$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: Un1d219BMErEZyxHMsj7V5eM5EdBxSN9mgD0KklGOj4= Subject key identifier: 15:8B:FE:C4:42:56:E1:6F:E8:F2:D5:23:84:C1:67:BB:EB:55:72:69 Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 1BFFF1C2FABF3A1AE0D399F434AA153F12B236D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 021E Signing time: Sun 19 Oct 2025 01:21:37 +0000 Manifest this update: Sun 19 Oct 2025 01:16:37 +0000 Manifest next update: Wed 22 Oct 2025 05:06:37 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=) 2: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: 5dY/fTGbnCGQxjulITNdsCQyJSPGuSHW9RVtvMwzLok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ff:f1:c2:fa:bf:3a:1a:e0:d3:99:f4:34:aa:15:3f:12:b2:36:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Oct 19 01:16:37 2025 GMT Not After : Oct 22 05:06:37 2025 GMT Subject: CN=158BFEC44256E16FE8F2D52384C167BBEB557269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:fc:41:2d:90:bb:19:b6:00:64:c0:16:42: ae:0b:2f:33:a4:a6:e5:86:e5:8d:c0:c1:ac:2f:0c: c7:59:12:34:f1:07:b5:2a:7d:72:53:e6:2c:22:41: c7:aa:f0:9c:2a:d0:57:ac:58:24:e6:4d:f3:4f:33: 3e:de:38:6a:94:82:8a:94:33:71:d4:93:74:94:88: 5e:c7:e2:6e:3f:ff:ba:db:d8:aa:d4:71:fa:49:45: f1:32:b3:ec:ee:4f:63:3a:d2:ad:22:a6:77:d4:82: d6:1b:16:67:9e:f6:55:da:ce:2a:42:c1:33:e6:49: 50:04:ae:bf:91:e7:01:68:8e:71:f5:ea:73:4c:d9: 4e:d2:7e:76:99:fb:43:43:f1:f5:ff:46:b7:d3:34: 03:a6:a3:d6:08:47:95:33:b7:ba:28:21:7c:ad:ea: 62:cc:7c:85:9c:31:da:3b:cf:70:b1:78:6f:37:42: c5:9e:72:d1:0c:e8:76:bd:90:f6:fe:49:8d:37:b3: 3b:54:40:8b:4b:36:51:fb:46:d8:65:ed:8e:85:d5: f1:bf:85:56:08:5a:16:df:4d:79:d9:35:4c:98:94: 34:94:e6:ec:c3:4e:c1:33:a9:17:27:65:49:5a:7c: 5a:34:7a:fd:15:34:18:de:db:9f:6d:f9:eb:48:91: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:FE:C4:42:56:E1:6F:E8:F2:D5:23:84:C1:67:BB:EB:55:72:69 X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b6:92:a6:07:1b:12:20:41:e8:7b:42:c6:99:fe:77:dd:79: 7c:15:4e:8b:8d:dc:da:68:cb:5f:79:3d:cf:36:26:00:9e:f7: 5f:24:23:70:76:cb:ed:e2:c3:42:03:23:f6:d9:8b:88:5d:e6: 52:a9:1a:0f:51:be:97:0d:26:bf:70:8b:fe:eb:ad:83:26:33: 73:95:72:1a:24:e1:28:a7:75:51:c7:35:2e:77:cc:87:7b:3f: 2b:bb:e0:9c:53:de:5b:c2:23:49:34:11:e4:fb:d3:30:1e:2d: 75:70:e9:3f:eb:27:79:d4:77:2d:3f:4d:57:dd:71:e1:5e:0a: 80:b0:c5:49:1f:a9:a0:08:6d:31:81:ad:1f:04:41:8a:cf:46: 80:2c:11:c8:1a:b9:cd:01:f1:0b:cd:dc:b7:d4:b6:fc:29:e7: 31:1a:8c:b4:8b:54:47:4f:ba:4d:7f:c9:ea:e7:58:df:80:b2: 38:78:e9:8f:4d:c4:c7:4c:be:df:48:a0:63:8f:30:f5:d1:26: 40:5a:f7:6f:05:20:83:43:d8:1f:50:e7:82:cc:a5:10:6b:ee: 2f:8b:04:d1:4f:ad:0d:d5:47:27:52:d5:a5:be:66:18:b9:c3: 82:0d:4a:69:1a:b2:05:69:95:3d:a9:6f:62:9d:b0:3e:e7:dd: a8:cc:fe:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG//xwvq/Ohrg05n0NKoVPxKyNtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNTEwMTkwMTE2MzdaFw0yNTEwMjIwNTA2MzdaMDMxMTAvBgNV BAMTKDE1OEJGRUM0NDI1NkUxNkZFOEYyRDUyMzg0QzE2N0JCRUI1NTcyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkvxBLZC7GbYAZMAWQq4LLzOk puWG5Y3AwawvDMdZEjTxB7UqfXJT5iwiQceq8Jwq0FesWCTmTfNPMz7eOGqUgoqU M3HUk3SUiF7H4m4//7rb2KrUcfpJRfEys+zuT2M60q0ipnfUgtYbFmee9lXazipC wTPmSVAErr+R5wFojnH16nNM2U7SfnaZ+0ND8fX/RrfTNAOmo9YIR5Uzt7ooIXyt 6mLMfIWcMdo7z3CxeG83QsWectEM6Ha9kPb+SY03sztUQItLNlH7Rthl7Y6F1fG/ hVYIWhbfTXnZNUyYlDSU5uzDTsEzqRcnZUlafFo0ev0VNBje259t+etIkXpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFYv+xEJW4W/o8tUjhMFnu+tVcmkwHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE22kqYHGxIgQeh7QsaZ/nfdeXwVTouN3Npo y195Pc82JgCe918kI3B2y+3iw0IDI/bZi4hd5lKpGg9RvpcNJr9wi/7rrYMmM3OV chok4SindVHHNS53zId7Pyu74JxT3lvCI0k0EeT70zAeLXVw6T/rJ3nUdy0/TVfd ceFeCoCwxUkfqaAIbTGBrR8EQYrPRoAsEcgauc0B8QvN3LfUtvwp5zEajLSLVEdP uk1/yernWN+Asjh46Y9NxMdMvt9IoGOPMPXRJkBa928FIIND2B9Q54LMpRBr7i+L BNFPrQ3VRydS1aW+Zhi5w4INSmkasgVplT2pb2KdsD7n3ajM/gQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:53 2025 by rpki-client