$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: F5uCHrSabWXsWN0pPxItBJG03O669QLbFXwwpxLKYmE= Subject key identifier: 3D:A5:9C:58:0A:AD:C9:EF:F5:AB:93:FD:A8:75:DB:A9:E0:E1:1C:42 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 1F2D9C2430E233D7D4B21EC55203B0C2F38187E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 021C Signing time: Sun 02 Nov 2025 08:52:00 +0000 Manifest this update: Sun 02 Nov 2025 08:47:00 +0000 Manifest next update: Wed 05 Nov 2025 19:58:00 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: PBhYCrCkNKb7nRp87dnXZoB+U0MjpMi4go2jmKb1Vys=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2d:9c:24:30:e2:33:d7:d4:b2:1e:c5:52:03:b0:c2:f3:81:87:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Nov 2 08:47:00 2025 GMT Not After : Nov 5 19:58:00 2025 GMT Subject: CN=3DA59C580AADC9EFF5AB93FDA875DBA9E0E11C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:cb:fd:4b:6f:e9:1a:3a:fe:34:7d:d2:4d: 46:ee:18:ad:45:2f:1b:18:9d:ef:58:d8:40:f4:83: d5:2e:e0:68:e8:a9:02:68:82:15:c5:59:f7:4b:3e: c1:85:17:4e:6f:44:7d:6c:76:2d:ac:91:37:1b:dc: 39:45:37:fe:3d:59:d2:90:75:27:97:8f:f1:83:dd: 1f:88:80:23:b3:5f:47:4e:0e:77:5e:61:4b:f2:20: 6d:74:b5:30:62:de:84:05:5c:0b:7b:17:9a:52:33: 76:78:82:a7:bc:f5:1c:80:b8:09:69:56:b3:03:b2: 22:57:d4:90:b5:e1:1b:ae:69:0c:1d:7e:52:a3:5e: 35:ad:fa:31:1d:b1:ce:58:78:e3:91:6c:f3:74:46: a3:0d:69:c2:69:06:18:d1:95:2a:69:83:d4:88:fa: ed:95:24:16:47:62:d0:8f:b4:cb:da:f7:b9:ab:8d: e4:39:d9:4e:6a:62:36:82:46:b7:f8:66:06:87:eb: 77:c9:8f:29:cd:67:67:b6:34:84:b2:00:c4:b7:db: cb:cf:d1:a3:a7:23:01:f7:6a:39:84:d0:eb:47:fc: 7a:28:8a:72:50:d9:06:44:b0:28:42:fb:fc:78:ae: d7:2c:c6:b6:86:67:0b:3a:cf:0d:aa:72:db:52:c2: 19:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A5:9C:58:0A:AD:C9:EF:F5:AB:93:FD:A8:75:DB:A9:E0:E1:1C:42 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ca:ea:7e:da:76:74:6f:cb:f7:57:ce:09:56:32:a9:e4:2d: fe:a7:1c:42:5e:46:1f:12:07:79:c0:d6:ea:e9:b1:04:41:ed: 66:05:57:cb:46:71:ea:21:c9:6a:47:c6:11:71:af:1b:0b:f8: 24:19:3f:ce:72:04:af:ce:14:a0:a5:1c:d8:6b:63:b7:89:f5: a3:90:c9:a8:01:28:d5:91:79:c1:a5:fe:d0:e5:2b:1d:3f:15: 7f:97:55:b2:23:f9:4f:8b:70:65:fe:a6:83:5f:9d:27:ee:8c: cd:c4:21:d0:ee:d8:50:33:e4:a7:24:ee:8c:11:20:a2:f7:38: 17:66:76:94:1e:d1:4d:03:e2:fc:78:af:ba:4d:df:83:0a:9f: d3:68:e7:98:93:bc:28:03:f8:5f:cd:cc:db:dc:ed:9d:24:01: 5f:4f:ad:ac:06:d3:cd:b4:1e:7b:f2:eb:ce:f4:fd:c4:32:b4: 65:ef:8c:7e:db:70:5f:ef:54:7c:21:82:b0:65:e7:6b:24:a6: 7f:bf:b8:ad:cd:04:80:4c:fe:40:58:da:c3:06:f4:4a:7b:0e: ff:0b:29:57:27:f2:e0:5f:3d:70:ee:e6:f8:fd:9a:35:d6:18: 90:01:df:c1:6f:61:d2:bd:e2:18:30:31:ec:35:29:21:a9:6d: e0:a6:82:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHy2cJDDiM9fUsh7FUgOwwvOBh+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTExMDIwODQ3MDBaFw0yNTExMDUxOTU4MDBaMDMxMTAvBgNV BAMTKDNEQTU5QzU4MEFBREM5RUZGNUFCOTNGREE4NzVEQkE5RTBFMTFDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWicv9S2/pGjr+NH3STUbuGK1F LxsYne9Y2ED0g9Uu4GjoqQJoghXFWfdLPsGFF05vRH1sdi2skTcb3DlFN/49WdKQ dSeXj/GD3R+IgCOzX0dODndeYUvyIG10tTBi3oQFXAt7F5pSM3Z4gqe89RyAuAlp VrMDsiJX1JC14RuuaQwdflKjXjWt+jEdsc5YeOORbPN0RqMNacJpBhjRlSppg9SI +u2VJBZHYtCPtMva97mrjeQ52U5qYjaCRrf4ZgaH63fJjynNZ2e2NISyAMS328vP 0aOnIwH3ajmE0OtH/HooinJQ2QZEsChC+/x4rtcsxraGZws6zw2qcttSwhkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaWcWAqtye/1q5P9qHXbqeDhHEIwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnK6n7adnRvy/dXzglWMqnkLf6nHEJeRh8S B3nA1urpsQRB7WYFV8tGceohyWpHxhFxrxsL+CQZP85yBK/OFKClHNhrY7eJ9aOQ yagBKNWRecGl/tDlKx0/FX+XVbIj+U+LcGX+poNfnSfujM3EIdDu2FAz5Kck7owR IKL3OBdmdpQe0U0D4vx4r7pN34MKn9No55iTvCgD+F/NzNvc7Z0kAV9PrawG0820 Hnvy6870/cQytGXvjH7bcF/vVHwhgrBl52skpn+/uK3NBIBM/kBY2sMG9Ep7Dv8L KVcn8uBfPXDu5vj9mjXWGJAB38FvYdK94hgwMew1KSGpbeCmglI= -----END CERTIFICATE-----Generated at Tue Nov 4 20:19:34 2025 by rpki-client