$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: ZRiiKzgsbosgE7g/Grelshnzx+TzRcRXIPv/bufYXcw= Subject key identifier: B9:66:F7:D8:A0:77:A1:8A:49:0D:26:A1:37:F2:CC:25:B7:C1:D0:EC Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 0AC724979B17D52E223F8AFB9765A261FBB70FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 0190 Signing time: Wed 30 Apr 2025 23:30:45 +0000 Manifest this update: Wed 30 Apr 2025 23:25:45 +0000 Manifest next update: Sun 04 May 2025 09:55:45 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa (hash: 9DtyQOYPh7GLf+XRfVmsdw0aXiZ8+Ri4mucHCX341ag=) 2: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: l3MFIyagS+K0pENgfsbFfMhCj1LNR2xpLC/sKtKU0g8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 09:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c7:24:97:9b:17:d5:2e:22:3f:8a:fb:97:65:a2:61:fb:b7:0f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Apr 30 23:25:45 2025 GMT Not After : May 4 09:55:45 2025 GMT Subject: CN=B966F7D8A077A18A490D26A137F2CC25B7C1D0EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:49:a7:8f:45:f7:2a:11:20:79:da:9e:4b: 19:62:30:08:18:e5:e2:e5:a5:24:c1:6b:14:1e:8d: 40:59:f6:05:b1:96:db:c9:47:fb:e5:42:c0:5e:c3: 37:6a:c1:66:d5:5d:85:2b:7b:df:b3:7b:ab:41:15: 0a:c7:34:d9:7b:fd:e6:2d:98:bd:ed:7e:71:01:e6: 1e:80:a8:bf:97:3e:35:d1:9c:d6:90:18:12:e3:e4: c1:e6:9c:d5:e6:38:89:75:83:30:5b:57:8c:ef:27: 42:c8:86:40:c0:2c:0c:0c:3d:c5:0e:19:8b:e4:e4: 96:49:fd:b9:3b:5c:a5:72:10:57:58:b6:c1:dd:e0: 13:89:48:e4:23:0b:7f:12:06:e5:e3:d8:64:f5:4e: dd:c1:fd:8c:4d:22:bb:a9:47:60:a0:61:87:e5:7c: 5b:77:00:1f:77:1b:3e:89:51:8c:99:5a:c4:f6:16: 2e:9d:51:04:0c:96:ea:91:6a:64:b2:b6:63:3d:4d: 11:2c:b9:83:60:2b:ee:8b:7d:fd:3c:33:88:69:8b: a8:54:1a:d9:65:37:a9:fa:00:c9:c8:1e:89:e4:c5: 7b:f9:ac:7d:3b:b4:2a:10:7c:69:67:92:06:98:e1: ad:1e:7d:29:d5:71:9d:c9:52:77:b5:97:68:8b:08: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:F7:D8:A0:77:A1:8A:49:0D:26:A1:37:F2:CC:25:B7:C1:D0:EC X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:4b:2a:32:56:0e:8f:c2:4d:9a:0c:97:4c:88:5f:9a:4a:05: b1:63:72:55:96:4e:2d:a8:33:24:4c:5c:75:21:90:43:52:8e: a9:71:4c:7b:52:de:90:50:53:00:a0:c1:d0:24:19:b6:f0:67: 57:2d:6a:41:e0:19:0c:00:23:a3:a5:0e:c3:d2:c2:75:bd:4d: 8f:5f:d2:f3:7b:1d:49:1f:45:a0:bf:a2:16:47:cb:8a:bd:ab: c1:bc:0d:26:f3:3f:17:cf:9a:ab:ac:73:1c:ae:81:82:f3:8f: 05:0e:7b:30:c7:bb:1f:37:51:af:41:66:3a:d9:96:7a:39:66: 10:1a:8a:32:5b:aa:70:c8:8a:3d:0a:d5:e2:34:49:fc:57:34: fb:95:a4:1e:55:9c:f4:d4:2f:f1:a9:3a:0d:84:ee:2c:5e:35: b8:2d:72:06:a2:4b:4a:c2:60:cc:3c:fe:57:8f:f6:0e:67:3e: db:95:c6:c2:3c:a2:cf:44:36:6c:ff:8f:af:37:dd:f3:70:30: ae:7c:22:3e:e3:e4:43:eb:72:59:c8:2e:0d:47:52:8f:9e:e1: 94:76:fa:7d:6e:6b:14:ed:3d:a2:69:c8:69:5c:14:69:5b:af: 41:33:7d:64:d9:0e:1c:f5:93:9e:75:a9:bc:73:a8:1b:07:5f: 6c:26:63:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsckl5sX1S4iP4r7l2WiYfu3D+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTA0MzAyMzI1NDVaFw0yNTA1MDQwOTU1NDVaMDMxMTAvBgNV BAMTKEI5NjZGN0Q4QTA3N0ExOEE0OTBEMjZBMTM3RjJDQzI1QjdDMUQwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx0mnj0X3KhEgedqeSxliMAgY 5eLlpSTBaxQejUBZ9gWxltvJR/vlQsBewzdqwWbVXYUre9+ze6tBFQrHNNl7/eYt mL3tfnEB5h6AqL+XPjXRnNaQGBLj5MHmnNXmOIl1gzBbV4zvJ0LIhkDALAwMPcUO GYvk5JZJ/bk7XKVyEFdYtsHd4BOJSOQjC38SBuXj2GT1Tt3B/YxNIrupR2CgYYfl fFt3AB93Gz6JUYyZWsT2Fi6dUQQMluqRamSytmM9TREsuYNgK+6Lff08M4hpi6hU GtllN6n6AMnIHonkxXv5rH07tCoQfGlnkgaY4a0efSnVcZ3JUne1l2iLCDv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWb32KB3oYpJDSahN/LMJbfB0OwwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdLKjJWDo/CTZoMl0yIX5pKBbFjclWWTi2o MyRMXHUhkENSjqlxTHtS3pBQUwCgwdAkGbbwZ1ctakHgGQwAI6OlDsPSwnW9TY9f 0vN7HUkfRaC/ohZHy4q9q8G8DSbzPxfPmquscxyugYLzjwUOezDHux83Ua9BZjrZ lno5ZhAaijJbqnDIij0K1eI0SfxXNPuVpB5VnPTUL/GpOg2E7ixeNbgtcgaiS0rC YMw8/leP9g5nPtuVxsI8os9ENmz/j6833fNwMK58Ij7j5EPrclnILg1HUo+e4ZR2 +n1uaxTtPaJpyGlcFGlbr0EzfWTZDhz1k551qbxzqBsHX2wmY68= -----END CERTIFICATE-----Generated at Sat May 3 00:44:49 2025 by rpki-client