$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft File: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft (raw, json) Hash identifier: yDUO3uBNh0t+EFUwoLwWiOvgpVA3QbTVbgs0wl/oZW8= Subject key identifier: 3D:F9:47:26:08:71:4C:FB:15:63:B6:41:94:9B:DB:2E:DD:D1:9B:52 Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Certificate serial: 6752B06FD5E00FF5C0BADE4030A97EF9F767D904 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft Manifest number: A9 Signing time: Sun 15 Jun 2025 11:00:49 +0000 Manifest this update: Sun 15 Jun 2025 10:55:49 +0000 Manifest next update: Wed 18 Jun 2025 18:33:49 +0000 Files and hashes: 1: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl (hash: 1vdgQ7J055dyqhcplF5M8fgla6cqAIhvL4Hu3KycOsM=) 2: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: Hz+bwv5TeiqLZz4vHu5RdAv/BqFZcBIfsejW6ExngYw=) 3: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: pleM7zjt401D1BJf2sqrcL6s2yWcWR5KklAwpJnySCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:52:b0:6f:d5:e0:0f:f5:c0:ba:de:40:30:a9:7e:f9:f7:67:d9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Validity Not Before: Jun 15 10:55:49 2025 GMT Not After : Jun 18 18:33:49 2025 GMT Subject: CN=3DF9472608714CFB1563B641949BDB2EDDD19B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:3c:a0:1a:bc:7c:5a:5c:35:19:54:9c:a6: fd:b0:fc:85:c6:8b:c8:7b:5f:b0:5e:db:0f:7e:58: 84:d0:5e:8f:bc:a8:1b:d0:17:bd:c1:8e:8e:f5:5b: bb:d6:08:28:ad:56:24:6d:68:e2:c3:6f:3f:d0:ee: 62:63:82:86:69:e8:93:04:69:04:7e:cc:ba:ed:cc: 7d:68:40:b0:00:a4:96:42:e3:00:70:c1:d6:16:f4: 61:7d:0e:8c:e2:85:50:25:5b:df:86:96:c8:d9:a7: 96:6a:0f:35:bf:6a:76:56:88:e3:cd:5b:a2:29:cb: 93:ba:95:9b:9e:58:f7:bd:ed:f3:24:55:ed:cf:ab: dd:85:a8:49:9e:93:f0:f2:2f:60:ec:98:86:f2:e1: 0f:7c:34:65:09:7b:1c:cd:ba:a4:df:96:a4:f4:dd: 46:2a:57:b1:bf:08:32:29:9f:09:80:a3:60:c5:d6: f5:23:75:63:13:49:50:30:20:9d:a4:d5:c9:51:48: 45:ec:f2:4f:f5:fc:98:35:20:9d:de:8b:21:fb:d2: fe:e5:b8:8e:7e:9d:06:ae:73:62:a7:d9:21:3d:7e: dd:87:1e:86:28:95:20:73:df:be:8f:23:2d:8e:41: 6d:91:63:53:c8:a7:77:87:39:f5:85:83:f3:91:15: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F9:47:26:08:71:4C:FB:15:63:B6:41:94:9B:DB:2E:DD:D1:9B:52 X509v3 Authority Key Identifier: keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9c:99:f4:e8:60:7b:e0:aa:96:07:97:50:86:03:b2:8f:e4: 7e:48:73:d0:0f:62:f5:08:3b:8c:c6:43:53:b3:fd:54:5e:b6: aa:05:56:25:2f:ee:97:f2:c1:5b:0b:9b:2c:dd:8a:78:7e:85: b2:02:bd:6b:f0:4c:f0:a7:28:95:67:74:1b:7f:7b:6c:22:ee: 8a:c4:18:39:28:5a:9f:a5:c6:e6:82:2f:ac:6a:d8:77:3c:f3: f8:e9:e4:4d:de:8f:d8:30:8d:84:0d:43:4e:bd:a6:61:33:74: 97:eb:e0:4d:24:89:9b:ec:ee:32:21:74:42:53:84:68:6f:e2: 71:4b:43:a1:92:12:3d:1d:c2:43:d0:fd:6d:f0:a7:32:48:d3: b7:f4:bd:05:27:4f:48:dd:f6:dc:97:f4:91:2b:a5:59:6f:07: 01:ec:7e:07:17:a8:d9:8c:4b:49:8c:ec:35:83:a5:9d:66:1a: 85:14:22:3e:af:09:81:d2:22:c8:90:c6:bb:31:97:88:1d:52: 5d:f6:b1:81:e7:d9:c7:23:f4:b5:24:1e:f4:ae:f1:ad:98:8c: 6b:a0:16:af:49:ee:5d:ee:85:35:37:02:89:75:d7:8c:33:cd: ef:83:c7:86:b6:bc:5b:6f:dc:e8:52:32:a5:ca:da:7b:81:38: 2c:6f:7f:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1Kwb9XgD/XAut5AMKl++fdn2QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RF NTY4ODI0NDAeFw0yNTA2MTUxMDU1NDlaFw0yNTA2MTgxODMzNDlaMDMxMTAvBgNV BAMTKDNERjk0NzI2MDg3MTRDRkIxNTYzQjY0MTk0OUJEQjJFREREMTlCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyTygGrx8Wlw1GVScpv2w/IXG i8h7X7Be2w9+WITQXo+8qBvQF73Bjo71W7vWCCitViRtaOLDbz/Q7mJjgoZp6JME aQR+zLrtzH1oQLAApJZC4wBwwdYW9GF9DozihVAlW9+GlsjZp5ZqDzW/anZWiOPN W6Ipy5O6lZueWPe97fMkVe3Pq92FqEmek/DyL2DsmIby4Q98NGUJexzNuqTflqT0 3UYqV7G/CDIpnwmAo2DF1vUjdWMTSVAwIJ2k1clRSEXs8k/1/Jg1IJ3eiyH70v7l uI5+nQauc2Kn2SE9ft2HHoYolSBz376PIy2OQW2RY1PIp3eHOfWFg/ORFa/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPflHJghxTPsVY7ZBlJvbLt3Rm1IwHwYDVR0j BBgwFoAUvKDB71pKs670JeFauJoZzeVogkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmU3ZGFjYy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC9CQ0EwQzFFRjVB NEFCM0FFRjQyNUUxNUFCODlBMTlDREU1Njg4MjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RFNTY4 ODI0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5 Q0RFNTY4ODI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGcmfToYHvgqpYHl1CGA7KP5H5Ic9APYvUI O4zGQ1Oz/VRetqoFViUv7pfywVsLmyzdinh+hbICvWvwTPCnKJVndBt/e2wi7orE GDkoWp+lxuaCL6xq2Hc88/jp5E3ej9gwjYQNQ069pmEzdJfr4E0kiZvs7jIhdEJT hGhv4nFLQ6GSEj0dwkPQ/W3wpzJI07f0vQUnT0jd9tyX9JErpVlvBwHsfgcXqNmM S0mM7DWDpZ1mGoUUIj6vCYHSIsiQxrsxl4gdUl32sYHn2ccj9LUkHvSu8a2YjGug Fq9J7l3uhTU3Aol114wzze+Dx4a2vFtv3OhSMqXK2nuBOCxvf9A= -----END CERTIFICATE-----Generated at Mon Jun 16 17:05:23 2025 by rpki-client