$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: icK1QGg8RFUFphM7zPLHnGpG0UU+yDvYA3E52rRM7ew= Subject key identifier: 22:62:D0:C7:33:C8:E9:D1:25:5E:4D:15:04:4B:2B:41:A5:D4:28:71 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 35C9A39D47F87B0E9BD00E9A9EFE97C531E0254B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 0385 Signing time: Fri 22 Aug 2025 11:41:43 +0000 Manifest this update: Fri 22 Aug 2025 11:36:43 +0000 Manifest next update: Mon 25 Aug 2025 12:05:43 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: PxCC6f/foEDyV/g5C+4bD1xZ3TXHENw0f3Gt1ipKLPI=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c9:a3:9d:47:f8:7b:0e:9b:d0:0e:9a:9e:fe:97:c5:31:e0:25:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Aug 22 11:36:43 2025 GMT Not After : Aug 25 12:05:43 2025 GMT Subject: CN=2262D0C733C8E9D1255E4D15044B2B41A5D42871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:78:ee:4e:7b:c8:d8:ec:04:95:6f:e3:9d: 66:fc:5c:6c:a8:02:60:be:fa:96:45:d1:67:4d:e4: 67:7b:8f:a3:49:e3:4c:c0:a3:85:a7:f1:a2:96:37: a8:6e:e4:a5:ea:ca:fc:40:08:0e:25:de:fa:5c:1e: cf:fb:05:46:21:1f:45:1c:9c:c8:a5:d5:0e:82:2e: ba:3d:f5:47:84:3c:08:ce:c0:f4:79:7f:da:d9:1c: 5d:a8:0e:df:75:12:52:b6:2e:95:2e:7c:5c:f1:f6: 3d:a3:b0:ac:60:bc:7d:3a:a3:d6:ba:2d:08:b9:44: b0:e7:97:4e:d8:39:66:a0:d5:c0:79:c0:18:c9:2f: a8:11:2c:15:c3:5a:5b:80:cc:82:cf:c7:43:b9:dc: ac:03:77:bd:ce:ca:ce:2b:97:a6:0a:a1:4d:31:24: ba:c4:9d:4c:a1:cf:fd:29:13:b7:7b:4c:51:0c:43: 03:61:3a:23:e9:a1:50:48:f5:af:f7:45:0a:67:42: ab:b2:d2:aa:a8:89:bc:f4:83:b2:c9:f3:53:2c:d7: db:6e:58:66:7a:43:bc:4c:de:37:7e:aa:60:24:18: 66:34:d4:1d:76:23:ee:dc:7d:77:75:65:87:5b:69: 21:0a:df:be:84:11:1a:bc:d2:f1:bd:e5:93:52:ac: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:62:D0:C7:33:C8:E9:D1:25:5E:4D:15:04:4B:2B:41:A5:D4:28:71 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:47:27:63:44:21:f3:64:24:ba:b7:2a:fe:f5:9d:ec:87:32: 9a:09:3d:64:c9:7a:ef:af:71:81:b2:17:80:65:d6:f3:51:c6: 4c:42:40:2d:84:19:46:76:0e:c0:a8:67:d0:ef:5c:dc:a3:91: 46:63:dc:53:ab:a3:1d:bf:58:1b:81:4a:3f:cf:bf:ca:5d:bd: e7:6f:71:28:d5:a4:f6:2b:77:af:01:8e:89:cb:f0:cb:1f:58: 84:2e:a3:2c:f7:13:2a:4d:bf:a8:87:e8:6b:59:00:f7:8b:17: 25:fb:cc:5c:f2:1e:62:9f:fd:5d:8e:02:09:2e:aa:99:96:79: 72:27:63:d1:8b:02:c7:ee:57:ad:f6:04:3f:53:99:de:2e:43: 0b:88:96:fb:3e:90:c0:7c:7b:69:5f:28:0a:4b:d3:32:99:4f: 23:0c:92:41:77:83:9c:ef:21:82:0d:d0:1a:37:af:ee:8a:29: 57:59:d1:f4:39:35:70:29:05:f5:de:4f:27:28:e5:7f:0a:88: 75:2b:43:21:6e:5a:b9:47:b0:89:44:b5:bd:a8:e2:db:bd:69: b0:80:a4:d9:7b:8a:76:c1:ee:58:21:15:2e:ac:2a:1d:41:0f: 52:3a:4c:9b:6a:ae:92:c5:8f:08:70:e4:17:17:52:a9:1e:ba: f0:f3:e6:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcmjnUf4ew6b0A6anv6XxTHgJUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTA4MjIxMTM2NDNaFw0yNTA4MjUxMjA1NDNaMDMxMTAvBgNV BAMTKDIyNjJEMEM3MzNDOEU5RDEyNTVFNEQxNTA0NEIyQjQxQTVENDI4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82XjuTnvI2OwElW/jnWb8XGyo AmC++pZF0WdN5Gd7j6NJ40zAo4Wn8aKWN6hu5KXqyvxACA4l3vpcHs/7BUYhH0Uc nMil1Q6CLro99UeEPAjOwPR5f9rZHF2oDt91ElK2LpUufFzx9j2jsKxgvH06o9a6 LQi5RLDnl07YOWag1cB5wBjJL6gRLBXDWluAzILPx0O53KwDd73Oys4rl6YKoU0x JLrEnUyhz/0pE7d7TFEMQwNhOiPpoVBI9a/3RQpnQquy0qqoibz0g7LJ81Ms19tu WGZ6Q7xM3jd+qmAkGGY01B12I+7cfXd1ZYdbaSEK376EERq80vG95ZNSrAgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUImLQxzPI6dElXk0VBEsrQaXUKHEwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBHJ2NEIfNkJLq3Kv71neyHMpoJPWTJeu+v cYGyF4Bl1vNRxkxCQC2EGUZ2DsCoZ9DvXNyjkUZj3FOrox2/WBuBSj/Pv8pdvedv cSjVpPYrd68BjonL8MsfWIQuoyz3EypNv6iH6GtZAPeLFyX7zFzyHmKf/V2OAgku qpmWeXInY9GLAsfuV632BD9Tmd4uQwuIlvs+kMB8e2lfKApL0zKZTyMMkkF3g5zv IYIN0Bo3r+6KKVdZ0fQ5NXApBfXeTyco5X8KiHUrQyFuWrlHsIlEtb2o4tu9abCA pNl7inbB7lghFS6sKh1BD1I6TJtqrpLFjwhw5BcXUqkeuvDz5uc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:19 2025 by rpki-client