$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: XRA2rhCMLmXiiBYMF4QC+4zavn9l4hxDmNdSQQfyLPE= Subject key identifier: 67:2A:B2:7E:18:E0:BF:31:EE:45:F5:3E:7F:D1:00:13:7A:39:DB:FC Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 30D5343EADE4B4A9A15BDA1CEA9632091E5111B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 0367 Signing time: Tue 17 Jun 2025 00:21:43 +0000 Manifest this update: Tue 17 Jun 2025 00:16:43 +0000 Manifest next update: Fri 20 Jun 2025 00:23:43 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: CBgK+Gf3tmEpNJtHLJNEknPkVBBKgoR0hGMBeft0PmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d5:34:3e:ad:e4:b4:a9:a1:5b:da:1c:ea:96:32:09:1e:51:11:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Jun 17 00:16:43 2025 GMT Not After : Jun 20 00:23:43 2025 GMT Subject: CN=672AB27E18E0BF31EE45F53E7FD100137A39DBFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:46:fa:df:f9:c0:58:b3:66:15:ae:c0:a4: c1:33:1c:a3:e0:ca:c6:d4:ab:19:35:a6:db:c2:15: 11:27:1e:82:95:c6:a8:ef:35:c3:87:31:eb:92:05: ba:dc:83:69:0a:55:fb:7d:d3:37:6b:dd:3b:bb:9b: 39:d4:62:fc:a1:e4:96:6b:da:1c:fd:b2:97:58:4d: 38:54:69:5d:cb:f2:b5:42:51:fa:e7:9c:1e:05:6b: ec:dd:4a:47:93:f4:a2:3e:98:0c:26:96:cb:c6:fc: 4e:74:81:44:42:03:97:10:fd:27:00:7e:16:21:7e: ad:a9:98:7c:1c:bc:9d:7e:00:e0:76:d8:11:51:a3: cc:8c:b6:17:8b:c6:c9:c3:40:4c:3f:7f:e5:9d:f6: bc:3d:07:11:3f:40:f1:b1:47:21:7e:10:93:db:4f: 59:68:af:1e:0a:d0:63:ca:38:05:27:7b:19:6c:26: a1:72:49:5c:9a:33:fd:2e:82:82:57:2d:b8:5b:4a: ee:f6:b0:fb:c5:2c:36:2d:5b:0d:5e:c2:07:f9:5a: 58:ec:57:ed:af:18:53:4f:f1:16:39:3d:20:ff:80: 58:5c:14:53:a8:5b:d8:d9:0e:87:14:96:87:2c:74: c7:9e:89:c0:1d:42:d1:de:5d:39:d0:43:78:ca:78: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:B2:7E:18:E0:BF:31:EE:45:F5:3E:7F:D1:00:13:7A:39:DB:FC X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0b:93:ec:46:b6:7b:e7:5f:a3:2b:ea:7c:85:d7:2e:51:99: b0:b1:bb:ea:3d:ec:58:44:d8:cb:d7:39:81:d6:4d:71:36:1e: 5d:37:ac:8b:80:0a:54:52:e3:89:c3:d7:73:e0:e7:f1:49:a6: 34:af:87:7b:fb:58:45:02:b9:0d:bb:0b:df:bd:a8:77:62:72: a4:17:38:f6:a8:6a:98:35:58:64:c8:0d:4c:bb:64:fa:15:7f: 0c:1b:f5:29:6d:31:eb:04:c9:2e:b9:65:be:e8:ce:64:49:53: 87:23:16:15:9e:41:e2:22:dc:7b:22:84:7a:6b:21:fd:1b:99: e5:63:0e:72:d4:ca:37:16:00:4b:3a:1a:0e:23:1a:2a:5b:ff: ad:58:1b:7c:61:49:a4:e3:25:09:5f:cd:c5:05:8f:d3:a7:e6: 89:cd:e7:79:f3:a7:d5:fc:74:54:78:24:a4:4e:a3:d3:91:68: 0c:e7:c3:a5:97:a6:d9:ff:d1:08:b4:49:63:3c:1a:bc:e2:d7: a8:ef:47:44:54:11:d7:99:f7:cb:cd:cc:e6:bb:93:f4:e8:05: d1:5b:62:a0:88:9d:5a:11:e3:72:a6:c8:48:8d:0b:3b:43:12: 80:72:a1:29:98:68:a3:9e:d7:da:39:69:4c:09:c7:15:fe:19: aa:67:a2:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNU0Pq3ktKmhW9oc6pYyCR5REbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTA2MTcwMDE2NDNaFw0yNTA2MjAwMDIzNDNaMDMxMTAvBgNV BAMTKDY3MkFCMjdFMThFMEJGMzFFRTQ1RjUzRTdGRDEwMDEzN0EzOURCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtEb63/nAWLNmFa7ApMEzHKPg ysbUqxk1ptvCFREnHoKVxqjvNcOHMeuSBbrcg2kKVft90zdr3Tu7mznUYvyh5JZr 2hz9spdYTThUaV3L8rVCUfrnnB4Fa+zdSkeT9KI+mAwmlsvG/E50gURCA5cQ/ScA fhYhfq2pmHwcvJ1+AOB22BFRo8yMtheLxsnDQEw/f+Wd9rw9BxE/QPGxRyF+EJPb T1lorx4K0GPKOAUnexlsJqFySVyaM/0ugoJXLbhbSu72sPvFLDYtWw1ewgf5Wljs V+2vGFNP8RY5PSD/gFhcFFOoW9jZDocUlocsdMeeicAdQtHeXTnQQ3jKeDlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyqyfhjgvzHuRfU+f9EAE3o52/wwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4Lk+xGtnvnX6Mr6nyF1y5RmbCxu+o97FhE 2MvXOYHWTXE2Hl03rIuAClRS44nD13Pg5/FJpjSvh3v7WEUCuQ27C9+9qHdicqQX OPaoapg1WGTIDUy7ZPoVfwwb9SltMesEyS65Zb7ozmRJU4cjFhWeQeIi3HsihHpr If0bmeVjDnLUyjcWAEs6Gg4jGipb/61YG3xhSaTjJQlfzcUFj9On5onN53nzp9X8 dFR4JKROo9ORaAznw6WXptn/0Qi0SWM8Grzi16jvR0RUEdeZ98vNzOa7k/ToBdFb YqCInVoR43KmyEiNCztDEoByoSmYaKOe19o5aUwJxxX+Gapnous= -----END CERTIFICATE-----Generated at Wed Jun 18 00:37:25 2025 by rpki-client