$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: Et0JOdimTDjxjfq7BSfw5FnnOTOtalP4VJP/aMLxths= Subject key identifier: D2:37:7C:A8:5A:A9:56:E8:20:85:10:2C:08:8C:A0:1C:6C:E6:9B:50 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 753AB75028D67FAE868C46EF9BA660138A33E9E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01C6 Signing time: Thu 21 Aug 2025 19:50:59 +0000 Manifest this update: Thu 21 Aug 2025 19:45:59 +0000 Manifest next update: Mon 25 Aug 2025 04:59:59 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: uzSwhzrOlegXuYtdxdAJPRUDwbVEYlf8J4N+4BLO5B0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3a:b7:50:28:d6:7f:ae:86:8c:46:ef:9b:a6:60:13:8a:33:e9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Aug 21 19:45:59 2025 GMT Not After : Aug 25 04:59:59 2025 GMT Subject: CN=D2377CA85AA956E82085102C088CA01C6CE69B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:4b:5d:0d:74:5c:f6:a7:9c:da:e7:9c:c4: 3e:aa:19:83:20:c3:83:4d:0c:37:1c:68:a6:87:17: 5b:e9:15:d1:0d:c5:85:4d:db:78:c8:92:9f:b8:ad: 6d:3e:d7:a9:22:5a:df:a7:37:32:c0:1a:78:c3:30: 2e:c4:0f:1a:2a:ca:a4:79:60:0f:08:8a:d9:3a:c4: 14:4e:3a:9d:cc:e2:75:52:3d:f2:c0:90:93:29:fd: b9:34:0a:93:63:c7:f8:4c:17:34:6f:5e:2f:2b:29: ae:1f:a2:09:da:6a:00:a1:ef:c4:77:99:46:d5:24: 5d:c1:f6:df:98:4c:1b:bb:24:44:e8:9f:cf:f1:4b: d6:a4:18:7d:c5:09:d8:a9:bc:b2:d3:ac:d4:fc:a6: 5c:18:9a:c8:9b:91:52:b4:4f:19:41:38:56:04:db: 2c:a3:82:d5:9a:f7:14:80:1b:03:63:dc:0b:e3:dd: ad:dc:51:fc:38:24:09:91:d3:77:9f:06:4a:6b:ad: 61:45:77:4a:b9:8e:a4:bf:67:71:ce:45:c6:e7:45: e2:97:f0:71:05:73:d0:f4:d7:91:86:45:3f:01:d5: da:39:9d:2e:70:66:f7:88:07:fb:f3:e2:a4:cd:ec: 92:19:50:ca:91:45:80:ca:22:d8:9d:93:26:4e:86: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:37:7C:A8:5A:A9:56:E8:20:85:10:2C:08:8C:A0:1C:6C:E6:9B:50 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:62:63:ec:c0:01:18:25:2e:4f:5e:c4:b3:c3:72:98:3e:04: 3d:fb:ff:e7:18:31:ed:64:fd:44:8c:e2:9a:71:21:77:54:b8: 0c:03:c4:3b:cb:e7:e4:81:68:1a:7e:2d:01:df:5e:7d:48:31: f3:06:50:db:ed:30:55:d3:f8:b2:1e:66:7f:f6:80:2e:b3:55: a1:0f:ee:2e:66:2a:fd:24:8e:ee:2f:57:35:e0:d1:be:a0:6c: cf:6a:4f:b8:8c:42:1b:21:6f:60:31:5c:ac:21:96:5c:6e:84: 14:81:d7:43:cc:ef:ec:56:66:92:01:4d:a6:ba:80:ce:db:b1: d0:8e:61:09:13:9b:31:1b:82:94:24:b6:dd:ec:8c:f5:74:5b: 47:59:f6:61:42:7e:11:65:25:3c:23:e7:4a:2c:fd:aa:d0:56: 95:53:4f:82:57:81:aa:79:af:88:a1:6e:b6:66:d2:55:a8:aa: 1f:bb:6d:a6:bd:58:6f:27:11:9f:a8:05:79:4c:a7:e2:03:a7: 50:4f:61:bb:b3:e9:29:bb:ca:3c:84:ce:71:71:83:72:3a:0c: ab:5f:59:6d:87:8c:30:4d:6a:a7:a9:6b:a8:4b:e5:16:76:7a: 1a:7c:7b:62:bd:01:78:68:1d:f1:68:43:67:db:f0:d7:1e:27: c8:23:69:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdTq3UCjWf66GjEbvm6ZgE4oz6eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA4MjExOTQ1NTlaFw0yNTA4MjUwNDU5NTlaMDMxMTAvBgNV BAMTKEQyMzc3Q0E4NUFBOTU2RTgyMDg1MTAyQzA4OENBMDFDNkNFNjlCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfY0tdDXRc9qec2uecxD6qGYMg w4NNDDccaKaHF1vpFdENxYVN23jIkp+4rW0+16kiWt+nNzLAGnjDMC7EDxoqyqR5 YA8Iitk6xBROOp3M4nVSPfLAkJMp/bk0CpNjx/hMFzRvXi8rKa4fognaagCh78R3 mUbVJF3B9t+YTBu7JETon8/xS9akGH3FCdipvLLTrNT8plwYmsibkVK0TxlBOFYE 2yyjgtWa9xSAGwNj3Avj3a3cUfw4JAmR03efBkprrWFFd0q5jqS/Z3HORcbnReKX 8HEFc9D015GGRT8B1do5nS5wZveIB/vz4qTN7JIZUMqRRYDKItidkyZOhp5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jd8qFqpVugghRAsCIygHGzmm1AwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARiY+zAARglLk9exLPDcpg+BD37/+cYMe1k /USM4ppxIXdUuAwDxDvL5+SBaBp+LQHfXn1IMfMGUNvtMFXT+LIeZn/2gC6zVaEP 7i5mKv0kju4vVzXg0b6gbM9qT7iMQhshb2AxXKwhllxuhBSB10PM7+xWZpIBTaa6 gM7bsdCOYQkTmzEbgpQktt3sjPV0W0dZ9mFCfhFlJTwj50os/arQVpVTT4JXgap5 r4ihbrZm0lWoqh+7baa9WG8nEZ+oBXlMp+IDp1BPYbuz6Sm7yjyEznFxg3I6DKtf WW2HjDBNaqepa6hL5RZ2ehp8e2K9AXhoHfFoQ2fb8NceJ8gjabk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:41 2025 by rpki-client