$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft File: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json) Hash identifier: 3eO921utE5uuKpdov0lZSAqWl8RLk9HMvAEWB+MNkrY= Subject key identifier: 83:64:61:7E:FC:FC:91:47:46:30:DA:A3:A5:A6:3F:A4:A5:8F:68:9B Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 65CD30F6E4E697C91580DA0B08412F1A7B597798 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft Manifest number: 01E3 Signing time: Sun 20 Jul 2025 08:12:03 +0000 Manifest this update: Sun 20 Jul 2025 08:07:03 +0000 Manifest next update: Wed 23 Jul 2025 13:33:03 +0000 Files and hashes: 1: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: bpY+9IBkmhJOx5EMXPU2f8Wa6x6KmncYGOAfLnDNfvU=) 2: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: fMitGvSIMZKR/xojJDzG2iWApTg4bDt/1kqJnOfFiTo=) 3: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: kjCPg8CNqMlAMRebUqHb4gpHFMec5lXxDxlOd53bN+M=) 4: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: SLcrpmMGhS+iLPHlXSc6GQF6hzriCb0znzXu+cnHQhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cd:30:f6:e4:e6:97:c9:15:80:da:0b:08:41:2f:1a:7b:59:77:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: Jul 20 08:07:03 2025 GMT Not After : Jul 23 13:33:03 2025 GMT Subject: CN=8364617EFCFC91474630DAA3A5A63FA4A58F689B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:b4:bc:83:ac:76:ae:fa:3e:1a:35:4e:e4: 33:f7:36:ce:5b:ac:2f:cd:42:f4:7f:fc:6f:07:49: 27:80:65:23:91:4f:36:4b:e8:00:e9:c9:b0:a3:c2: 82:cd:27:4c:25:59:dd:c4:10:0a:3f:5c:89:66:79: e2:ac:1a:e8:23:12:8b:d9:eb:74:b0:b5:13:99:4f: 82:49:56:5d:30:fd:28:23:d2:2b:20:27:00:03:77: c4:9e:d8:58:4c:f5:28:90:fb:d4:88:3d:3a:0c:7e: 15:4b:bf:6f:82:42:89:74:b5:5a:4e:b5:99:cd:7d: 95:c8:df:c6:e9:d2:b2:1b:cd:76:1d:22:85:b0:e3: 52:86:4c:0b:14:33:24:53:5f:93:33:05:e2:b2:76: 01:cc:25:05:e3:cb:80:46:73:7b:78:26:bc:c9:a4: 2f:77:c3:6b:b3:f3:ee:a7:d7:1a:c1:ff:01:7d:82: 49:6c:73:5d:f6:93:1d:d9:df:d2:85:86:2f:1d:05: 3e:df:8c:84:61:67:06:67:39:f6:1f:34:77:b6:15: 57:fc:25:32:d8:65:d6:23:e3:0e:bb:01:b8:d8:44: c8:d0:15:2f:f5:bf:08:6c:dc:1e:fc:0e:e9:56:8f: 32:56:d0:5f:6c:46:f0:47:f5:99:f2:b3:52:ac:b7: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:61:7E:FC:FC:91:47:46:30:DA:A3:A5:A6:3F:A4:A5:8F:68:9B X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:b9:f9:5b:55:c3:17:2a:e3:70:00:0a:2f:06:c2:68:26: e9:8e:e5:c7:26:cb:5c:39:56:92:68:e1:1c:09:8c:0d:78:33: 73:8c:c3:cc:1c:dd:b9:3b:1a:a8:a4:75:01:07:fa:61:ac:78: b0:f0:bc:13:a2:4f:09:ee:97:b5:7c:5b:f0:fb:de:6f:ad:1b: e9:0a:3f:fa:e5:57:5a:cd:e4:62:61:5c:79:a6:63:59:0b:fd: 27:87:51:eb:1b:25:74:5c:2a:81:91:17:e5:1f:50:50:ae:9d: cc:0a:b8:cf:41:33:ba:41:90:0a:af:a2:39:d7:4b:00:16:ec: 0e:a8:32:69:c0:12:85:02:9f:d8:a0:0d:05:a6:db:6a:24:07: cd:eb:c0:de:67:86:f9:50:8e:7a:93:0b:97:b8:13:44:c3:13: c1:85:7c:54:c5:09:8c:a8:6a:a6:db:71:08:0a:eb:ef:00:6f: d1:0c:81:e3:b8:c3:f7:90:4f:48:8a:c0:0d:42:21:47:68:f9: 97:10:6e:6d:d1:c1:80:29:59:c7:c6:e0:26:fd:79:85:a6:df: 05:a5:ae:37:69:7b:ae:d3:28:8b:65:d2:9d:5b:ee:12:a6:78: 35:30:ad:bb:46:3f:17:63:b7:64:59:ed:6a:36:31:c0:20:3a: d9:80:c2:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZc0w9uTml8kVgNoLCEEvGntZd5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNTA3MjAwODA3MDNaFw0yNTA3MjMxMzMzMDNaMDMxMTAvBgNV BAMTKDgzNjQ2MTdFRkNGQzkxNDc0NjMwREFBM0E1QTYzRkE0QTU4RjY4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI97S8g6x2rvo+GjVO5DP3Ns5b rC/NQvR//G8HSSeAZSORTzZL6ADpybCjwoLNJ0wlWd3EEAo/XIlmeeKsGugjEovZ 63SwtROZT4JJVl0w/Sgj0isgJwADd8Se2FhM9SiQ+9SIPToMfhVLv2+CQol0tVpO tZnNfZXI38bp0rIbzXYdIoWw41KGTAsUMyRTX5MzBeKydgHMJQXjy4BGc3t4JrzJ pC93w2uz8+6n1xrB/wF9gklsc132kx3Z39KFhi8dBT7fjIRhZwZnOfYfNHe2FVf8 JTLYZdYj4w67AbjYRMjQFS/1vwhs3B78DulWjzJW0F9sRvBH9Znys1Kst2XrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg2Rhfvz8kUdGMNqjpaY/pKWPaJswHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4 MEE5ODI1NERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/zuflbVcMXKuNwAAovBsJoJumO5ccmy1w5 VpJo4RwJjA14M3OMw8wc3bk7GqikdQEH+mGseLDwvBOiTwnul7V8W/D73m+tG+kK P/rlV1rN5GJhXHmmY1kL/SeHUesbJXRcKoGRF+UfUFCuncwKuM9BM7pBkAqvojnX SwAW7A6oMmnAEoUCn9igDQWm22okB83rwN5nhvlQjnqTC5e4E0TDE8GFfFTFCYyo aqbbcQgK6+8Ab9EMgeO4w/eQT0iKwA1CIUdo+ZcQbm3RwYApWcfG4Cb9eYWm3wWl rjdpe67TKItl0p1b7hKmeDUwrbtGPxdjt2RZ7Wo2McAgOtmAwkQ= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:43 2025 by rpki-client