$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: Erdou+eSeoS7Z00+sdfQ9eryuwScouOOYPZkWsdrlQ0= Subject key identifier: C5:2E:7B:0D:7A:2E:C7:82:FD:E9:5F:CA:2E:42:A1:42:68:52:FB:01 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 24B1363A010F151D49EFAD77D149A63267C59245 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01CD Signing time: Sat 06 Sep 2025 20:30:55 +0000 Manifest this update: Sat 06 Sep 2025 20:25:55 +0000 Manifest next update: Wed 10 Sep 2025 00:38:55 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: Pl/ctFWjn2DzcKwvIJWJCi3WoBfIEVcx8T5h4b1LX40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b1:36:3a:01:0f:15:1d:49:ef:ad:77:d1:49:a6:32:67:c5:92:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Sep 6 20:25:55 2025 GMT Not After : Sep 10 00:38:55 2025 GMT Subject: CN=C52E7B0D7A2EC782FDE95FCA2E42A1426852FB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:2c:96:95:9f:e6:9b:7c:15:14:0a:3f:b9: 3b:9c:19:cb:ca:c4:41:aa:b9:6b:01:df:4a:ee:fc: 02:68:15:86:58:28:36:25:77:b7:9b:b6:9f:d1:78: f8:cf:22:55:f7:03:87:fe:2d:11:5b:2d:33:ff:16: 4b:ab:01:d6:02:7b:18:5f:f5:97:f2:1c:96:70:83: d3:29:94:53:7a:e0:bd:6c:82:7c:89:fc:78:cd:bc: c2:c9:33:fe:eb:05:4e:11:7c:30:83:b6:1e:a1:1b: c5:46:4b:ed:b8:e3:7d:35:4b:7d:30:0e:56:65:da: 05:bc:b6:32:f1:e7:34:79:b2:35:58:72:cb:80:9d: 4b:40:1c:c0:e9:89:b1:25:2b:f9:9a:c5:a3:c5:f5: 5f:cf:9c:90:3b:0a:62:51:3f:f4:aa:84:40:19:4f: f4:85:1a:e8:e2:86:fc:0c:70:05:95:b7:cd:af:b2: 70:58:26:ad:92:52:d5:21:10:38:75:06:c3:22:ed: 83:2a:8a:b4:0d:bb:d2:a2:b4:1f:8d:6a:7a:15:3c: 3d:aa:ca:0c:5e:89:76:be:ed:06:cf:90:ee:e5:44: 2f:32:bc:5c:59:f6:2a:82:d9:b9:4d:e8:6a:72:ef: f2:5e:92:5a:48:15:fc:7b:ac:31:a0:6a:8b:fa:1e: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:7B:0D:7A:2E:C7:82:FD:E9:5F:CA:2E:42:A1:42:68:52:FB:01 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:55:a3:a2:8e:79:33:23:9f:7d:21:84:ab:c6:6b:83:ef:ef: 6d:aa:eb:7c:d6:68:90:b8:0a:77:6e:42:35:99:29:63:01:c6: 73:20:61:76:65:4d:8d:d7:d5:77:4e:02:15:10:de:f6:23:f8: 47:be:bb:e0:ae:cc:7e:77:50:b2:ab:70:97:74:d3:5c:f2:5b: 16:79:51:c6:0c:10:f5:c6:8d:37:3d:57:79:66:23:cd:19:d2: 0f:90:88:f1:e5:5f:25:87:17:27:66:06:c0:d7:09:b8:90:09: b6:e9:b3:ce:c8:15:db:2a:93:b3:1a:cc:9b:63:40:ce:8b:1c: 7e:70:40:17:d5:1a:2d:28:fb:ed:6c:70:29:25:82:64:c6:bb: 48:c4:75:f1:b6:c6:60:11:cf:4d:0c:64:16:82:41:81:7e:58: 9b:9a:a6:39:58:d1:71:7d:20:8c:5b:75:2b:89:8e:f7:a8:3c: 6f:fd:9a:f6:aa:a5:40:e0:c2:6d:46:3b:05:21:23:8f:e4:1e: 96:38:f6:b2:9a:60:9d:57:c8:ca:4e:29:8c:a6:f7:0e:3c:f2: c5:0c:e4:37:26:6f:57:ef:6f:c5:1f:02:02:55:52:2b:3b:a0: ec:cd:f6:ea:62:1b:7e:51:8c:f8:53:3b:0d:2c:c4:df:17:39: d5:56:ba:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLE2OgEPFR1J76130UmmMmfFkkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA5MDYyMDI1NTVaFw0yNTA5MTAwMDM4NTVaMDMxMTAvBgNV BAMTKEM1MkU3QjBEN0EyRUM3ODJGREU5NUZDQTJFNDJBMTQyNjg1MkZCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6SyWlZ/mm3wVFAo/uTucGcvK xEGquWsB30ru/AJoFYZYKDYld7ebtp/RePjPIlX3A4f+LRFbLTP/FkurAdYCexhf 9ZfyHJZwg9MplFN64L1sgnyJ/HjNvMLJM/7rBU4RfDCDth6hG8VGS+244301S30w DlZl2gW8tjLx5zR5sjVYcsuAnUtAHMDpibElK/maxaPF9V/PnJA7CmJRP/SqhEAZ T/SFGujihvwMcAWVt82vsnBYJq2SUtUhEDh1BsMi7YMqirQNu9KitB+NanoVPD2q ygxeiXa+7QbPkO7lRC8yvFxZ9iqC2blN6Gpy7/JeklpIFfx7rDGgaov6HmO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxS57DXoux4L96V/KLkKhQmhS+wEwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1Vo6KOeTMjn30hhKvGa4Pv722q63zWaJC4 CnduQjWZKWMBxnMgYXZlTY3X1XdOAhUQ3vYj+Ee+u+CuzH53ULKrcJd001zyWxZ5 UcYMEPXGjTc9V3lmI80Z0g+QiPHlXyWHFydmBsDXCbiQCbbps87IFdsqk7MazJtj QM6LHH5wQBfVGi0o++1scCklgmTGu0jEdfG2xmARz00MZBaCQYF+WJuapjlY0XF9 IIxbdSuJjveoPG/9mvaqpUDgwm1GOwUhI4/kHpY49rKaYJ1XyMpOKYym9w488sUM 5Dcmb1fvb8UfAgJVUis7oOzN9upiG35RjPhTOw0sxN8XOdVWunI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:03 2025 by rpki-client