$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: XBL00wNT2I1hSVYCM0sIvsIJgqW2lu5i2HmCMUxr7y8= Subject key identifier: F5:BB:7F:9F:4D:31:F5:7F:69:AB:6F:74:9F:0F:DD:C4:6F:05:35:A9 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 039E746EC230AC18D156A86106C0045D5DC7458F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 021D Signing time: Tue 04 Nov 2025 20:02:04 +0000 Manifest this update: Tue 04 Nov 2025 19:57:04 +0000 Manifest next update: Fri 07 Nov 2025 23:14:04 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: JJDiuMs3xsHBEHySym/9cNd9OWH5NpfUlbVesG9Gow4=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9e:74:6e:c2:30:ac:18:d1:56:a8:61:06:c0:04:5d:5d:c7:45:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Nov 4 19:57:04 2025 GMT Not After : Nov 7 23:14:04 2025 GMT Subject: CN=F5BB7F9F4D31F57F69AB6F749F0FDDC46F0535A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:b3:7f:46:2a:9d:2c:3f:80:ab:32:c2:55: a7:30:4f:74:49:65:57:94:32:20:29:c2:b8:ce:5e: 7e:82:23:09:8d:ee:5e:c8:62:56:dc:66:5e:82:d1: 56:af:51:b6:ef:b9:29:ba:90:45:11:14:6a:8e:8b: 4d:d1:d1:06:16:b5:8d:b1:b7:7a:42:f7:18:db:cf: a3:8e:08:cf:a5:a4:5e:49:5b:fc:16:2a:ab:60:db: 52:25:0a:d8:c6:6f:6e:93:2d:88:39:d7:6d:83:50: d5:9c:7a:4c:41:69:38:b5:25:c3:40:ff:55:20:94: a7:94:29:0a:af:cf:75:95:93:78:7e:76:71:e3:4a: 6d:87:87:59:6d:c5:0b:42:1d:75:15:4a:4c:fd:da: 8a:b2:76:18:70:b2:10:d0:c0:95:30:0e:29:4c:43: d9:5e:49:46:2c:ba:7b:a8:fb:43:23:dd:bb:50:05: 2a:02:de:39:69:60:c1:12:2b:88:ae:20:be:cf:1e: 09:60:55:09:ec:61:d4:db:81:29:13:e5:24:2d:45: 63:44:c6:fb:35:99:77:60:63:38:ca:a2:a9:0b:d2: 14:0a:c2:1d:82:dd:57:91:4b:14:ef:dd:fb:88:37: 39:09:7e:56:12:a7:4a:a1:b5:21:d8:1f:62:61:df: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:7F:9F:4D:31:F5:7F:69:AB:6F:74:9F:0F:DD:C4:6F:05:35:A9 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:30:a4:3c:13:e9:2c:09:dc:7e:8f:37:b8:a2:6a:4a:be:75: ad:fb:75:98:6f:ca:4d:7f:1b:02:51:f0:1d:54:c1:e0:b9:fd: c7:3e:25:9c:d4:85:5d:ad:e1:3f:6b:9c:a6:3d:e7:2a:7b:4f: c4:ba:fb:a5:3e:8a:2b:e4:06:23:f3:39:cb:be:4c:9b:cc:cb: 8d:65:32:8b:b7:70:55:80:e1:e9:9f:57:bc:69:94:7c:0c:10: 82:cd:5a:25:8f:c4:99:83:a8:04:0f:9d:69:30:a7:87:84:03: 14:66:c5:c4:6b:65:f3:01:6e:be:63:70:6f:f1:e1:c2:73:7f: ac:79:d0:8c:90:87:75:10:d3:9a:e5:51:53:96:89:81:34:70: c8:19:00:05:f6:08:a3:5a:de:47:4a:2d:a1:30:ff:1f:8e:4c: 20:ff:c5:e1:c3:d2:1e:37:3b:aa:0b:cb:16:ca:f9:92:dc:e8: 24:76:44:03:e7:cf:06:b2:d6:2c:42:3c:7b:af:33:59:1d:18: a7:77:e2:86:4a:bb:99:5b:9b:27:a9:5b:ec:97:68:7e:9e:a7: bc:25:31:19:6d:ac:54:32:f3:26:2b:bc:bc:02:1b:10:5f:03: fa:c1:02:b5:61:75:87:4a:32:fa:17:a9:df:3b:a2:be:13:db: d3:e0:e9:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA550bsIwrBjRVqhhBsAEXV3HRY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTExMDQxOTU3MDRaFw0yNTExMDcyMzE0MDRaMDMxMTAvBgNV BAMTKEY1QkI3RjlGNEQzMUY1N0Y2OUFCNkY3NDlGMEZEREM0NkYwNTM1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeuLN/RiqdLD+AqzLCVacwT3RJ ZVeUMiApwrjOXn6CIwmN7l7IYlbcZl6C0VavUbbvuSm6kEURFGqOi03R0QYWtY2x t3pC9xjbz6OOCM+lpF5JW/wWKqtg21IlCtjGb26TLYg5122DUNWcekxBaTi1JcNA /1UglKeUKQqvz3WVk3h+dnHjSm2Hh1ltxQtCHXUVSkz92oqydhhwshDQwJUwDilM Q9leSUYsunuo+0Mj3btQBSoC3jlpYMESK4iuIL7PHglgVQnsYdTbgSkT5SQtRWNE xvs1mXdgYzjKoqkL0hQKwh2C3VeRSxTv3fuINzkJflYSp0qhtSHYH2Jh3wILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9bt/n00x9X9pq290nw/dxG8FNakwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8wpDwT6SwJ3H6PN7iiakq+da37dZhvyk1/ GwJR8B1UweC5/cc+JZzUhV2t4T9rnKY95yp7T8S6+6U+iivkBiPzOcu+TJvMy41l Mou3cFWA4emfV7xplHwMEILNWiWPxJmDqAQPnWkwp4eEAxRmxcRrZfMBbr5jcG/x 4cJzf6x50IyQh3UQ05rlUVOWiYE0cMgZAAX2CKNa3kdKLaEw/x+OTCD/xeHD0h43 O6oLyxbK+ZLc6CR2RAPnzway1ixCPHuvM1kdGKd34oZKu5lbmyepW+yXaH6ep7wl MRltrFQy8yYrvLwCGxBfA/rBArVhdYdKMvoXqd87or4T29Pg6fs= -----END CERTIFICATE-----Generated at Thu Nov 6 00:08:55 2025 by rpki-client