$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: CWEmvF8eBeNRLADYnTxUVKGgN/coW6edL+W14l21vOg= Subject key identifier: F8:88:02:28:6E:8F:2F:A2:B3:FC:DE:84:11:24:45:52:A5:68:20:C5 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 3B37F66121F58CB0266B65D07D2C22E0E6D21846 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01E2 Signing time: Mon 16 Jun 2025 00:40:36 +0000 Manifest this update: Mon 16 Jun 2025 00:35:36 +0000 Manifest next update: Thu 19 Jun 2025 00:46:36 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: JrlK9Llu9OYry+iLPaLEzqwGsSkKqZyN8ygNhRyf/UA=) 2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:37:f6:61:21:f5:8c:b0:26:6b:65:d0:7d:2c:22:e0:e6:d2:18:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Jun 16 00:35:36 2025 GMT Not After : Jun 19 00:46:36 2025 GMT Subject: CN=F88802286E8F2FA2B3FCDE8411244552A56820C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:79:98:dc:4f:0b:93:37:e4:44:d1:8f:47: d6:47:7a:c7:6a:a8:bf:b7:8a:9a:09:ab:f9:e1:4b: a4:8b:95:ae:e2:14:31:94:05:a6:81:63:54:5e:13: 76:fa:08:91:3e:f6:60:db:5d:fb:71:9e:a3:18:d4: 0d:45:b6:93:dd:a0:d9:1c:d3:16:5d:97:d2:ed:f9: 67:0c:72:97:4d:8a:ac:5f:a0:47:f5:68:53:06:75: af:15:85:72:8e:f8:77:86:52:53:e1:c5:29:99:30: cc:ba:22:ec:75:1d:1d:ad:66:be:22:22:82:75:bc: 1d:2a:d9:6b:63:5d:04:d7:15:84:5b:cb:33:a6:41: 55:01:7a:cd:3d:52:07:43:2c:ff:00:a9:57:f0:a1: ad:ff:59:db:15:62:a0:b1:0f:c4:2f:f1:b1:b0:14: 14:8d:5f:92:0f:42:5a:7f:23:a3:22:d7:37:5b:4f: 6e:41:37:b6:ea:25:4d:87:fb:c6:64:b7:58:dd:db: 75:05:74:f7:bf:eb:b5:00:1b:fc:62:01:70:c7:3f: 6b:e9:17:db:e0:4e:a3:e6:95:39:a4:f6:d3:db:6c: a2:a0:7d:10:e1:de:71:9e:64:12:e6:9e:db:28:0c: 21:72:f7:1f:39:fd:66:fa:0f:a4:41:84:cb:a1:57: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:88:02:28:6E:8F:2F:A2:B3:FC:DE:84:11:24:45:52:A5:68:20:C5 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3c:e8:48:84:45:a3:47:3c:35:b6:ea:2e:40:85:98:88:25: 42:a3:9a:22:22:5e:c2:87:55:26:8b:d9:8c:f4:75:3f:0a:2a: c7:d0:1a:af:b2:03:1a:00:b0:9c:6e:38:e2:05:01:d0:6c:cc: 1b:77:43:fa:53:42:86:17:f9:04:a4:6b:78:71:4d:45:7f:9b: bd:4b:35:ef:33:64:69:96:84:96:2c:d9:3e:90:74:08:4e:84: 35:9d:38:eb:7f:83:b0:ea:aa:91:79:18:96:68:63:5d:1a:a0: cf:4f:d9:d6:4b:fb:9b:cb:d3:8b:bb:a8:30:ac:03:91:1c:3c: 06:3f:a6:8d:8b:ea:c3:99:4e:71:4f:4c:3e:15:21:37:87:69: 36:00:3d:e6:6a:b8:83:8c:2a:9e:95:0f:4c:a2:33:96:46:f0: 99:73:bc:95:8b:c8:6c:dc:c3:ec:fd:d1:69:54:ce:f2:c0:b9: cd:a3:9e:99:48:24:08:21:1c:4b:5e:6d:5a:d8:4f:ed:14:df: c1:01:c2:35:07:1e:22:22:ec:af:32:7c:8a:56:1c:1d:9e:83: 28:cb:13:ac:a6:79:d6:47:17:c4:13:c8:41:a9:22:b0:f0:aa: 48:7b:dd:14:e0:bc:84:4b:eb:87:47:5b:9f:1f:65:a9:35:3b: 14:1d:da:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzf2YSH1jLAma2XQfSwi4ObSGEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA2MTYwMDM1MzZaFw0yNTA2MTkwMDQ2MzZaMDMxMTAvBgNV BAMTKEY4ODgwMjI4NkU4RjJGQTJCM0ZDREU4NDExMjQ0NTUyQTU2ODIwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYXmY3E8LkzfkRNGPR9ZHesdq qL+3ipoJq/nhS6SLla7iFDGUBaaBY1ReE3b6CJE+9mDbXftxnqMY1A1FtpPdoNkc 0xZdl9Lt+WcMcpdNiqxfoEf1aFMGda8VhXKO+HeGUlPhxSmZMMy6Iux1HR2tZr4i IoJ1vB0q2WtjXQTXFYRbyzOmQVUBes09UgdDLP8AqVfwoa3/WdsVYqCxD8Qv8bGw FBSNX5IPQlp/I6Mi1zdbT25BN7bqJU2H+8Zkt1jd23UFdPe/67UAG/xiAXDHP2vp F9vgTqPmlTmk9tPbbKKgfRDh3nGeZBLmntsoDCFy9x85/Wb6D6RBhMuhV6PNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IgCKG6PL6Kz/N6EESRFUqVoIMUwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALs86EiERaNHPDW26i5AhZiIJUKjmiIiXsKH VSaL2Yz0dT8KKsfQGq+yAxoAsJxuOOIFAdBszBt3Q/pTQoYX+QSka3hxTUV/m71L Ne8zZGmWhJYs2T6QdAhOhDWdOOt/g7DqqpF5GJZoY10aoM9P2dZL+5vL04u7qDCs A5EcPAY/po2L6sOZTnFPTD4VITeHaTYAPeZquIOMKp6VD0yiM5ZG8JlzvJWLyGzc w+z90WlUzvLAuc2jnplIJAghHEtebVrYT+0U38EBwjUHHiIi7K8yfIpWHB2egyjL E6ymedZHF8QTyEGpIrDwqkh73RTgvIRL64dHW58fZak1OxQd2iE= -----END CERTIFICATE-----Generated at Mon Jun 16 18:12:14 2025 by rpki-client