$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: bVDGZNC2FClK3yBanPYWspCLv/vgO6Ulk9GE/GKvlX4= Subject key identifier: E5:92:0A:D5:91:13:29:38:5E:F4:98:1A:D3:72:80:9F:66:DC:D7:B3 Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 5CDE06898D9629572645E9CA787508597E76A427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 011D Signing time: Sun 20 Jul 2025 19:31:56 +0000 Manifest this update: Sun 20 Jul 2025 19:26:56 +0000 Manifest next update: Thu 24 Jul 2025 02:23:56 +0000 Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: 56z54u+xHay43ruNITFTpnwbxjBWMk76HiIcFsZdZcE=) 2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: HB41gos46UfaXmzrhnmvtwk9qR4l4Rdd03RsDApZBA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:de:06:89:8d:96:29:57:26:45:e9:ca:78:75:08:59:7e:76:a4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Jul 20 19:26:56 2025 GMT Not After : Jul 24 02:23:56 2025 GMT Subject: CN=E5920AD5911329385EF4981AD372809F66DCD7B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2d:10:bd:1e:c1:4a:f1:db:65:d0:db:d3:f6: 56:9c:cf:f5:15:e9:9a:11:3f:56:81:43:e1:01:38: dc:f6:4d:0e:ed:cd:9e:dc:ae:b7:ff:c8:44:38:b6: 7d:0f:19:15:f8:4e:53:19:0e:ef:95:b5:27:4b:6d: 0e:44:c7:97:42:ff:fe:2d:7b:ff:95:a1:77:77:b8: 55:bb:07:2d:c1:d4:8a:cc:bc:2f:31:49:e5:de:d8: f3:38:ed:d5:de:d7:e5:80:95:4c:4f:50:35:61:75: e7:ee:4f:e1:e6:56:8c:24:52:bd:6c:21:8e:a6:fd: 38:13:7c:6f:58:e5:0c:3d:6d:02:c5:03:55:e6:35: 25:a6:60:66:0a:af:d1:c8:84:df:0e:43:40:92:8f: d4:18:ec:e9:6f:1e:f8:46:ad:f3:58:e9:fb:19:39: 11:15:7b:50:fd:54:ad:9a:ff:de:73:02:cc:81:40: 1c:51:a5:d9:e6:93:39:1d:1c:86:da:f0:96:02:de: 07:b8:e0:02:00:d2:40:1b:ee:7e:04:f8:d9:9e:9e: 62:94:8d:aa:73:21:42:d4:2e:fc:29:ae:8b:cf:75: 17:9b:a1:12:dc:c4:f4:e9:35:10:45:c5:f8:cf:75: c3:b2:42:61:7e:c1:0f:79:2a:62:59:54:c1:3a:d7: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:0A:D5:91:13:29:38:5E:F4:98:1A:D3:72:80:9F:66:DC:D7:B3 X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7f:1c:e7:68:71:fb:be:b6:fd:18:40:6e:6f:0e:25:32:ed: 81:18:57:3b:e0:dd:7b:f1:ac:6c:20:29:b1:66:12:6d:9a:bc: d4:73:df:33:0c:55:37:55:2c:5e:be:d7:31:69:39:a9:07:e6: ba:81:a4:f3:57:2d:45:2c:6a:d0:c3:cf:19:83:64:de:00:81: 12:4f:33:9b:e9:4f:f4:71:12:e2:1f:e8:4c:cf:6d:fd:aa:57: 40:d1:44:8b:04:78:67:c1:63:ab:1a:89:0f:ba:2e:f0:9b:45: f7:9f:ab:32:bf:93:f8:af:2b:9b:bc:ff:22:18:e7:46:30:a3: a0:61:74:8a:7c:a4:23:04:9f:79:27:2b:9e:b9:38:9e:69:8c: 44:fe:a0:59:e7:42:9c:bb:d3:7e:63:a3:76:6b:ab:85:20:48: 10:08:ac:ae:97:99:76:36:9b:f8:8c:84:9e:31:8d:4a:68:94: ee:0b:36:6d:d6:57:fd:7a:fc:da:34:5e:73:02:77:43:f7:bc: 20:8d:35:9c:b1:5a:c6:15:74:76:d4:b7:0a:8a:68:03:ae:42: 31:64:a6:2f:0e:b2:65:c5:51:18:44:1a:d8:9c:8e:ed:06:97: 3f:b6:cd:85:81:b5:4a:6c:23:27:e5:31:74:f1:aa:b0:ff:89: a0:f3:5f:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXN4GiY2WKVcmRenKeHUIWX52pCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTA3MjAxOTI2NTZaFw0yNTA3MjQwMjIzNTZaMDMxMTAvBgNV BAMTKEU1OTIwQUQ1OTExMzI5Mzg1RUY0OTgxQUQzNzI4MDlGNjZEQ0Q3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzLRC9HsFK8dtl0NvT9lacz/UV 6ZoRP1aBQ+EBONz2TQ7tzZ7crrf/yEQ4tn0PGRX4TlMZDu+VtSdLbQ5Ex5dC//4t e/+VoXd3uFW7By3B1IrMvC8xSeXe2PM47dXe1+WAlUxPUDVhdefuT+HmVowkUr1s IY6m/TgTfG9Y5Qw9bQLFA1XmNSWmYGYKr9HIhN8OQ0CSj9QY7OlvHvhGrfNY6fsZ OREVe1D9VK2a/95zAsyBQBxRpdnmkzkdHIba8JYC3ge44AIA0kAb7n4E+NmenmKU japzIULULvwprovPdReboRLcxPTpNRBFxfjPdcOyQmF+wQ95KmJZVME61w2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZIK1ZETKThe9Jga03KAn2bc17MwHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ/HOdocfu+tv0YQG5vDiUy7YEYVzvg3Xvx rGwgKbFmEm2avNRz3zMMVTdVLF6+1zFpOakH5rqBpPNXLUUsatDDzxmDZN4AgRJP M5vpT/RxEuIf6EzPbf2qV0DRRIsEeGfBY6saiQ+6LvCbRfefqzK/k/ivK5u8/yIY 50Ywo6BhdIp8pCMEn3knK565OJ5pjET+oFnnQpy7035jo3Zrq4UgSBAIrK6XmXY2 m/iMhJ4xjUpolO4LNm3WV/16/No0XnMCd0P3vCCNNZyxWsYVdHbUtwqKaAOuQjFk pi8OsmXFURhEGticju0Glz+2zYWBtUpsIyflMXTxqrD/iaDzX+Q= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:02 2025 by rpki-client