$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: K33Vz3Cirm2YbGgypUfr3FS+Ham2zO6Gc4ZHgnC4+mc= Subject key identifier: 01:06:28:68:A9:D5:1E:3B:09:93:46:28:E5:D2:35:8D:A0:76:2F:78 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 1F4FEDD9622ABEF34148AB81C896D82DFEF77D8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01F5 Signing time: Wed 06 Aug 2025 20:32:13 +0000 Manifest this update: Wed 06 Aug 2025 20:27:13 +0000 Manifest next update: Sun 10 Aug 2025 07:10:13 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: sF19wcvd53Cv4kbD5/n97C1wTy5OHNDNbGOO+/g3/4A=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4f:ed:d9:62:2a:be:f3:41:48:ab:81:c8:96:d8:2d:fe:f7:7d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Aug 6 20:27:13 2025 GMT Not After : Aug 10 07:10:13 2025 GMT Subject: CN=01062868A9D51E3B09934628E5D2358DA0762F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:16:22:13:94:22:ff:d2:55:49:db:a1:1e: 7f:ee:0e:b7:4c:ee:13:f6:67:9a:18:90:e1:ff:57: 0c:1a:dc:23:88:06:b4:22:8a:27:ec:62:9b:c5:e3: 92:38:94:fe:41:7b:40:3d:d1:10:77:68:80:18:c8: 88:0a:e4:39:94:a0:f3:5d:1b:f0:2e:8a:ab:21:59: 90:72:c9:58:23:9c:89:b6:bb:52:ca:6c:8f:7b:bd: 41:33:71:79:c1:1a:0e:ab:cd:14:85:3e:a3:ca:24: f8:91:46:1a:3f:c9:b8:35:fc:dd:33:1e:c6:91:65: ac:af:32:55:cd:04:a0:71:4c:85:8c:98:34:8b:86: e9:52:e3:db:b7:9b:9e:d5:80:34:5c:f1:66:69:8a: d0:33:f9:1a:7e:b7:f1:8d:eb:1e:30:d1:5d:8f:99: 09:ea:cb:e1:f8:82:7b:d4:1d:9d:81:d8:86:cf:f7: 39:e8:a8:a0:e0:f5:86:e4:a4:a1:95:fa:82:f1:ef: b6:93:b0:a4:65:8e:26:79:9a:a9:71:94:c1:b9:a0: 98:61:4e:44:37:37:65:4d:25:e1:00:75:8f:ee:47: 28:b5:0b:b4:f6:0b:1c:9e:10:9f:f7:c5:ce:f8:a4: e5:29:a9:dd:fa:d0:ce:8c:0e:55:67:37:8e:43:a8: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:28:68:A9:D5:1E:3B:09:93:46:28:E5:D2:35:8D:A0:76:2F:78 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:da:7e:8b:85:7a:16:9e:dd:b2:3d:82:ee:69:65:b3:6d:28: c6:62:af:09:f9:44:e5:8b:87:47:58:69:a8:8f:55:d2:68:26: 60:60:16:7c:a1:85:45:53:69:85:5d:79:3e:b5:f8:22:4c:03: bd:d7:c0:fd:8d:2f:47:66:42:f4:aa:62:f6:f7:2c:c3:55:d9: fd:53:96:09:e5:40:08:e3:57:d5:d5:a5:32:06:8d:7a:82:94: 6b:12:10:9e:dd:db:72:0f:21:68:95:d7:e2:99:75:11:cc:00: a5:d1:f6:6d:13:12:e3:e0:ea:b9:57:6a:b9:1d:26:42:20:2c: f5:9c:a2:af:e2:3e:23:2d:9e:a2:39:9c:4f:c4:42:46:cd:b1: b3:5a:3b:47:5c:0d:cc:9d:b3:e3:c8:04:46:94:7c:93:9b:af: 9a:48:2e:38:10:16:e3:d0:6b:2b:a7:9e:e0:5f:65:09:a8:65: b5:09:78:54:23:ee:06:76:43:ff:f7:b5:9b:7d:35:8b:09:c7: 60:a2:f5:42:cb:f2:da:39:c4:f6:ca:04:78:3f:4d:c5:86:18: 78:d1:90:76:7d:ff:0d:05:1e:56:96:f7:13:af:e8:11:20:6f: 85:fa:ac:b1:a8:df:12:5d:c6:bd:4e:b3:4d:a5:db:c8:a1:14: d9:6e:4d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0/t2WIqvvNBSKuByJbYLf73fY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTA4MDYyMDI3MTNaFw0yNTA4MTAwNzEwMTNaMDMxMTAvBgNV BAMTKDAxMDYyODY4QTlENTFFM0IwOTkzNDYyOEU1RDIzNThEQTA3NjJGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5hYiE5Qi/9JVSduhHn/uDrdM 7hP2Z5oYkOH/Vwwa3COIBrQiiifsYpvF45I4lP5Be0A90RB3aIAYyIgK5DmUoPNd G/AuiqshWZByyVgjnIm2u1LKbI97vUEzcXnBGg6rzRSFPqPKJPiRRho/ybg1/N0z HsaRZayvMlXNBKBxTIWMmDSLhulS49u3m57VgDRc8WZpitAz+Rp+t/GN6x4w0V2P mQnqy+H4gnvUHZ2B2IbP9znoqKDg9YbkpKGV+oLx77aTsKRljiZ5mqlxlMG5oJhh TkQ3N2VNJeEAdY/uRyi1C7T2CxyeEJ/3xc74pOUpqd360M6MDlVnN45DqDUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQYoaKnVHjsJk0Yo5dI1jaB2L3gwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbafouFehae3bI9gu5pZbNtKMZirwn5ROWL h0dYaaiPVdJoJmBgFnyhhUVTaYVdeT61+CJMA73XwP2NL0dmQvSqYvb3LMNV2f1T lgnlQAjjV9XVpTIGjXqClGsSEJ7d23IPIWiV1+KZdRHMAKXR9m0TEuPg6rlXarkd JkIgLPWcoq/iPiMtnqI5nE/EQkbNsbNaO0dcDcyds+PIBEaUfJObr5pILjgQFuPQ ayunnuBfZQmoZbUJeFQj7gZ2Q//3tZt9NYsJx2Ci9ULL8to5xPbKBHg/TcWGGHjR kHZ9/w0FHlaW9xOv6BEgb4X6rLGo3xJdxr1Os02l28ihFNluTcg= -----END CERTIFICATE-----Generated at Thu Aug 7 04:36:14 2025 by rpki-client