$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: eNoq6I/n8owkQI6RDDa+bBxaI+JDKTQQuQwzUeDbgGQ= Subject key identifier: CE:35:67:17:31:B2:E2:D7:27:1C:5B:D8:9B:9F:B7:17:28:9B:02:1A Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 78BFA9B8FE3816EE0D52FAEA2E38E50F68880213 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 04DD Signing time: Thu 07 Aug 2025 18:32:16 +0000 Manifest this update: Thu 07 Aug 2025 18:27:15 +0000 Manifest next update: Mon 11 Aug 2025 04:52:15 +0000 Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=) 2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: Ca0AC+N+3Aj5PvBGpzQdSEUt7DahiUyIq+b5SiIetb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bf:a9:b8:fe:38:16:ee:0d:52:fa:ea:2e:38:e5:0f:68:88:02:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Aug 7 18:27:15 2025 GMT Not After : Aug 11 04:52:15 2025 GMT Subject: CN=CE35671731B2E2D7271C5BD89B9FB717289B021A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:56:8b:63:d5:f9:0a:2e:ec:33:9a:d0:7e: 5b:86:9b:98:96:22:57:79:bd:ed:f6:dc:7b:a5:8e: ba:5c:8f:3b:58:f2:7a:e3:3f:1b:01:f4:4f:31:d3: 08:69:a3:6f:92:2f:14:63:9b:7b:3a:91:7f:12:d9: 88:71:db:f4:94:77:0e:c3:4f:88:70:13:3a:7a:05: 93:7a:63:39:2e:99:92:d1:c8:8b:2d:06:31:cf:7d: 45:2a:3b:5d:db:9c:d0:9f:ef:50:e6:e1:49:2a:77: f8:cc:08:b7:63:3d:e7:c8:03:6b:a2:c8:d4:4c:15: 2a:28:f5:8c:b1:68:f2:bc:14:c8:7c:c3:be:24:b3: 28:04:2d:dc:88:69:08:8d:6a:96:37:f2:59:9b:9d: 7d:94:2d:b6:8d:93:29:6d:9f:a2:7a:65:b7:8b:bd: c1:fb:6c:c4:88:ab:68:7a:fe:24:1b:38:02:ba:1c: e5:97:46:ac:77:f2:74:48:58:17:5d:10:0e:7e:40: 05:99:0a:65:7b:ea:d4:0a:d4:51:7e:4c:47:4d:e0: b1:12:de:9f:1d:a7:6b:28:f9:32:56:40:9e:71:db: 0a:5b:71:c9:0b:28:23:bb:be:f3:8b:71:c8:89:47: c6:cc:9a:ff:20:8d:4a:cd:e0:3a:7e:6c:30:ee:ee: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:35:67:17:31:B2:E2:D7:27:1C:5B:D8:9B:9F:B7:17:28:9B:02:1A X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:9f:87:9b:98:73:95:6d:05:b9:97:ce:1f:2f:26:a9:3b: 80:3b:e8:8b:c4:0a:93:1e:59:b6:88:a7:54:29:15:8f:a8:e4: ec:74:b9:3a:b9:3d:cd:fd:75:85:c4:61:37:28:9a:f2:82:7e: 26:96:14:48:79:7f:a2:e7:a0:07:a4:68:a2:c5:ed:18:ac:46: e0:7e:67:52:d4:91:99:e1:8d:59:a7:51:f8:2f:7b:aa:be:b4: 43:05:f8:e1:2e:a0:7d:10:08:77:45:f7:db:8b:e4:ac:06:fc: 12:99:7d:71:9b:c9:b2:96:68:8e:b7:65:4a:0c:bf:52:6d:1e: 91:c4:19:2c:94:4b:ff:f9:89:12:32:05:e9:d2:f2:d7:3f:54: 99:53:ef:22:da:d1:13:ec:d3:c5:5a:d6:bf:38:10:a5:a9:e3: fd:43:8c:a7:d4:05:c0:94:ee:cc:5e:26:7f:c2:d3:14:5c:11: f5:a4:62:92:c6:f0:7b:e1:0c:7b:fa:fb:8a:fe:db:b3:c3:ec: 48:10:98:e2:77:5d:e6:f3:2c:cb:b1:da:d4:5e:35:65:c5:47: de:56:da:cb:e3:bb:c9:0f:d9:e0:5f:85:78:88:3f:0c:12:5d: b7:cb:11:87:4e:69:e2:72:ba:01:99:90:b2:d6:95:54:2e:29: 32:77:f3:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeL+puP44Fu4NUvrqLjjlD2iIAhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTA4MDcxODI3MTVaFw0yNTA4MTEwNDUyMTVaMDMxMTAvBgNV BAMTKENFMzU2NzE3MzFCMkUyRDcyNzFDNUJEODlCOUZCNzE3Mjg5QjAyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1laLY9X5Ci7sM5rQfluGm5iW Ild5ve323HuljrpcjztY8nrjPxsB9E8x0whpo2+SLxRjm3s6kX8S2Yhx2/SUdw7D T4hwEzp6BZN6YzkumZLRyIstBjHPfUUqO13bnNCf71Dm4Ukqd/jMCLdjPefIA2ui yNRMFSoo9YyxaPK8FMh8w74ksygELdyIaQiNapY38lmbnX2ULbaNkyltn6J6ZbeL vcH7bMSIq2h6/iQbOAK6HOWXRqx38nRIWBddEA5+QAWZCmV76tQK1FF+TEdN4LES 3p8dp2so+TJWQJ5x2wpbcckLKCO7vvOLcciJR8bMmv8gjUrN4Dp+bDDu7uT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzjVnFzGy4tcnHFvYm5+3FyibAhowHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIen4ebmHOVbQW5l84fLyapO4A76IvECpMe WbaIp1QpFY+o5Ox0uTq5Pc39dYXEYTcomvKCfiaWFEh5f6LnoAekaKLF7RisRuB+ Z1LUkZnhjVmnUfgve6q+tEMF+OEuoH0QCHdF99uL5KwG/BKZfXGbybKWaI63ZUoM v1JtHpHEGSyUS//5iRIyBenS8tc/VJlT7yLa0RPs08Va1r84EKWp4/1DjKfUBcCU 7sxeJn/C0xRcEfWkYpLG8HvhDHv6+4r+27PD7EgQmOJ3XebzLMux2tReNWXFR95W 2svju8kP2eBfhXiIPwwSXbfLEYdOaeJyugGZkLLWlVQuKTJ3810= -----END CERTIFICATE-----Generated at Thu Aug 7 20:27:46 2025 by rpki-client