$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: JXWTOj6lZUKmaFma+hNcWKZBfuIlQ22MZDVam8iuFlc= Subject key identifier: 39:93:F4:F1:1B:CD:86:72:D7:CD:7F:2E:75:B7:45:F9:DB:F0:90:2B Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 5FB564AFA8771E7F0C80B2E439DF645C0188DFFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 016B Signing time: Sun 27 Apr 2025 16:31:08 +0000 Manifest this update: Sun 27 Apr 2025 16:26:08 +0000 Manifest next update: Thu 01 May 2025 00:32:08 +0000 Files and hashes: 1: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: bpz1+BOXiUcyq5IVmttNhJmR1RGbiO84vW3Bh1lhDoo=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: d3pf7thJ8fugsU7O9WrulNgpEreMy597Tt+vrA611To=) 3: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=) 4: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: v4Nh1uVbkxyqOyr8m+nkvKI84Ooj9E2Zh9acrBkFGVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b5:64:af:a8:77:1e:7f:0c:80:b2:e4:39:df:64:5c:01:88:df:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Apr 27 16:26:08 2025 GMT Not After : May 1 00:32:08 2025 GMT Subject: CN=3993F4F11BCD8672D7CD7F2E75B745F9DBF0902B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:20:36:73:c5:98:16:57:ca:d2:dc:00:f9: 9d:56:c2:a3:31:93:57:90:c1:1c:9d:3e:63:9a:14: b5:c9:80:96:be:b3:be:74:23:9a:3a:5e:ba:3e:1d: 17:e3:08:b2:eb:1f:7e:d6:a1:15:7b:a1:ca:01:e5: ff:ed:dc:85:a7:50:38:1d:71:22:86:bb:02:b1:f9: 07:a7:91:d6:e0:97:78:3a:8e:45:97:70:96:76:43: ed:73:55:1b:cd:ca:61:dc:42:a3:16:77:dd:f2:8b: 2b:d8:96:13:85:90:3b:cf:0f:3b:bb:b4:e2:d2:43: 75:16:95:3f:16:33:df:8a:dd:a3:ac:c9:7a:fe:ce: 60:87:64:57:06:cd:db:2e:c7:5d:b6:cd:95:e0:f8: ee:f5:18:58:02:12:f1:2d:ca:6d:50:e8:5e:53:b1: a9:ed:1a:d0:b6:7c:b0:f5:20:9c:b5:70:fa:10:73: 86:ab:67:d0:c9:87:b1:b9:71:cd:90:14:4a:12:9b: b3:1f:bb:1a:18:d6:b3:23:00:b8:38:2b:01:9e:7c: f0:23:fb:9e:47:1b:58:d9:b1:be:6f:dc:9b:bc:cf: a3:d1:0d:6b:0a:ee:ce:f7:09:fd:06:17:96:b9:48: f2:0d:2f:43:7c:5a:d0:65:dc:f1:6d:bb:39:f5:27: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:F4:F1:1B:CD:86:72:D7:CD:7F:2E:75:B7:45:F9:DB:F0:90:2B X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5b:bd:e4:74:07:0c:8c:f3:a3:45:c4:18:df:aa:b9:aa:74: ea:47:a9:97:8d:1e:a2:9d:1b:8a:fe:c9:f0:13:1b:2c:a3:fd: f5:2e:be:a9:38:af:17:b5:17:7e:af:86:7e:46:1f:4e:ce:5b: 45:3e:1a:17:91:22:ef:5f:65:40:a5:cc:67:37:b3:c2:5b:d7: e1:24:a3:b1:4f:97:77:76:df:77:47:7d:28:9b:33:72:27:90: 8d:b2:29:da:ba:49:5e:fd:6c:66:65:d0:5b:56:04:33:d0:0a: 93:ca:5c:da:cd:ef:4b:36:a9:6f:d1:ac:b0:96:89:6f:eb:56: 35:24:41:c7:8e:e3:82:fe:6a:5f:75:2b:2f:e4:f4:36:dc:80: 26:15:cb:d6:86:c8:6b:f3:e0:11:fc:eb:5d:c1:e0:3b:cc:fe: 48:e8:ec:31:e5:03:6e:07:12:13:fb:ab:5d:68:de:d2:18:5b: fa:77:70:17:0f:43:1e:3c:85:0f:08:df:c4:db:3f:21:78:78: e5:29:c3:78:89:54:ae:2e:2a:2d:1f:49:e1:a5:24:c2:ea:a9: 41:be:68:30:fa:eb:ae:d6:20:fe:08:14:87:6c:c7:b3:22:e2: b2:f4:0a:81:ab:34:e1:72:46:d7:5b:c1:ef:62:5e:66:a1:66: bb:da:d7:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7Vkr6h3Hn8MgLLkOd9kXAGI3/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTA0MjcxNjI2MDhaFw0yNTA1MDEwMDMyMDhaMDMxMTAvBgNV BAMTKDM5OTNGNEYxMUJDRDg2NzJEN0NEN0YyRTc1Qjc0NUY5REJGMDkwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QSA2c8WYFlfK0twA+Z1WwqMx k1eQwRydPmOaFLXJgJa+s750I5o6Xro+HRfjCLLrH37WoRV7ocoB5f/t3IWnUDgd cSKGuwKx+Qenkdbgl3g6jkWXcJZ2Q+1zVRvNymHcQqMWd93yiyvYlhOFkDvPDzu7 tOLSQ3UWlT8WM9+K3aOsyXr+zmCHZFcGzdsux122zZXg+O71GFgCEvEtym1Q6F5T santGtC2fLD1IJy1cPoQc4arZ9DJh7G5cc2QFEoSm7MfuxoY1rMjALg4KwGefPAj +55HG1jZsb5v3Ju8z6PRDWsK7s73Cf0GF5a5SPINL0N8WtBl3PFtuzn1J/R1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZP08RvNhnLXzX8udbdF+dvwkCswHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFbveR0BwyM86NFxBjfqrmqdOpHqZeNHqKd G4r+yfATGyyj/fUuvqk4rxe1F36vhn5GH07OW0U+GheRIu9fZUClzGc3s8Jb1+Ek o7FPl3d233dHfSibM3InkI2yKdq6SV79bGZl0FtWBDPQCpPKXNrN70s2qW/RrLCW iW/rVjUkQceO44L+al91Ky/k9DbcgCYVy9aGyGvz4BH8613B4DvM/kjo7DHlA24H EhP7q11o3tIYW/p3cBcPQx48hQ8I38TbPyF4eOUpw3iJVK4uKi0fSeGlJMLqqUG+ aDD6667WIP4IFIdsx7Mi4rL0CoGrNOFyRtdbwe9iXmahZrva1/E= -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:36 2025 by rpki-client