$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: CoJ4v7JC8pjRtLLH5sCDG8PXiRJB19R/1jnvsEG8oqM= Subject key identifier: 8E:99:31:CE:2E:F1:A7:62:91:9E:81:36:F3:E2:D2:90:08:1F:44:95 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 2AD9F33CEE350FCCC2316D98197F8B8F93931E1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 0376 Signing time: Sat 19 Jul 2025 21:31:41 +0000 Manifest this update: Sat 19 Jul 2025 21:26:41 +0000 Manifest next update: Wed 23 Jul 2025 06:04:41 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: HIKo6gRuvsYGr/fV0b+x7ZK8pOyE3s+kGJLMNFV7f1Y=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d9:f3:3c:ee:35:0f:cc:c2:31:6d:98:19:7f:8b:8f:93:93:1e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Jul 19 21:26:41 2025 GMT Not After : Jul 23 06:04:41 2025 GMT Subject: CN=8E9931CE2EF1A762919E8136F3E2D290081F4495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:c8:35:dc:c0:ca:bd:31:d1:8b:1f:8f:89: d8:7a:ba:b2:45:4d:06:19:0e:95:8c:14:56:27:0e: f9:b4:06:0e:fd:34:b6:e8:36:70:f9:ce:32:9d:70: 7e:d6:62:0f:17:7c:ea:8b:5b:3d:2f:cf:93:80:0d: 1d:54:5a:a7:31:c4:79:18:89:f9:17:09:ba:65:dc: bc:87:4f:fc:a6:93:10:f7:3c:29:ad:65:a7:26:4b: 79:cb:4f:5e:2f:24:99:be:7f:ea:f4:c4:2c:9a:26: a6:96:d9:7e:38:11:e8:83:ab:3b:49:30:9f:3e:0d: 0d:9c:95:49:1f:e9:a5:45:4b:10:a1:96:79:40:62: d7:fb:a6:d5:a8:64:c5:ba:cd:7f:4f:01:4a:f4:c1: 9f:30:a1:cd:17:e2:e5:28:39:8c:2b:4c:c9:87:d2: 45:de:25:a5:2c:6d:a3:5a:98:af:dd:b1:be:76:0b: dc:ed:01:89:42:9c:c9:63:ce:80:f0:d4:a2:98:f3: 30:cd:b3:7a:3e:a5:d3:ec:54:47:c4:93:36:b6:34: dd:82:37:08:05:c0:6d:73:21:1a:e0:82:3e:76:cd: 7c:bc:b4:a5:ec:9c:bf:50:19:28:db:1a:79:03:d1: 1e:e8:d7:f1:b7:9d:a3:50:f9:41:f7:f9:a0:33:28: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:99:31:CE:2E:F1:A7:62:91:9E:81:36:F3:E2:D2:90:08:1F:44:95 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:f3:aa:69:45:4c:70:94:66:fa:67:4c:3c:dd:a4:40:83: 91:b3:f1:4d:ea:b8:10:8f:fc:d8:86:99:75:ec:3d:a6:92:a2: 85:ac:fb:93:1e:46:a3:64:8a:e9:b7:b7:bf:79:db:ea:3f:37: 33:a5:e2:b4:51:3f:9a:dc:98:9e:9a:4a:8e:d0:bd:63:1f:96: c9:b1:5a:67:c6:42:71:26:22:39:f7:6f:ee:78:2c:51:5f:a8: 3f:f6:55:25:7e:97:95:dc:0b:de:a9:71:3d:5b:b2:2d:cc:8a: a8:e8:25:e6:e8:71:03:6e:f7:54:19:15:a6:fe:c4:92:cd:a0: 79:34:47:9a:18:5f:c3:0b:2b:53:a0:d0:98:fd:9c:b3:71:15: 82:fc:b2:5f:1d:69:0b:6a:47:a2:4e:98:49:0d:6a:d1:8e:cb: 24:78:0e:55:f8:b6:36:83:13:67:70:93:78:f1:d1:03:f8:8f: 06:57:fe:36:c3:80:fc:d9:80:e4:17:49:14:4c:08:d8:f3:44: eb:86:91:d6:43:93:5d:21:79:65:c1:ea:9d:66:05:1d:e8:66: 41:cb:47:45:20:cf:0e:6b:7b:1a:9a:e7:f9:bf:ff:69:67:14: 9c:66:48:37:c7:08:eb:4e:e4:d3:c1:75:6a:d7:e4:02:3f:ff: 59:9d:4e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtnzPO41D8zCMW2YGX+Lj5OTHhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTA3MTkyMTI2NDFaFw0yNTA3MjMwNjA0NDFaMDMxMTAvBgNV BAMTKDhFOTkzMUNFMkVGMUE3NjI5MTlFODEzNkYzRTJEMjkwMDgxRjQ0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQ8g13MDKvTHRix+Pidh6urJF TQYZDpWMFFYnDvm0Bg79NLboNnD5zjKdcH7WYg8XfOqLWz0vz5OADR1UWqcxxHkY ifkXCbpl3LyHT/ymkxD3PCmtZacmS3nLT14vJJm+f+r0xCyaJqaW2X44EeiDqztJ MJ8+DQ2clUkf6aVFSxChlnlAYtf7ptWoZMW6zX9PAUr0wZ8woc0X4uUoOYwrTMmH 0kXeJaUsbaNamK/dsb52C9ztAYlCnMljzoDw1KKY8zDNs3o+pdPsVEfEkza2NN2C NwgFwG1zIRrggj52zXy8tKXsnL9QGSjbGnkD0R7o1/G3naNQ+UH3+aAzKMcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjpkxzi7xp2KRnoE28+LSkAgfRJUwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7+86ppRUxwlGb6Z0w83aRAg5Gz8U3quBCP /NiGmXXsPaaSooWs+5MeRqNkium3t7952+o/NzOl4rRRP5rcmJ6aSo7QvWMflsmx WmfGQnEmIjn3b+54LFFfqD/2VSV+l5XcC96pcT1bsi3MiqjoJebocQNu91QZFab+ xJLNoHk0R5oYX8MLK1Og0Jj9nLNxFYL8sl8daQtqR6JOmEkNatGOyyR4DlX4tjaD E2dwk3jx0QP4jwZX/jbDgPzZgOQXSRRMCNjzROuGkdZDk10heWXB6p1mBR3oZkHL R0Ugzw5rexqa5/m//2lnFJxmSDfHCOtO5NPBdWrX5AI//1mdTj4= -----END CERTIFICATE-----Generated at Mon Jul 21 02:20:18 2025 by rpki-client