$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: guErqTwWsnjnq/4AmMQoj9FBEDm5jRfGlS6Jr+Jec4s= Subject key identifier: C6:C5:25:92:E7:5C:32:0A:AB:6E:88:B2:AA:67:04:6E:27:8E:EA:19 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 07A1F2D8DF34AA4BFE5FD2A3A72A40646BFA3AD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0216 Signing time: Sun 19 Oct 2025 20:32:03 +0000 Manifest this update: Sun 19 Oct 2025 20:27:03 +0000 Manifest next update: Wed 22 Oct 2025 21:37:03 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: lHb8xekzutjHy9q3RJT3MBmKeUoxBuOCo5ZvszxoQUs=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a1:f2:d8:df:34:aa:4b:fe:5f:d2:a3:a7:2a:40:64:6b:fa:3a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Oct 19 20:27:03 2025 GMT Not After : Oct 22 21:37:03 2025 GMT Subject: CN=C6C52592E75C320AAB6E88B2AA67046E278EEA19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:aa:20:94:5c:19:96:62:53:c9:99:d0:6b: a0:03:83:a8:93:9e:e4:e9:22:16:db:e1:fe:5d:16: 1d:24:07:14:3a:d3:c1:1d:7e:bb:82:3d:ee:0d:50: a0:3e:95:51:e7:7b:3f:8a:b0:10:44:d4:8f:9f:db: dd:9d:6e:2d:f0:b8:6e:91:dc:c9:26:57:fb:fd:65: 14:0d:24:b2:fd:dd:c4:bd:6e:30:ee:39:5a:e7:66: af:3f:61:92:d1:bb:59:9e:c9:c1:d5:c4:6a:16:6c: ee:1b:31:9c:95:c2:1d:c3:3f:ec:df:02:27:ba:b8: 4d:a7:f9:d6:03:80:c0:f5:9d:e3:ac:e7:5d:a9:a0: 74:06:ea:1f:c9:94:7f:b8:a2:90:5b:a3:65:e5:60: 15:2b:52:8e:45:25:2d:ba:5b:02:c0:a0:14:a7:ee: a1:81:62:cf:6b:be:54:9d:63:68:5e:fd:81:96:04: 7f:9b:0e:de:10:32:c7:14:82:ba:bb:7d:14:73:47: 66:33:06:2c:ef:6d:d5:f2:f3:09:bf:7d:5d:f1:0c: 40:d4:ba:17:78:68:8b:4e:1f:9c:a7:13:e3:4f:63: b1:88:7d:1d:72:64:db:5a:07:ed:02:26:f9:dd:93: 7d:54:cb:20:5a:04:2b:8b:3f:6d:15:6e:3f:f3:18: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C5:25:92:E7:5C:32:0A:AB:6E:88:B2:AA:67:04:6E:27:8E:EA:19 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:4e:e3:93:8a:54:c1:3e:70:47:f9:17:94:ec:c5:a4:9b: 70:ed:47:e7:3d:a2:5b:4a:d3:47:27:43:55:4e:a6:e7:62:8d: 4b:a5:03:c9:e4:37:42:9a:36:e4:eb:69:0f:ae:f8:63:5d:24: 32:f0:65:0c:74:89:bd:60:fd:5b:c8:99:71:83:2d:e2:7b:e2: 0c:45:52:fa:3a:e3:be:25:d2:ad:89:cf:7c:74:92:b7:70:90: bf:df:f2:21:90:7d:65:44:18:ab:6d:5e:51:f3:62:ed:4c:7c: e9:0c:46:74:65:93:09:f4:4b:e8:38:f0:ab:bc:46:43:22:54: 41:9c:c7:81:97:47:86:d2:5f:32:99:fe:22:db:19:ae:d3:d4: 2d:84:8d:92:08:fe:b9:a9:7c:91:5d:d6:4e:62:cd:e1:0f:8e: 6f:4e:fd:8d:a1:fb:8e:c7:3d:50:3c:50:a7:bc:9c:a2:de:a7: 3b:4a:e0:be:f6:6f:37:df:c1:6f:72:0c:cd:5a:1b:06:7b:97: 46:ea:a5:4e:f6:95:f3:30:2a:8c:45:5d:e1:a6:cd:f8:df:14: 88:94:88:fb:f8:12:e8:76:94:87:a1:79:eb:8f:6d:8a:b6:1a: 1c:9c:71:9c:b6:b0:c2:bc:2d:13:b6:11:af:05:a7:80:83:94: 69:03:76:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6Hy2N80qkv+X9KjpypAZGv6OtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTEwMTkyMDI3MDNaFw0yNTEwMjIyMTM3MDNaMDMxMTAvBgNV BAMTKEM2QzUyNTkyRTc1QzMyMEFBQjZFODhCMkFBNjcwNDZFMjc4RUVBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2KoglFwZlmJTyZnQa6ADg6iT nuTpIhbb4f5dFh0kBxQ608EdfruCPe4NUKA+lVHnez+KsBBE1I+f292dbi3wuG6R 3MkmV/v9ZRQNJLL93cS9bjDuOVrnZq8/YZLRu1meycHVxGoWbO4bMZyVwh3DP+zf Aie6uE2n+dYDgMD1neOs512poHQG6h/JlH+4opBbo2XlYBUrUo5FJS26WwLAoBSn 7qGBYs9rvlSdY2he/YGWBH+bDt4QMscUgrq7fRRzR2YzBizvbdXy8wm/fV3xDEDU uhd4aItOH5ynE+NPY7GIfR1yZNtaB+0CJvndk31UyyBaBCuLP20Vbj/zGGJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsUlkudcMgqrboiyqmcEbieO6hkwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ7TuOTilTBPnBH+ReU7MWkm3DtR+c9oltK 00cnQ1VOpudijUulA8nkN0KaNuTraQ+u+GNdJDLwZQx0ib1g/VvImXGDLeJ74gxF Uvo6474l0q2Jz3x0krdwkL/f8iGQfWVEGKttXlHzYu1MfOkMRnRlkwn0S+g48Ku8 RkMiVEGcx4GXR4bSXzKZ/iLbGa7T1C2EjZII/rmpfJFd1k5izeEPjm9O/Y2h+47H PVA8UKe8nKLepztK4L72bzffwW9yDM1aGwZ7l0bqpU72lfMwKoxFXeGmzfjfFIiU iPv4Euh2lIeheeuPbYq2GhyccZy2sMK8LRO2Ea8Fp4CDlGkDdq0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:00 2025 by rpki-client