF843F8F89E7C6F3AFFD5DB3DE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 0219 Signing time: Tue 29 Apr 2025 06:11:22 +0000 Manifest this update: Tue 29 Apr 2025 06:06:22 +0000 Manifest next update: Fri 02 May 2025 16:21:22 +0000 Files and hashes: 1: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=) 2: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=) 3: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=) 4: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: pAsnw1uu7p0An6YRVCjZ2CnGVG6mqYS14+4zlzMSdfA=) 5: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7e:30:9d:e2:8b:9a:f8:43:f8:f8:9e:7c:6f:3a:ff:d5:db:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Apr 29 06:06:22 2025 GMT Not After : May 2 16:21:22 2025 GMT Subject: CN=33F0D62D399BA6EC162762DC88A3BAEEC267029F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:13:56:1b:33:67:0d:d3:44:8e:be:99:16: 55:37:a1:94:a5:64:16:43:b9:2e:2b:0e:9a:6c:e4: c2:27:ba:c2:82:c9:c2:f1:a0:c2:2a:2f:7b:82:d6: 80:2c:59:4d:95:4a:c5:5d:dc:f7:cd:4d:fc:45:ca: 5a:fb:70:8f:a1:57:0a:fc:2e:42:1c:b1:2b:3b:39: a3:98:f9:b2:dc:63:54:ba:4e:41:31:ce:81:0b:07: f0:f4:f0:e0:9c:13:d9:ff:8d:ba:f0:d8:41:e1:42: 58:7b:46:a9:0f:3d:e8:0c:11:cb:37:65:25:f9:28: b3:82:78:e0:9a:7b:a2:fd:11:8d:6c:fe:a5:20:6b: e1:e3:4f:87:d9:be:af:eb:10:0f:e8:28:a3:11:af: 9e:49:f1:33:85:d9:12:1b:b3:e9:bd:79:5a:ea:7c: c1:9f:ab:9e:b1:1b:ab:fb:5e:b1:bb:99:bb:c4:ab: 50:b4:27:d1:66:ae:e4:14:7e:95:51:2f:59:5b:4d: a1:73:9c:6f:e5:aa:33:c8:39:48:32:51:1d:74:9c: 67:40:21:ac:89:a8:e0:71:59:c5:c7:aa:a8:af:2f: bc:03:6f:d3:9f:72:80:3c:78:bd:5e:ee:d6:9f:dc: 75:01:38:69:1f:d6:e7:d3:c8:7c:60:55:5b:7a:2e: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:D6:2D:39:9B:A6:EC:16:27:62:DC:88:A3:BA:EE:C2:67:02:9F X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2b:0f:03:e2:c1:0f:cd:06:85:73:11:6d:9c:71:49:8c:d4: 87:97:bb:05:df:f7:0f:fc:df:60:a0:8f:6a:47:6e:14:13:4a: b0:e5:7d:a3:d9:b9:e0:19:9d:95:5c:dd:6c:1b:46:2b:c9:2c: ba:ee:77:4c:04:b3:f4:26:e7:82:36:72:a2:dc:3c:45:ed:76: d7:80:0e:52:c8:bc:26:8b:97:d3:8f:05:ce:dd:db:3d:fc:ac: d5:5e:e8:19:12:81:ea:5a:99:d8:2e:33:ed:28:aa:ca:01:16: 15:98:6f:e3:5d:52:83:92:4b:91:0b:b3:d8:e3:61:1d:06:a6: 1a:35:90:ac:eb:9c:eb:05:f3:71:42:9b:87:0b:d6:d7:fe:c8: b7:8f:cc:19:65:25:55:90:f5:bc:dc:fb:90:b6:74:9c:c6:b2: 13:93:2f:6d:f3:b0:d9:d4:e6:13:de:5a:3c:79:f6:10:57:d2: e2:bc:a2:91:a7:6d:07:b9:fe:4e:6a:e7:b5:09:60:f0:5b:b1: ed:d1:a7:61:2b:d5:b0:51:4a:e4:25:e2:c5:18:df:eb:4a:0d: 3c:1c:68:a1:b2:5d:55:b0:c6:8d:c8:a3:51:70:64:f1:48:17: 59:74:43:c2:40:e8:9d:49:c2:c1:46:16:f4:8f:6e:3e:31:dd: 6a:80:b7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF34wneKLmvhD+PiefG86/9XbPeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTA0MjkwNjA2MjJaFw0yNTA1MDIxNjIxMjJaMDMxMTAvBgNV BAMTKDMzRjBENjJEMzk5QkE2RUMxNjI3NjJEQzg4QTNCQUVFQzI2NzAyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvBNWGzNnDdNEjr6ZFlU3oZSl ZBZDuS4rDpps5MInusKCycLxoMIqL3uC1oAsWU2VSsVd3PfNTfxFylr7cI+hVwr8 LkIcsSs7OaOY+bLcY1S6TkExzoELB/D08OCcE9n/jbrw2EHhQlh7RqkPPegMEcs3 ZSX5KLOCeOCae6L9EY1s/qUga+HjT4fZvq/rEA/oKKMRr55J8TOF2RIbs+m9eVrq fMGfq56xG6v7XrG7mbvEq1C0J9FmruQUfpVRL1lbTaFznG/lqjPIOUgyUR10nGdA IayJqOBxWcXHqqivL7wDb9OfcoA8eL1e7taf3HUBOGkf1ufTyHxgVVt6LsiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/DWLTmbpuwWJ2LciKO67sJnAp8wHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIArDwPiwQ/NBoVzEW2ccUmM1IeXuwXf9w/8 32Cgj2pHbhQTSrDlfaPZueAZnZVc3WwbRivJLLrud0wEs/Qm54I2cqLcPEXtdteA DlLIvCaLl9OPBc7d2z38rNVe6BkSgepamdguM+0oqsoBFhWYb+NdUoOSS5ELs9jj YR0Gpho1kKzrnOsF83FCm4cL1tf+yLePzBllJVWQ9bzc+5C2dJzGshOTL23zsNnU 5hPeWjx59hBX0uK8opGnbQe5/k5q57UJYPBbse3Rp2Er1bBRSuQl4sUY3+tKDTwc aKGyXVWwxo3Io1FwZPFIF1l0Q8JA6J1JwsFGFvSPbj4x3WqAt9Q= -----END CERTIFICATE-----Generated at Wed Apr 30 22:55:09 2025 by rpki-client