$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: 3BxuoE84VTF39hN9LLGYgmMSMHkqzZYh8417mzQ20T0= Subject key identifier: 01:A5:2C:AF:59:AB:0A:61:9C:5F:48:6C:FF:18:BD:B0:7C:9B:51:DB Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 795566C90D22C7DA125F904E8A346AA3E3ED8B90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 0180 Signing time: Fri 13 Jun 2025 23:01:10 +0000 Manifest this update: Fri 13 Jun 2025 22:56:10 +0000 Manifest next update: Tue 17 Jun 2025 00:23:10 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) 2: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 3: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: PW6QK7sk4YoVycSoTnNLg58QNuzpyS3PV6lbUTJDzEg=) 4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:55:66:c9:0d:22:c7:da:12:5f:90:4e:8a:34:6a:a3:e3:ed:8b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Jun 13 22:56:10 2025 GMT Not After : Jun 17 00:23:10 2025 GMT Subject: CN=01A52CAF59AB0A619C5F486CFF18BDB07C9B51DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:d3:33:77:38:11:2f:bc:ee:05:5b:42:02: 40:9d:12:66:a6:20:2e:a4:4c:d9:97:c5:81:62:8f: 8e:e6:3f:54:62:1a:9e:51:15:ca:d8:8d:8f:62:0a: d8:4d:37:c0:09:56:00:81:05:1e:f5:cc:57:69:98: ce:2b:c9:f1:68:f0:78:db:a2:e2:15:12:c4:08:bc: 10:b8:95:c4:6f:81:a1:ca:9c:ab:38:f6:b2:04:c5: 6e:4e:f4:32:ee:eb:12:96:4a:df:40:0d:74:24:a9: 56:f9:48:2c:59:9a:8d:fe:f6:01:6b:83:df:18:02: 7d:fe:e4:f0:f7:d1:22:1c:3a:8d:4b:d8:31:3b:cf: fd:eb:83:1e:fe:34:4f:be:6a:18:85:44:6f:50:fb: 5e:50:9f:88:7d:13:77:4c:1a:61:98:67:3b:15:07: f8:a7:af:12:2c:39:b1:8b:4a:d2:74:5c:d7:e8:a8: 7c:12:09:12:ca:bd:55:96:43:a2:16:32:d2:59:20: f4:ad:1d:87:74:3f:1b:27:9a:72:6c:83:5c:0a:3a: 23:9c:81:1d:00:da:ff:b1:e3:fa:e0:c3:4f:c1:50: 89:b0:55:5c:c8:9a:64:1a:f8:0e:08:8d:11:46:47: 29:fd:62:77:42:4e:b7:13:a8:d7:b5:0d:90:eb:71: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:2C:AF:59:AB:0A:61:9C:5F:48:6C:FF:18:BD:B0:7C:9B:51:DB X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e2:a5:53:36:90:98:e4:83:ec:b6:60:66:c1:df:23:cb:14: 12:e8:e5:d2:5d:db:45:d2:c1:0b:9d:1d:22:dd:27:86:82:b4: 79:e9:11:39:5b:70:1f:ea:d8:d2:84:b0:05:c9:4f:63:af:3e: f1:3c:34:c3:d9:78:26:66:ea:24:61:45:5f:2d:29:82:14:8e: fd:6b:4f:95:08:3f:f8:d2:0a:a2:86:ce:30:c9:85:b0:5d:29: f7:b5:9a:88:b1:09:c5:74:1e:07:f4:71:e1:73:31:6b:01:b8: 71:2e:41:9c:19:e1:a1:81:93:34:df:3f:4d:f4:f9:3d:a5:6b: db:39:88:92:3a:c4:35:9e:3d:d2:44:ed:60:91:d1:c0:b6:64: 79:f1:31:ea:f3:ec:67:fc:48:ec:11:ff:5d:db:3d:c4:ab:d6: 88:b8:21:5c:17:4e:66:7e:af:b5:1f:a0:98:c8:6d:e2:a3:d8: fb:f4:d2:bd:28:17:4b:a5:76:05:54:ef:ba:f2:76:89:56:4b: 1c:2b:04:06:ca:7f:1d:17:5e:e4:e5:e7:a3:6a:e9:bf:64:e6: 58:77:d3:c3:d7:03:e1:d5:d8:34:de:22:d4:63:0f:1c:75:4f: 76:fe:d2:a5:6e:f0:1d:88:60:d4:8f:90:9b:3d:bc:3f:6f:35: 97:12:6e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVVmyQ0ix9oSX5BOijRqo+Pti5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA2MTMyMjU2MTBaFw0yNTA2MTcwMDIzMTBaMDMxMTAvBgNV BAMTKDAxQTUyQ0FGNTlBQjBBNjE5QzVGNDg2Q0ZGMThCREIwN0M5QjUxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+dMzdzgRL7zuBVtCAkCdEmam IC6kTNmXxYFij47mP1RiGp5RFcrYjY9iCthNN8AJVgCBBR71zFdpmM4ryfFo8Hjb ouIVEsQIvBC4lcRvgaHKnKs49rIExW5O9DLu6xKWSt9ADXQkqVb5SCxZmo3+9gFr g98YAn3+5PD30SIcOo1L2DE7z/3rgx7+NE++ahiFRG9Q+15Qn4h9E3dMGmGYZzsV B/inrxIsObGLStJ0XNfoqHwSCRLKvVWWQ6IWMtJZIPStHYd0PxsnmnJsg1wKOiOc gR0A2v+x4/rgw0/BUImwVVzImmQa+A4IjRFGRyn9YndCTrcTqNe1DZDrcSCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAaUsr1mrCmGcX0hs/xi9sHybUdswHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXipVM2kJjkg+y2YGbB3yPLFBLo5dJd20XS wQudHSLdJ4aCtHnpETlbcB/q2NKEsAXJT2OvPvE8NMPZeCZm6iRhRV8tKYIUjv1r T5UIP/jSCqKGzjDJhbBdKfe1moixCcV0Hgf0ceFzMWsBuHEuQZwZ4aGBkzTfP030 +T2la9s5iJI6xDWePdJE7WCR0cC2ZHnxMerz7Gf8SOwR/13bPcSr1oi4IVwXTmZ+ r7UfoJjIbeKj2Pv00r0oF0uldgVU77rydolWSxwrBAbKfx0XXuTl56Nq6b9k5lh3 08PXA+HV2DTeItRjDxx1T3b+0qVu8B2IYNSPkJs9vD9vNZcSbsw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:49 2025 by rpki-client