$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: JvU3FAlcSMk0KpWrbqTBhxTvItlSpqbJTzkZcJCwd+M= Subject key identifier: 7E:3D:A4:AD:64:3D:8D:0E:98:15:1C:A8:6A:E4:6D:50:46:38:14:81 Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 2EAC76AA40BB1DF6ED26CC09BD8A85847C5B7383 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 01EC Signing time: Sat 28 Jun 2025 02:11:37 +0000 Manifest this update: Sat 28 Jun 2025 02:06:37 +0000 Manifest next update: Tue 01 Jul 2025 13:14:37 +0000 Files and hashes: 1: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: LDfgf/kHHrA3mUVbo9aY2V+dvIoShI/i5g83pe9w6b4=) 2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ac:76:aa:40:bb:1d:f6:ed:26:cc:09:bd:8a:85:84:7c:5b:73:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Jun 28 02:06:37 2025 GMT Not After : Jul 1 13:14:37 2025 GMT Subject: CN=7E3DA4AD643D8D0E98151CA86AE46D5046381481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:67:33:1a:1f:b0:f9:b6:33:42:43:93:8c: 50:e3:25:77:a3:65:d1:51:65:62:89:53:ee:e3:a6: e8:57:60:d1:5d:a6:a7:10:54:9e:0e:4d:ef:19:22: c2:c3:f6:8d:64:d5:97:1a:b7:b4:7c:1f:bb:32:a3: 9a:51:5e:4b:0a:cb:4d:a6:ef:41:44:c2:77:02:c2: 8c:04:7b:63:84:9b:ee:92:a8:bd:c8:ed:99:69:5c: 7b:97:99:32:1a:d1:ba:3f:3c:5d:20:e5:d0:62:bb: 78:79:b6:40:07:08:60:08:8a:03:c8:f3:9f:4f:26: 84:32:4c:9e:5c:cb:dc:e6:17:01:ce:df:1a:94:54: 59:a6:27:f6:3a:85:06:34:a8:a9:fa:d1:14:2a:49: aa:7d:2e:e9:a6:bf:c1:48:fc:93:ec:68:bf:bf:b5: 25:b6:26:31:2e:4f:2b:1f:71:43:43:3a:58:9f:4b: df:33:06:1f:25:c9:00:b7:61:1e:19:e1:21:61:e9: 28:a6:3b:87:bc:69:4c:48:f6:c6:da:2c:c0:f5:7d: 1b:94:72:23:5a:e5:64:ea:0f:00:63:ce:cc:e8:85: d7:7c:64:55:e5:e4:9a:ed:6f:88:2b:f5:13:88:fa: a6:9f:c3:24:09:1c:7e:93:41:e2:df:d0:b9:11:39: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:A4:AD:64:3D:8D:0E:98:15:1C:A8:6A:E4:6D:50:46:38:14:81 X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5e:2a:6e:9e:02:dd:93:c6:82:2b:ea:2c:44:53:cb:bd:23: b4:ca:8d:20:75:c3:5d:ae:fb:a6:35:58:32:50:66:19:b5:d2: f2:da:06:a0:e5:39:8b:80:b0:0d:9f:46:a0:52:62:ee:5e:17: 7a:06:e3:ba:9c:de:33:20:f6:39:50:a6:85:21:61:0f:0d:e3: 34:b6:ac:86:d3:8e:a4:94:3d:c5:22:52:23:9a:92:1f:f4:8f: a3:49:1f:56:cf:66:c1:37:7a:bc:70:8a:29:6c:f0:b5:cf:02: 98:a2:38:bb:f8:d8:02:f6:a3:88:29:54:33:0c:52:bc:6d:5d: 83:ee:50:0f:31:62:0f:67:76:f6:45:b9:55:b8:f7:8e:3a:58: cd:ca:6b:f5:06:bc:de:85:bd:52:b1:ea:39:17:0c:55:35:ec: 1c:81:b8:9b:22:e8:73:47:ee:f4:b4:50:8c:f5:6f:41:0e:26: d8:d7:2d:92:a0:83:d2:34:49:4e:7c:4e:50:f5:f7:81:34:b9: 78:88:2d:38:81:61:37:ca:47:cf:b0:cf:ca:9e:c0:1d:be:8b: 03:60:12:94:8a:8d:af:72:f4:09:c2:d8:66:0b:e1:0a:3b:12: d3:bf:99:50:2f:e0:39:30:f0:c2:20:6f:6b:ab:4b:e1:b2:1a: 0e:4d:b6:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqx2qkC7HfbtJswJvYqFhHxbc4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNTA2MjgwMjA2MzdaFw0yNTA3MDExMzE0MzdaMDMxMTAvBgNV BAMTKDdFM0RBNEFENjQzRDhEMEU5ODE1MUNBODZBRTQ2RDUwNDYzODE0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfWczGh+w+bYzQkOTjFDjJXej ZdFRZWKJU+7jpuhXYNFdpqcQVJ4OTe8ZIsLD9o1k1Zcat7R8H7syo5pRXksKy02m 70FEwncCwowEe2OEm+6SqL3I7ZlpXHuXmTIa0bo/PF0g5dBiu3h5tkAHCGAIigPI 859PJoQyTJ5cy9zmFwHO3xqUVFmmJ/Y6hQY0qKn60RQqSap9Lummv8FI/JPsaL+/ tSW2JjEuTysfcUNDOlifS98zBh8lyQC3YR4Z4SFh6SimO4e8aUxI9sbaLMD1fRuU ciNa5WTqDwBjzszohdd8ZFXl5Jrtb4gr9ROI+qafwyQJHH6TQeLf0LkROfW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfj2krWQ9jQ6YFRyoauRtUEY4FIEwHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFeKm6eAt2TxoIr6ixEU8u9I7TKjSB1w12u +6Y1WDJQZhm10vLaBqDlOYuAsA2fRqBSYu5eF3oG47qc3jMg9jlQpoUhYQ8N4zS2 rIbTjqSUPcUiUiOakh/0j6NJH1bPZsE3erxwiils8LXPApiiOLv42AL2o4gpVDMM UrxtXYPuUA8xYg9ndvZFuVW49446WM3Ka/UGvN6FvVKx6jkXDFU17ByBuJsi6HNH 7vS0UIz1b0EOJtjXLZKgg9I0SU58TlD194E0uXiILTiBYTfKR8+wz8qewB2+iwNg EpSKja9y9AnC2GYL4Qo7EtO/mVAv4Dkw8MIgb2urS+GyGg5NtmY= -----END CERTIFICATE-----Generated at Sun Jun 29 22:07:36 2025 by rpki-client