$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: y7caUslw2a7p8GS3j3ix+Ez5F61D0lIiI3+J7kx2O0g= Subject key identifier: 16:2C:05:C6:D4:8A:86:89:89:3C:AC:61:66:65:B7:1C:7D:39:6E:FE Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 0358495CA56112BAD664EFAFB526C6182A5C91F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 022E Signing time: Tue 17 Jun 2025 07:21:23 +0000 Manifest this update: Tue 17 Jun 2025 07:16:23 +0000 Manifest next update: Fri 20 Jun 2025 17:38:23 +0000 Files and hashes: 1: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: Nw+xmmiDM9Bpytd0nFaqyWBrUgNltfK6pscNCWwLuhc=) 2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=) 3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=) 4: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) 5: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:58:49:5c:a5:61:12:ba:d6:64:ef:af:b5:26:c6:18:2a:5c:91:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Jun 17 07:16:23 2025 GMT Not After : Jun 20 17:38:23 2025 GMT Subject: CN=162C05C6D48A8689893CAC616665B71C7D396EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:db:78:2a:72:d6:5d:08:22:58:3b:9b:23: 3b:ba:fa:11:55:a1:e4:c7:70:ae:af:b7:d7:95:0e: 5d:e7:89:32:9e:46:8e:07:a1:b4:70:a7:7e:53:6d: 5e:39:7c:99:fa:d8:57:d7:cb:9b:6d:13:d3:38:27: a5:55:93:61:fb:a4:d8:f4:92:07:57:bc:d6:93:ce: e6:92:15:ce:d9:93:ba:21:14:12:7c:6f:b7:44:da: 50:55:71:ab:27:85:19:8c:e3:c8:47:d1:62:ec:4e: 45:5e:16:c7:13:e6:84:b5:88:36:c2:34:55:75:44: 54:38:8a:15:a7:79:79:1e:a7:6c:57:40:2a:76:bf: a4:ad:4f:5b:74:5b:04:50:21:4a:20:77:a4:92:01: da:58:c8:e3:c0:63:b2:5b:73:8d:04:de:32:40:91: f1:23:0f:b1:a5:f0:6b:2f:6b:34:43:35:83:cb:57: a7:50:e8:5b:69:57:aa:34:fd:67:4d:10:e6:e4:9d: ad:a1:ee:39:d6:d2:bd:b6:d9:04:d4:a3:6f:cb:37: 78:5a:3a:10:f6:f4:c6:1b:9f:e6:e6:45:62:4c:3e: 1a:ec:6e:73:e1:2d:c4:9a:85:22:a1:bb:3b:6c:47: 53:c5:61:9d:ad:0e:9d:f8:7e:77:69:9e:e0:7f:1c: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2C:05:C6:D4:8A:86:89:89:3C:AC:61:66:65:B7:1C:7D:39:6E:FE X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:aa:fc:cb:73:75:4b:50:79:2f:f7:1b:03:2e:af:92:06:ea: a2:c9:8f:bc:51:6a:51:f7:79:d7:cc:2c:31:16:31:e9:46:33: fe:31:5e:c7:52:b8:33:59:a8:ed:68:a5:70:d2:42:78:64:aa: fb:0c:71:f1:02:79:2b:31:d5:ac:dc:1c:af:48:05:43:a1:f3: 25:6d:e0:14:93:00:cc:30:f0:28:f1:ae:fc:a7:1f:fb:03:fc: fa:61:10:67:54:37:8d:1f:c1:39:e6:49:87:39:05:e9:42:38: 3a:a2:47:2e:66:74:95:a5:c9:78:d5:5d:81:60:78:1f:ce:bb: 3c:52:d6:64:5d:19:ea:72:12:26:5d:57:14:30:9e:e1:91:3d: d1:66:ed:27:6e:f4:2d:d8:f4:5b:47:4c:15:11:89:46:46:4d: 6b:76:31:33:f8:39:40:1e:2c:c7:76:45:ed:6a:06:f8:25:4a: 9a:86:fc:ee:58:aa:37:c7:4e:ca:de:93:a5:45:7f:27:85:57: 91:16:77:6a:a8:05:bb:ed:e3:b0:c7:4a:de:69:d9:be:7a:1e: 4c:92:6b:0e:a3:e1:e5:67:95:d1:fc:3a:d1:ee:3d:f5:65:1e: cf:34:7c:05:d9:15:b7:5b:9a:e4:74:3f:b3:91:0f:e6:b2:ec: d6:3a:e8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1hJXKVhErrWZO+vtSbGGCpckfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTA2MTcwNzE2MjNaFw0yNTA2MjAxNzM4MjNaMDMxMTAvBgNV BAMTKDE2MkMwNUM2RDQ4QTg2ODk4OTNDQUM2MTY2NjVCNzFDN0QzOTZFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBdt4KnLWXQgiWDubIzu6+hFV oeTHcK6vt9eVDl3niTKeRo4HobRwp35TbV45fJn62FfXy5ttE9M4J6VVk2H7pNj0 kgdXvNaTzuaSFc7Zk7ohFBJ8b7dE2lBVcasnhRmM48hH0WLsTkVeFscT5oS1iDbC NFV1RFQ4ihWneXkep2xXQCp2v6StT1t0WwRQIUogd6SSAdpYyOPAY7Jbc40E3jJA kfEjD7Gl8GsvazRDNYPLV6dQ6FtpV6o0/WdNEObkna2h7jnW0r222QTUo2/LN3ha OhD29MYbn+bmRWJMPhrsbnPhLcSahSKhuztsR1PFYZ2tDp34fndpnuB/HF2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFiwFxtSKhomJPKxhZmW3HH05bv4wHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuq/MtzdUtQeS/3GwMur5IG6qLJj7xRalH3 edfMLDEWMelGM/4xXsdSuDNZqO1opXDSQnhkqvsMcfECeSsx1azcHK9IBUOh8yVt 4BSTAMww8CjxrvynH/sD/PphEGdUN40fwTnmSYc5BelCODqiRy5mdJWlyXjVXYFg eB/OuzxS1mRdGepyEiZdVxQwnuGRPdFm7Sdu9C3Y9FtHTBURiUZGTWt2MTP4OUAe LMd2Re1qBvglSpqG/O5YqjfHTsrek6VFfyeFV5EWd2qoBbvt47DHSt5p2b56HkyS aw6j4eVnldH8OtHuPfVlHs80fAXZFbdbmuR0P7ORD+ay7NY66Bs= -----END CERTIFICATE-----Generated at Tue Jun 17 17:31:46 2025 by rpki-client