$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: be16/jkYBDxhAubapO0TmavnWT9GnPH2Qqlz6Tdv4cs= Subject key identifier: 1D:E9:27:B8:F2:76:6F:56:41:B5:2E:20:6F:FF:67:DC:40:03:D3:A9 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 38C2325F2323C7F08D5B3FF3751BFB05DFAEE4BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01DA Signing time: Fri 06 Jun 2025 14:51:56 +0000 Manifest this update: Fri 06 Jun 2025 14:46:56 +0000 Manifest next update: Tue 10 Jun 2025 00:31:56 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) 2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: L6PhRJfQCTHmX9gKHC6ZfhOfCTAQ5ZKJRGupirGheCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c2:32:5f:23:23:c7:f0:8d:5b:3f:f3:75:1b:fb:05:df:ae:e4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Jun 6 14:46:56 2025 GMT Not After : Jun 10 00:31:56 2025 GMT Subject: CN=1DE927B8F2766F5641B52E206FFF67DC4003D3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:15:92:a3:a2:1b:31:99:9c:9b:4a:b9:93: d7:a0:69:e1:af:bf:f3:bc:62:6d:03:a3:ad:9b:92: 16:6b:de:8d:a4:06:e4:53:c7:92:8d:7a:d7:25:55: b3:4b:f5:59:0d:90:6b:60:03:e4:55:e1:d5:96:4f: 7b:12:a1:7e:5d:8a:bf:eb:46:59:da:86:23:2b:cb: 68:21:26:cd:86:45:a8:f5:cc:54:f2:6b:f4:66:21: 87:3e:27:83:2d:69:f7:32:96:4b:74:12:bc:8c:e4: 66:0b:eb:21:58:99:3b:fa:b2:c1:3a:77:a6:9e:51: 5c:7f:3b:5b:41:a8:4c:e1:1e:6e:93:71:6b:ea:54: 84:59:3c:09:22:54:cc:68:bd:f9:ee:e2:37:2f:7c: a3:dd:82:22:62:00:2f:f3:5f:f6:f3:ae:b1:30:3e: e1:ff:4f:9a:7f:a3:2a:81:c6:e3:9a:cd:48:2e:7d: 97:b8:c6:78:14:d4:70:3a:23:6d:22:22:6d:48:17: 8d:57:26:50:2c:33:8e:88:29:4d:7e:09:dd:a6:64: 28:d7:22:bd:ad:60:ce:6f:12:82:69:1b:98:e1:9d: 0e:9c:fc:78:49:4a:7b:bb:15:58:cb:1a:08:a3:2a: 81:3b:3e:cb:e4:b8:7b:a9:3c:3f:c2:ba:e3:74:36: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E9:27:B8:F2:76:6F:56:41:B5:2E:20:6F:FF:67:DC:40:03:D3:A9 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:43:38:99:9a:9a:21:20:cc:83:b9:61:ab:01:18:a0:33:00: 84:e9:93:31:85:75:ab:56:6b:ba:c3:d8:1d:30:76:0e:c9:51: ac:48:ed:83:32:d0:02:00:88:f3:35:b1:68:6c:f9:a2:13:a5: 8a:df:83:38:b6:ec:bf:54:dd:af:64:a3:71:fc:39:ec:07:0b: 5a:44:b0:25:c4:e5:7f:44:89:67:1d:6a:b7:d1:33:55:39:41: f9:7a:aa:d5:c6:ef:93:05:1e:c7:15:02:17:6c:e7:7c:53:e0: c8:3c:dc:57:b0:ca:83:bf:c3:33:aa:29:3f:6b:63:cf:a7:93: da:46:76:28:14:d6:e6:e3:52:7e:72:91:ac:e7:a3:42:ae:d6: 7f:d9:f7:fa:10:fa:0e:da:1e:87:92:5b:c5:ef:4f:e4:21:ea: 24:20:78:06:98:aa:25:0f:09:f2:f8:83:65:86:ad:e6:5f:33: c9:7c:76:2d:75:81:be:96:77:a2:0f:ff:20:45:ef:23:36:ea: b7:65:40:fb:15:7c:ef:a5:42:93:13:b1:3a:9d:5b:ac:1e:3c: 6f:58:ef:23:75:39:bb:00:22:45:d2:12:c6:00:53:f1:e7:a1: b6:36:a6:1b:f3:fb:7e:dd:27:d5:23:29:c2:cf:d0:e0:e6:47: 92:a7:9b:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMIyXyMjx/CNWz/zdRv7Bd+u5L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTA2MDYxNDQ2NTZaFw0yNTA2MTAwMDMxNTZaMDMxMTAvBgNV BAMTKDFERTkyN0I4RjI3NjZGNTY0MUI1MkUyMDZGRkY2N0RDNDAwM0QzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwahWSo6IbMZmcm0q5k9egaeGv v/O8Ym0Do62bkhZr3o2kBuRTx5KNetclVbNL9VkNkGtgA+RV4dWWT3sSoX5dir/r RlnahiMry2ghJs2GRaj1zFTya/RmIYc+J4Mtafcylkt0EryM5GYL6yFYmTv6ssE6 d6aeUVx/O1tBqEzhHm6TcWvqVIRZPAkiVMxovfnu4jcvfKPdgiJiAC/zX/bzrrEw PuH/T5p/oyqBxuOazUgufZe4xngU1HA6I20iIm1IF41XJlAsM46IKU1+Cd2mZCjX Ir2tYM5vEoJpG5jhnQ6c/HhJSnu7FVjLGgijKoE7PsvkuHupPD/CuuN0NjeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHeknuPJ2b1ZBtS4gb/9n3EAD06kwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpDOJmamiEgzIO5YasBGKAzAITpkzGFdatW a7rD2B0wdg7JUaxI7YMy0AIAiPM1sWhs+aITpYrfgzi27L9U3a9ko3H8OewHC1pE sCXE5X9EiWcdarfRM1U5Qfl6qtXG75MFHscVAhds53xT4Mg83FewyoO/wzOqKT9r Y8+nk9pGdigU1ubjUn5ykazno0Ku1n/Z9/oQ+g7aHoeSW8XvT+Qh6iQgeAaYqiUP CfL4g2WGreZfM8l8di11gb6Wd6IP/yBF7yM26rdlQPsVfO+lQpMTsTqdW6wePG9Y 7yN1ObsAIkXSEsYAU/HnobY2phvz+37dJ9UjKcLP0ODmR5Knm20= -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:56 2025 by rpki-client