$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: Vop9+WJ3jeGaf0d9BJa1f9C/CpQDARPYJZHxwGADXNQ= Subject key identifier: B1:5D:D5:D0:63:69:3E:9F:10:63:EB:18:8F:6B:4A:F0:89:B1:35:F6 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 53E1F7579002036890291E80AE87327B10D0D3A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01DE Signing time: Sun 15 Jun 2025 19:52:05 +0000 Manifest this update: Sun 15 Jun 2025 19:47:05 +0000 Manifest next update: Thu 19 Jun 2025 05:16:05 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) 2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: RhlHjz1fl4FaTNVmgWYBrKbpyP40ws8AlzK+sgLzHkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e1:f7:57:90:02:03:68:90:29:1e:80:ae:87:32:7b:10:d0:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Jun 15 19:47:05 2025 GMT Not After : Jun 19 05:16:05 2025 GMT Subject: CN=B15DD5D063693E9F1063EB188F6B4AF089B135F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:7a:bf:10:bf:46:bd:8a:68:1a:95:75:a1: 51:bc:35:2c:16:53:c9:af:1e:22:b8:7b:9e:95:2f: 20:5d:5d:a5:1f:3d:22:c7:a1:a6:f3:31:89:1f:97: b9:27:96:34:21:81:92:e4:40:a9:e3:60:bc:25:17: e3:09:84:e5:90:73:19:2f:3c:74:11:f1:fc:db:43: d8:ff:be:4a:4a:42:0b:93:43:35:33:19:a6:84:19: 37:85:5a:3f:65:20:8c:83:03:1a:da:cb:94:43:18: 0c:2c:56:76:5f:a7:1a:53:9b:09:7b:b6:ca:d9:08: 76:1e:58:fe:eb:c8:47:a5:62:67:e7:d6:e7:e0:bb: 79:df:ef:05:7f:11:b0:42:05:4a:2e:ce:ac:a0:a1: 71:bb:60:e8:b8:03:60:ab:22:af:f1:b8:4a:48:e3: 3b:48:e4:67:08:14:ed:64:35:e2:c9:9b:0c:2c:85: e8:d2:da:22:5d:a2:c4:4b:55:6d:b4:b0:8f:17:d6: 82:6a:e5:1a:d0:35:77:f7:f8:48:62:72:9d:3e:b7: ee:bd:90:78:fe:45:67:b7:4d:49:14:f9:1d:eb:86: 0b:10:56:8a:3b:32:f3:e1:79:bb:4b:e1:0b:91:a8: df:02:db:f8:1b:79:48:f3:68:62:5a:f4:69:6d:e0: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5D:D5:D0:63:69:3E:9F:10:63:EB:18:8F:6B:4A:F0:89:B1:35:F6 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:49:a5:b7:30:93:c4:e3:69:ee:7d:39:c3:a5:ca:c0:c7:ef: 27:32:2d:42:18:0f:ec:3a:e3:de:59:af:10:86:3c:66:9d:bb: 9d:f4:f1:b6:84:eb:10:fe:b6:a6:94:c1:e5:a5:9b:c8:b7:ad: eb:69:de:ce:45:59:63:af:99:41:79:ce:d4:af:d8:03:33:92: cc:a0:1b:dd:31:3d:76:15:6a:83:b9:4a:11:00:40:15:b7:fb: b6:37:ab:92:5e:81:73:f8:91:b2:9c:89:47:26:71:ed:0f:88: 47:75:40:6b:20:42:a8:b6:b6:42:a5:cf:df:de:92:50:ad:a1: 67:90:33:8a:32:60:46:4f:62:04:71:78:ff:71:b0:8a:8f:dc: 91:1f:ab:ab:8c:8f:9c:5e:ce:48:3a:8b:e1:8c:eb:76:ae:6e: 82:4b:0d:30:11:b8:6d:73:2f:72:47:a3:c0:77:1c:9c:ba:f6: 8d:f7:8e:ef:0f:6c:bc:ce:af:19:2f:ee:6d:18:df:4b:1c:82: 9d:f1:0d:14:4b:e7:29:e4:15:8a:78:cf:30:07:99:a3:50:cc: ee:48:1d:1f:2c:03:e6:9c:7a:e6:85:7c:66:6c:a0:b7:46:07: ab:8d:00:0d:6a:77:40:dc:ca:67:d6:31:c7:e2:da:90:47:67: 76:d8:82:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+H3V5ACA2iQKR6ArocyexDQ06cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTA2MTUxOTQ3MDVaFw0yNTA2MTkwNTE2MDVaMDMxMTAvBgNV BAMTKEIxNURENUQwNjM2OTNFOUYxMDYzRUIxODhGNkI0QUYwODlCMTM1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m3q/EL9GvYpoGpV1oVG8NSwW U8mvHiK4e56VLyBdXaUfPSLHoabzMYkfl7knljQhgZLkQKnjYLwlF+MJhOWQcxkv PHQR8fzbQ9j/vkpKQguTQzUzGaaEGTeFWj9lIIyDAxray5RDGAwsVnZfpxpTmwl7 tsrZCHYeWP7ryEelYmfn1ufgu3nf7wV/EbBCBUouzqygoXG7YOi4A2CrIq/xuEpI 4ztI5GcIFO1kNeLJmwwshejS2iJdosRLVW20sI8X1oJq5RrQNXf3+Ehicp0+t+69 kHj+RWe3TUkU+R3rhgsQVoo7MvPhebtL4QuRqN8C2/gbeUjzaGJa9Glt4GELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsV3V0GNpPp8QY+sYj2tK8ImxNfYwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9Jpbcwk8Tjae59OcOlysDH7ycyLUIYD+w6 495ZrxCGPGadu5308baE6xD+tqaUweWlm8i3retp3s5FWWOvmUF5ztSv2AMzksyg G90xPXYVaoO5ShEAQBW3+7Y3q5JegXP4kbKciUcmce0PiEd1QGsgQqi2tkKlz9/e klCtoWeQM4oyYEZPYgRxeP9xsIqP3JEfq6uMj5xezkg6i+GM63auboJLDTARuG1z L3JHo8B3HJy69o33ju8PbLzOrxkv7m0Y30scgp3xDRRL5ynkFYp4zzAHmaNQzO5I HR8sA+aceuaFfGZsoLdGB6uNAA1qd0DcymfWMcfi2pBHZ3bYgtU= -----END CERTIFICATE-----Generated at Mon Jun 16 10:00:07 2025 by rpki-client