$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: P2dxrKHnGNbetJwV8/FZjs0cJNItRTd+O7M7zyIiqFQ= Subject key identifier: 0A:B2:4F:80:14:FB:45:2F:D2:7B:C1:82:1D:27:48:6A:52:65:54:A4 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 18CCCCCCD34D6AD9B4F39A655BCB4AB369953C07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01AE Signing time: Sat 28 Jun 2025 01:50:52 +0000 Manifest this update: Sat 28 Jun 2025 01:45:52 +0000 Manifest next update: Tue 01 Jul 2025 03:12:52 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: cnMb78gemtXF895XQew0rheI2GSxG3UBFm55UlIa0eU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 03:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cc:cc:cc:d3:4d:6a:d9:b4:f3:9a:65:5b:cb:4a:b3:69:95:3c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Jun 28 01:45:52 2025 GMT Not After : Jul 1 03:12:52 2025 GMT Subject: CN=0AB24F8014FB452FD27BC1821D27486A526554A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:83:63:ef:bd:55:42:3c:f6:6e:50:0c:c3: d5:c7:d8:ea:5b:49:1f:d6:3d:ee:f2:a6:0f:ef:c8: 38:2a:c1:ce:69:71:5c:44:2f:ab:5a:d4:20:23:6a: b5:27:81:89:b5:b0:98:b2:6c:40:4a:65:54:d2:d0: 58:cf:32:76:4b:dd:c3:68:7a:ac:8c:2b:37:ba:0d: 6f:7e:08:7b:ec:29:5a:77:f7:3f:95:1a:4a:3f:e8: ee:44:71:89:c9:87:ef:02:f8:7a:71:f3:e7:97:ce: 63:dd:76:48:08:d6:87:e4:25:80:2d:3e:88:f2:e1: de:5b:9e:e8:36:38:25:ec:47:d2:22:62:60:e4:98: 5f:1e:b3:da:c6:8e:6e:c0:5c:b8:b0:f7:13:35:3f: 87:85:89:1d:3a:e4:67:a2:f9:15:72:25:ef:69:b8: 12:1b:18:a4:f1:a3:95:61:15:3e:9c:98:0f:46:3f: 95:29:96:ea:b4:40:36:f8:3f:7a:78:9a:a4:27:2d: ed:8c:39:4d:5c:5a:bf:9e:b5:5b:80:1f:dd:d8:1a: 79:13:bd:34:57:21:9e:36:a9:eb:25:7e:e6:29:9b: 3c:cc:24:fd:bc:f3:9f:3e:b2:9d:96:67:59:88:b3: ca:ef:67:8e:74:60:70:66:5e:3f:0d:b5:af:7d:f6: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:4F:80:14:FB:45:2F:D2:7B:C1:82:1D:27:48:6A:52:65:54:A4 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7e:90:88:ca:cd:73:dd:f6:e1:37:20:0f:37:23:47:92:fd: c5:6d:d4:fe:b0:c7:25:93:90:f1:f7:ee:86:88:3e:35:8b:69: 49:5f:07:f0:4b:0b:06:6b:89:62:3d:11:dc:1b:38:51:bc:a2: dd:2c:f1:50:d3:7f:93:f4:e4:5c:60:6a:b5:7a:9f:9a:db:ad: b8:f0:2d:82:69:9e:22:7d:b1:03:90:8e:9d:79:b9:d0:53:c6: 49:c6:80:b4:76:19:0e:06:74:a7:22:26:d5:8a:2d:05:e4:65: 8f:da:02:af:27:c3:f8:41:92:43:a0:c4:8e:30:b9:f7:10:32: 6b:b6:d5:a3:d8:71:fb:99:46:af:09:b4:d4:21:8e:7e:22:91: 5f:73:27:54:53:f6:21:46:fa:23:13:fa:95:9a:f9:d0:39:0d: 81:6c:26:1f:6b:05:15:49:dd:4a:00:b1:77:eb:c7:89:86:95: e4:be:1a:a8:bf:ec:ab:2e:0e:61:93:fa:02:8f:14:08:11:06: 62:7b:2d:10:3d:05:43:8e:47:a8:d9:d8:1f:cc:52:ec:0f:d4: 7c:8c:01:01:e6:81:7d:ce:4f:91:7a:41:94:35:5d:eb:c0:8f: 57:91:c9:eb:e6:33:52:1a:17:46:31:a9:a1:38:bd:9a:f1:24: 60:2a:e3:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMzMzNNNatm085plW8tKs2mVPAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA2MjgwMTQ1NTJaFw0yNTA3MDEwMzEyNTJaMDMxMTAvBgNV BAMTKDBBQjI0RjgwMTRGQjQ1MkZEMjdCQzE4MjFEMjc0ODZBNTI2NTU0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/INj771VQjz2blAMw9XH2Opb SR/WPe7ypg/vyDgqwc5pcVxEL6ta1CAjarUngYm1sJiybEBKZVTS0FjPMnZL3cNo eqyMKze6DW9+CHvsKVp39z+VGko/6O5EcYnJh+8C+Hpx8+eXzmPddkgI1ofkJYAt Pojy4d5bnug2OCXsR9IiYmDkmF8es9rGjm7AXLiw9xM1P4eFiR065Gei+RVyJe9p uBIbGKTxo5VhFT6cmA9GP5Upluq0QDb4P3p4mqQnLe2MOU1cWr+etVuAH93YGnkT vTRXIZ42qeslfuYpmzzMJP28858+sp2WZ1mIs8rvZ450YHBmXj8Nta999rZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCrJPgBT7RS/Se8GCHSdIalJlVKQwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1+kIjKzXPd9uE3IA83I0eS/cVt1P6wxyWT kPH37oaIPjWLaUlfB/BLCwZriWI9EdwbOFG8ot0s8VDTf5P05FxgarV6n5rbrbjw LYJpniJ9sQOQjp15udBTxknGgLR2GQ4GdKciJtWKLQXkZY/aAq8nw/hBkkOgxI4w ufcQMmu21aPYcfuZRq8JtNQhjn4ikV9zJ1RT9iFG+iMT+pWa+dA5DYFsJh9rBRVJ 3UoAsXfrx4mGleS+Gqi/7KsuDmGT+gKPFAgRBmJ7LRA9BUOOR6jZ2B/MUuwP1HyM AQHmgX3OT5F6QZQ1XevAj1eRyevmM1IaF0YxqaE4vZrxJGAq418= -----END CERTIFICATE-----Generated at Mon Jun 30 01:09:28 2025 by rpki-client