$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: 7xBH7tBb1RALQhWYWFeJSH2JNeqp49vSOsPlTMqxo9E= Subject key identifier: 6E:89:37:D5:F6:19:71:48:1E:C7:25:37:79:F5:BD:45:8A:A3:C8:F9 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 1A8C325FEBABC839E9DFA68D785201B0ECDD9294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01B4 Signing time: Thu 13 Mar 2025 08:51:55 +0000 Manifest this update: Thu 13 Mar 2025 08:46:55 +0000 Manifest next update: Sun 16 Mar 2025 18:15:55 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: Oz9/TtP3ZB3RPmwcQoRbARhRgTGXkVG5j8nGfEzoww4=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: bESiVh1gzvoB5pX1Ez8u5t1dFZk82mVkGTr2T1T7baQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 18:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8c:32:5f:eb:ab:c8:39:e9:df:a6:8d:78:52:01:b0:ec:dd:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Mar 13 08:46:55 2025 GMT Not After : Mar 16 18:15:55 2025 GMT Subject: CN=6E8937D5F61971481EC7253779F5BD458AA3C8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:ac:95:b3:b2:71:6a:a9:df:ed:69:9e:21: b3:63:c4:e6:c5:7b:ef:de:0f:84:0a:3d:40:22:b5: 35:78:6d:55:10:a7:c4:1f:ab:f0:da:07:5b:2d:93: da:1c:51:f9:af:2b:8a:0b:8f:84:b5:db:5c:35:3d: 2a:42:83:e1:86:86:1c:a0:b1:4b:26:d0:2d:8d:89: 7e:26:1b:7c:91:69:b7:90:ed:c3:79:94:4b:d5:53: 9a:55:27:a5:e0:3a:cb:a9:2c:84:c1:93:f2:76:08: 4a:26:95:fe:76:ef:62:e2:ac:21:ad:42:8f:7a:eb: 90:b5:3d:90:77:77:b4:03:db:1b:42:fc:05:d5:57: 4b:9f:17:31:8b:24:37:1f:59:56:c0:75:5d:a9:22: d1:27:76:b9:3d:ce:9e:a8:f8:fe:e9:66:51:98:9f: fd:d2:55:77:23:30:be:ec:36:a4:7f:19:61:f0:31: b3:b6:6b:e3:ff:5c:d5:4a:60:48:9f:d6:d0:fb:ef: e0:7d:d9:bd:ed:fc:17:64:97:09:f7:08:ec:d5:3e: d0:6e:bc:1b:36:4e:36:5d:a5:35:f6:29:b8:be:07: 02:cb:ef:67:01:de:03:8f:b3:96:ed:b4:f0:18:a2: b9:67:29:a7:eb:5e:3d:7d:5b:60:f7:5d:e8:f6:b7: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:37:D5:F6:19:71:48:1E:C7:25:37:79:F5:BD:45:8A:A3:C8:F9 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c8:e0:cd:51:76:58:51:41:d4:1c:92:1d:db:06:25:e0:57: 86:23:7e:c0:dc:24:e0:db:a9:72:86:95:aa:f2:fe:eb:2b:6a: ca:8d:40:c7:49:6c:b5:bf:4d:bc:be:76:ce:aa:f3:f9:19:40: dd:0b:ff:f6:f6:48:d1:eb:8b:e0:a4:9d:16:1d:4c:8c:e1:91: e6:0c:0f:d3:1e:88:d5:a0:7d:c3:b9:b8:bb:f8:44:73:9e:d7: 47:21:40:51:e3:88:5f:79:a0:e1:dd:3d:92:a6:4b:e7:b9:21: 90:91:c9:87:f8:c3:5f:fc:1b:fa:d0:5c:41:41:98:30:5e:21: 6a:1b:d9:98:8e:30:db:e5:d1:30:01:16:b9:75:c8:ff:f9:47: 26:bc:f0:db:3c:8c:d4:6c:21:8d:6b:71:04:96:8c:aa:50:5e: 2d:66:8c:67:88:e0:09:7c:3c:db:3c:7c:35:bf:a4:f2:ab:58: 10:11:83:0a:d1:8f:52:64:ef:5c:2f:39:c2:fb:33:7a:b4:93: d9:c3:a1:ef:29:ad:95:a0:64:eb:ca:c7:f9:ce:30:a4:06:3d: 8d:ea:3f:f8:64:68:07:06:d6:0b:2c:0e:8e:6a:75:57:8a:80: 88:66:96:69:30:66:2d:46:84:89:11:9a:b6:6d:64:fa:48:a4: 9e:e7:30:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGowyX+uryDnp36aNeFIBsOzdkpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTAzMTMwODQ2NTVaFw0yNTAzMTYxODE1NTVaMDMxMTAvBgNV BAMTKDZFODkzN0Q1RjYxOTcxNDgxRUM3MjUzNzc5RjVCRDQ1OEFBM0M4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFqyVs7Jxaqnf7WmeIbNjxObF e+/eD4QKPUAitTV4bVUQp8Qfq/DaB1stk9ocUfmvK4oLj4S121w1PSpCg+GGhhyg sUsm0C2NiX4mG3yRabeQ7cN5lEvVU5pVJ6XgOsupLITBk/J2CEomlf5272LirCGt Qo9665C1PZB3d7QD2xtC/AXVV0ufFzGLJDcfWVbAdV2pItEndrk9zp6o+P7pZlGY n/3SVXcjML7sNqR/GWHwMbO2a+P/XNVKYEif1tD77+B92b3t/Bdklwn3COzVPtBu vBs2TjZdpTX2Kbi+BwLL72cB3gOPs5bttPAYorlnKafrXj19W2D3Xej2t7h1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbok31fYZcUgexyU3efW9RYqjyPkwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/I4M1RdlhRQdQckh3bBiXgV4YjfsDcJODb qXKGlary/usrasqNQMdJbLW/Tby+ds6q8/kZQN0L//b2SNHri+CknRYdTIzhkeYM D9MeiNWgfcO5uLv4RHOe10chQFHjiF95oOHdPZKmS+e5IZCRyYf4w1/8G/rQXEFB mDBeIWob2ZiOMNvl0TABFrl1yP/5Rya88Ns8jNRsIY1rcQSWjKpQXi1mjGeI4Al8 PNs8fDW/pPKrWBARgwrRj1Jk71wvOcL7M3q0k9nDoe8prZWgZOvKx/nOMKQGPY3q P/hkaAcG1gssDo5qdVeKgIhmlmkwZi1GhIkRmrZtZPpIpJ7nMBw= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:33 2025 by rpki-client