$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: htY7Wxh9nTDEFRoFY501hNqdvr2YmQpuDuiw45+QOak= Subject key identifier: 20:98:46:C5:8C:C3:5D:F9:AE:73:D1:1F:AB:C9:13:0F:1D:36:49:0A Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 1EDBEE5084CBA4BFB8C5C600EEE675E10A42B738 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02C0 Signing time: Sun 15 Jun 2025 14:31:51 +0000 Manifest this update: Sun 15 Jun 2025 14:26:51 +0000 Manifest next update: Wed 18 Jun 2025 17:05:51 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: 6idWc3lf40SrC6ddCZtHyjdlNkTY3XNNuoo22GH5+G4=) 2: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: oxbnUtEGdZ2RxDHuxSVGfYVfJkDXJmhek/iZGO44srI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:db:ee:50:84:cb:a4:bf:b8:c5:c6:00:ee:e6:75:e1:0a:42:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Jun 15 14:26:51 2025 GMT Not After : Jun 18 17:05:51 2025 GMT Subject: CN=209846C58CC35DF9AE73D11FABC9130F1D36490A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:db:10:75:62:a6:eb:c6:f6:55:3e:06:41: b8:02:be:80:fc:85:2d:8a:65:95:76:81:48:e7:f3: e6:cb:cc:77:b6:41:c2:af:b3:91:4e:74:b6:36:d8: 78:6a:c1:f0:4f:0e:e8:40:53:32:54:82:1f:c5:fa: 3c:8a:73:b1:9c:ea:4d:05:b6:93:4e:98:f8:09:a4: 78:97:a7:b0:4c:0c:eb:04:1e:d4:45:6b:b2:54:9e: a5:63:e9:23:88:48:7c:63:49:29:c6:bb:9d:42:7f: 80:8b:69:2e:8d:9c:8c:31:85:6d:47:d0:a5:61:7e: 57:4c:74:74:5b:8e:83:6d:56:c9:5c:b8:57:27:08: 7a:bd:62:d1:fd:da:75:8a:5a:75:27:39:bc:6c:b9: 54:7a:89:de:1e:4a:06:bb:b9:98:60:03:8c:7c:8f: 87:73:2c:03:95:56:2f:ab:9b:31:30:2a:d1:77:87: 6b:fd:56:5a:ad:30:93:93:e8:d6:e6:5a:a2:9c:33: ec:2d:a8:11:b1:84:c5:28:6f:b6:a9:5c:7f:62:41: dc:e0:86:64:e6:05:34:af:03:48:ad:71:9c:72:df: a7:dd:0c:c0:16:17:65:e3:c0:c5:e1:08:c4:ba:aa: ee:dd:f1:75:79:3a:af:e8:da:7d:e8:90:05:af:94: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:98:46:C5:8C:C3:5D:F9:AE:73:D1:1F:AB:C9:13:0F:1D:36:49:0A X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9f:68:04:f7:57:19:d2:aa:97:89:47:01:b1:73:4d:8b:fc: 66:2a:65:98:ee:1f:a2:0b:12:b6:84:f3:56:10:e0:e5:0e:5b: 98:7c:73:9b:fa:60:cb:27:07:dd:c7:17:60:a9:6a:c1:1c:9c: eb:af:11:cb:f0:ad:8a:f2:fc:fb:f2:39:84:f9:73:c8:a1:3f: 3b:d4:0d:87:a3:01:d6:1c:00:33:0d:36:b5:fc:dd:21:6f:27: eb:16:a0:4d:3b:3a:2b:5b:f0:e2:fc:48:73:71:50:f6:26:c5: a9:0a:de:4e:c0:53:0c:7b:95:08:ae:b5:8b:ea:05:e4:4c:ea: e4:bd:00:e0:04:5f:e0:e2:b3:40:d3:fb:6c:38:8c:23:a2:48: 0e:c4:d2:c7:87:d4:a5:d0:cc:f7:7b:ec:fe:f3:3d:f6:04:73: 8b:a5:7b:ce:a6:7a:b5:b4:ad:12:db:33:0c:69:d0:f2:94:67: 8a:8a:70:f7:ae:b9:0c:81:68:09:a8:23:c1:26:3a:45:e0:2e: ae:22:fc:97:72:0a:99:7a:e1:dc:ee:ec:0b:83:43:1d:65:da: 05:8e:96:55:35:b7:de:b3:d9:03:56:c8:09:73:a6:da:43:da: 8e:d6:b3:44:64:78:ae:65:52:f2:7e:0e:8d:c5:08:34:ad:c6: 24:d8:1a:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtvuUITLpL+4xcYA7uZ14QpCtzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA2MTUxNDI2NTFaFw0yNTA2MTgxNzA1NTFaMDMxMTAvBgNV BAMTKDIwOTg0NkM1OENDMzVERjlBRTczRDExRkFCQzkxMzBGMUQzNjQ5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyj9sQdWKm68b2VT4GQbgCvoD8 hS2KZZV2gUjn8+bLzHe2QcKvs5FOdLY22HhqwfBPDuhAUzJUgh/F+jyKc7Gc6k0F tpNOmPgJpHiXp7BMDOsEHtRFa7JUnqVj6SOISHxjSSnGu51Cf4CLaS6NnIwxhW1H 0KVhfldMdHRbjoNtVslcuFcnCHq9YtH92nWKWnUnObxsuVR6id4eSga7uZhgA4x8 j4dzLAOVVi+rmzEwKtF3h2v9VlqtMJOT6NbmWqKcM+wtqBGxhMUob7apXH9iQdzg hmTmBTSvA0itcZxy36fdDMAWF2XjwMXhCMS6qu7d8XV5Oq/o2n3okAWvlLctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJhGxYzDXfmuc9Efq8kTDx02SQowHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqfaAT3VxnSqpeJRwGxc02L/GYqZZjuH6IL EraE81YQ4OUOW5h8c5v6YMsnB93HF2CpasEcnOuvEcvwrYry/PvyOYT5c8ihPzvU DYejAdYcADMNNrX83SFvJ+sWoE07Oitb8OL8SHNxUPYmxakK3k7AUwx7lQiutYvq BeRM6uS9AOAEX+Dis0DT+2w4jCOiSA7E0seH1KXQzPd77P7zPfYEc4ule86merW0 rRLbMwxp0PKUZ4qKcPeuuQyBaAmoI8EmOkXgLq4i/JdyCpl64dzu7AuDQx1l2gWO llU1t96z2QNWyAlzptpD2o7Ws0RkeK5lUvJ+Do3FCDStxiTYGnw= -----END CERTIFICATE-----Generated at Mon Jun 16 02:14:08 2025 by rpki-client