$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: MLiLQkzTISZqNr9rtUgTIV9BuBMWwws3UNICZ3MZ26M= Subject key identifier: 86:27:B2:EF:F2:0E:A5:0E:A4:96:06:62:99:50:59:51:A2:FD:C1:8A Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 1A304C601E5574C16B30900BBA183A29802D0EF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02F9 Signing time: Sun 19 Oct 2025 05:41:55 +0000 Manifest this update: Sun 19 Oct 2025 05:36:55 +0000 Manifest next update: Wed 22 Oct 2025 12:35:55 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: 3LcsQzzkAHkKOkE5rAlr7A1qgRuKMMV6AyHIzKb67t0=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:30:4c:60:1e:55:74:c1:6b:30:90:0b:ba:18:3a:29:80:2d:0e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Oct 19 05:36:55 2025 GMT Not After : Oct 22 12:35:55 2025 GMT Subject: CN=8627B2EFF20EA50EA496066299505951A2FDC18A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:8a:5e:6b:4c:bc:f2:f2:01:d7:aa:63:b8: b0:44:03:42:83:9b:48:1e:3f:cc:5d:63:41:09:7a: db:57:c7:76:7e:b3:26:b3:46:35:86:ea:79:4b:c4: 42:4f:ae:1a:d6:11:3e:37:66:b6:f2:dc:a5:a7:32: 35:c6:ef:2b:4e:7f:4e:91:a6:1b:af:f1:48:4b:fe: 25:43:2b:53:c5:5f:ff:ae:c2:5a:c2:52:00:73:77: d1:de:65:1c:35:5e:f6:16:69:5b:54:95:29:ff:7e: f4:96:5c:80:30:8d:fd:e3:79:7b:6c:bb:e5:18:59: 25:6f:91:0b:5e:7b:e1:a7:42:57:00:0b:45:c8:93: 06:22:fe:45:67:20:fb:8b:20:7d:aa:8f:29:d0:e1: 26:f8:c8:b6:1e:32:13:cd:49:c4:bc:41:39:d4:32: 02:8b:5c:13:d9:e9:2f:52:1d:71:8e:83:64:de:36: f5:f3:39:d0:3a:60:3d:9f:3a:94:e3:30:39:69:58: 2b:9a:15:2a:c0:45:82:19:24:de:7b:f6:2e:b6:c5: a3:ee:a5:0c:ae:b9:8c:34:a3:44:f0:71:df:63:0d: 8e:08:25:a1:2a:ce:23:9a:82:b9:66:ec:dc:83:b9: 51:12:06:1d:c6:c8:90:ea:58:99:52:26:6f:6b:dd: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:B2:EF:F2:0E:A5:0E:A4:96:06:62:99:50:59:51:A2:FD:C1:8A X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d3:22:9b:05:cb:2b:2d:b5:e8:46:d6:ef:8f:a7:54:e7:80: 47:55:54:8d:cd:2a:32:5d:66:d1:39:95:fa:cc:44:32:1e:28: c6:4b:71:0f:1a:bd:6e:bd:e4:bd:e5:8c:44:5e:9b:b5:f4:de: 67:f7:1b:e6:54:1c:cb:74:57:e5:f7:55:49:5a:50:29:59:26: 2d:5b:c8:9b:61:1d:f9:77:f0:ec:89:d8:fc:3c:63:4e:c8:5a: d3:c8:da:95:ea:fe:df:ae:a4:9c:71:b2:7b:d5:b2:e8:a7:5f: 40:18:ba:e7:c5:dd:65:e4:9e:ad:4c:b4:d7:26:d8:16:db:37: 13:d2:63:d0:2d:28:bf:94:07:eb:93:ba:97:80:43:68:dc:fa: f9:93:7e:f6:68:2c:d3:02:ea:f3:d8:ab:76:91:bd:de:09:28: ec:0d:50:e2:29:10:ae:8c:a5:13:4a:cd:3f:3b:c6:d1:a0:40: a2:5d:76:d3:df:19:a4:bf:4f:f6:95:20:80:13:bc:1a:fe:a0: c1:2e:76:c7:56:0b:b6:04:ea:02:8e:d7:40:40:76:ae:f8:da: 75:7c:29:9b:3b:c2:4e:d9:79:38:91:21:17:c7:9c:d6:ce:b0: 1b:14:22:8b:04:53:fe:d3:81:0d:96:64:c5:73:6d:a1:4e:30: f5:0e:4f:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjBMYB5VdMFrMJALuhg6KYAtDvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTEwMTkwNTM2NTVaFw0yNTEwMjIxMjM1NTVaMDMxMTAvBgNV BAMTKDg2MjdCMkVGRjIwRUE1MEVBNDk2MDY2Mjk5NTA1OTUxQTJGREMxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpopea0y88vIB16pjuLBEA0KD m0geP8xdY0EJettXx3Z+syazRjWG6nlLxEJPrhrWET43Zrby3KWnMjXG7ytOf06R phuv8UhL/iVDK1PFX/+uwlrCUgBzd9HeZRw1XvYWaVtUlSn/fvSWXIAwjf3jeXts u+UYWSVvkQtee+GnQlcAC0XIkwYi/kVnIPuLIH2qjynQ4Sb4yLYeMhPNScS8QTnU MgKLXBPZ6S9SHXGOg2TeNvXzOdA6YD2fOpTjMDlpWCuaFSrARYIZJN579i62xaPu pQyuuYw0o0Twcd9jDY4IJaEqziOagrlm7NyDuVESBh3GyJDqWJlSJm9r3TJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhiey7/IOpQ6klgZimVBZUaL9wYowHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXTIpsFyysttehG1u+Pp1TngEdVVI3NKjJd ZtE5lfrMRDIeKMZLcQ8avW695L3ljERem7X03mf3G+ZUHMt0V+X3VUlaUClZJi1b yJthHfl38OyJ2Pw8Y07IWtPI2pXq/t+upJxxsnvVsuinX0AYuufF3WXknq1MtNcm 2BbbNxPSY9AtKL+UB+uTupeAQ2jc+vmTfvZoLNMC6vPYq3aRvd4JKOwNUOIpEK6M pRNKzT87xtGgQKJddtPfGaS/T/aVIIATvBr+oMEudsdWC7YE6gKO10BAdq742nV8 KZs7wk7ZeTiRIRfHnNbOsBsUIosEU/7TgQ2WZMVzbaFOMPUOT8c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:22 2025 by rpki-client