$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: N1uJaDQnkbXdDmTvh5CnA+uje48Knc9higWviBOwY/E= Subject key identifier: D3:08:B4:BF:67:3D:15:75:40:38:AD:6F:FD:F0:FB:A5:6A:72:19:0E Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 72A66F7937B856369E643078A7D8F1FCDE21F841 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02D8 Signing time: Tue 05 Aug 2025 04:51:54 +0000 Manifest this update: Tue 05 Aug 2025 04:46:54 +0000 Manifest next update: Fri 08 Aug 2025 05:00:54 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) 2: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: 0Pa4LiJPYgsoX/Kaf2//uIh0ya5wHgwdL3nochJv+AA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a6:6f:79:37:b8:56:36:9e:64:30:78:a7:d8:f1:fc:de:21:f8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Aug 5 04:46:54 2025 GMT Not After : Aug 8 05:00:54 2025 GMT Subject: CN=D308B4BF673D15754038AD6FFDF0FBA56A72190E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:11:33:ea:df:4e:e7:f5:59:35:c5:5a:73: c8:13:c4:70:8f:37:62:3a:53:a2:94:ef:b5:28:03: 4d:fc:ab:0d:0e:49:78:0e:3c:a0:9b:b6:2f:1a:1b: 30:5a:46:24:2b:7c:0c:5e:f6:de:14:18:92:9f:ac: d3:af:73:a1:75:2a:72:de:e1:96:fe:5c:6a:04:24: 0a:c3:e5:ce:e8:15:83:46:ce:2a:ec:4e:82:06:76: 6d:5a:0c:68:c1:99:e3:d1:43:09:66:8b:77:81:60: 01:6d:76:27:eb:d8:42:80:4b:7b:62:41:99:f1:89: 64:9b:94:52:fc:58:01:13:7b:7d:34:fa:51:64:f5: ee:43:32:50:0b:6c:dc:6e:b7:30:06:4c:17:d1:1f: 2c:7c:d3:d5:17:59:00:69:8e:70:0a:be:62:56:83: 33:52:c3:48:4b:ab:b2:89:14:06:ee:a2:9f:95:a8: 8e:65:a7:c0:b9:d3:2a:a2:f1:19:f0:a7:18:87:6a: e0:5f:d7:72:88:0d:98:7d:05:31:63:00:a2:c8:0a: b4:92:61:19:bd:56:0b:12:1e:48:53:d8:40:b7:2d: ea:8b:67:2a:1b:6d:25:72:fb:fe:7d:b6:87:bb:30: ca:94:5e:a1:f0:56:85:0f:bb:09:ad:25:8f:51:cb: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:08:B4:BF:67:3D:15:75:40:38:AD:6F:FD:F0:FB:A5:6A:72:19:0E X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:b7:d8:e8:fa:1d:19:44:3a:9b:34:cb:ca:e7:52:95:55: 7c:d3:96:65:5d:51:1d:8e:53:76:00:13:1d:fd:7a:d8:c3:89: 2c:11:cd:0b:52:84:fe:30:8d:e6:09:9f:fe:fb:36:65:b3:3d: 00:e2:db:36:6b:11:b3:d3:13:c3:6a:f2:1d:c0:fe:7c:69:e9: 4e:3d:bd:4c:60:f3:a2:23:11:64:5b:8e:35:b7:13:96:2b:77: e1:f1:b6:68:de:e3:9b:54:c6:fd:69:49:e4:d1:27:64:40:76: 1b:02:68:94:71:ed:e3:c8:07:cc:f7:87:b0:f4:b1:b7:0c:6b: 83:92:eb:44:24:ed:bf:38:9f:28:24:d0:1c:d3:40:06:d5:4e: cc:9c:4b:c2:29:53:c3:e4:aa:a2:63:74:ce:80:12:c2:16:32: 15:6f:53:88:07:52:b7:49:19:15:65:25:d1:3c:59:4e:77:f9: 05:18:4d:4a:7e:42:0e:f5:f7:84:3c:9d:6f:99:21:c6:43:db: 91:6c:ea:a0:79:42:7f:00:70:bf:89:ca:a5:9b:5c:0e:c1:27: ad:a9:c5:ee:e6:4a:f2:24:20:f9:99:1c:0e:67:26:35:8b:1c: ae:a1:54:91:95:7a:cd:17:6c:44:bc:e9:c2:f6:26:d8:2e:07: 78:df:88:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqZveTe4VjaeZDB4p9jx/N4h+EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA4MDUwNDQ2NTRaFw0yNTA4MDgwNTAwNTRaMDMxMTAvBgNV BAMTKEQzMDhCNEJGNjczRDE1NzU0MDM4QUQ2RkZERjBGQkE1NkE3MjE5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViREz6t9O5/VZNcVac8gTxHCP N2I6U6KU77UoA038qw0OSXgOPKCbti8aGzBaRiQrfAxe9t4UGJKfrNOvc6F1KnLe 4Zb+XGoEJArD5c7oFYNGzirsToIGdm1aDGjBmePRQwlmi3eBYAFtdifr2EKAS3ti QZnxiWSblFL8WAETe300+lFk9e5DMlALbNxutzAGTBfRHyx809UXWQBpjnAKvmJW gzNSw0hLq7KJFAbuop+VqI5lp8C50yqi8RnwpxiHauBf13KIDZh9BTFjAKLICrSS YRm9VgsSHkhT2EC3LeqLZyobbSVy+/59toe7MMqUXqHwVoUPuwmtJY9RyynrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wi0v2c9FXVAOK1v/fD7pWpyGQ4wHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD9t9jo+h0ZRDqbNMvK51KVVXzTlmVdUR2O U3YAEx39etjDiSwRzQtShP4wjeYJn/77NmWzPQDi2zZrEbPTE8Nq8h3A/nxp6U49 vUxg86IjEWRbjjW3E5Yrd+Hxtmje45tUxv1pSeTRJ2RAdhsCaJRx7ePIB8z3h7D0 sbcMa4OS60Qk7b84nygk0BzTQAbVTsycS8IpU8PkqqJjdM6AEsIWMhVvU4gHUrdJ GRVlJdE8WU53+QUYTUp+Qg7194Q8nW+ZIcZD25Fs6qB5Qn8AcL+JyqWbXA7BJ62p xe7mSvIkIPmZHA5nJjWLHK6hVJGVes0XbES86cL2JtguB3jfiEQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:35:25 2025 by rpki-client