$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: s35up0fWmcGeT3zPYx6Y4iKo8jK2z2ZqnHahVsfaY58= Subject key identifier: C6:92:72:C2:23:26:70:C4:F4:E6:6C:3A:48:A4:BB:FB:67:92:F0:A1 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 61A7E047A09329ED1E9A710596B9E98681AE538D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01BF Signing time: Tue 05 Aug 2025 09:00:53 +0000 Manifest this update: Tue 05 Aug 2025 08:55:53 +0000 Manifest next update: Fri 08 Aug 2025 15:10:53 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: AB/s6G0WHPJXBBrY3D/m2NKZL59+ltXc3ww3lkJl5Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a7:e0:47:a0:93:29:ed:1e:9a:71:05:96:b9:e9:86:81:ae:53:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Aug 5 08:55:53 2025 GMT Not After : Aug 8 15:10:53 2025 GMT Subject: CN=C69272C2232670C4F4E66C3A48A4BBFB6792F0A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:30:16:ab:0d:28:33:20:4e:3f:a7:0e:56: 7b:1f:b6:34:df:43:bb:86:82:45:6d:d5:ee:50:60: 7a:63:a4:24:0f:de:db:a9:95:45:bf:39:7f:0a:d4: 01:23:2f:75:c5:1c:95:30:09:e5:3f:09:77:6b:9a: 76:c5:64:2e:96:05:48:57:70:8f:c1:50:05:1d:f4: 0a:d5:d8:be:86:e4:c7:89:c3:60:40:7c:3a:f0:4b: 4b:25:2a:7f:32:1a:3f:0c:1f:00:a3:ff:e7:58:a2: 79:7a:7b:80:16:6a:c6:57:4c:df:bc:b0:ba:10:58: 98:a7:36:77:cd:7e:ad:e6:c1:13:32:47:e9:82:e0: 74:7b:c7:2a:3a:ce:44:fe:1a:2c:b6:0c:ea:1f:83: 49:06:a8:b5:80:1e:7f:59:3f:92:85:e9:bc:ec:32: 74:37:3c:e5:e4:02:63:4b:c9:29:d3:8d:13:5c:93: 4a:64:0a:b6:2c:22:13:cf:49:74:aa:4d:80:61:64: 92:a0:d9:f0:71:99:46:44:62:c9:b2:50:29:ab:52: 55:c0:a0:d9:0a:88:c9:6a:a4:00:55:cb:80:6a:b5: 9b:61:4f:02:68:7d:45:b9:fb:17:62:7a:a5:5e:11: ac:fd:eb:2c:29:2f:1b:3d:f4:71:8b:74:f7:f2:73: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:92:72:C2:23:26:70:C4:F4:E6:6C:3A:48:A4:BB:FB:67:92:F0:A1 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:7e:ad:72:d1:f2:b3:46:19:6a:cb:4a:f4:b6:d9:fd:37:80: 0e:45:54:a2:f6:29:85:f2:01:7d:46:85:fb:d2:52:ce:19:d1: a2:2d:7f:0a:55:66:3e:86:2f:c6:d6:69:56:12:79:61:70:66: 48:35:c5:a2:4e:42:e2:96:2f:cb:9e:62:a7:8f:f9:ad:a5:df: 33:9b:0b:21:27:c3:ed:c0:30:6e:76:b4:e1:bd:d7:19:d0:ce: 51:14:05:82:b1:e8:ea:01:0f:e0:4a:4e:af:b1:54:e7:73:d3: df:f8:56:37:16:a0:fe:5e:44:8e:bf:89:31:b9:55:5e:46:e6: a7:64:e6:12:63:5f:19:7f:e6:34:4b:7c:d1:72:9e:a4:05:6f: f1:54:94:17:e5:80:07:6f:55:65:7f:43:99:44:4a:ec:30:8b: f5:54:27:6b:de:10:98:4b:48:c6:25:58:c6:cf:2c:56:32:19: 27:17:5d:82:89:bc:ee:67:2d:a6:2f:ea:fb:f7:ad:74:ce:d5: a9:53:63:36:cb:4b:cc:f0:cd:71:ae:88:79:1b:76:e1:23:3f: 4f:a0:26:a4:57:40:d3:0c:24:0e:71:37:0c:cc:eb:6e:25:76: ad:5c:95:79:21:ff:9d:14:82:8c:e3:08:50:20:6e:55:53:a2: 3b:3d:49:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYafgR6CTKe0emnEFlrnphoGuU40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA4MDUwODU1NTNaFw0yNTA4MDgxNTEwNTNaMDMxMTAvBgNV BAMTKEM2OTI3MkMyMjMyNjcwQzRGNEU2NkMzQTQ4QTRCQkZCNjc5MkYwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNTAWqw0oMyBOP6cOVnsftjTf Q7uGgkVt1e5QYHpjpCQP3tuplUW/OX8K1AEjL3XFHJUwCeU/CXdrmnbFZC6WBUhX cI/BUAUd9ArV2L6G5MeJw2BAfDrwS0slKn8yGj8MHwCj/+dYonl6e4AWasZXTN+8 sLoQWJinNnfNfq3mwRMyR+mC4HR7xyo6zkT+Giy2DOofg0kGqLWAHn9ZP5KF6bzs MnQ3POXkAmNLySnTjRNck0pkCrYsIhPPSXSqTYBhZJKg2fBxmUZEYsmyUCmrUlXA oNkKiMlqpABVy4BqtZthTwJofUW5+xdieqVeEaz96ywpLxs99HGLdPfyc2zNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxpJywiMmcMT05mw6SKS7+2eS8KEwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMF+rXLR8rNGGWrLSvS22f03gA5FVKL2KYXy AX1GhfvSUs4Z0aItfwpVZj6GL8bWaVYSeWFwZkg1xaJOQuKWL8ueYqeP+a2l3zOb CyEnw+3AMG52tOG91xnQzlEUBYKx6OoBD+BKTq+xVOdz09/4VjcWoP5eRI6/iTG5 VV5G5qdk5hJjXxl/5jRLfNFynqQFb/FUlBflgAdvVWV/Q5lESuwwi/VUJ2veEJhL SMYlWMbPLFYyGScXXYKJvO5nLaYv6vv3rXTO1alTYzbLS8zwzXGuiHkbduEjP0+g JqRXQNMMJA5xNwzM624ldq1clXkh/50UgozjCFAgblVTojs9Sdw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:19 2025 by rpki-client