$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: EBZwg8LGG4P5OhCdgY5Y2KGG9qXZwtKplbEcnMayCd8= Subject key identifier: 7D:53:C4:88:F0:A7:C5:A4:46:9C:CF:1C:A3:96:A6:90:DD:31:A5:46 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 24B5D8FDB453B10F7952995A433EFF06516FEE1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 01D1 Signing time: Sun 15 Jun 2025 05:21:25 +0000 Manifest this update: Sun 15 Jun 2025 05:16:25 +0000 Manifest next update: Wed 18 Jun 2025 06:05:25 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: WNTpe+03nebn72LBBew2dUTUjqBfkxRooBcvhHrh4XI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b5:d8:fd:b4:53:b1:0f:79:52:99:5a:43:3e:ff:06:51:6f:ee:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Jun 15 05:16:25 2025 GMT Not After : Jun 18 06:05:25 2025 GMT Subject: CN=7D53C488F0A7C5A4469CCF1CA396A690DD31A546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:dd:75:20:a4:97:ba:d9:fa:e7:d7:c4:59: 24:aa:8f:21:d6:9b:6f:44:4e:00:1b:e0:cc:2a:18: 1a:70:5d:8f:56:78:7a:fe:83:1d:05:04:31:c0:4a: fe:15:c1:51:14:52:36:f8:9e:72:c7:3e:bc:d0:48: 3c:11:46:de:3c:f8:6b:49:b3:97:66:e0:76:b4:60: b7:2e:11:51:d7:aa:c3:ef:77:7c:59:10:ff:15:bd: 00:3c:0e:4a:ab:0f:51:73:11:1c:68:0c:62:ab:47: 31:b7:aa:20:16:b7:aa:92:e8:8f:b4:6d:f6:93:ec: 0d:53:8e:6a:bc:c4:f9:a8:b6:7a:f3:7e:82:53:13: 54:21:a2:7f:37:96:16:e4:58:c3:b2:ed:aa:90:8f: f9:f5:50:47:cf:e0:ee:0d:d8:0d:b9:18:f9:ee:fc: 49:0c:a9:f4:e5:86:2f:22:c7:8c:83:1d:c8:25:4b: b9:fe:b8:81:23:57:35:dc:33:b4:fc:d1:1c:57:93: 1e:41:f1:b7:ba:f1:83:a6:44:f7:2b:a8:4c:ac:37: fb:54:f2:60:0f:af:b0:37:cd:6d:81:20:eb:08:7b: 82:62:0a:92:7a:15:49:28:b4:46:d1:f2:45:c8:c3: 89:98:c8:aa:d2:5b:f5:b3:52:4f:12:b4:df:07:e8: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:53:C4:88:F0:A7:C5:A4:46:9C:CF:1C:A3:96:A6:90:DD:31:A5:46 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:83:dc:ff:89:78:1e:bd:49:39:b4:05:96:0e:96:10:37: bd:ee:8f:b4:e4:56:be:26:fc:c5:f6:ab:58:17:86:95:85:98: b7:ce:80:e1:ca:39:d4:c8:0a:02:0e:73:46:a9:5c:33:1b:f4: 86:99:8a:5d:71:d8:8e:6f:2f:6a:81:51:42:1e:22:2d:c3:a7: 5e:da:48:01:1a:72:e5:ba:f4:7c:6e:1f:75:1e:c8:93:71:ab: d9:27:14:94:d9:0c:c6:a2:09:7d:82:61:03:72:fd:e8:c1:c5: 12:fc:78:a5:7b:f9:98:8f:0e:1e:8d:78:7c:95:b5:8a:8d:c1: 8e:0c:77:83:18:69:45:35:c1:4d:b7:bf:46:fb:eb:aa:e4:d8: 37:07:bd:e9:54:ad:44:bf:26:4f:a9:34:df:b9:51:97:ec:00: 96:e9:6d:20:9c:3d:e0:c5:da:00:75:11:e1:d9:db:e0:9e:e9: 7b:47:55:d4:6e:fb:96:78:de:d5:19:f9:31:65:c6:8a:b0:2b: 36:df:7b:e5:ef:5d:f2:b8:87:e7:72:3c:28:01:74:42:dd:60: f8:fd:89:4c:9f:ba:ab:22:08:cc:14:47:10:1f:19:8d:24:97: eb:10:e9:07:e2:06:07:81:2e:fc:5c:17:98:e4:4d:ec:14:1e: 85:4d:11:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLXY/bRTsQ95UplaQz7/BlFv7hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNTA2MTUwNTE2MjVaFw0yNTA2MTgwNjA1MjVaMDMxMTAvBgNV BAMTKDdENTNDNDg4RjBBN0M1QTQ0NjlDQ0YxQ0EzOTZBNjkwREQzMUE1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+N11IKSXutn659fEWSSqjyHW m29ETgAb4MwqGBpwXY9WeHr+gx0FBDHASv4VwVEUUjb4nnLHPrzQSDwRRt48+GtJ s5dm4Ha0YLcuEVHXqsPvd3xZEP8VvQA8DkqrD1FzERxoDGKrRzG3qiAWt6qS6I+0 bfaT7A1Tjmq8xPmotnrzfoJTE1Qhon83lhbkWMOy7aqQj/n1UEfP4O4N2A25GPnu /EkMqfTlhi8ix4yDHcglS7n+uIEjVzXcM7T80RxXkx5B8be68YOmRPcrqEysN/tU 8mAPr7A3zW2BIOsIe4JiCpJ6FUkotEbR8kXIw4mYyKrSW/WzUk8StN8H6CRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfVPEiPCnxaRGnM8co5amkN0xpUYwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0Fg9z/iXgevUk5tAWWDpYQN73uj7TkVr4m /MX2q1gXhpWFmLfOgOHKOdTICgIOc0apXDMb9IaZil1x2I5vL2qBUUIeIi3Dp17a SAEacuW69HxuH3UeyJNxq9knFJTZDMaiCX2CYQNy/ejBxRL8eKV7+ZiPDh6NeHyV tYqNwY4Md4MYaUU1wU23v0b766rk2DcHvelUrUS/Jk+pNN+5UZfsAJbpbSCcPeDF 2gB1EeHZ2+Ce6XtHVdRu+5Z43tUZ+TFlxoqwKzbfe+XvXfK4h+dyPCgBdELdYPj9 iUyfuqsiCMwURxAfGY0kl+sQ6QfiBgeBLvxcF5jkTewUHoVNEfM= -----END CERTIFICATE-----Generated at Tue Jun 17 01:41:26 2025 by rpki-client