$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: xw9cpwhc11agW+WCDEZHd9SewTd08M04D/7wzQMiDzQ= Subject key identifier: 44:16:75:37:DC:C4:83:36:A9:71:F9:88:55:19:B0:8F:73:D5:C7:9A Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 738A673AA18E33018A906552F3F2FDE48D918D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 020B Signing time: Sat 06 Sep 2025 08:11:37 +0000 Manifest this update: Sat 06 Sep 2025 08:06:37 +0000 Manifest next update: Tue 09 Sep 2025 14:14:37 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=) 2: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: xCb/ndLRilzxHrbQAaZi/NZFMBUowTjYJznDsST9vaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8a:67:3a:a1:8e:33:01:8a:90:65:52:f3:f2:fd:e4:8d:91:8d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Sep 6 08:06:37 2025 GMT Not After : Sep 9 14:14:37 2025 GMT Subject: CN=44167537DCC48336A971F9885519B08F73D5C79A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:39:29:a4:2c:a6:56:6a:28:af:93:61:54: ae:60:1e:94:26:5c:28:de:8e:03:29:0d:11:a4:d2: 56:59:fb:49:ac:1d:c7:47:63:52:48:36:28:d1:f6: 32:2f:c0:ae:54:e7:4e:54:ab:34:74:ec:a0:df:ce: d4:51:dd:21:51:4f:54:31:2e:f0:cd:3e:bb:59:71: 02:40:d2:c2:b6:5f:a0:6a:de:41:1c:1a:51:2a:47: 90:88:98:83:ad:aa:58:26:86:e0:57:2a:d1:6c:e7: 4e:bd:06:f0:73:4d:d1:df:7a:a5:71:44:75:8d:06: 6e:57:96:a3:16:ba:16:c5:29:8f:e7:d4:c4:f6:c6: 16:70:02:1e:22:62:b6:fd:c7:15:a9:ca:c3:e3:cd: 20:ef:f9:b5:61:8c:3e:29:b8:46:62:ff:ca:a0:84: 8c:57:fb:45:59:24:08:f5:35:6f:f7:ee:1f:1e:65: 11:6a:b4:3f:18:40:94:53:5a:80:c1:df:25:3e:0d: 73:ce:75:1d:0c:b4:f8:42:5b:0d:eb:89:93:72:ea: a6:77:ac:26:8c:44:0f:33:ea:47:6c:f6:fd:06:fa: 84:8c:fc:d3:2f:77:b7:3b:d3:9f:7e:51:7d:db:a6: b8:3b:56:e1:83:3a:98:51:fd:39:b3:7d:81:cd:9b: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:16:75:37:DC:C4:83:36:A9:71:F9:88:55:19:B0:8F:73:D5:C7:9A X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e9:14:ea:51:d7:74:98:06:8d:54:92:84:c6:c1:18:f3:0a: c6:c7:63:5d:78:a9:19:ca:66:f1:a4:f5:e3:15:e1:15:d6:75: d3:da:6b:c7:2d:6d:17:fd:60:e4:87:70:a0:77:77:42:fb:90: f3:91:bd:f6:90:41:f3:d5:c3:22:1b:60:cd:0d:7c:b6:69:53: 16:03:ce:ce:ff:37:80:92:34:aa:b4:c8:ba:75:81:15:f4:cc: 64:42:03:a8:fe:3d:ea:93:a6:95:e7:b5:16:cb:7a:80:dc:92: ca:41:66:cb:d1:64:01:dc:c1:f2:91:15:93:db:b9:fa:38:da: 0b:ec:b0:18:6b:6b:27:fc:93:a8:02:8a:83:9a:1b:27:71:3c: 3c:c6:70:d7:8e:99:1c:54:8d:17:4b:54:01:68:ca:82:49:40: d3:55:f5:1a:4d:3d:ec:ec:8b:ce:4e:f5:cc:64:e3:a8:aa:75: 28:b8:86:43:eb:89:4e:da:a7:da:95:ad:50:8e:b7:f9:8c:a2: 8e:58:99:90:91:cc:f2:0f:65:d6:f7:f2:7a:ca:31:f1:77:64: cc:cc:ee:d0:ab:87:05:c4:84:60:2b:09:4b:e7:5d:9a:ab:ec: aa:38:e4:78:08:87:29:63:21:b5:19:4c:0f:f3:57:4d:2e:58: 40:09:e4:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4pnOqGOMwGKkGVS8/L95I2RjSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNTA5MDYwODA2MzdaFw0yNTA5MDkxNDE0MzdaMDMxMTAvBgNV BAMTKDQ0MTY3NTM3RENDNDgzMzZBOTcxRjk4ODU1MTlCMDhGNzNENUM3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFTkppCymVmoor5NhVK5gHpQm XCjejgMpDRGk0lZZ+0msHcdHY1JINijR9jIvwK5U505UqzR07KDfztRR3SFRT1Qx LvDNPrtZcQJA0sK2X6Bq3kEcGlEqR5CImIOtqlgmhuBXKtFs5069BvBzTdHfeqVx RHWNBm5XlqMWuhbFKY/n1MT2xhZwAh4iYrb9xxWpysPjzSDv+bVhjD4puEZi/8qg hIxX+0VZJAj1NW/37h8eZRFqtD8YQJRTWoDB3yU+DXPOdR0MtPhCWw3riZNy6qZ3 rCaMRA8z6kds9v0G+oSM/NMvd7c7059+UX3bprg7VuGDOphR/TmzfYHNmxhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURBZ1N9zEgzapcfmIVRmwj3PVx5owHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHpFOpR13SYBo1UkoTGwRjzCsbHY114qRnK ZvGk9eMV4RXWddPaa8ctbRf9YOSHcKB3d0L7kPORvfaQQfPVwyIbYM0NfLZpUxYD zs7/N4CSNKq0yLp1gRX0zGRCA6j+PeqTppXntRbLeoDckspBZsvRZAHcwfKRFZPb ufo42gvssBhrayf8k6gCioOaGydxPDzGcNeOmRxUjRdLVAFoyoJJQNNV9RpNPezs i85O9cxk46iqdSi4hkPriU7ap9qVrVCOt/mMoo5YmZCRzPIPZdb38nrKMfF3ZMzM 7tCrhwXEhGArCUvnXZqr7Ko45HgIhyljIbUZTA/zV00uWEAJ5EE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:13 2025 by rpki-client