$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: Wn0B/0WEzXSAtFdOcyd/fP+BSqE7kgXoc+0vIIqO0r0= Subject key identifier: C4:51:B2:C4:12:5C:61:CC:99:3B:EF:D0:AC:61:63:C3:14:40:CA:22 Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 4A22E297B72DDB1790ADFF05DDA9A9938E432C53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02AE Signing time: Tue 06 May 2025 21:01:52 +0000 Manifest this update: Tue 06 May 2025 20:56:52 +0000 Manifest next update: Sat 10 May 2025 07:50:52 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: 8db+yHnPiznhfs6XkDsOzAFN6u08PdStztxyIlafsLI=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: 6idWc3lf40SrC6ddCZtHyjdlNkTY3XNNuoo22GH5+G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:22:e2:97:b7:2d:db:17:90:ad:ff:05:dd:a9:a9:93:8e:43:2c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: May 6 20:56:52 2025 GMT Not After : May 10 07:50:52 2025 GMT Subject: CN=C451B2C4125C61CC993BEFD0AC6163C31440CA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ac:5a:7a:a3:a8:01:e8:e9:0d:eb:02:1a:00: 33:0c:cd:34:91:7f:9d:05:64:b6:0c:52:fe:b7:07: fb:0f:12:26:43:29:1d:07:e4:2b:ca:61:97:5a:6a: ba:5b:93:0a:66:7e:a7:65:81:ff:95:75:23:71:e2: 2a:bf:6c:46:b7:c4:2f:23:79:c6:7f:cd:7a:74:1d: 5d:56:c5:27:87:64:1e:0c:b4:41:4d:bd:af:59:00: b5:10:c5:cb:8c:28:4f:2d:0e:dc:78:cb:c7:f1:7c: af:01:ac:8a:b4:ae:de:65:31:03:40:11:75:a0:e0: 30:b7:1a:5a:f8:be:1f:af:cb:eb:3e:b3:c0:e7:38: fc:4b:c7:93:5f:d1:62:78:e9:29:a5:6d:de:78:47: 6a:3e:1e:e0:5a:00:44:2d:31:de:9d:70:68:49:1c: a2:bd:21:cd:6d:4b:97:b6:4b:d7:5f:ee:ba:8a:7a: 86:dd:38:4b:87:f7:3f:f6:4b:90:00:c3:b8:18:f0: 47:a5:df:22:3d:01:c3:b7:a6:39:7f:d0:c8:80:39: 26:60:ee:97:ba:c7:40:27:a5:b6:ec:00:10:b4:be: 01:69:e2:c7:2e:9f:b0:e6:78:52:34:01:a0:f0:03: a1:68:23:b3:1d:c4:7a:99:b9:26:85:19:1a:ad:3e: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:51:B2:C4:12:5C:61:CC:99:3B:EF:D0:AC:61:63:C3:14:40:CA:22 X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a3:e1:24:67:22:cc:4c:fa:82:4b:8b:4e:5c:04:87:a2:4f: de:a8:c5:42:05:8d:d8:68:f0:6c:79:f0:0d:b4:a2:c1:1b:85: 48:d3:9d:cb:a9:d2:46:f7:50:04:30:2a:e8:55:1c:7c:c9:5a: 8b:5d:4f:44:2d:c8:8c:be:aa:10:ab:77:34:2a:6c:37:7b:52: 80:79:2c:8e:f3:8b:f8:33:0a:ff:c7:90:c8:c9:a2:8f:b3:a6: 0d:3a:ff:b3:0b:23:17:03:00:1c:78:f8:26:dd:25:90:f1:30: ac:a1:d6:73:3e:ff:36:0d:b8:3b:7f:93:b7:53:26:3f:53:3f: cf:d6:6d:7f:9b:cd:d3:ae:a3:7d:6d:6d:d0:c6:20:d9:d7:74: bf:03:b4:23:b1:8a:4c:73:65:d0:df:ae:1f:9b:cc:af:d9:06: fd:5b:22:bb:eb:ab:a9:1e:60:37:a7:74:3c:da:5e:d7:7e:0e: 90:37:bd:2a:68:78:27:7b:63:07:75:aa:2a:bf:00:f1:87:97: 9d:bb:9c:5b:7c:fa:4e:15:a2:85:b9:43:b4:11:93:9b:6e:42: ee:c5:3c:cd:22:4a:5a:cb:86:c9:c2:c9:3f:5c:d4:56:20:8d: f5:99:33:c3:d1:9f:69:09:6a:40:04:64:19:b3:96:85:44:ee: 6a:01:6d:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiLil7ct2xeQrf8F3ampk45DLFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA1MDYyMDU2NTJaFw0yNTA1MTAwNzUwNTJaMDMxMTAvBgNV BAMTKEM0NTFCMkM0MTI1QzYxQ0M5OTNCRUZEMEFDNjE2M0MzMTQ0MENBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxrFp6o6gB6OkN6wIaADMMzTSR f50FZLYMUv63B/sPEiZDKR0H5CvKYZdaarpbkwpmfqdlgf+VdSNx4iq/bEa3xC8j ecZ/zXp0HV1WxSeHZB4MtEFNva9ZALUQxcuMKE8tDtx4y8fxfK8BrIq0rt5lMQNA EXWg4DC3Glr4vh+vy+s+s8DnOPxLx5Nf0WJ46Smlbd54R2o+HuBaAEQtMd6dcGhJ HKK9Ic1tS5e2S9df7rqKeobdOEuH9z/2S5AAw7gY8Eel3yI9AcO3pjl/0MiAOSZg 7pe6x0AnpbbsABC0vgFp4scun7DmeFI0AaDwA6FoI7MdxHqZuSaFGRqtPpErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFGyxBJcYcyZO+/QrGFjwxRAyiIwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaj4SRnIsxM+oJLi05cBIeiT96oxUIFjdho 8Gx58A20osEbhUjTncup0kb3UAQwKuhVHHzJWotdT0QtyIy+qhCrdzQqbDd7UoB5 LI7zi/gzCv/HkMjJoo+zpg06/7MLIxcDABx4+CbdJZDxMKyh1nM+/zYNuDt/k7dT Jj9TP8/WbX+bzdOuo31tbdDGINnXdL8DtCOxikxzZdDfrh+bzK/ZBv1bIrvrq6ke YDendDzaXtd+DpA3vSpoeCd7Ywd1qiq/APGHl527nFt8+k4VooW5Q7QRk5tuQu7F PM0iSlrLhsnCyT9c1FYgjfWZM8PRn2kJakAEZBmzloVE7moBbeo= -----END CERTIFICATE-----Generated at Thu May 8 02:46:20 2025 by rpki-client