$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: I5t4gXoefL9tRzB7VmubWNxJYEBEpLM9RuWZ4zbJI70= Subject key identifier: D6:C7:4B:A0:95:98:84:37:C2:F4:C7:10:D7:1D:43:58:63:38:8E:57 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 115D19FCE1D77BFAA5CA9DE1A823E832936F09E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 031D Signing time: Sat 19 Jul 2025 02:11:59 +0000 Manifest this update: Sat 19 Jul 2025 02:06:59 +0000 Manifest next update: Tue 22 Jul 2025 11:39:59 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: zkB5HXDUn4hIZM8BxR9vmf/Op1/JEHll9O9rPcOFDt0=) 2: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: YPeNafffbCxEDeGWTOYrUeYYiluS0g8ccyYN1CwbY9k=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: tQ4vZuhFeMHPG6Q4JsAfSDt09xj/628G92eqdEQqJxg=) 4: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: ig9zHItsviXz7i5x+pjdUC67Ojv9h5D8cZnZU6XNuFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5d:19:fc:e1:d7:7b:fa:a5:ca:9d:e1:a8:23:e8:32:93:6f:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Jul 19 02:06:59 2025 GMT Not After : Jul 22 11:39:59 2025 GMT Subject: CN=D6C74BA095988437C2F4C710D71D435863388E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:3c:d9:0e:73:f0:91:85:dd:6d:ab:6d:14: 10:a2:7e:66:8a:bc:bc:a3:19:43:28:83:2c:f4:92: 52:45:ea:2a:0f:b1:6c:84:d8:9b:86:c7:97:19:ac: c5:2e:1f:21:af:64:28:00:b0:e0:fe:4f:b6:b3:e2: 1c:b8:c1:69:7d:05:0b:40:e2:ee:ec:02:89:a7:57: 5a:38:aa:ef:a6:77:d9:10:2a:7e:76:0d:86:bf:cc: 4c:59:f8:47:18:a6:f2:17:f3:37:e8:8a:87:70:49: 94:4d:15:92:ea:a9:a6:37:00:fc:39:52:48:9a:44: 84:a9:62:83:7c:a1:87:58:84:44:75:14:96:16:b3: 6c:ee:75:02:0b:47:49:da:c2:91:44:d8:28:d0:98: 5f:6f:73:bd:e6:4b:d3:d8:28:57:e2:a8:64:87:ee: f2:cb:ae:b8:d0:bd:1b:5f:8f:c0:dd:8b:9d:06:ea: 0e:78:73:ce:48:13:cf:4e:8c:76:f8:16:9e:27:d4: a9:07:19:ad:78:2e:13:e4:03:49:66:65:90:05:47: 27:a2:fa:15:aa:55:d7:e0:ff:9e:9d:9b:61:1b:22: 0a:c1:2f:08:53:81:03:17:a3:bf:95:46:18:8d:f1: 46:a4:e9:25:67:38:cc:c2:93:21:ef:ec:00:55:b0: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:4B:A0:95:98:84:37:C2:F4:C7:10:D7:1D:43:58:63:38:8E:57 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:67:6a:83:92:73:f5:b0:08:54:87:ea:ae:77:d7:24:c2:32: ec:f8:88:be:6a:32:21:e2:50:6e:b1:5e:4a:99:c4:d9:92:45: b4:86:9e:60:c1:1b:93:0b:17:d9:0e:89:d8:e3:fc:e9:c8:49: dc:68:ea:79:6e:93:6f:ae:78:c5:36:54:46:58:5d:15:aa:fd: 00:b1:b9:54:9d:db:2c:a9:39:25:32:df:18:6f:fa:a9:82:78: a7:47:b3:25:00:f6:ec:51:7d:57:c1:fa:81:05:49:65:06:ea: 7b:14:b8:ca:d2:83:c3:d1:53:e0:3b:d7:c7:b7:2a:da:ee:42: 7a:df:d9:20:c9:34:74:3c:e7:98:d0:5b:35:b5:25:71:4e:6a: 7c:b7:c4:cf:17:4a:9d:bd:09:33:8a:e5:b8:7d:e7:3b:33:7a: c1:4f:05:9f:d5:58:7b:d7:8b:fd:f1:97:13:34:88:53:5a:a2: 0b:2d:71:0a:55:66:b0:0e:b1:e0:07:4b:e0:74:0e:3d:3b:74: 45:1a:42:62:22:fa:a7:4f:5c:58:88:56:05:07:e3:e9:02:ec: 1b:a6:65:b2:4b:4d:8e:5a:e7:12:90:e0:e1:06:7d:87:90:dd: 14:2b:e8:6d:ca:31:77:32:ab:c2:a9:6d:a1:93:70:3c:82:07: 11:51:b2:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEV0Z/OHXe/qlyp3hqCPoMpNvCeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA3MTkwMjA2NTlaFw0yNTA3MjIxMTM5NTlaMDMxMTAvBgNV BAMTKEQ2Qzc0QkEwOTU5ODg0MzdDMkY0QzcxMEQ3MUQ0MzU4NjMzODhFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfjzZDnPwkYXdbattFBCifmaK vLyjGUMogyz0klJF6ioPsWyE2JuGx5cZrMUuHyGvZCgAsOD+T7az4hy4wWl9BQtA 4u7sAomnV1o4qu+md9kQKn52DYa/zExZ+EcYpvIX8zfoiodwSZRNFZLqqaY3APw5 UkiaRISpYoN8oYdYhER1FJYWs2zudQILR0nawpFE2CjQmF9vc73mS9PYKFfiqGSH 7vLLrrjQvRtfj8Ddi50G6g54c85IE89OjHb4Fp4n1KkHGa14LhPkA0lmZZAFRyei +hWqVdfg/56dm2EbIgrBLwhTgQMXo7+VRhiN8Uak6SVnOMzCkyHv7ABVsCOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sdLoJWYhDfC9McQ1x1DWGM4jlcwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhnaoOSc/WwCFSH6q531yTCMuz4iL5qMiHi UG6xXkqZxNmSRbSGnmDBG5MLF9kOidjj/OnISdxo6nluk2+ueMU2VEZYXRWq/QCx uVSd2yypOSUy3xhv+qmCeKdHsyUA9uxRfVfB+oEFSWUG6nsUuMrSg8PRU+A718e3 KtruQnrf2SDJNHQ855jQWzW1JXFOany3xM8XSp29CTOK5bh95zszesFPBZ/VWHvX i/3xlxM0iFNaogstcQpVZrAOseAHS+B0Dj07dEUaQmIi+qdPXFiIVgUH4+kC7Bum ZbJLTY5a5xKQ4OEGfYeQ3RQr6G3KMXcyq8KpbaGTcDyCBxFRssc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:15 2025 by rpki-client