$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: XMzvUjNpriXN/wfVAdxqUG58sRRV+sq5a0onRP97dpg= Subject key identifier: 92:E0:5C:AC:F0:30:B1:CE:F7:EC:56:47:8E:02:CD:D8:74:B7:BF:8B Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 611A3B450DC6DD91EE598CF2C2609F938E741730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 04B5 Signing time: Fri 09 May 2025 12:32:12 +0000 Manifest this update: Fri 09 May 2025 12:27:12 +0000 Manifest next update: Mon 12 May 2025 16:46:12 +0000 Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=) 2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: E07kuZx77uCdJtZuGhAI4UvkvQT5MP3xOyo4c7XyGz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1a:3b:45:0d:c6:dd:91:ee:59:8c:f2:c2:60:9f:93:8e:74:17:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: May 9 12:27:12 2025 GMT Not After : May 12 16:46:12 2025 GMT Subject: CN=92E05CACF030B1CEF7EC56478E02CDD874B7BF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:88:f5:f5:7d:20:b3:da:57:ae:8e:25:7c: 70:0f:0b:d8:f3:3b:5e:96:1d:93:e6:58:a9:f5:55: dd:8f:a6:cd:e3:ea:80:5a:b2:7f:fa:43:24:fa:ee: 9a:94:24:0d:18:2a:3d:19:ed:42:3d:3f:1d:91:87: 79:3a:6c:ca:03:29:88:a5:77:72:48:2a:44:0d:1a: 99:6d:0c:92:d9:0d:e0:a2:7b:47:78:8f:78:8f:15: 26:08:01:0c:7f:ed:31:21:51:89:86:4c:cc:87:8e: 7f:44:a9:c9:f5:18:96:87:42:61:6e:6e:0c:83:ad: fa:e5:83:96:16:7f:4e:0f:52:7a:8a:8f:7c:b9:25: e8:7c:09:f5:43:32:05:9b:ab:3c:af:2a:d5:4e:88: d1:10:cf:2e:37:d2:19:56:27:3d:0b:00:da:a6:92: 3c:b6:30:61:91:3a:bc:23:cb:1e:b1:31:d9:f0:9a: e0:a2:da:6d:4b:54:1d:b3:75:41:50:bd:dd:93:2c: 57:bf:f0:cf:d8:fe:a9:4f:23:20:2c:32:ba:4a:63: b1:f6:70:7a:31:4d:8e:4e:6b:ae:17:f9:4c:75:93: ab:c9:a3:08:e8:8a:23:cf:f0:0e:81:17:47:ee:8f: 14:1b:9a:9b:af:b1:9b:d0:2b:60:1a:c9:bc:28:2f: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:5C:AC:F0:30:B1:CE:F7:EC:56:47:8E:02:CD:D8:74:B7:BF:8B X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:04:b2:32:8f:0e:2d:72:b4:1b:1f:08:2f:65:cf:b0:e7:82: bd:ca:dc:4d:0d:5c:2e:03:f3:2a:62:9f:c9:a8:08:c2:71:4c: 99:1b:28:d0:96:a7:6b:e6:04:43:50:8e:97:36:03:4b:c9:aa: 27:2c:71:57:19:37:47:16:3e:96:a6:10:55:d5:f1:bc:ae:35: e7:9b:45:98:1f:d4:06:67:5a:15:a6:60:97:ab:30:3d:e8:3e: 73:51:1d:16:e3:35:73:06:ab:18:67:24:c6:8b:80:8c:46:c3: 88:66:eb:cc:86:8c:ae:ff:1e:1f:35:e9:d2:2c:08:c2:9d:74: 5c:e4:bd:8a:4b:80:78:0f:22:2b:fb:48:55:d8:e6:72:94:5f: 81:f5:95:bf:33:27:45:3d:29:38:dc:94:97:a2:bf:c5:eb:32: c0:e2:74:ec:0c:07:11:72:16:46:01:6e:e4:fc:83:5e:67:d8: 4d:e9:7a:00:e5:d9:dc:0a:fc:cd:50:af:93:5a:2b:ce:f7:ac: 9e:4c:37:7c:5d:78:7c:17:23:f4:72:fb:f1:8b:19:ce:e0:3c: 9c:e6:8d:16:e6:40:93:3e:e2:03:68:f1:96:ae:56:df:b7:33: 2a:c3:49:c9:5a:a3:ce:69:c8:d7:0a:0f:9b:b0:59:c7:f3:21: 3c:46:83:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRo7RQ3G3ZHuWYzywmCfk450FzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTA1MDkxMjI3MTJaFw0yNTA1MTIxNjQ2MTJaMDMxMTAvBgNV BAMTKDkyRTA1Q0FDRjAzMEIxQ0VGN0VDNTY0NzhFMDJDREQ4NzRCN0JGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UYj19X0gs9pXro4lfHAPC9jz O16WHZPmWKn1Vd2Pps3j6oBasn/6QyT67pqUJA0YKj0Z7UI9Px2Rh3k6bMoDKYil d3JIKkQNGpltDJLZDeCie0d4j3iPFSYIAQx/7TEhUYmGTMyHjn9Eqcn1GJaHQmFu bgyDrfrlg5YWf04PUnqKj3y5Jeh8CfVDMgWbqzyvKtVOiNEQzy430hlWJz0LANqm kjy2MGGROrwjyx6xMdnwmuCi2m1LVB2zdUFQvd2TLFe/8M/Y/qlPIyAsMrpKY7H2 cHoxTY5Oa64X+Ux1k6vJowjoiiPP8A6BF0fujxQbmpuvsZvQK2AaybwoL1xVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkuBcrPAwsc737FZHjgLN2HS3v4swHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAEsjKPDi1ytBsfCC9lz7Dngr3K3E0NXC4D 8ypin8moCMJxTJkbKNCWp2vmBENQjpc2A0vJqicscVcZN0cWPpamEFXV8byuNeeb RZgf1AZnWhWmYJerMD3oPnNRHRbjNXMGqxhnJMaLgIxGw4hm68yGjK7/Hh816dIs CMKddFzkvYpLgHgPIiv7SFXY5nKUX4H1lb8zJ0U9KTjclJeiv8XrMsDidOwMBxFy FkYBbuT8g15n2E3pegDl2dwK/M1Qr5NaK873rJ5MN3xdeHwXI/Ry+/GLGc7gPJzm jRbmQJM+4gNo8ZauVt+3MyrDSclao85pyNcKD5uwWcfzITxGgzM= -----END CERTIFICATE-----Generated at Sun May 11 11:46:30 2025 by rpki-client