$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: 8FPy5XhJsn5uFQTGYcd4r7Td6f39lqiU7lIwij6DNOQ= Subject key identifier: FA:EB:BC:CB:E9:4D:D8:40:01:D6:96:48:F3:E8:E0:84:7C:72:2E:C9 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 5652B0357C4EFF546EDC71E4E68615B70219A34E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 038B Signing time: Thu 04 Sep 2025 12:22:10 +0000 Manifest this update: Thu 04 Sep 2025 12:17:10 +0000 Manifest next update: Sun 07 Sep 2025 22:24:10 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: JKwf5uNQUsdRRESUqGYwRUIUZGB9Qf2u6sOUKNLU8xQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:52:b0:35:7c:4e:ff:54:6e:dc:71:e4:e6:86:15:b7:02:19:a3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Sep 4 12:17:10 2025 GMT Not After : Sep 7 22:24:10 2025 GMT Subject: CN=FAEBBCCBE94DD84001D69648F3E8E0847C722EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:7a:29:13:96:9d:19:08:05:b5:d7:d7:b3: 5a:4d:3f:bc:bc:16:25:4e:f3:d2:4b:86:9a:96:29: 3f:ea:e4:4b:b9:8d:ba:49:52:7c:25:eb:37:25:bf: d8:2f:f9:a4:84:4d:6b:0a:10:f5:db:6b:e7:7f:75: 4b:50:cc:d2:19:11:93:a6:e0:70:99:30:22:54:8d: 37:f8:36:fa:57:37:4a:a4:45:c7:29:76:d8:e7:fb: 43:fb:21:6e:69:86:9f:92:e5:0f:38:b8:b8:28:6e: cc:dc:a5:e5:03:e3:ff:f0:bd:11:2e:51:24:3c:03: 3e:9c:8c:63:a7:85:4e:40:03:39:92:4c:a2:a0:5c: 20:45:d6:c5:50:21:ab:b0:cd:4a:00:16:eb:0d:64: ba:9d:36:8d:34:b0:65:3d:eb:a5:cf:a8:3a:7e:09: 93:91:b7:ce:5f:d9:35:8c:71:67:b1:15:87:0b:8e: 7c:9c:4d:5f:2e:63:cf:29:43:0c:d2:14:21:52:3a: fe:c6:4e:ae:a8:3a:48:c2:ff:c3:57:71:ba:c4:37: c3:af:94:89:41:aa:97:9e:f1:9c:ba:79:71:fd:03: 0e:8b:9f:89:1f:ae:09:25:53:6e:80:bd:44:c3:0b: 3f:94:a3:a8:b6:03:54:da:46:b7:a2:e8:aa:9b:e2: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:BC:CB:E9:4D:D8:40:01:D6:96:48:F3:E8:E0:84:7C:72:2E:C9 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:25:7c:ab:b3:25:79:b5:6c:e3:86:e5:0f:99:8a:aa:57:a0: 20:30:5d:61:0f:90:35:20:a3:d1:7e:6b:66:ec:19:cc:46:65: bd:c5:a3:06:b7:bc:3e:2e:79:ae:8f:a2:ae:45:0b:d5:59:a7: 90:36:0f:69:96:3b:26:c0:eb:b8:3e:c9:b9:ec:ec:0f:0e:d8: 8b:07:df:72:5d:b8:d2:c3:32:04:cd:18:05:41:af:73:d5:af: 3f:b1:9b:00:e0:65:7a:32:2b:2a:ce:11:9c:22:62:5d:5e:fd: a9:b6:dd:41:0a:b4:be:59:72:79:c0:43:21:3b:16:70:b6:3d: 8e:2b:bd:f3:5f:0a:43:d3:01:bd:59:a3:e0:9f:5d:82:29:10: 60:91:6d:7e:40:62:78:10:73:cf:ef:e8:1e:e9:0f:44:2c:f8: 14:ef:eb:4c:3f:22:d7:43:97:d9:91:f7:ee:81:7f:c3:2c:5f: f8:1b:6a:5b:32:f7:7d:87:7f:57:9e:2e:46:64:72:2b:98:8d: 97:85:ef:07:63:a2:7d:37:2b:53:51:b7:a3:66:08:17:44:54: a5:0a:47:e6:ce:5d:ba:37:17:ca:28:1e:fa:77:b0:b9:12:7f: 42:3b:96:f5:9d:c8:c6:c5:9f:88:96:64:2d:54:51:df:7b:90: c1:c3:bc:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlKwNXxO/1Ru3HHk5oYVtwIZo04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTA5MDQxMjE3MTBaFw0yNTA5MDcyMjI0MTBaMDMxMTAvBgNV BAMTKEZBRUJCQ0NCRTk0REQ4NDAwMUQ2OTY0OEYzRThFMDg0N0M3MjJFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4XopE5adGQgFtdfXs1pNP7y8 FiVO89JLhpqWKT/q5Eu5jbpJUnwl6zclv9gv+aSETWsKEPXba+d/dUtQzNIZEZOm 4HCZMCJUjTf4NvpXN0qkRccpdtjn+0P7IW5php+S5Q84uLgobszcpeUD4//wvREu USQ8Az6cjGOnhU5AAzmSTKKgXCBF1sVQIauwzUoAFusNZLqdNo00sGU966XPqDp+ CZORt85f2TWMcWexFYcLjnycTV8uY88pQwzSFCFSOv7GTq6oOkjC/8NXcbrEN8Ov lIlBqpee8Zy6eXH9Aw6Ln4kfrgklU26AvUTDCz+Uo6i2A1TaRrei6Kqb4k6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+uu8y+lN2EAB1pZI8+jghHxyLskwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4lfKuzJXm1bOOG5Q+ZiqpXoCAwXWEPkDUg o9F+a2bsGcxGZb3Fowa3vD4uea6Poq5FC9VZp5A2D2mWOybA67g+ybns7A8O2IsH 33JduNLDMgTNGAVBr3PVrz+xmwDgZXoyKyrOEZwiYl1e/am23UEKtL5ZcnnAQyE7 FnC2PY4rvfNfCkPTAb1Zo+CfXYIpEGCRbX5AYngQc8/v6B7pD0Qs+BTv60w/ItdD l9mR9+6Bf8MsX/gbalsy932Hf1eeLkZkciuYjZeF7wdjon03K1NRt6NmCBdEVKUK R+bOXbo3F8ooHvp3sLkSf0I7lvWdyMbFn4iWZC1UUd97kMHDvF0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:36 2025 by rpki-client