$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: Nk2DXx1QaRGJVMoX2pkuDQHTp3iQM9DdGxRDPBf9fvo= Subject key identifier: CE:07:8A:F2:F4:C2:2A:B3:66:C1:7B:DF:56:A7:28:9D:1E:10:73:3C Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 4EA9E9AAF7065AE03C59222DFB26558BE9F89D1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 0360 Signing time: Sun 01 Jun 2025 15:51:41 +0000 Manifest this update: Sun 01 Jun 2025 15:46:41 +0000 Manifest next update: Thu 05 Jun 2025 00:16:41 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: Bm5v4y0ybCdRX/ekXEhaMkUnVPnPk1/zBoOpAO3RlAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 00:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a9:e9:aa:f7:06:5a:e0:3c:59:22:2d:fb:26:55:8b:e9:f8:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Jun 1 15:46:41 2025 GMT Not After : Jun 5 00:16:41 2025 GMT Subject: CN=CE078AF2F4C22AB366C17BDF56A7289D1E10733C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:a0:86:e5:0c:49:68:35:c2:85:81:19:bf: a8:6a:c2:e3:eb:29:b6:ab:d6:0c:ed:06:a3:17:eb: a6:59:ea:8c:4c:55:10:8d:6f:ed:42:57:b0:a2:01: 0f:73:a0:80:8f:f9:8b:7d:9a:2f:a9:2d:3b:fc:9a: 39:ae:c7:10:ad:af:11:4e:bb:05:c3:79:4d:a6:b6: dd:09:7c:e6:a4:1a:77:28:5c:96:2e:e2:f7:69:b9: 73:60:04:4a:4f:12:56:47:16:27:69:09:bb:dd:c6: c2:f8:7f:04:58:87:ff:40:7b:cd:b5:00:ed:4d:3c: 8b:87:ca:6a:fa:82:49:66:87:11:33:04:64:be:2d: b9:17:ae:9d:4d:16:3f:72:22:18:c6:1e:db:8c:45: 48:17:56:1d:64:0c:07:b1:ae:d3:4f:c3:34:58:0b: 42:ac:20:6a:75:ac:26:9b:11:aa:e6:dc:4d:6f:9e: ee:0c:a9:c8:66:d1:a0:65:81:e1:6b:0c:e7:bb:6e: c0:fe:48:55:6c:33:e3:25:82:3d:98:e8:67:ed:13: 59:91:27:d8:7b:fb:79:0f:e4:e1:0e:7e:d6:73:b9: 31:f5:49:7b:08:e0:71:61:42:83:e9:9a:81:0f:62: ae:fa:fd:3c:b3:27:ef:e1:09:82:82:70:ad:bd:72: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:07:8A:F2:F4:C2:2A:B3:66:C1:7B:DF:56:A7:28:9D:1E:10:73:3C X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d3:96:7c:d7:d2:1e:92:a1:09:d5:48:60:e8:14:7a:77:c7: cc:99:d2:18:70:28:e0:4c:05:7b:ec:12:47:61:bf:ae:90:d8: 30:94:db:b3:67:e7:47:75:a1:e5:a2:63:ac:15:b6:55:e8:c0: fb:bd:5a:28:c3:05:14:18:b6:23:ab:02:c2:7b:9b:94:cc:25: 5f:21:d6:d4:68:ad:56:a1:fb:f7:a8:93:b5:29:8c:de:21:0b: 80:39:d5:39:e1:48:c6:3e:6b:56:3c:9a:3a:14:41:34:fe:58: 51:f8:01:2d:d1:33:be:ed:6f:a1:d3:49:69:43:2d:aa:d1:97: 0c:87:05:1a:7a:87:56:0c:8c:00:3d:7b:4a:6d:0e:fe:d2:93: c2:02:f1:a3:56:30:e2:0e:32:ae:7e:61:b5:95:86:f4:80:71: b1:13:6b:7f:77:6e:e9:9e:17:55:db:38:22:af:26:15:26:ec: 8d:b5:27:2d:c3:3d:1f:d7:bb:c3:02:d3:54:76:63:1a:45:4e: 6c:0f:a5:d2:45:80:0e:23:1b:fe:af:2a:69:a3:98:9d:a6:12: b0:d9:5c:c0:ff:fe:f7:84:a7:fe:74:7e:8f:bc:08:33:d5:88: 12:61:9e:fb:53:fd:c8:f4:d3:a7:ea:3a:31:3c:24:c8:1e:29: 5b:81:50:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqnpqvcGWuA8WSIt+yZVi+n4nR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTA2MDExNTQ2NDFaFw0yNTA2MDUwMDE2NDFaMDMxMTAvBgNV BAMTKENFMDc4QUYyRjRDMjJBQjM2NkMxN0JERjU2QTcyODlEMUUxMDczM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vaCG5QxJaDXChYEZv6hqwuPr Kbar1gztBqMX66ZZ6oxMVRCNb+1CV7CiAQ9zoICP+Yt9mi+pLTv8mjmuxxCtrxFO uwXDeU2mtt0JfOakGncoXJYu4vdpuXNgBEpPElZHFidpCbvdxsL4fwRYh/9Ae821 AO1NPIuHymr6gklmhxEzBGS+LbkXrp1NFj9yIhjGHtuMRUgXVh1kDAexrtNPwzRY C0KsIGp1rCabEarm3E1vnu4Mqchm0aBlgeFrDOe7bsD+SFVsM+Mlgj2Y6GftE1mR J9h7+3kP5OEOftZzuTH1SXsI4HFhQoPpmoEPYq76/TyzJ+/hCYKCcK29clxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzgeK8vTCKrNmwXvfVqconR4QczwwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHTlnzX0h6SoQnVSGDoFHp3x8yZ0hhwKOBM BXvsEkdhv66Q2DCU27Nn50d1oeWiY6wVtlXowPu9WijDBRQYtiOrAsJ7m5TMJV8h 1tRorVah+/eok7UpjN4hC4A51TnhSMY+a1Y8mjoUQTT+WFH4AS3RM77tb6HTSWlD LarRlwyHBRp6h1YMjAA9e0ptDv7Sk8IC8aNWMOIOMq5+YbWVhvSAcbETa393bume F1XbOCKvJhUm7I21Jy3DPR/Xu8MC01R2YxpFTmwPpdJFgA4jG/6vKmmjmJ2mErDZ XMD//veEp/50fo+8CDPViBJhnvtT/cj006fqOjE8JMgeKVuBUDM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:04 2025 by rpki-client