$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: jFdA0AKfSYKVKmt9a1itt4IfuL/a4YG6tUdQ0Jppjag= Subject key identifier: 0D:08:01:A8:79:41:B2:AE:FC:D0:62:C3:C3:C5:CC:4B:94:59:31:87 Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 35ED067E8F80D7096CAA6732845215B6A270AFD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 04CC Signing time: Sun 29 Jun 2025 19:52:21 +0000 Manifest this update: Sun 29 Jun 2025 19:47:21 +0000 Manifest next update: Thu 03 Jul 2025 05:05:21 +0000 Files and hashes: 1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: yLWfA3MQsAjNN4dnvgGQL0yR6MGsgUxUUw1gFWYHY+k=) 2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ed:06:7e:8f:80:d7:09:6c:aa:67:32:84:52:15:b6:a2:70:af:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Jun 29 19:47:21 2025 GMT Not After : Jul 3 05:05:21 2025 GMT Subject: CN=0D0801A87941B2AEFCD062C3C3C5CC4B94593187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:0c:06:4a:d3:eb:59:39:3e:04:35:5c:70: af:f0:dd:b3:dc:f0:78:50:f2:df:53:23:13:64:98: 31:25:cd:df:a1:79:5a:f7:61:a3:8c:00:93:0f:39: c4:61:ba:c0:d4:8b:dc:49:db:c3:51:e2:1f:07:cb: fa:fc:64:27:4d:b2:2e:2f:b7:af:d5:4b:7e:f2:89: 8c:bd:9a:07:25:c4:7e:c1:b2:85:bc:76:1f:0e:fd: 0e:d9:c1:d6:8e:b4:65:9d:da:3d:a3:2e:a3:1f:c1: 6d:70:be:31:65:e0:c4:4b:8e:9a:df:c8:8a:e9:76: 88:81:61:d2:eb:ee:9c:bf:78:bb:f6:09:28:b7:a1: 1b:a0:1d:97:d6:ad:94:4b:80:91:af:91:c6:43:78: 61:f4:db:2e:c5:94:38:2e:45:de:28:e7:83:15:5a: 79:79:51:c3:52:d3:16:43:bb:06:8e:7f:e8:3f:2d: cb:4d:c3:a1:3b:66:7b:9f:c6:4f:c4:9c:cf:78:cc: 7b:ae:0e:ad:38:29:ce:7f:e3:31:3d:46:d2:79:68: f1:e0:9e:17:d6:cc:c9:8c:19:42:24:ab:a0:a1:ba: c3:03:2b:75:00:c9:20:d0:9a:b0:18:47:34:9a:71: b1:b3:4e:98:cc:ee:df:52:ae:03:1e:a3:09:63:f4: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:08:01:A8:79:41:B2:AE:FC:D0:62:C3:C3:C5:CC:4B:94:59:31:87 X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:98:3c:f3:5f:52:81:7a:6b:fd:7d:ca:6d:e7:7a:cb:79:72: fd:b7:e8:6c:99:a7:f6:a6:78:0f:3e:9e:9b:88:81:4e:f5:ff: f2:ee:a7:ff:55:84:b1:71:f0:21:6b:9d:93:09:cc:6a:5f:b1: 64:cb:6b:4b:3b:21:e3:8b:b6:5a:c2:75:79:26:59:23:75:c4: e8:57:a4:7d:eb:af:d8:57:91:b0:63:5b:62:5f:5e:02:15:5d: fa:ac:d5:f6:e9:2d:ee:f9:ec:87:4e:62:07:48:24:8b:b9:1e: dd:ee:b9:b8:b5:a3:00:46:30:13:40:a8:0d:df:5c:f5:47:9e: 0a:ec:03:ac:36:c8:a2:de:28:fa:be:21:b9:9c:f1:a2:9b:4a: 38:e8:e1:15:c3:6e:a5:57:8d:ac:88:97:f7:53:42:2c:3b:62: 0c:7d:bc:2e:0d:40:af:26:b3:86:13:1f:8e:ea:e4:0c:63:09: 1f:a6:2b:41:eb:43:7b:21:04:62:91:59:da:45:6a:51:33:b6: 7b:d2:56:70:55:2e:1d:46:a3:82:05:7d:12:1e:35:6a:ba:1e: 94:29:ba:19:59:0f:af:8c:18:a2:cf:c8:a9:70:7b:44:89:a8: 1e:ba:84:94:f0:5d:73:c6:94:e4:93:6e:53:cb:ec:17:fb:ec: 24:44:69:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNe0Gfo+A1wlsqmcyhFIVtqJwr9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTA2MjkxOTQ3MjFaFw0yNTA3MDMwNTA1MjFaMDMxMTAvBgNV BAMTKDBEMDgwMUE4Nzk0MUIyQUVGQ0QwNjJDM0MzQzVDQzRCOTQ1OTMxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TQwGStPrWTk+BDVccK/w3bPc 8HhQ8t9TIxNkmDElzd+heVr3YaOMAJMPOcRhusDUi9xJ28NR4h8Hy/r8ZCdNsi4v t6/VS37yiYy9mgclxH7BsoW8dh8O/Q7ZwdaOtGWd2j2jLqMfwW1wvjFl4MRLjprf yIrpdoiBYdLr7py/eLv2CSi3oRugHZfWrZRLgJGvkcZDeGH02y7FlDguRd4o54MV Wnl5UcNS0xZDuwaOf+g/LctNw6E7Znufxk/EnM94zHuuDq04Kc5/4zE9RtJ5aPHg nhfWzMmMGUIkq6ChusMDK3UAySDQmrAYRzSacbGzTpjM7t9SrgMeowlj9J2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQgBqHlBsq780GLDw8XMS5RZMYcwHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6YPPNfUoF6a/19ym3nest5cv236GyZp/am eA8+npuIgU71//Lup/9VhLFx8CFrnZMJzGpfsWTLa0s7IeOLtlrCdXkmWSN1xOhX pH3rr9hXkbBjW2JfXgIVXfqs1fbpLe757IdOYgdIJIu5Ht3uubi1owBGMBNAqA3f XPVHngrsA6w2yKLeKPq+Ibmc8aKbSjjo4RXDbqVXjayIl/dTQiw7Ygx9vC4NQK8m s4YTH47q5AxjCR+mK0HrQ3shBGKRWdpFalEztnvSVnBVLh1Go4IFfRIeNWq6HpQp uhlZD6+MGKLPyKlwe0SJqB66hJTwXXPGlOSTblPL7Bf77CREaQI= -----END CERTIFICATE-----Generated at Tue Jul 1 09:42:21 2025 by rpki-client