$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: kNQpyphXATnC62w32nl1CjRvQBPxzb2kdQd8/Km2ig0= Subject key identifier: 31:E2:6B:0A:86:FE:24:B9:FE:7A:0B:E9:28:53:6E:DF:B1:AC:A8:23 Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 6B8E6124A69786659AEBD37409BE3DCEC2BDAA5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 04E9 Signing time: Thu 04 Sep 2025 01:42:10 +0000 Manifest this update: Thu 04 Sep 2025 01:37:10 +0000 Manifest next update: Sun 07 Sep 2025 10:14:10 +0000 Files and hashes: 1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: cotz4c1oVMbWH1iTaqrc+QKcn2dABgFZUmg/f5vi9w0=) 2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 10:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8e:61:24:a6:97:86:65:9a:eb:d3:74:09:be:3d:ce:c2:bd:aa:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Sep 4 01:37:10 2025 GMT Not After : Sep 7 10:14:10 2025 GMT Subject: CN=31E26B0A86FE24B9FE7A0BE928536EDFB1ACA823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:03:70:dd:45:af:a2:63:4e:b3:09:d1:89: 93:1d:d8:35:fb:9c:f7:70:ee:3f:86:4f:c2:e5:95: 7d:ec:79:2a:ca:2f:a6:36:86:35:d6:83:70:df:3a: c9:a2:f8:a3:21:f1:b1:74:b5:2d:c1:f4:76:f5:56: d9:79:ba:e9:47:f5:74:b3:28:a6:1d:7c:0d:ac:b4: 0b:1d:13:d2:b7:b8:c1:1e:8a:04:7c:7a:af:80:8c: 9b:13:c1:57:9e:5b:e9:47:62:65:f7:b6:e6:7b:64: df:ca:83:65:33:78:ca:54:fc:fb:30:3a:15:57:03: 64:43:0d:1e:03:65:da:ca:90:fd:07:5d:52:1c:13: 2c:e3:8f:f6:e4:9f:0a:98:c7:ad:49:c9:97:33:85: d9:12:ed:4c:75:5c:06:b6:58:89:aa:0c:44:38:f2: 5f:6d:48:78:65:07:16:a2:0d:54:6a:66:a6:73:4d: d3:9b:90:f1:25:fb:f4:fb:d3:58:fa:0c:f5:8d:f8: 0a:f5:a4:c2:09:0a:61:9d:45:99:8b:d9:41:c4:f3: 3b:a0:f0:c6:50:4f:a3:9f:ea:97:2b:ef:84:0c:9a: 8a:ba:5f:99:5a:ff:36:53:b4:90:36:e7:6d:17:cf: 8a:c3:ce:af:94:37:20:79:e4:ba:f5:da:9d:4f:36: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:6B:0A:86:FE:24:B9:FE:7A:0B:E9:28:53:6E:DF:B1:AC:A8:23 X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:2b:92:0d:b0:2a:f6:bd:6c:17:4b:f9:12:a7:b9:cc:73:ed: 73:4f:39:11:61:9f:06:3a:9c:a5:61:de:65:6c:28:26:62:77: d8:35:d2:76:c0:ee:86:aa:21:d6:9e:69:79:e3:1f:b6:a1:47: bf:2c:77:c6:85:7b:5e:9e:6e:0a:ef:09:70:77:20:95:06:41: 1e:74:bf:99:11:04:77:a7:4c:58:29:2f:df:54:7e:8d:56:77: 9f:75:d7:b6:78:0b:fc:1e:35:e0:3b:f4:4d:54:fd:97:bc:46: 05:5f:fe:36:0d:de:55:5f:28:a0:f1:f7:5f:ea:b1:b5:5a:43: 0c:d0:ca:91:61:47:3f:91:35:d8:a8:42:f2:b3:82:8b:17:3e: d8:4d:d8:b9:73:99:2b:91:c3:73:da:9b:19:f0:69:3b:44:2a: 58:f7:98:cf:94:fb:2b:b9:0d:81:6e:5d:68:8f:0e:db:ca:40: a3:04:a0:ae:ae:c9:ce:84:a3:cc:8b:17:4d:4a:95:e1:c6:79: b7:8e:7e:59:0a:2c:16:5b:f5:be:d8:e9:49:b6:4e:ec:b1:43: 56:f3:40:9c:18:be:a9:a1:7c:13:9f:3d:00:ea:3f:70:6b:22: 2d:6a:b8:da:cd:d4:60:dc:81:fb:72:9d:92:2c:b9:b9:ca:b2: 26:49:71:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa45hJKaXhmWa69N0Cb49zsK9qlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTA5MDQwMTM3MTBaFw0yNTA5MDcxMDE0MTBaMDMxMTAvBgNV BAMTKDMxRTI2QjBBODZGRTI0QjlGRTdBMEJFOTI4NTM2RURGQjFBQ0E4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aANw3UWvomNOswnRiZMd2DX7 nPdw7j+GT8LllX3seSrKL6Y2hjXWg3DfOsmi+KMh8bF0tS3B9Hb1Vtl5uulH9XSz KKYdfA2stAsdE9K3uMEeigR8eq+AjJsTwVeeW+lHYmX3tuZ7ZN/Kg2UzeMpU/Psw OhVXA2RDDR4DZdrKkP0HXVIcEyzjj/bknwqYx61JyZczhdkS7Ux1XAa2WImqDEQ4 8l9tSHhlBxaiDVRqZqZzTdObkPEl+/T701j6DPWN+Ar1pMIJCmGdRZmL2UHE8zug 8MZQT6Of6pcr74QMmoq6X5la/zZTtJA2520Xz4rDzq+UNyB55Lr12p1PNvUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMeJrCob+JLn+egvpKFNu37GsqCMwHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0rkg2wKva9bBdL+RKnucxz7XNPORFhnwY6 nKVh3mVsKCZid9g10nbA7oaqIdaeaXnjH7ahR78sd8aFe16ebgrvCXB3IJUGQR50 v5kRBHenTFgpL99Ufo1Wd59117Z4C/weNeA79E1U/Ze8RgVf/jYN3lVfKKDx91/q sbVaQwzQypFhRz+RNdioQvKzgosXPthN2LlzmSuRw3PamxnwaTtEKlj3mM+U+yu5 DYFuXWiPDtvKQKMEoK6uyc6Eo8yLF01KleHGebeOflkKLBZb9b7Y6Um2TuyxQ1bz QJwYvqmhfBOfPQDqP3BrIi1quNrN1GDcgftynZIsubnKsiZJcUU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:26 2025 by rpki-client