$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: EEnCT8H7q5v/yp5LcG/CsIH82Ok1BuwEmQc7QwzvqUg= Subject key identifier: D3:7E:1E:75:F9:D5:B1:17:1A:23:F0:0C:16:4F:7B:79:4A:25:DF:C8 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 56551B80D0CDBAA8F6834767BA22177A634C0759 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 039F Signing time: Sun 19 Oct 2025 23:31:46 +0000 Manifest this update: Sun 19 Oct 2025 23:26:46 +0000 Manifest next update: Thu 23 Oct 2025 01:14:46 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: Z2OSn4E/4LjbMHiI5FtrRiKJS3o8k6+yL6ObEUMHCVA=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:55:1b:80:d0:cd:ba:a8:f6:83:47:67:ba:22:17:7a:63:4c:07:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Oct 19 23:26:46 2025 GMT Not After : Oct 23 01:14:46 2025 GMT Subject: CN=D37E1E75F9D5B1171A23F00C164F7B794A25DFC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:87:c7:00:59:66:ab:d1:67:4a:dc:ec:48: 11:02:5b:88:26:1b:2e:03:dd:08:a3:7d:4f:73:5d: 08:e8:18:70:f7:9d:90:ee:d2:86:49:38:0a:9f:de: b5:70:70:70:3d:bf:b0:1a:49:36:44:74:7d:46:57: a5:6f:07:62:90:b4:6c:b9:82:a0:40:cf:ec:12:e2: f8:1f:e4:6a:80:87:b1:e7:06:ed:19:03:9d:fe:63: 93:2a:5f:be:d9:9d:fa:7e:ce:b4:ed:1b:b9:e8:fb: 08:27:a1:ce:63:ba:fc:c5:1c:da:e0:c9:23:b7:3c: 58:0c:e3:7d:94:44:54:d4:81:06:cd:c0:a8:dd:53: 90:51:a9:86:70:a5:82:32:e7:58:44:11:45:32:ec: 7d:7b:65:3c:07:2a:48:4b:cb:55:1a:05:5e:bb:48: a5:8a:2f:94:d4:9a:80:b6:4e:8b:99:58:30:ea:44: 88:dc:e5:84:67:07:67:ee:91:0a:cf:a0:81:59:5e: e7:b0:80:f3:13:5b:e7:fd:9c:a6:0e:6a:6b:b7:0a: 79:5a:10:10:fb:85:35:fd:91:55:a1:f9:0d:15:15: 08:8e:ab:75:23:a1:51:cb:68:e6:2f:60:32:25:8e: da:8a:38:f7:9e:ae:d2:dd:9b:b1:16:50:7a:b8:53: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7E:1E:75:F9:D5:B1:17:1A:23:F0:0C:16:4F:7B:79:4A:25:DF:C8 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f2:0a:52:9c:60:46:70:76:0f:e3:72:fe:d1:f9:d3:f7:4d: 31:d4:4e:6f:41:49:4f:95:bd:15:c7:62:a3:b4:c3:16:e9:d2: 57:97:fa:17:8b:7b:a1:c0:80:55:95:d0:94:80:ae:99:21:59: f1:1d:91:d7:f9:99:81:57:c7:10:40:da:82:63:d5:24:a9:6b: b8:37:f4:5c:52:e4:55:7d:66:da:d9:d9:bc:84:cc:e0:76:37: ba:82:7c:01:71:b0:80:73:60:03:61:ad:12:26:bf:92:a8:cc: 09:dc:51:55:26:29:1b:0f:f3:32:e9:94:64:d1:f3:de:7b:03: 3f:7e:5d:40:25:54:c9:cb:97:fc:ec:8a:f5:32:4a:22:02:1d: ff:07:fd:9a:c8:97:d8:1c:94:59:84:72:d4:98:6d:9b:14:1a: 03:91:4c:90:49:a8:ba:03:0f:a0:ca:49:21:ca:96:dc:37:8b: 1a:fd:0d:c7:f2:ac:21:e5:48:5c:6c:8d:ad:a7:10:3a:20:d0: 63:85:6f:9d:79:29:a5:66:74:0b:40:56:c0:64:72:a6:6e:f1: fb:da:9e:5b:e3:64:f0:c6:8c:7a:3f:b8:dd:88:09:0b:a3:21: db:60:6d:f9:97:26:17:13:22:49:38:f2:6f:38:3b:64:ed:86: d8:9f:0b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlUbgNDNuqj2g0dnuiIXemNMB1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTEwMTkyMzI2NDZaFw0yNTEwMjMwMTE0NDZaMDMxMTAvBgNV BAMTKEQzN0UxRTc1RjlENUIxMTcxQTIzRjAwQzE2NEY3Qjc5NEEyNURGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBYfHAFlmq9FnStzsSBECW4gm Gy4D3QijfU9zXQjoGHD3nZDu0oZJOAqf3rVwcHA9v7AaSTZEdH1GV6VvB2KQtGy5 gqBAz+wS4vgf5GqAh7HnBu0ZA53+Y5MqX77Znfp+zrTtG7no+wgnoc5juvzFHNrg ySO3PFgM432URFTUgQbNwKjdU5BRqYZwpYIy51hEEUUy7H17ZTwHKkhLy1UaBV67 SKWKL5TUmoC2TouZWDDqRIjc5YRnB2fukQrPoIFZXuewgPMTW+f9nKYOamu3Cnla EBD7hTX9kVWh+Q0VFQiOq3UjoVHLaOYvYDIljtqKOPeertLdm7EWUHq4U6L3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU034edfnVsRcaI/AMFk97eUol38gwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfyClKcYEZwdg/jcv7R+dP3TTHUTm9BSU+V vRXHYqO0wxbp0leX+heLe6HAgFWV0JSArpkhWfEdkdf5mYFXxxBA2oJj1SSpa7g3 9FxS5FV9ZtrZ2byEzOB2N7qCfAFxsIBzYANhrRImv5KozAncUVUmKRsP8zLplGTR 8957Az9+XUAlVMnLl/zsivUySiICHf8H/ZrIl9gclFmEctSYbZsUGgORTJBJqLoD D6DKSSHKltw3ixr9DcfyrCHlSFxsja2nEDog0GOFb515KaVmdAtAVsBkcqZu8fva nlvjZPDGjHo/uN2ICQujIdtgbfmXJhcTIkk48m84O2TthtifC68= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:06 2025 by rpki-client