$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: uvL9RSAiKS5vqAChh0Hj5ytmI9YTyryYl0a4inIxghw= Subject key identifier: FA:B7:D2:85:D0:CE:C3:9C:73:CD:B0:5B:EE:59:BF:D9:05:AC:A6:AE Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 103AB223AA700B3A5418A56CD403F10000C7C538 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 0355 Signing time: Wed 07 May 2025 18:42:42 +0000 Manifest this update: Wed 07 May 2025 18:37:42 +0000 Manifest next update: Sun 11 May 2025 06:19:42 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: Ge7DfyqRrHh1J0jU3ahCslUvuamrpwpHuj08O7js/08=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 06:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3a:b2:23:aa:70:0b:3a:54:18:a5:6c:d4:03:f1:00:00:c7:c5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: May 7 18:37:42 2025 GMT Not After : May 11 06:19:42 2025 GMT Subject: CN=FAB7D285D0CEC39C73CDB05BEE59BFD905ACA6AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:20:be:b8:88:63:78:34:54:09:57:89:19: 20:7d:80:75:1e:eb:78:bd:0e:b0:7f:a8:ae:9e:40: 50:e1:b7:ff:c3:48:de:4d:51:30:67:8f:2d:3b:80: 3c:7a:22:b8:cd:cd:f3:76:d4:21:21:c8:3e:a9:3f: 7a:a7:22:bc:99:f0:28:5b:fb:26:a8:24:f4:44:fc: 73:7e:40:64:38:cf:19:a1:3e:3f:77:3e:89:3b:93: 9b:19:47:69:ce:f6:0e:68:99:b3:da:c0:fb:0c:f7: 41:00:6b:f8:ee:cf:68:f3:20:e1:b0:47:e3:e8:1c: b4:03:34:66:54:9b:b7:f8:5b:6c:31:f9:c4:00:78: 0e:5c:04:00:f9:20:eb:80:6c:40:1b:bb:63:8c:41: ce:5b:82:b9:cc:6e:20:06:b3:ff:a2:b5:7d:b8:51: 5d:be:b1:10:8e:41:77:5f:8b:88:12:bb:24:a2:d4: 37:39:9f:b0:d0:ee:ba:93:48:62:03:42:b5:32:ab: f5:ad:e8:4b:d7:46:45:8f:f0:93:2c:95:6d:cc:76: 86:aa:89:03:96:6a:7f:d2:bd:ba:a2:e6:6d:03:1b: c2:b5:fb:6b:31:58:87:b4:ac:8a:a1:b6:e0:4c:49: 73:8b:e1:51:ed:3b:48:d1:5c:58:db:42:7e:2d:8b: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B7:D2:85:D0:CE:C3:9C:73:CD:B0:5B:EE:59:BF:D9:05:AC:A6:AE X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e1:4a:6c:e2:d8:91:3b:76:6b:04:41:49:78:ca:c5:4d:dd: 89:f8:26:12:87:54:ca:89:f0:54:44:17:47:4f:4b:f7:77:6d: fb:5c:e0:ed:cd:8f:61:90:0a:d6:e2:0c:be:2f:bd:1a:13:8c: 32:85:80:b2:b4:b1:c2:29:c2:8f:9d:da:62:9a:52:b0:03:94: 23:34:66:10:96:01:f4:d3:36:48:2d:07:2a:6d:35:2c:7c:78: 59:3a:d3:93:7b:37:99:e0:06:bc:92:11:c1:9b:98:a1:cc:49: a0:fd:46:14:51:5c:dc:da:d3:90:f4:ca:36:b3:64:69:11:5e: 60:d4:64:bf:e5:75:3d:a1:ed:d8:5f:3c:bb:d8:60:11:72:15: b7:ec:f8:05:d3:4d:03:f8:1e:81:d0:28:6d:46:4b:82:a8:f1: 71:bb:34:7c:e0:74:8b:44:6e:1f:a9:2f:39:6d:da:7a:ab:d2: c5:f7:8a:d7:bb:2b:90:d3:a0:16:48:45:a0:e0:bd:92:17:10: b8:b3:c2:65:6d:82:ee:fc:c6:e6:4e:a5:d6:ca:81:86:f3:9e: a5:af:1c:cf:48:af:5e:62:2d:77:12:68:92:89:62:8b:bc:4c: e2:7c:3c:fb:4b:46:bc:c1:77:af:ae:6f:21:ef:7d:6a:25:c5: df:cf:4b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDqyI6pwCzpUGKVs1APxAADHxTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTA1MDcxODM3NDJaFw0yNTA1MTEwNjE5NDJaMDMxMTAvBgNV BAMTKEZBQjdEMjg1RDBDRUMzOUM3M0NEQjA1QkVFNTlCRkQ5MDVBQ0E2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuiC+uIhjeDRUCVeJGSB9gHUe 63i9DrB/qK6eQFDht//DSN5NUTBnjy07gDx6IrjNzfN21CEhyD6pP3qnIryZ8Chb +yaoJPRE/HN+QGQ4zxmhPj93Pok7k5sZR2nO9g5ombPawPsM90EAa/juz2jzIOGw R+PoHLQDNGZUm7f4W2wx+cQAeA5cBAD5IOuAbEAbu2OMQc5bgrnMbiAGs/+itX24 UV2+sRCOQXdfi4gSuySi1Dc5n7DQ7rqTSGIDQrUyq/Wt6EvXRkWP8JMslW3Mdoaq iQOWan/Svbqi5m0DG8K1+2sxWIe0rIqhtuBMSXOL4VHtO0jRXFjbQn4ti/FfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rfShdDOw5xzzbBb7lm/2QWspq4wHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7hSmzi2JE7dmsEQUl4ysVN3Yn4JhKHVMqJ 8FREF0dPS/d3bftc4O3Nj2GQCtbiDL4vvRoTjDKFgLK0scIpwo+d2mKaUrADlCM0 ZhCWAfTTNkgtByptNSx8eFk605N7N5ngBrySEcGbmKHMSaD9RhRRXNza05D0yjaz ZGkRXmDUZL/ldT2h7dhfPLvYYBFyFbfs+AXTTQP4HoHQKG1GS4Ko8XG7NHzgdItE bh+pLzlt2nqr0sX3ite7K5DToBZIRaDgvZIXELizwmVtgu78xuZOpdbKgYbznqWv HM9Ir15iLXcSaJKJYou8TOJ8PPtLRrzBd6+ubyHvfWolxd/PS2Q= -----END CERTIFICATE-----Generated at Sat May 10 07:23:53 2025 by rpki-client