$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: 16CCLQmg0GWCjNQ7feT2wTjOAbxMoRViio2gqPOZUcQ= Subject key identifier: BD:81:A9:76:89:3C:EB:B7:88:1C:4C:CB:DE:E3:7B:DF:16:74:17:00 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 0F07065DBB144EE4F079B960695F0136E1EEAAB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01A4 Signing time: Fri 06 Jun 2025 00:30:52 +0000 Manifest this update: Fri 06 Jun 2025 00:25:52 +0000 Manifest next update: Mon 09 Jun 2025 01:40:52 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: mW+ZLeISlxtcnym8DsfJW10O/roXQVqyH35OXV0xjuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:07:06:5d:bb:14:4e:e4:f0:79:b9:60:69:5f:01:36:e1:ee:aa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Jun 6 00:25:52 2025 GMT Not After : Jun 9 01:40:52 2025 GMT Subject: CN=BD81A976893CEBB7881C4CCBDEE37BDF16741700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:b5:c6:fa:0e:4b:11:df:c5:3b:b2:ac:18: c6:a8:03:f7:7f:6a:47:7b:2a:50:7b:72:2d:9d:8a: dc:d5:27:37:62:f1:e4:65:59:b8:54:3c:ef:e0:ab: cb:9b:7e:57:6a:22:5b:f9:d7:23:23:b6:fd:41:9b: 4d:90:11:06:da:4f:8c:9a:f6:76:50:c0:66:0b:be: 82:3f:0d:e7:30:39:ff:d4:51:a2:e0:0e:71:87:18: 16:28:22:59:c6:73:34:41:17:21:b2:9d:72:64:28: 3d:a4:7f:7d:3e:c8:c2:67:b6:14:6b:15:8e:b0:1a: 18:e2:a5:89:5c:00:7f:a7:4f:4b:6d:92:e7:ef:e0: 4f:75:17:43:d8:9d:50:7e:ea:c9:9d:74:84:1a:ad: df:58:c6:5e:23:02:ba:5a:b9:ce:97:1d:a0:65:8c: eb:25:ce:f8:c1:42:6b:c5:a3:52:1f:c8:3d:06:00: 02:ea:89:1b:ec:04:fc:89:11:52:bf:3f:5a:57:28: 7d:7d:a8:75:4f:8b:cb:a7:2b:1b:7a:de:c5:5c:d4: 4c:27:61:3b:af:bd:35:07:1d:e5:cb:a8:59:af:12: d6:2e:df:d0:0b:11:14:7a:0d:a0:90:e1:be:a5:94: 4a:e5:cb:f5:bb:d5:f4:cc:2a:13:7f:cd:ea:b3:78: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:A9:76:89:3C:EB:B7:88:1C:4C:CB:DE:E3:7B:DF:16:74:17:00 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:0a:cb:cc:a4:4c:08:32:f1:18:31:5f:31:d4:e1:a7:c1: e3:61:37:74:49:fd:4d:a3:ac:65:75:19:87:6b:0c:61:fa:a1: 51:92:53:63:85:1a:1e:14:4c:4d:02:94:a2:38:a0:cb:6b:c6: d2:7c:67:d6:14:83:d5:a4:8a:16:b4:ca:22:b8:7e:57:bc:59: 9b:5d:02:1a:02:ba:d2:d1:1d:f3:8e:23:da:60:fd:45:57:36: db:e1:2c:4c:83:db:38:d0:aa:0e:a0:06:49:4a:0a:6d:e2:45: ff:8a:ba:94:2e:ab:d7:9f:dc:31:a7:f5:bb:38:fb:ed:8c:c5: c0:95:e9:d1:84:28:2c:5a:4b:01:65:95:e3:a0:03:74:55:1b: 9d:00:88:b7:76:dd:2e:e1:6c:c6:f3:8e:12:ed:ca:c0:2e:dc: 8c:f8:ce:08:d8:a6:d3:0f:8a:09:8f:ca:94:39:f1:4f:4b:50: 6c:06:a6:13:f7:b5:39:2b:73:28:b2:b3:e5:05:f4:7f:74:3a: 8a:ca:ff:df:dd:f3:9d:b7:9c:ee:e4:6a:bd:c7:d1:27:5e:af: 01:04:bf:52:88:f7:d6:8e:36:0a:f9:91:02:68:9c:cc:6a:18: 19:c6:b7:b2:d4:91:7f:62:b4:d7:25:36:4c:40:ac:fa:e5:60: 0f:f4:f6:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwcGXbsUTuTweblgaV8BNuHuqrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA2MDYwMDI1NTJaFw0yNTA2MDkwMTQwNTJaMDMxMTAvBgNV BAMTKEJEODFBOTc2ODkzQ0VCQjc4ODFDNENDQkRFRTM3QkRGMTY3NDE3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDrXG+g5LEd/FO7KsGMaoA/d/ akd7KlB7ci2ditzVJzdi8eRlWbhUPO/gq8ubfldqIlv51yMjtv1Bm02QEQbaT4ya 9nZQwGYLvoI/DecwOf/UUaLgDnGHGBYoIlnGczRBFyGynXJkKD2kf30+yMJnthRr FY6wGhjipYlcAH+nT0ttkufv4E91F0PYnVB+6smddIQard9Yxl4jArpauc6XHaBl jOslzvjBQmvFo1IfyD0GAALqiRvsBPyJEVK/P1pXKH19qHVPi8unKxt63sVc1Ewn YTuvvTUHHeXLqFmvEtYu39ALERR6DaCQ4b6llErly/W71fTMKhN/zeqzeLlrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvYGpdok867eIHEzL3uN73xZ0FwAwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzVCsvMpEwIMvEYMV8x1OGnweNhN3RJ/U2j rGV1GYdrDGH6oVGSU2OFGh4UTE0ClKI4oMtrxtJ8Z9YUg9Wkiha0yiK4fle8WZtd AhoCutLRHfOOI9pg/UVXNtvhLEyD2zjQqg6gBklKCm3iRf+KupQuq9ef3DGn9bs4 ++2MxcCV6dGEKCxaSwFlleOgA3RVG50AiLd23S7hbMbzjhLtysAu3Iz4zgjYptMP igmPypQ58U9LUGwGphP3tTkrcyiys+UF9H90OorK/9/d8523nO7kar3H0SderwEE v1KI99aONgr5kQJonMxqGBnGt7LUkX9itNclNkxArPrlYA/09rA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:06:24 2025 by rpki-client