$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: ijtQ+N8xg4sT07cui6CRfiiS5Os8yfGu6o9jOLm9X54= Subject key identifier: 64:C8:E9:25:E4:16:2D:32:0D:A9:1D:9B:C4:54:EF:B5:62:86:3E:E2 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 3B4C848746AA832D2F1A132D2F70159A93F44DB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 02C5 Signing time: Tue 29 Apr 2025 14:21:49 +0000 Manifest this update: Tue 29 Apr 2025 14:16:49 +0000 Manifest next update: Fri 02 May 2025 17:09:49 +0000 Files and hashes: 1: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=) 2: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=) 3: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: oDZfXiM98HrHgppKT511JCKedKRHJmPSmCj1JD+CMEs=) 4: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 17:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4c:84:87:46:aa:83:2d:2f:1a:13:2d:2f:70:15:9a:93:f4:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Apr 29 14:16:49 2025 GMT Not After : May 2 17:09:49 2025 GMT Subject: CN=64C8E925E4162D320DA91D9BC454EFB562863EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:c3:69:af:0f:7e:f3:22:4d:00:9b:c6:88: 74:ef:eb:b6:d2:24:46:90:67:6e:bd:97:96:b2:bc: 65:f5:63:ad:a9:65:d2:5d:3b:d6:24:7a:db:c1:52: 40:74:1d:19:5d:4c:78:52:87:67:63:87:06:dc:53: be:eb:a5:10:07:2c:c8:79:80:c1:55:1e:48:c2:d6: 92:f5:1c:32:cb:9f:e7:bb:57:53:e0:c4:4d:1c:ee: 0b:b7:5a:ef:43:2f:12:27:2b:2c:37:c1:28:52:fd: c8:cb:75:23:b0:57:a9:38:44:22:e7:bc:a5:6a:1d: f9:ac:53:14:5f:c3:fc:e5:1d:19:b2:42:6a:45:e3: e1:d0:04:1b:24:b4:f2:02:fc:a5:6a:fa:af:87:e6: 4a:88:2d:c0:9d:8c:55:58:25:eb:e2:d0:66:ed:31: 32:98:34:26:f7:61:99:8b:73:cd:42:a7:00:50:e8: 70:25:49:91:56:bd:39:e5:07:80:fd:51:e0:0f:3c: 11:18:4a:c4:c2:ae:00:7d:ff:d8:04:d2:20:d5:df: fc:0e:66:8f:b7:f9:30:a5:23:f4:25:9b:cc:67:8f: 5f:f4:51:fe:d7:80:33:70:b4:74:37:17:4a:ba:97: 55:c3:50:31:ca:59:d7:81:a3:18:3d:e2:d3:39:30: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C8:E9:25:E4:16:2D:32:0D:A9:1D:9B:C4:54:EF:B5:62:86:3E:E2 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8c:34:ea:bf:c1:b9:cb:72:5b:ae:37:48:fd:b7:20:d1:d4: 4c:a3:f8:29:7b:23:ef:18:e3:8c:c2:82:d4:b5:3b:76:5c:96: 2e:87:65:6e:d1:d5:2b:0a:36:43:cd:83:70:03:d1:3d:06:62: 99:34:b5:e7:ab:54:7a:de:3f:08:75:d1:86:e5:ae:40:8d:09: 57:50:80:97:90:59:3b:fc:6e:21:fc:ef:a1:85:b7:a4:6a:26: dc:cd:e8:39:9d:a0:86:27:71:c6:c3:df:d5:b3:a8:e3:80:ad: c8:d1:89:98:6b:18:55:c7:ee:d0:26:45:7c:b1:c9:76:64:23: d6:62:6a:b6:00:d6:6f:7f:3e:9f:a4:a8:65:a3:d1:6d:7c:b6: 4e:2a:af:35:e7:1d:30:54:4c:57:2c:f2:e7:e3:44:2d:dc:9f: 99:f9:a0:b6:6e:d8:6a:f4:0a:b3:b8:94:b9:6f:b2:16:df:76: 79:40:76:ba:23:91:4b:77:44:0a:b6:35:b6:9c:a9:31:54:34: 14:ba:99:e6:01:e5:bd:4d:72:4c:01:fb:71:c0:57:9c:2a:8d: ee:45:10:82:dc:58:9e:56:79:65:a1:4b:65:1b:94:e2:a4:0f: 00:32:79:01:71:54:79:87:37:22:d9:cb:72:34:92:00:8e:62: 5e:0f:a6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0yEh0aqgy0vGhMtL3AVmpP0TbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTA0MjkxNDE2NDlaFw0yNTA1MDIxNzA5NDlaMDMxMTAvBgNV BAMTKDY0QzhFOTI1RTQxNjJEMzIwREE5MUQ5QkM0NTRFRkI1NjI4NjNFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4y8Nprw9+8yJNAJvGiHTv67bS JEaQZ269l5ayvGX1Y62pZdJdO9YketvBUkB0HRldTHhSh2djhwbcU77rpRAHLMh5 gMFVHkjC1pL1HDLLn+e7V1PgxE0c7gu3Wu9DLxInKyw3wShS/cjLdSOwV6k4RCLn vKVqHfmsUxRfw/zlHRmyQmpF4+HQBBsktPIC/KVq+q+H5kqILcCdjFVYJevi0Gbt MTKYNCb3YZmLc81CpwBQ6HAlSZFWvTnlB4D9UeAPPBEYSsTCrgB9/9gE0iDV3/wO Zo+3+TClI/Qlm8xnj1/0Uf7XgDNwtHQ3F0q6l1XDUDHKWdeBoxg94tM5MEw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZMjpJeQWLTINqR2bxFTvtWKGPuIwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqMNOq/wbnLcluuN0j9tyDR1Eyj+Cl7I+8Y 44zCgtS1O3Zcli6HZW7R1SsKNkPNg3AD0T0GYpk0teerVHrePwh10YblrkCNCVdQ gJeQWTv8biH876GFt6RqJtzN6DmdoIYnccbD39WzqOOArcjRiZhrGFXH7tAmRXyx yXZkI9ZiarYA1m9/Pp+kqGWj0W18tk4qrzXnHTBUTFcs8ufjRC3cn5n5oLZu2Gr0 CrO4lLlvshbfdnlAdrojkUt3RAq2NbacqTFUNBS6meYB5b1NckwB+3HAV5wqje5F EILcWJ5WeWWhS2UblOKkDwAyeQFxVHmHNyLZy3I0kgCOYl4Ppp0= -----END CERTIFICATE-----Generated at Wed Apr 30 01:38:34 2025 by rpki-client