$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: 64K342aqPY4rf8IncIReUS+6oAxhiUoiPtJ00cVMY9w= Subject key identifier: C6:68:9E:33:1F:40:26:6C:20:B5:7A:DD:BF:54:E7:62:59:96:A8:04 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 01A2AB123AEA1DAF9BC5127C2259585C754222C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0431 Signing time: Thu 24 Apr 2025 12:32:01 +0000 Manifest this update: Thu 24 Apr 2025 12:27:01 +0000 Manifest next update: Mon 28 Apr 2025 00:30:01 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) 3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: UzeTgz0mCdFlWC9KDTD8CPjbcOOgs7jLrl4niLLKS0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a2:ab:12:3a:ea:1d:af:9b:c5:12:7c:22:59:58:5c:75:42:22:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Apr 24 12:27:01 2025 GMT Not After : Apr 28 00:30:01 2025 GMT Subject: CN=C6689E331F40266C20B57ADDBF54E7625996A804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:8b:22:0c:5a:75:15:9b:26:af:0b:73:7f: 8b:8b:ca:6f:48:c8:af:18:60:37:16:d5:32:3a:bc: 7b:65:5f:17:93:32:6b:21:26:13:6c:2d:48:9d:fa: bb:c5:22:7f:30:1b:70:ec:47:d1:e2:5c:fa:d6:b1: e6:d4:1a:ee:7f:d1:14:7d:a3:c0:6c:07:3d:22:46: cd:1a:33:b3:97:ca:96:9c:63:27:b2:fe:55:ad:4b: 96:d4:c2:01:b1:4b:ee:1c:a5:2e:1d:55:7f:66:e4: 69:99:5b:bc:f0:06:90:88:6c:f3:ac:b0:87:6a:a8: d7:92:5c:b3:38:24:84:98:bf:5e:ff:e5:a0:52:b4: 9d:12:e8:1e:6a:43:d1:07:ad:06:60:ff:fb:3c:1e: de:f0:26:27:bb:06:04:1f:7a:4a:0e:2d:a3:d5:fa: c2:c0:91:9f:75:cc:84:c9:16:2f:fb:d3:6a:b9:33: 2f:3a:92:47:33:a9:03:c8:00:ac:df:8b:ad:aa:b2: 8d:29:aa:92:b5:17:0b:c7:f2:22:21:23:7d:06:61: bc:89:e4:ee:96:1c:c3:52:fb:59:09:ec:a7:97:92: ab:ea:64:36:4b:c0:d0:8c:d0:46:89:96:64:b8:f1: 25:53:71:4d:fa:9c:ee:b5:85:34:97:0b:48:24:ae: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:68:9E:33:1F:40:26:6C:20:B5:7A:DD:BF:54:E7:62:59:96:A8:04 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4e:98:75:58:06:db:98:8a:d0:fd:b3:81:31:e5:4d:36:9b: f0:94:9e:20:28:fe:43:7d:18:e3:1a:de:11:79:9a:e3:1e:e2: 94:95:7a:76:94:2c:5b:51:87:b4:4b:f6:da:7d:0e:0d:8a:d1: 54:dc:4c:15:df:4a:58:d0:93:68:bf:96:89:a6:62:dd:dd:64: 5b:69:5e:0d:fe:4f:9c:97:b2:f4:47:8d:75:fd:0b:18:7c:23: 46:75:c2:29:4a:6a:71:34:7a:d1:5c:b3:ce:88:90:8a:c4:f2: 53:7a:7c:1a:f9:2c:37:9d:95:7b:85:68:44:c6:c7:9c:24:37: 75:0d:21:5d:c4:c3:bd:ed:c6:7b:08:a2:c5:e4:e2:68:5f:55: 98:4b:40:27:0c:24:81:a1:a3:22:b0:55:3a:1e:9d:5d:2a:2f: 49:2c:c3:00:93:cf:10:e5:ec:25:6d:2c:6d:e3:97:6e:e7:04: fb:79:dd:bf:dc:84:ed:68:23:16:dc:8f:90:50:af:82:14:39: f6:3f:c9:27:28:b5:b3:55:25:7e:d8:d8:c3:18:ad:ef:2b:a2: b8:0c:f0:8c:3f:9e:ef:b0:20:ff:34:82:db:dc:32:d1:67:af: 8a:58:43:17:da:ce:c3:6e:b7:60:78:f9:68:46:53:a4:89:63: 0f:62:72:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaKrEjrqHa+bxRJ8IllYXHVCIsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTA0MjQxMjI3MDFaFw0yNTA0MjgwMDMwMDFaMDMxMTAvBgNV BAMTKEM2Njg5RTMzMUY0MDI2NkMyMEI1N0FEREJGNTRFNzYyNTk5NkE4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbYsiDFp1FZsmrwtzf4uLym9I yK8YYDcW1TI6vHtlXxeTMmshJhNsLUid+rvFIn8wG3DsR9HiXPrWsebUGu5/0RR9 o8BsBz0iRs0aM7OXypacYyey/lWtS5bUwgGxS+4cpS4dVX9m5GmZW7zwBpCIbPOs sIdqqNeSXLM4JISYv17/5aBStJ0S6B5qQ9EHrQZg//s8Ht7wJie7BgQfekoOLaPV +sLAkZ91zITJFi/702q5My86kkczqQPIAKzfi62qso0pqpK1FwvH8iIhI30GYbyJ 5O6WHMNS+1kJ7KeXkqvqZDZLwNCM0EaJlmS48SVTcU36nO61hTSXC0gkrjmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmieMx9AJmwgtXrdv1TnYlmWqAQwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhOmHVYBtuYitD9s4Ex5U02m/CUniAo/kN9 GOMa3hF5muMe4pSVenaULFtRh7RL9tp9Dg2K0VTcTBXfSljQk2i/lommYt3dZFtp Xg3+T5yXsvRHjXX9Cxh8I0Z1wilKanE0etFcs86IkIrE8lN6fBr5LDedlXuFaETG x5wkN3UNIV3Ew73txnsIosXk4mhfVZhLQCcMJIGhoyKwVToenV0qL0kswwCTzxDl 7CVtLG3jl27nBPt53b/chO1oIxbcj5BQr4IUOfY/yScotbNVJX7Y2MMYre8rorgM 8Iw/nu+wIP80gtvcMtFnr4pYQxfazsNut2B4+WhGU6SJYw9icuc= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net