$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: DIzTi9Dkl8e86oDpyBKmUiiAKYWtJpDZVhTElzIzsLk= Subject key identifier: 8B:A9:B0:93:FA:8D:F0:B6:C5:A4:21:C5:96:95:C0:E6:D6:61:59:69 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 35E5D7A5FFF02301388CF37048891EA92ABE0FB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01CE Signing time: Sat 10 May 2025 15:11:54 +0000 Manifest this update: Sat 10 May 2025 15:06:54 +0000 Manifest next update: Tue 13 May 2025 19:57:54 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: ocZ5JddGWEbvh0KpkRUxLYISykMo33kLR+76X8ZYd0Q=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 19:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e5:d7:a5:ff:f0:23:01:38:8c:f3:70:48:89:1e:a9:2a:be:0f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: May 10 15:06:54 2025 GMT Not After : May 13 19:57:54 2025 GMT Subject: CN=8BA9B093FA8DF0B6C5A421C59695C0E6D6615969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:08:91:3b:d9:1b:68:48:da:f0:3c:81:50: 26:b2:df:f6:a0:11:2b:c3:28:bc:a4:39:63:cf:7d: 4d:f7:8f:72:26:23:32:e8:9d:d7:cd:6d:14:a9:96: cf:a6:ad:ed:fc:8f:a0:79:7f:05:d3:44:9b:0a:3c: fd:ba:4c:f2:d3:a4:6e:07:6f:b2:fa:e0:38:05:63: d1:36:ce:56:3d:a0:ac:cc:b8:c4:8f:ba:18:b7:09: 3d:8c:13:aa:71:33:7f:30:34:28:f2:fb:57:3a:97: d2:88:ec:32:8f:b1:29:d6:98:98:ed:33:57:b7:4b: 4e:a3:da:76:ae:bc:70:a9:e8:1b:3a:fb:6c:14:d9: f7:36:df:a3:05:50:2e:4e:ab:e7:d0:f9:8d:34:21: e9:6a:0f:8a:7d:3d:f0:81:c1:40:f7:59:66:8a:20: f1:62:73:c2:70:de:6a:37:64:9d:bc:25:74:05:33: 02:88:16:e7:a4:c4:f7:17:2f:3e:ad:45:d5:ae:36: aa:1a:38:a6:65:3b:c9:f4:1f:ef:6a:a1:96:d9:aa: 3e:ae:8e:50:e6:9d:42:56:be:78:5b:29:9a:9a:0e: 55:36:bf:10:a1:00:37:62:34:a3:60:14:e8:c1:bd: d3:4a:59:e9:a7:1d:e1:88:60:f5:fa:40:69:0c:f7: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:B0:93:FA:8D:F0:B6:C5:A4:21:C5:96:95:C0:E6:D6:61:59:69 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7e:0d:27:60:c3:db:a9:57:91:c6:5b:e4:ce:cb:50:7a:95: 28:66:9f:df:d6:f9:16:ea:a1:23:8a:84:3e:fa:d8:e8:af:47: 5b:48:6e:da:72:c2:04:91:fd:15:5e:ad:84:68:91:eb:d3:26: bd:9d:7c:22:c5:b4:b8:da:d9:f2:d1:13:1f:d4:fd:19:56:32: 2d:0d:3d:5c:c7:e3:cb:fd:f7:57:2b:8a:b1:1e:4f:0a:7d:40: 0f:0a:3b:26:39:f3:d0:98:e8:12:6b:17:77:69:22:20:77:88: 7d:01:67:9a:1c:f6:f1:6d:74:94:5d:53:fe:e4:4c:a1:30:eb: da:6a:41:af:3d:d0:a0:b0:d6:fd:55:7d:f4:7c:04:2f:c4:23: ba:e1:e1:98:7c:5d:36:79:b7:0e:e2:b1:9e:91:83:83:db:3d: 40:a3:58:46:21:a9:42:af:60:40:5a:92:7d:f3:49:60:74:cf: 24:ab:3d:ff:af:19:d2:3c:b1:8e:69:ae:f2:13:c8:df:5b:51: 16:63:85:ba:40:ea:07:d4:fc:dd:35:23:9c:82:76:c3:13:db: 70:90:de:16:c5:39:70:fb:21:67:ff:4c:b8:ea:b9:2b:ac:f4: 42:53:5d:4f:4b:b9:43:1a:e8:0c:d0:0c:48:a2:0f:cc:5e:1b: 5f:4d:b8:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeXXpf/wIwE4jPNwSIkeqSq+D7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTA1MTAxNTA2NTRaFw0yNTA1MTMxOTU3NTRaMDMxMTAvBgNV BAMTKDhCQTlCMDkzRkE4REYwQjZDNUE0MjFDNTk2OTVDMEU2RDY2MTU5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmAiRO9kbaEja8DyBUCay3/ag ESvDKLykOWPPfU33j3ImIzLondfNbRSpls+mre38j6B5fwXTRJsKPP26TPLTpG4H b7L64DgFY9E2zlY9oKzMuMSPuhi3CT2ME6pxM38wNCjy+1c6l9KI7DKPsSnWmJjt M1e3S06j2nauvHCp6Bs6+2wU2fc236MFUC5Oq+fQ+Y00IelqD4p9PfCBwUD3WWaK IPFic8Jw3mo3ZJ28JXQFMwKIFuekxPcXLz6tRdWuNqoaOKZlO8n0H+9qoZbZqj6u jlDmnUJWvnhbKZqaDlU2vxChADdiNKNgFOjBvdNKWemnHeGIYPX6QGkM90jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi6mwk/qN8LbFpCHFlpXA5tZhWWkwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ+DSdgw9upV5HGW+TOy1B6lShmn9/W+Rbq oSOKhD762OivR1tIbtpywgSR/RVerYRokevTJr2dfCLFtLja2fLREx/U/RlWMi0N PVzH48v991crirEeTwp9QA8KOyY589CY6BJrF3dpIiB3iH0BZ5oc9vFtdJRdU/7k TKEw69pqQa890KCw1v1VffR8BC/EI7rh4Zh8XTZ5tw7isZ6Rg4PbPUCjWEYhqUKv YEBakn3zSWB0zySrPf+vGdI8sY5prvITyN9bURZjhbpA6gfU/N01I5yCdsMT23CQ 3hbFOXD7IWf/TLjquSus9EJTXU9LuUMa6AzQDEiiD8xeG19NuAI= -----END CERTIFICATE-----Generated at Sun May 11 15:20:24 2025 by rpki-client