$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: xLmQifatoyyQTNyvFSk+9h+FrDlJbNvBFVMtPGMW3tA= Subject key identifier: DD:05:00:60:83:1A:62:AE:4C:8A:1E:4E:14:24:5E:64:29:2F:5B:5C Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 24B3535861A69DBA74B663EEB8D3E10DFE026CD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02E6 Signing time: Fri 05 Sep 2025 16:41:51 +0000 Manifest this update: Fri 05 Sep 2025 16:36:51 +0000 Manifest next update: Mon 08 Sep 2025 20:55:51 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: B100YRv26QlYn481NDJNe+sj2hLHaWtX8QYqh8DTico=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b3:53:58:61:a6:9d:ba:74:b6:63:ee:b8:d3:e1:0d:fe:02:6c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Sep 5 16:36:51 2025 GMT Not After : Sep 8 20:55:51 2025 GMT Subject: CN=DD050060831A62AE4C8A1E4E14245E64292F5B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:78:9f:85:f7:d1:70:e7:f7:c2:97:b7:4d: ab:c7:d6:4f:0f:80:d9:06:1a:2d:0b:b9:6f:fe:b6: 29:cf:3d:8f:e5:9a:73:fa:a3:a9:26:de:a3:94:c6: 6d:0e:ac:8d:84:91:df:45:7f:fc:56:83:e2:c9:86: 38:f5:8a:78:cc:42:11:73:98:31:b2:29:52:a3:f3: 41:93:b5:26:79:c8:d0:99:00:99:10:3a:04:c8:a0: 0a:67:20:ac:6c:7e:3a:68:d0:70:5d:de:e9:61:0f: 40:d9:2c:87:30:55:14:9e:d1:47:6c:c3:a2:d3:34: 8a:b9:04:71:72:cf:56:b2:49:3f:f4:9d:af:91:b2: 98:c0:b0:e8:fe:05:6d:02:c9:69:80:a9:6b:aa:c0: 2e:91:89:fa:61:3d:6e:57:bc:77:fd:9f:5e:f5:c4: 76:3c:6e:cf:15:f3:d0:eb:84:68:0b:a0:8e:ed:45: e9:a0:a4:a6:cd:17:65:3d:35:4a:96:20:6b:2d:2d: 83:6d:7d:67:24:80:4b:58:66:02:8f:b8:1d:9a:d9: 13:fb:40:d7:83:65:99:01:57:a9:84:cb:ee:bb:e4: d0:db:40:43:23:4d:72:2b:72:56:63:a8:fa:c0:83: f5:3f:88:d1:df:f4:c9:99:94:54:2e:ac:30:5b:1a: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:00:60:83:1A:62:AE:4C:8A:1E:4E:14:24:5E:64:29:2F:5B:5C X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:dc:31:4c:04:a9:20:28:c7:4a:ff:46:85:88:4d:8e:04: 94:51:f6:5e:a9:4f:02:87:d6:2a:dd:a8:18:68:64:96:25:b1: 3f:31:06:24:2a:98:8e:02:d8:7a:ea:3f:65:f1:e0:3d:c4:0e: 18:17:52:3e:a2:8d:82:af:d4:0c:f9:ca:ba:c2:28:99:43:7d: 45:8f:f8:84:78:e2:56:0c:a2:61:e4:2e:57:09:20:54:fb:ce: 65:d3:d4:03:94:11:a2:cc:fd:20:59:61:b0:52:78:23:47:2f: 4c:23:63:e5:d6:0a:52:95:63:2b:f1:a3:52:89:75:46:ba:74: 46:c5:52:e9:56:04:a0:27:ee:b9:d1:20:49:9b:91:dd:d7:63: 2f:57:ca:2c:41:a0:cb:22:ea:0f:b8:a8:de:9b:ba:9b:16:f4: 5d:05:c0:f8:20:cf:2a:44:b9:2e:c1:a0:0d:72:26:72:91:4e: a9:db:4b:3a:cb:6e:34:0f:41:71:a8:c9:09:fd:4f:fe:da:8b: 15:6c:a3:18:0a:c0:00:8c:b0:04:18:11:c9:f3:98:17:15:9d: f3:79:c0:d2:52:e5:90:6a:7f:34:d6:4c:49:dd:70:79:49:ca: 39:96:c0:ea:de:11:10:ab:c6:34:12:4a:dc:50:9c:77:a4:1f: d3:a4:66:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLNTWGGmnbp0tmPuuNPhDf4CbNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA5MDUxNjM2NTFaFw0yNTA5MDgyMDU1NTFaMDMxMTAvBgNV BAMTKEREMDUwMDYwODMxQTYyQUU0QzhBMUU0RTE0MjQ1RTY0MjkyRjVCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJHifhffRcOf3wpe3TavH1k8P gNkGGi0LuW/+tinPPY/lmnP6o6km3qOUxm0OrI2Ekd9Ff/xWg+LJhjj1injMQhFz mDGyKVKj80GTtSZ5yNCZAJkQOgTIoApnIKxsfjpo0HBd3ulhD0DZLIcwVRSe0Uds w6LTNIq5BHFyz1ayST/0na+RspjAsOj+BW0CyWmAqWuqwC6RifphPW5XvHf9n171 xHY8bs8V89DrhGgLoI7tRemgpKbNF2U9NUqWIGstLYNtfWckgEtYZgKPuB2a2RP7 QNeDZZkBV6mEy+675NDbQEMjTXIrclZjqPrAg/U/iNHf9MmZlFQurDBbGiibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QUAYIMaYq5Mih5OFCReZCkvW1wwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaS3DFMBKkgKMdK/0aFiE2OBJRR9l6pTwKH 1irdqBhoZJYlsT8xBiQqmI4C2HrqP2Xx4D3EDhgXUj6ijYKv1Az5yrrCKJlDfUWP +IR44lYMomHkLlcJIFT7zmXT1AOUEaLM/SBZYbBSeCNHL0wjY+XWClKVYyvxo1KJ dUa6dEbFUulWBKAn7rnRIEmbkd3XYy9XyixBoMsi6g+4qN6bupsW9F0FwPggzypE uS7BoA1yJnKRTqnbSzrLbjQPQXGoyQn9T/7aixVsoxgKwACMsAQYEcnzmBcVnfN5 wNJS5ZBqfzTWTEndcHlJyjmWwOreERCrxjQSStxQnHekH9OkZlA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:39 2025 by rpki-client