$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: LtfQkPt36BtrkvEQnV8LvYrPauu0NfRfjU/tplI/OtA= Subject key identifier: DE:B1:49:0A:77:93:67:32:79:B9:63:BE:15:90:A8:B8:55:E5:06:E2 Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 356CB2542701FA2681819F61CB8EEC59D6CC4A18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 04E3 Signing time: Thu 21 Aug 2025 17:02:17 +0000 Manifest this update: Thu 21 Aug 2025 16:57:17 +0000 Manifest next update: Sun 24 Aug 2025 23:01:17 +0000 Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=) 2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: eAw9ubM/l3pCKISsgjv3lTtEjRSRshsng3YPlI+T4BA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6c:b2:54:27:01:fa:26:81:81:9f:61:cb:8e:ec:59:d6:cc:4a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Aug 21 16:57:17 2025 GMT Not After : Aug 24 23:01:17 2025 GMT Subject: CN=DEB1490A7793673279B963BE1590A8B855E506E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:67:d4:09:24:3b:5a:c4:4f:86:77:1b:13: 32:d9:94:b3:51:b1:34:05:5d:ee:99:ae:eb:af:7a: 54:cc:10:db:6c:7a:56:3f:03:e3:9a:95:e4:21:32: 89:21:c3:4f:e1:84:4d:04:3a:06:58:81:85:cd:c1: cd:9a:7e:82:c8:98:8c:d7:a7:5d:0c:06:e0:db:75: 50:61:38:6d:3e:91:b8:1b:a6:23:95:11:88:34:02: 64:97:5b:28:a2:bf:8d:08:79:d0:4e:3f:cc:fe:8a: 2a:d5:c3:6e:67:c5:46:82:19:b6:29:29:7a:f7:ac: 8b:03:91:e5:1e:81:c4:25:d5:ef:3e:32:e4:6e:1d: c2:21:7f:02:64:2a:9f:10:26:73:3a:36:1d:4c:fb: 82:03:a2:98:76:ac:52:0a:58:3c:30:03:2e:55:b2: 9c:30:97:dd:5c:78:1b:51:68:30:4d:81:ab:a1:9d: a8:37:4a:d5:1c:c9:01:33:33:a7:a9:41:ad:5d:0c: cf:8d:fd:3f:a3:84:1c:8f:49:9a:c7:63:a5:71:9d: 22:ce:aa:da:39:9e:71:a4:08:a0:31:86:90:18:d5: a6:57:2f:d7:7b:30:bb:90:10:e5:df:35:60:61:18: ea:d8:13:e4:f3:a1:6a:f9:22:34:10:b7:52:c2:55: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:49:0A:77:93:67:32:79:B9:63:BE:15:90:A8:B8:55:E5:06:E2 X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:62:5e:a2:d9:6d:96:98:cd:01:d7:c7:80:11:a1:91:ad:74: f6:e0:25:fc:29:22:34:57:a7:73:74:d9:69:b4:53:cd:71:44: 08:83:1b:30:44:6c:f4:9f:42:0c:23:43:18:a0:71:24:6b:60: c2:a4:c4:86:9c:21:6d:64:64:da:33:22:f8:1f:2d:9f:5c:bf: 25:8c:38:a7:1a:4d:a5:b6:5f:4c:f1:a3:3d:e9:fa:24:e0:8c: f9:c4:06:f4:66:7b:20:55:53:b3:d2:1c:42:f9:7f:30:1d:37: 09:3e:26:dd:61:a8:2a:12:2a:71:2f:3e:7b:e4:20:27:07:0b: 6a:48:6a:27:df:98:77:7f:16:4a:d8:bc:84:7f:81:87:ac:4c: 8e:46:b9:e8:bd:72:80:25:9a:2e:78:08:d5:d5:7d:fc:e0:0d: 66:e1:5a:09:94:f9:42:6d:87:52:66:7f:f9:a8:f1:3f:26:fb: b3:19:a0:ea:eb:9b:34:fc:41:58:d9:25:d8:04:c3:15:1c:d7: ec:e0:7a:f9:58:d5:2e:ee:2a:94:0b:3c:dc:1d:93:12:a0:e2: 97:c0:ee:72:2f:c0:0f:5d:8f:de:f4:b8:0a:d8:9a:bb:38:67: c5:b8:d6:e7:c5:64:a8:26:64:6a:79:d2:b7:57:03:e8:b7:11: 26:6b:c5:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWyyVCcB+iaBgZ9hy47sWdbMShgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTA4MjExNjU3MTdaFw0yNTA4MjQyMzAxMTdaMDMxMTAvBgNV BAMTKERFQjE0OTBBNzc5MzY3MzI3OUI5NjNCRTE1OTBBOEI4NTVFNTA2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5mfUCSQ7WsRPhncbEzLZlLNR sTQFXe6ZruuvelTMENtselY/A+OaleQhMokhw0/hhE0EOgZYgYXNwc2afoLImIzX p10MBuDbdVBhOG0+kbgbpiOVEYg0AmSXWyiiv40IedBOP8z+iirVw25nxUaCGbYp KXr3rIsDkeUegcQl1e8+MuRuHcIhfwJkKp8QJnM6Nh1M+4IDoph2rFIKWDwwAy5V spwwl91ceBtRaDBNgauhnag3StUcyQEzM6epQa1dDM+N/T+jhByPSZrHY6VxnSLO qto5nnGkCKAxhpAY1aZXL9d7MLuQEOXfNWBhGOrYE+TzoWr5IjQQt1LCVfSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rFJCneTZzJ5uWO+FZCouFXlBuIwHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBiXqLZbZaYzQHXx4ARoZGtdPbgJfwpIjRX p3N02Wm0U81xRAiDGzBEbPSfQgwjQxigcSRrYMKkxIacIW1kZNozIvgfLZ9cvyWM OKcaTaW2X0zxoz3p+iTgjPnEBvRmeyBVU7PSHEL5fzAdNwk+Jt1hqCoSKnEvPnvk ICcHC2pIaiffmHd/FkrYvIR/gYesTI5Guei9coAlmi54CNXVffzgDWbhWgmU+UJt h1Jmf/mo8T8m+7MZoOrrmzT8QVjZJdgEwxUc1+zgevlY1S7uKpQLPNwdkxKg4pfA 7nIvwA9dj970uArYmrs4Z8W41ufFZKgmZGp50rdXA+i3ESZrxaA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:16 2025 by rpki-client