$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: pBtGyGmfBNa3Ek5PrrgEY2UilJUNvg7e+koT6wq94Nw= Subject key identifier: 63:3D:F0:D3:BD:04:7F:52:08:CB:9A:DE:36:12:69:7D:F6:44:9A:32 Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 3A8EC7B16652F37337A5100184D927B1788D44F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02E0 Signing time: Sat 23 Aug 2025 04:21:54 +0000 Manifest this update: Sat 23 Aug 2025 04:16:54 +0000 Manifest next update: Tue 26 Aug 2025 14:34:54 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: +bbXhrQBsVsn5rxJFc1RpJbWQlUzGELrPag6F/cmnYk=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8e:c7:b1:66:52:f3:73:37:a5:10:01:84:d9:27:b1:78:8d:44:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Aug 23 04:16:54 2025 GMT Not After : Aug 26 14:34:54 2025 GMT Subject: CN=633DF0D3BD047F5208CB9ADE3612697DF6449A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:c8:f1:00:8f:f2:fa:8f:11:7c:a7:8d:cc: 6e:b6:f1:e6:c4:5f:8d:fd:c6:e2:39:4b:7b:88:fa: 6b:67:6b:c3:09:45:c0:c7:d2:d0:dd:8d:12:37:8b: 62:c1:f8:b2:00:d2:49:0e:a1:7a:ea:4b:8b:53:3b: 8b:12:3e:52:b0:31:a4:35:9c:39:c5:4e:bb:35:98: 54:41:68:00:e3:ba:49:df:48:5c:79:c4:fd:5b:10: e6:46:0f:c6:e3:2e:f1:9b:39:f4:af:d0:ad:92:98: 95:ac:2a:b0:c4:08:08:66:fc:39:ff:3e:e1:48:88: 16:b8:d5:03:fd:1b:92:3b:c5:61:b6:53:c5:8a:c9: fa:b9:4f:7e:9a:17:c6:d6:8b:9d:59:b0:c8:ab:e5: fb:03:74:3b:5c:7d:c4:c4:5e:5e:ce:f7:f1:42:70: 1a:08:da:85:f3:4f:dc:2c:2d:17:1e:f6:82:6b:61: 60:ad:08:6a:37:65:4a:fe:47:f6:36:b8:95:8e:a3: e1:98:11:e5:d1:e2:4b:87:b7:13:91:ba:4e:d2:ea: c4:85:1a:ad:23:28:31:a0:9a:46:e6:a5:06:58:98: 3d:fb:bd:de:2f:2a:fb:da:98:9b:e9:7d:ac:3e:b1: 45:a7:9c:76:68:09:82:28:ee:87:fa:06:0d:6f:27: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3D:F0:D3:BD:04:7F:52:08:CB:9A:DE:36:12:69:7D:F6:44:9A:32 X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ca:f0:f7:6b:57:bc:11:20:95:4f:bb:cb:8a:16:10:e4:8b: 47:91:a2:71:1c:87:b4:f7:3a:b4:05:b5:8e:45:f3:71:0a:92: 86:c7:75:c5:ae:53:0a:08:d7:65:dd:a3:e4:ff:8b:34:f7:ac: 41:6f:c9:bd:1d:25:c3:96:0c:58:19:87:3a:c4:d3:43:ef:91: 25:33:c3:b0:57:e2:0d:c9:b7:7d:b0:5a:51:2e:f7:05:ce:40: 30:4a:8f:19:70:72:e2:8b:bd:19:f4:3b:5c:99:57:cb:7c:7a: e4:9e:ed:eb:27:01:bd:30:c7:21:e1:ff:e7:ff:91:00:13:6b: 0f:c3:f1:1d:cb:36:5f:e3:70:3f:1e:6c:2c:29:18:6d:27:fc: d9:33:04:c0:a3:b3:8a:34:58:58:a5:4a:23:41:2b:7b:dd:39: 48:c5:24:d3:11:5d:52:7f:33:c6:45:32:b0:11:f4:f8:f9:94: f3:8a:99:1c:7f:32:e4:16:80:dd:68:1c:bf:6e:4a:e3:15:5e: c3:e0:52:8e:99:75:ef:81:37:11:36:b7:0d:8c:a7:84:8b:21: af:34:77:21:64:39:09:c8:7f:2d:30:af:e4:40:49:02:4d:d2: d0:08:54:f7:fc:4b:4c:b2:d8:b2:2e:99:64:6d:c7:c9:bc:15: 57:7a:a7:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOo7HsWZS83M3pRABhNknsXiNRPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA4MjMwNDE2NTRaFw0yNTA4MjYxNDM0NTRaMDMxMTAvBgNV BAMTKDYzM0RGMEQzQkQwNDdGNTIwOENCOUFERTM2MTI2OTdERjY0NDlBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xcjxAI/y+o8RfKeNzG628ebE X439xuI5S3uI+mtna8MJRcDH0tDdjRI3i2LB+LIA0kkOoXrqS4tTO4sSPlKwMaQ1 nDnFTrs1mFRBaADjuknfSFx5xP1bEOZGD8bjLvGbOfSv0K2SmJWsKrDECAhm/Dn/ PuFIiBa41QP9G5I7xWG2U8WKyfq5T36aF8bWi51ZsMir5fsDdDtcfcTEXl7O9/FC cBoI2oXzT9wsLRce9oJrYWCtCGo3ZUr+R/Y2uJWOo+GYEeXR4kuHtxORuk7S6sSF Gq0jKDGgmkbmpQZYmD37vd4vKvvamJvpfaw+sUWnnHZoCYIo7of6Bg1vJ5UxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYz3w070Ef1IIy5reNhJpffZEmjIwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbK8PdrV7wRIJVPu8uKFhDki0eRonEch7T3 OrQFtY5F83EKkobHdcWuUwoI12Xdo+T/izT3rEFvyb0dJcOWDFgZhzrE00PvkSUz w7BX4g3Jt32wWlEu9wXOQDBKjxlwcuKLvRn0O1yZV8t8euSe7esnAb0wxyHh/+f/ kQATaw/D8R3LNl/jcD8ebCwpGG0n/NkzBMCjs4o0WFilSiNBK3vdOUjFJNMRXVJ/ M8ZFMrAR9Pj5lPOKmRx/MuQWgN1oHL9uSuMVXsPgUo6Zde+BNxE2tw2Mp4SLIa80 dyFkOQnIfy0wr+RASQJN0tAIVPf8S0yy2LIumWRtx8m8FVd6p7s= -----END CERTIFICATE-----Generated at Sat Aug 23 16:08:48 2025 by rpki-client