$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: xONQtwVm4jpQhfmCfXaPHoO5LPl0BvKmsZNgVdxWFbQ= Subject key identifier: 44:1A:0E:8A:12:EC:CF:F6:6C:8C:5C:F2:8B:D5:76:07:ED:1D:0F:27 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 2F58CDDDF4D9B5227E2282F6549E23976E7A7305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01A8 Signing time: Sat 14 Jun 2025 21:40:50 +0000 Manifest this update: Sat 14 Jun 2025 21:35:50 +0000 Manifest next update: Wed 18 Jun 2025 01:34:50 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: C/H13i/9whBlU7QjssjLV7+munsTwHzqlp1AnOL3IbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:58:cd:dd:f4:d9:b5:22:7e:22:82:f6:54:9e:23:97:6e:7a:73:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Jun 14 21:35:50 2025 GMT Not After : Jun 18 01:34:50 2025 GMT Subject: CN=441A0E8A12ECCFF66C8C5CF28BD57607ED1D0F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:75:84:a1:52:60:20:ce:11:54:4a:b4:9a: ad:16:91:6f:53:6d:51:7c:67:97:63:7c:17:08:f7: 49:ba:0c:c3:8b:6c:4c:6e:85:87:45:d2:f6:2b:b1: 71:6b:16:7c:2d:0c:be:05:d6:b0:fb:0e:c1:c5:fa: 62:76:3d:e3:da:55:81:3f:c4:15:d2:d5:13:dd:c2: c2:53:9f:74:de:0d:82:bf:46:27:12:ad:ff:e7:bb: 63:78:aa:63:17:17:3c:07:ca:29:c5:1f:05:37:08: e3:13:88:0a:0b:7c:ad:5a:97:66:fd:a4:19:02:5a: 08:39:25:76:a8:de:a4:49:24:c5:cf:4f:43:24:06: 88:61:1b:ed:ce:96:92:6d:7b:a3:20:aa:f0:7d:d6: 40:88:69:e2:56:aa:9e:bb:0d:0f:25:44:8f:54:a7: f3:c7:97:eb:91:cd:a9:25:ec:93:9e:d4:c9:7b:c5: cf:0b:33:c9:26:ac:45:9d:51:bf:3f:a6:95:cb:10: 8a:4e:a7:d2:b3:f5:1e:38:1d:0e:e6:3f:4b:4c:82: 26:c8:13:af:82:a8:10:de:6d:23:60:36:f0:e0:86: 7d:e1:cb:b5:34:76:15:7a:73:6f:d3:b6:04:c9:8d: fe:a2:4c:e6:46:b5:e9:38:b4:f8:17:ac:71:b4:2b: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1A:0E:8A:12:EC:CF:F6:6C:8C:5C:F2:8B:D5:76:07:ED:1D:0F:27 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:aa:80:f2:fb:26:ea:e5:5f:41:e6:00:04:36:91:3e:7e:4b: 1e:a1:1a:d7:92:d5:91:74:dc:d3:51:33:61:f1:47:ee:d9:c1: 02:c2:9a:c0:10:2b:02:f1:be:21:e9:76:d9:c1:a1:5d:7a:06: a9:e3:b5:d9:73:5a:ab:84:91:b5:e3:2d:85:bf:12:09:9c:c6: 31:29:55:10:d1:af:b3:b0:8d:ae:2d:28:80:20:94:90:06:79: c9:2c:b6:78:7e:af:43:9a:7a:48:01:31:24:33:d7:2c:00:b0: 33:ac:f8:d8:d2:f0:4c:10:72:aa:0c:72:44:9f:a6:e4:6d:46: 6f:ac:cf:6b:a0:95:ea:15:3e:3e:43:a0:d2:81:2b:11:cb:ec: ae:d6:09:bf:a2:e7:ae:fc:66:e3:87:ec:80:bc:f7:28:00:02: 2b:0c:20:63:87:58:3b:5d:96:24:88:e7:76:87:d1:f4:b5:fd: c2:d5:e8:b1:7c:47:38:ed:f4:87:0a:c5:5a:5b:42:53:e8:fa: a0:63:21:23:de:77:99:6b:af:3b:55:b2:cb:12:4c:16:74:50: 37:5f:40:9f:25:1b:f8:a5:ab:5c:57:39:4f:60:ea:31:e5:6b: 96:2f:a8:63:94:6d:29:44:34:71:c5:c5:24:ad:93:10:3a:dc: 70:8e:f3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1jN3fTZtSJ+IoL2VJ4jl256cwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA2MTQyMTM1NTBaFw0yNTA2MTgwMTM0NTBaMDMxMTAvBgNV BAMTKDQ0MUEwRThBMTJFQ0NGRjY2QzhDNUNGMjhCRDU3NjA3RUQxRDBGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WnWEoVJgIM4RVEq0mq0WkW9T bVF8Z5djfBcI90m6DMOLbExuhYdF0vYrsXFrFnwtDL4F1rD7DsHF+mJ2PePaVYE/ xBXS1RPdwsJTn3TeDYK/RicSrf/nu2N4qmMXFzwHyinFHwU3COMTiAoLfK1al2b9 pBkCWgg5JXao3qRJJMXPT0MkBohhG+3OlpJte6MgqvB91kCIaeJWqp67DQ8lRI9U p/PHl+uRzakl7JOe1Ml7xc8LM8kmrEWdUb8/ppXLEIpOp9Kz9R44HQ7mP0tMgibI E6+CqBDebSNgNvDghn3hy7U0dhV6c2/TtgTJjf6iTOZGtek4tPgXrHG0KwG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURBoOihLsz/ZsjFzyi9V2B+0dDycwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaqgPL7JurlX0HmAAQ2kT5+Sx6hGteS1ZF0 3NNRM2HxR+7ZwQLCmsAQKwLxviHpdtnBoV16BqnjtdlzWquEkbXjLYW/EgmcxjEp VRDRr7Owja4tKIAglJAGeckstnh+r0OaekgBMSQz1ywAsDOs+NjS8EwQcqoMckSf puRtRm+sz2ugleoVPj5DoNKBKxHL7K7WCb+i5678ZuOH7IC89ygAAisMIGOHWDtd liSI53aH0fS1/cLV6LF8Rzjt9IcKxVpbQlPo+qBjISPed5lrrztVsssSTBZ0UDdf QJ8lG/ilq1xXOU9g6jHla5YvqGOUbSlENHHFxSStkxA63HCO81I= -----END CERTIFICATE-----Generated at Sun Jun 15 22:41:13 2025 by rpki-client