$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: VVTxIDXe79dpWs2JDpF4kyHlPlggQkiOe3IRA7Dlgqs= Subject key identifier: 2F:E8:CA:88:01:6C:17:8B:32:C3:C8:FD:D7:65:15:1E:FC:75:D6:07 Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 1C75D592A3EF7A06D33E3855256EF575F89CEA7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 02C6 Signing time: Sat 28 Jun 2025 07:01:50 +0000 Manifest this update: Sat 28 Jun 2025 06:56:50 +0000 Manifest next update: Tue 01 Jul 2025 11:30:50 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: lUg20TgKLzeXXNm5BzlmCEmLDIsp+553nEXg9I1p8nw=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: 6idWc3lf40SrC6ddCZtHyjdlNkTY3XNNuoo22GH5+G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:75:d5:92:a3:ef:7a:06:d3:3e:38:55:25:6e:f5:75:f8:9c:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Jun 28 06:56:50 2025 GMT Not After : Jul 1 11:30:50 2025 GMT Subject: CN=2FE8CA88016C178B32C3C8FDD765151EFC75D607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:2a:3f:a5:02:bb:14:7b:c9:4a:db:d7:4d: 3a:f9:be:f7:fb:1a:83:db:51:0e:fe:7a:29:51:95: 7c:25:fe:fb:d2:ea:fa:18:37:aa:d1:93:81:3a:0a: af:ce:8b:af:72:17:b6:71:92:63:a9:3b:b4:6b:09: 41:94:55:47:57:6c:d4:e9:21:60:2d:a5:9f:bc:6f: 5a:d4:25:5e:53:c5:29:f3:8d:2c:b1:31:5c:d8:d4: 7e:10:6e:7f:48:db:72:c4:50:d6:40:50:0d:2f:6e: 86:da:06:2a:b1:2b:63:63:8e:1d:08:a0:4d:04:79: 11:49:da:85:dc:f5:90:80:fa:55:cb:6b:cc:2d:b9: 94:b8:ac:60:12:70:0e:40:b1:4f:81:65:5a:fd:57: 9c:20:68:bf:57:21:58:e0:50:73:27:c2:71:68:a9: d4:2b:8e:5e:8b:f6:5b:21:42:b5:01:9b:5c:d5:5d: 35:9d:e8:30:ad:a5:ca:4a:bd:08:ad:35:54:41:63: 47:32:a1:d6:b5:76:34:d5:9b:41:1c:bc:7e:f5:cf: eb:d3:e8:8c:4f:e0:ce:a9:c7:80:00:24:7c:36:61: ab:e0:c1:f5:3b:27:71:fb:1e:0a:b3:6a:d4:6a:2a: f3:07:0f:18:cc:18:fc:16:2d:f3:a9:ab:35:d5:27: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E8:CA:88:01:6C:17:8B:32:C3:C8:FD:D7:65:15:1E:FC:75:D6:07 X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:05:ed:14:6e:7e:07:6f:1c:86:af:47:72:78:ca:7d:0b:be: 88:37:88:bf:c4:f3:7b:2a:6f:ad:f0:c9:0c:70:54:21:f2:ec: 24:5b:ea:20:d4:74:65:c9:e8:61:e2:57:7f:80:2a:78:8a:d2: c9:08:63:60:00:6b:7a:73:6b:c5:b9:e8:c6:94:26:50:b9:9e: 6b:8d:9a:06:7c:f4:5f:d7:5a:33:7a:3f:ff:75:95:85:28:f3: 66:04:78:d8:b9:d6:74:6c:e6:9b:9b:1d:1e:2e:0e:86:af:de: f1:96:85:c6:08:a4:a4:ec:1f:0c:5c:b2:b0:97:ae:20:f3:26: a6:a0:86:58:d9:a8:90:e6:10:b4:1d:54:13:9c:ba:30:79:6c: aa:6f:71:b6:ce:bf:1d:97:8b:70:73:9f:22:83:21:28:35:fd: ea:98:4a:4e:1e:0e:e6:62:1e:07:2a:9f:f8:ab:57:92:33:32: aa:eb:a7:26:87:32:46:87:ba:5d:f8:63:e7:ff:d3:82:45:72: e3:cb:9a:1e:51:68:14:88:24:a5:73:e4:d2:99:8e:0c:3f:70: cb:ce:51:bd:8a:0d:65:3b:69:e2:01:5c:53:9f:14:82:69:d5: 8d:9c:8c:8b:c9:45:15:54:30:4d:5c:a6:0a:ea:c3:c2:b7:7c: b1:bd:4b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHXVkqPvegbTPjhVJW71dfic6nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA2MjgwNjU2NTBaFw0yNTA3MDExMTMwNTBaMDMxMTAvBgNV BAMTKDJGRThDQTg4MDE2QzE3OEIzMkMzQzhGREQ3NjUxNTFFRkM3NUQ2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWio/pQK7FHvJStvXTTr5vvf7 GoPbUQ7+eilRlXwl/vvS6voYN6rRk4E6Cq/Oi69yF7ZxkmOpO7RrCUGUVUdXbNTp IWAtpZ+8b1rUJV5TxSnzjSyxMVzY1H4Qbn9I23LEUNZAUA0vbobaBiqxK2Njjh0I oE0EeRFJ2oXc9ZCA+lXLa8wtuZS4rGAScA5AsU+BZVr9V5wgaL9XIVjgUHMnwnFo qdQrjl6L9lshQrUBm1zVXTWd6DCtpcpKvQitNVRBY0cyoda1djTVm0EcvH71z+vT 6IxP4M6px4AAJHw2YavgwfU7J3H7HgqzatRqKvMHDxjMGPwWLfOpqzXVJ7hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+jKiAFsF4syw8j912UVHvx11gcwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4F7RRufgdvHIavR3J4yn0Lvog3iL/E83sq b63wyQxwVCHy7CRb6iDUdGXJ6GHiV3+AKniK0skIY2AAa3pza8W56MaUJlC5nmuN mgZ89F/XWjN6P/91lYUo82YEeNi51nRs5pubHR4uDoav3vGWhcYIpKTsHwxcsrCX riDzJqaghljZqJDmELQdVBOcujB5bKpvcbbOvx2Xi3BznyKDISg1/eqYSk4eDuZi Hgcqn/irV5IzMqrrpyaHMkaHul34Y+f/04JFcuPLmh5RaBSIJKVz5NKZjgw/cMvO Ub2KDWU7aeIBXFOfFIJp1Y2cjIvJRRVUME1cpgrqw8K3fLG9S18= -----END CERTIFICATE-----Generated at Mon Jun 30 05:06:30 2025 by rpki-client