$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: vFyWOEpS+JxJ/vwzyYtLk3hpjDhzaDOGbNwEBWZ/0ZA= Subject key identifier: 44:9D:61:AA:DE:9B:91:BD:31:CB:ED:C3:8C:E0:CC:71:24:4C:2F:11 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 5BF2FC5A11DE296E621990DC24E28C87EE2066A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01FC Signing time: Fri 22 Aug 2025 16:32:00 +0000 Manifest this update: Fri 22 Aug 2025 16:27:00 +0000 Manifest next update: Tue 26 Aug 2025 03:18:00 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) 2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: /P5HY26+OMlVX1lL4HrwOCUZk1/5/7rN/KZ3bGxJZW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f2:fc:5a:11:de:29:6e:62:19:90:dc:24:e2:8c:87:ee:20:66:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Aug 22 16:27:00 2025 GMT Not After : Aug 26 03:18:00 2025 GMT Subject: CN=449D61AADE9B91BD31CBEDC38CE0CC71244C2F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7b:0b:6b:6f:5f:f9:3c:ce:aa:4f:8d:13:3c: 4c:bc:6d:34:66:2d:fb:07:f3:5f:2c:67:a8:21:fd: ec:3a:df:c9:a2:9c:b0:31:25:b1:6a:c1:d5:37:fb: 84:b2:0a:6f:c3:b7:01:98:d8:09:fa:b3:e1:2a:fa: 1f:d3:92:1a:b5:8e:72:d3:26:fe:88:9d:5f:b5:38: fc:ed:45:b9:a4:20:75:77:58:25:e9:0a:52:e7:f9: f2:7e:d6:82:25:66:eb:b7:60:b1:07:a9:81:e4:a4: 62:58:a4:3b:03:80:fd:27:65:2a:c3:b9:29:96:10: 53:4c:d4:bd:8c:2e:fb:ef:d3:42:0e:9b:45:37:e9: df:91:d9:7b:2c:23:c9:75:a9:a8:f2:4f:57:b5:25: 04:cd:36:97:81:d7:38:da:ab:fa:69:f4:32:b3:72: 6b:57:0e:c5:8e:23:73:2a:33:7e:ff:b5:c7:c5:02: 93:c6:a8:86:b2:e6:69:3e:a1:f2:0b:27:72:de:2f: a7:62:d5:61:ee:99:90:a2:06:16:ec:31:2a:e1:45: 10:8c:b9:46:92:de:50:82:2c:bb:48:23:48:47:0f: 8a:15:43:3f:8e:09:8a:60:5a:60:de:03:60:4e:eb: cb:ed:24:72:4c:d8:7d:80:b0:23:57:85:fa:0b:48: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9D:61:AA:DE:9B:91:BD:31:CB:ED:C3:8C:E0:CC:71:24:4C:2F:11 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9d:67:ba:e8:59:b8:c2:bb:29:09:92:aa:90:72:05:df:56: ff:00:b9:89:82:39:97:c5:aa:03:ee:cf:80:7d:b7:26:0d:f6: d6:8d:e2:ac:93:64:aa:32:4c:7a:be:99:bb:1d:19:d1:f0:69: 53:b8:35:c4:d5:87:53:37:32:9b:56:b2:81:c4:38:64:3c:2d: b7:dd:4d:45:31:df:fa:6a:be:1d:2d:b5:f6:d0:17:a1:16:72: e5:a2:e2:45:b7:05:c9:79:62:36:11:4d:2a:fb:37:fb:78:f8: 21:8c:f3:b6:da:76:69:9d:1b:25:01:7c:91:22:48:8d:61:4d: 28:15:9d:15:b9:6f:8b:6f:9f:58:4d:bd:64:e6:d7:c5:d0:29: 55:bd:72:36:c9:16:3d:19:ac:71:56:c0:03:64:19:8f:36:c7: ea:cf:cb:7d:74:e5:63:3f:a5:d5:0e:5f:62:b2:d7:b8:8c:2b: 6e:83:76:06:19:99:b6:d9:c0:7f:4b:4e:a9:8a:42:60:11:ee: b1:c5:1a:55:f5:5f:d3:80:8a:11:78:30:54:0f:63:2f:97:59: 5e:e7:0c:0e:94:22:b6:79:ab:a1:ca:b7:cd:9b:4e:96:e4:6d: 92:a2:f2:6d:af:2e:fb:54:29:e1:78:32:99:65:8b:48:aa:71: 8a:df:21:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/L8WhHeKW5iGZDcJOKMh+4gZqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTA4MjIxNjI3MDBaFw0yNTA4MjYwMzE4MDBaMDMxMTAvBgNV BAMTKDQ0OUQ2MUFBREU5QjkxQkQzMUNCRURDMzhDRTBDQzcxMjQ0QzJGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeewtrb1/5PM6qT40TPEy8bTRm LfsH818sZ6gh/ew638minLAxJbFqwdU3+4SyCm/DtwGY2An6s+Eq+h/Tkhq1jnLT Jv6InV+1OPztRbmkIHV3WCXpClLn+fJ+1oIlZuu3YLEHqYHkpGJYpDsDgP0nZSrD uSmWEFNM1L2MLvvv00IOm0U36d+R2XssI8l1qajyT1e1JQTNNpeB1zjaq/pp9DKz cmtXDsWOI3MqM37/tcfFApPGqIay5mk+ofILJ3LeL6di1WHumZCiBhbsMSrhRRCM uUaS3lCCLLtII0hHD4oVQz+OCYpgWmDeA2BO68vtJHJM2H2AsCNXhfoLSA0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJ1hqt6bkb0xy+3DjODMcSRMLxEwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFedZ7roWbjCuykJkqqQcgXfVv8AuYmCOZfF qgPuz4B9tyYN9taN4qyTZKoyTHq+mbsdGdHwaVO4NcTVh1M3MptWsoHEOGQ8Lbfd TUUx3/pqvh0ttfbQF6EWcuWi4kW3Bcl5YjYRTSr7N/t4+CGM87badmmdGyUBfJEi SI1hTSgVnRW5b4tvn1hNvWTm18XQKVW9cjbJFj0ZrHFWwANkGY82x+rPy3105WM/ pdUOX2Ky17iMK26DdgYZmbbZwH9LTqmKQmAR7rHFGlX1X9OAihF4MFQPYy+XWV7n DA6UIrZ5q6HKt82bTpbkbZKi8m2vLvtUKeF4Mplli0iqcYrfIeY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:28 2025 by rpki-client