$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: PXcM3neLDeF0nVd8/v5Zmn9wQndczy7SHvpOgyFH1Ws= Subject key identifier: AA:9F:22:E3:56:B6:96:31:F7:33:AD:34:7C:1B:43:D2:6A:2F:3A:77 Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 11C5DA845AD4D77160BE66A85CA1D4C712DC2BEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 04D5 Signing time: Sun 20 Jul 2025 16:32:08 +0000 Manifest this update: Sun 20 Jul 2025 16:27:08 +0000 Manifest next update: Thu 24 Jul 2025 01:37:08 +0000 Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=) 2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: fYV5jYtdYNI1XgiW32Pl3KSlmUMMvZWmBAEpW5Om8Bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c5:da:84:5a:d4:d7:71:60:be:66:a8:5c:a1:d4:c7:12:dc:2b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Jul 20 16:27:08 2025 GMT Not After : Jul 24 01:37:08 2025 GMT Subject: CN=AA9F22E356B69631F733AD347C1B43D26A2F3A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:b4:e7:91:98:e9:98:8d:b5:f0:66:be:34: 1d:4a:16:b6:74:4b:8c:a8:8a:86:03:50:a0:72:eb: 8a:6d:2d:66:4a:a5:fd:3e:3f:47:05:1e:19:4e:5f: 9e:d5:ca:b4:bf:ad:17:44:83:bc:a1:fc:10:17:77: b2:80:27:f0:5f:58:6d:09:a2:27:fe:28:2c:ef:04: 7b:36:ac:93:fa:dc:44:9b:49:cc:0a:ff:c1:b7:9c: 47:7d:e6:a0:d4:d3:06:99:06:6b:1d:73:7d:6f:ab: bf:02:82:07:34:0c:a1:2a:f8:34:57:d0:eb:8a:e6: 9e:ae:9e:07:d8:0a:33:70:4a:69:b2:0d:8c:62:71: a8:95:09:58:10:91:9a:e9:fb:8d:61:bc:67:e6:97: 4d:30:d2:26:0f:d4:f9:0b:be:12:a0:81:85:bf:e2: cd:17:8b:01:4c:77:23:69:c1:75:cb:34:d1:f3:45: b8:b0:7b:25:62:60:e5:9c:ca:ae:73:2a:d8:c5:ec: ac:b6:e7:59:83:c7:1b:41:77:63:92:91:6f:ba:e5: c0:44:b1:83:b0:03:47:a2:ea:9a:ae:f3:52:99:79: 83:d4:6a:b2:57:1f:47:5b:ae:d2:cb:bb:5d:ba:69: 7d:68:fb:75:3b:6b:12:55:03:3c:b9:33:fd:68:fe: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9F:22:E3:56:B6:96:31:F7:33:AD:34:7C:1B:43:D2:6A:2F:3A:77 X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:18:db:6f:16:3b:87:7f:c9:b4:7e:61:b4:af:65:98:9a:7e: c7:07:0c:3d:0a:1c:44:1f:80:65:67:2d:50:83:4e:e3:9f:47: 0e:a0:9f:a3:c4:e6:0b:e8:c0:01:4c:b1:56:ed:9a:cb:e5:31: a3:27:0e:49:03:69:8c:ad:f4:3f:f0:60:b5:37:f3:c0:1b:a6: a6:df:28:50:65:ec:2e:57:85:ba:9f:5f:9a:93:ac:d5:46:b3: 2e:c5:86:a7:68:38:8d:22:59:ff:72:07:2c:10:7c:d7:5e:fc: b2:96:e2:5b:3c:e2:f5:9e:45:6b:18:a8:ec:10:0a:2a:1a:c2: 6c:58:68:82:26:6f:1d:b5:3e:44:12:ba:4d:a1:ec:7d:b8:51: a7:22:b9:29:42:f6:70:2b:b0:09:1a:80:1f:1d:fc:02:32:bd: d7:ec:e5:23:12:e5:e9:08:78:30:92:2c:26:e9:a9:84:29:73: 0e:79:7a:27:27:6c:5f:15:b1:53:64:49:40:10:9f:18:5a:7c: 08:bd:42:c7:2d:40:f7:29:cd:3d:4a:6f:9c:b9:ec:21:bf:13: 8e:fe:56:53:36:67:1b:47:f8:e7:df:99:fd:3f:5b:0e:fc:e0: 66:27:eb:fa:87:02:66:fe:69:00:41:b4:87:64:5d:5f:ca:a3: 09:0c:d0:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcXahFrU13FgvmaoXKHUxxLcK+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTA3MjAxNjI3MDhaFw0yNTA3MjQwMTM3MDhaMDMxMTAvBgNV BAMTKEFBOUYyMkUzNTZCNjk2MzFGNzMzQUQzNDdDMUI0M0QyNkEyRjNBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdbTnkZjpmI218Ga+NB1KFrZ0 S4yoioYDUKBy64ptLWZKpf0+P0cFHhlOX57VyrS/rRdEg7yh/BAXd7KAJ/BfWG0J oif+KCzvBHs2rJP63ESbScwK/8G3nEd95qDU0waZBmsdc31vq78Cggc0DKEq+DRX 0OuK5p6ungfYCjNwSmmyDYxicaiVCVgQkZrp+41hvGfml00w0iYP1PkLvhKggYW/ 4s0XiwFMdyNpwXXLNNHzRbiweyViYOWcyq5zKtjF7Ky251mDxxtBd2OSkW+65cBE sYOwA0ei6pqu81KZeYPUarJXH0dbrtLLu126aX1o+3U7axJVAzy5M/1o/pa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqp8i41a2ljH3M600fBtD0movOncwHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsY228WO4d/ybR+YbSvZZiafscHDD0KHEQf gGVnLVCDTuOfRw6gn6PE5gvowAFMsVbtmsvlMaMnDkkDaYyt9D/wYLU388Abpqbf KFBl7C5XhbqfX5qTrNVGsy7FhqdoOI0iWf9yBywQfNde/LKW4ls84vWeRWsYqOwQ CioawmxYaIImbx21PkQSuk2h7H24UaciuSlC9nArsAkagB8d/AIyvdfs5SMS5ekI eDCSLCbpqYQpcw55eicnbF8VsVNkSUAQnxhafAi9QsctQPcpzT1Kb5y57CG/E47+ VlM2ZxtH+Offmf0/Ww784GYn6/qHAmb+aQBBtIdkXV/KowkM0Dk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:32:13 2025 by rpki-client