$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: mFlKVMimoBwP/0SEqFz1u0iz/HpK5hH+dby91v4iU+E= Subject key identifier: 5D:C3:7C:D6:08:B7:E5:0A:30:B7:BC:C4:F6:B7:49:D8:27:F1:63:BF Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 56A055CE9F863D0CA0C3943EA6712A9C131B5A41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: DC Signing time: Fri 24 Oct 2025 19:10:39 +0000 Manifest this update: Fri 24 Oct 2025 19:05:39 +0000 Manifest next update: Tue 28 Oct 2025 03:29:39 +0000 Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: O8Aooea131ZB2ercTHx4OUU2mP1BIb2U55wZu05jj5o=) 2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a0:55:ce:9f:86:3d:0c:a0:c3:94:3e:a6:71:2a:9c:13:1b:5a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Oct 24 19:05:39 2025 GMT Not After : Oct 28 03:29:39 2025 GMT Subject: CN=5DC37CD608B7E50A30B7BCC4F6B749D827F163BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:01:09:67:25:2f:d8:4c:3c:4a:26:3b:b4: c1:f0:a9:1b:5f:95:4c:9f:f7:26:c3:ff:ca:b9:ad: d4:e5:03:62:79:f4:dc:87:2e:9b:bf:15:4c:0b:19: 5b:18:c7:cb:42:c5:61:e0:04:40:de:77:01:0c:e0: 4c:a6:56:58:40:c0:45:bf:d2:82:ac:10:02:7b:49: 19:f4:ca:2f:4f:09:18:03:49:1e:04:20:87:1d:d8: bc:ed:54:17:10:b0:ad:88:23:30:f3:50:7d:33:96: 48:4c:86:c7:95:a1:6e:2f:d6:8d:ed:62:24:0d:96: bc:4b:04:5e:f6:4d:3b:00:91:3e:6c:e0:f3:77:67: 1b:eb:a0:58:fa:f9:b6:89:8b:90:c3:89:af:6b:da: 8c:d6:3a:a3:cb:39:4d:0f:aa:c5:94:03:f1:46:14: fd:91:d5:28:9e:02:47:0e:f2:ad:f1:5c:2c:b3:a2: 3d:eb:e7:b0:cf:c9:b2:33:ac:82:cf:3d:b0:fe:af: 6d:3a:43:b6:7a:5c:74:3b:4d:03:04:d1:f5:26:85: ae:39:be:79:66:66:d6:a2:fa:56:47:30:75:02:8b: cc:3a:0b:b0:3c:e0:3e:9a:44:27:33:7e:a5:11:b4: d0:a0:21:f0:0b:b4:4c:87:cc:c3:22:2e:c5:c5:45: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:7C:D6:08:B7:E5:0A:30:B7:BC:C4:F6:B7:49:D8:27:F1:63:BF X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:d8:14:c4:da:b5:38:83:a1:3c:a7:29:7d:b7:c9:0e:c2:4b: c6:a1:11:bf:dd:31:60:44:26:c0:21:f8:f5:97:0f:65:de:6d: f1:18:bb:8f:aa:86:bb:48:12:89:02:da:22:d2:09:b6:7c:66: db:d1:90:eb:a1:8a:4b:ff:24:5e:33:78:da:64:26:1d:29:f9: a2:3a:bc:78:85:ac:42:eb:d8:b1:40:42:d2:de:ee:c6:2b:ae: a0:2a:5b:c4:5e:ac:93:07:1a:d2:5f:55:04:3c:ea:45:45:1e: 9f:b5:9d:a4:25:40:a3:d6:27:14:74:92:5a:27:ee:d4:74:4a: 99:5c:3b:ca:95:49:e2:c0:4c:c0:81:a1:1e:91:d4:8c:11:d9: 66:0a:db:30:cb:16:02:07:d8:36:1f:50:d9:bd:d7:2a:79:6c: dd:b6:4e:59:8c:91:69:5c:ae:63:b5:8a:30:fd:ad:5b:b2:22: 71:90:fa:2a:e7:41:08:7c:84:99:74:ec:e1:90:8e:e0:64:ed: 1d:e0:97:e4:6c:99:6b:6b:71:44:ae:80:e0:e4:a9:ee:03:e0: 8a:95:51:0d:ab:93:1a:4f:ec:e5:bf:d6:ea:e4:ae:81:de:93: 2f:da:b3:e2:75:85:e5:10:6a:99:12:1d:1a:fa:5e:ef:2f:01: 6c:cb:26:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqBVzp+GPQygw5Q+pnEqnBMbWkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTEwMjQxOTA1MzlaFw0yNTEwMjgwMzI5MzlaMDMxMTAvBgNV BAMTKDVEQzM3Q0Q2MDhCN0U1MEEzMEI3QkNDNEY2Qjc0OUQ4MjdGMTYzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWgEJZyUv2Ew8SiY7tMHwqRtf lUyf9ybD/8q5rdTlA2J59NyHLpu/FUwLGVsYx8tCxWHgBEDedwEM4EymVlhAwEW/ 0oKsEAJ7SRn0yi9PCRgDSR4EIIcd2LztVBcQsK2IIzDzUH0zlkhMhseVoW4v1o3t YiQNlrxLBF72TTsAkT5s4PN3ZxvroFj6+baJi5DDia9r2ozWOqPLOU0PqsWUA/FG FP2R1SieAkcO8q3xXCyzoj3r57DPybIzrILPPbD+r206Q7Z6XHQ7TQME0fUmha45 vnlmZtai+lZHMHUCi8w6C7A84D6aRCczfqURtNCgIfALtEyHzMMiLsXFRWK/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXcN81gi35Qowt7zE9rdJ2CfxY78wHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANLYFMTatTiDoTynKX23yQ7CS8ahEb/dMWBE JsAh+PWXD2XebfEYu4+qhrtIEokC2iLSCbZ8ZtvRkOuhikv/JF4zeNpkJh0p+aI6 vHiFrELr2LFAQtLe7sYrrqAqW8RerJMHGtJfVQQ86kVFHp+1naQlQKPWJxR0klon 7tR0SplcO8qVSeLATMCBoR6R1IwR2WYK2zDLFgIH2DYfUNm91yp5bN22TlmMkWlc rmO1ijD9rVuyInGQ+irnQQh8hJl07OGQjuBk7R3gl+RsmWtrcUSugODkqe4D4IqV UQ2rkxpP7OW/1urkroHeky/as+J1heUQapkSHRr6Xu8vAWzLJjU= -----END CERTIFICATE-----Generated at Sun Oct 26 00:20:13 2025 by rpki-client