$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: kL+NsAmYfKkYe6m2oNYIPHCpxNibn54wIxjXjmhODDE= Subject key identifier: 87:21:5E:C7:D4:CC:E6:86:57:CE:4A:56:B4:69:74:A1:E3:55:15:EA Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 2ADF5DA0E41CACC6FBF5F5741A3F50B70BBD22CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02BB Signing time: Wed 04 Jun 2025 04:41:53 +0000 Manifest this update: Wed 04 Jun 2025 04:36:53 +0000 Manifest next update: Sat 07 Jun 2025 06:13:53 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: WHouD9+W6AvRFEw24IVdmg4Dhspaa5F4Hc9IanmKssc=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: 6idWc3lf40SrC6ddCZtHyjdlNkTY3XNNuoo22GH5+G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:df:5d:a0:e4:1c:ac:c6:fb:f5:f5:74:1a:3f:50:b7:0b:bd:22:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Jun 4 04:36:53 2025 GMT Not After : Jun 7 06:13:53 2025 GMT Subject: CN=87215EC7D4CCE68657CE4A56B46974A1E35515EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:84:18:d2:27:7e:bf:6f:f4:ad:06:48:cb: 80:cf:f0:62:51:76:4f:3c:1e:a2:e7:40:df:ca:cb: 59:1f:30:50:9c:93:69:50:25:4b:2d:2d:da:1a:bb: b9:01:a3:74:ef:bd:09:4b:d7:8b:1a:c7:28:10:01: bd:c7:28:4c:0b:1c:51:dc:ff:5d:b8:45:05:9a:05: bc:68:d8:76:9e:ba:6c:e1:12:5f:5e:1c:60:c5:bc: 8b:7b:74:7b:7f:36:9f:22:ee:93:6c:60:c9:46:14: 06:95:7a:1e:25:d0:2c:ae:51:1c:93:21:6b:d2:78: 02:ab:f7:8c:f4:73:81:7f:cd:88:27:12:7e:d2:52: ca:99:ae:e7:da:60:2a:b6:97:0d:04:0a:3d:90:46: f4:d0:1d:8b:0b:c7:0c:5e:fe:b7:01:c3:0a:4f:7b: 65:e7:63:58:d1:49:a6:65:97:db:56:cb:c7:b7:b2: d3:22:45:4f:9a:39:0a:5e:97:30:26:dd:8a:ff:9c: e3:4e:6a:4a:47:f5:d2:dc:46:67:f0:33:30:73:57: 85:08:a8:33:50:7a:59:62:d5:e9:38:a7:a8:09:1e: cc:1b:13:fe:00:a6:b6:c7:15:fc:12:9c:14:9a:af: b4:17:9f:eb:4d:c1:04:46:0b:2c:54:6c:4c:0d:f7: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:5E:C7:D4:CC:E6:86:57:CE:4A:56:B4:69:74:A1:E3:55:15:EA X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cd:70:2c:fc:1b:cb:72:a1:eb:6f:ee:7c:d0:3f:2b:c7:7e: 91:9d:fb:70:0a:52:a0:33:63:86:7e:87:f7:ad:6e:f0:39:d6: a6:b7:f2:c6:c0:47:08:23:03:9d:f9:ff:46:67:5b:67:47:4f: 6c:e7:fe:92:81:72:c5:bb:45:d6:cf:62:3b:09:3a:81:bd:ae: 1a:6e:37:ed:ff:f8:b4:2b:ba:67:a6:52:9d:a8:48:ba:dd:96: 54:01:ab:3b:f9:af:9e:8d:20:5c:9c:d4:90:a3:94:e5:2e:5d: d1:34:e9:07:c5:34:4c:be:5d:19:35:dd:3e:ae:d5:ac:f2:b8: bf:2a:0c:a3:45:3f:a5:69:f8:ef:8b:b3:ba:f6:7a:6b:c9:41: 37:94:cc:63:24:12:46:52:a9:07:b7:f6:57:35:04:dc:b1:ee: 23:06:fe:a5:47:3b:dc:58:f7:86:da:c8:01:b7:82:9f:11:36: 5e:eb:9c:e5:de:06:ba:d7:c4:8b:88:03:15:2b:cf:4f:25:22: df:c7:d0:fe:56:dc:17:83:f5:66:26:ce:5a:92:80:0a:26:7c: 32:05:e7:d0:3c:61:c5:a4:5b:d6:73:77:09:d4:6a:48:bd:50: 9b:28:46:87:86:69:c2:60:0d:a6:af:80:51:dc:46:4b:7c:b3: 89:65:f4:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKt9doOQcrMb79fV0Gj9Qtwu9IsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA2MDQwNDM2NTNaFw0yNTA2MDcwNjEzNTNaMDMxMTAvBgNV BAMTKDg3MjE1RUM3RDRDQ0U2ODY1N0NFNEE1NkI0Njk3NEExRTM1NTE1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3koQY0id+v2/0rQZIy4DP8GJR dk88HqLnQN/Ky1kfMFCck2lQJUstLdoau7kBo3TvvQlL14saxygQAb3HKEwLHFHc /124RQWaBbxo2HaeumzhEl9eHGDFvIt7dHt/Np8i7pNsYMlGFAaVeh4l0CyuURyT IWvSeAKr94z0c4F/zYgnEn7SUsqZrufaYCq2lw0ECj2QRvTQHYsLxwxe/rcBwwpP e2XnY1jRSaZll9tWy8e3stMiRU+aOQpelzAm3Yr/nONOakpH9dLcRmfwMzBzV4UI qDNQelli1ek4p6gJHswbE/4AprbHFfwSnBSar7QXn+tNwQRGCyxUbEwN9/UTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhyFex9TM5oZXzkpWtGl0oeNVFeowHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDNcCz8G8tyoetv7nzQPyvHfpGd+3AKUqAz Y4Z+h/etbvA51qa38sbARwgjA535/0ZnW2dHT2zn/pKBcsW7RdbPYjsJOoG9rhpu N+3/+LQrumemUp2oSLrdllQBqzv5r56NIFyc1JCjlOUuXdE06QfFNEy+XRk13T6u 1azyuL8qDKNFP6Vp+O+Ls7r2emvJQTeUzGMkEkZSqQe39lc1BNyx7iMG/qVHO9xY 94bayAG3gp8RNl7rnOXeBrrXxIuIAxUrz08lIt/H0P5W3BeD9WYmzlqSgAomfDIF 59A8YcWkW9ZzdwnUaki9UJsoRoeGacJgDaavgFHcRkt8s4ll9C0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:54 2025 by rpki-client