$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: vYAf3cG3aWZHR98Ml3Bqn/P4exZAr8LS8ryVxXT26GY= Subject key identifier: AE:B0:CA:8B:20:4A:BC:5C:A3:28:4F:11:24:8E:2E:20:3F:B4:73:1D Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 6BBC39EF27158A92F8A976473829D7F699F4FCF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: 9A Signing time: Sat 19 Jul 2025 23:11:24 +0000 Manifest this update: Sat 19 Jul 2025 23:06:24 +0000 Manifest next update: Wed 23 Jul 2025 03:06:24 +0000 Files and hashes: 1: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: 7/mfyj6dodaB+5mKyNIHE0sz7wDZ89iH+rWpyh7iH0w=) 2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bc:39:ef:27:15:8a:92:f8:a9:76:47:38:29:d7:f6:99:f4:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Jul 19 23:06:24 2025 GMT Not After : Jul 23 03:06:24 2025 GMT Subject: CN=AEB0CA8B204ABC5CA3284F11248E2E203FB4731D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:15:3d:c1:7c:da:3a:e3:42:f9:4a:a5:49: cb:01:e0:40:8b:f3:07:eb:ee:95:09:86:a3:10:91: ed:65:96:77:73:80:b0:77:3e:a0:99:14:f8:cb:9e: 63:1c:2d:12:25:19:4e:8e:1f:e1:4d:a0:a8:71:43: 1f:7d:97:32:13:f6:ee:49:05:7b:9c:d6:31:e7:41: af:e8:31:e0:1a:45:4f:16:47:0e:f9:5e:0e:a6:42: 14:f3:be:75:96:da:71:29:88:08:f1:7c:35:b6:15: 42:d6:eb:cd:a9:aa:86:1e:9b:9e:df:71:99:26:09: db:26:e1:2b:90:10:55:9c:4a:7c:73:6f:0c:af:04: ab:57:0b:8e:14:4b:f0:07:71:ee:5e:14:39:be:39: dc:fb:21:46:84:53:80:a3:7b:c8:51:45:c7:48:7a: 1b:58:d9:39:2d:af:fe:f9:4f:12:e0:cb:57:db:e5: a5:9c:8c:e4:03:24:69:ac:de:b3:ec:cd:f5:cd:59: 12:71:a7:93:a8:d1:27:2a:28:58:e0:a4:a6:37:db: 39:56:c6:89:71:74:ca:51:05:3c:5b:fb:cf:e2:1a: a1:66:e5:98:9e:ac:ab:94:65:62:ee:18:43:ef:2a: c5:d0:b0:ab:62:91:ea:cc:eb:89:6f:c1:bb:2c:b8: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B0:CA:8B:20:4A:BC:5C:A3:28:4F:11:24:8E:2E:20:3F:B4:73:1D X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:df:33:11:1c:8e:e0:95:38:16:cf:e7:02:f3:a7:fb:c8:33: 51:ca:41:e0:02:57:b1:bc:f4:77:25:99:dd:fb:bf:92:9b:f1: c6:c1:f8:72:3e:f7:66:fb:cf:5d:47:c2:1e:e2:6b:8f:55:a1: ea:3b:b2:51:35:b1:f8:c8:ac:0f:5e:db:d5:36:0c:ea:96:f1: 2f:c0:13:d1:7f:d6:73:8e:9a:9b:3e:5f:94:ef:46:69:be:62: de:10:12:d9:1e:fa:c4:21:1e:fe:84:8f:59:1c:b6:73:6e:14: b6:13:0a:7c:65:43:22:f3:e5:2b:f5:7b:6f:18:02:1b:18:22: b9:dd:4f:96:de:c7:09:ee:75:17:9a:9b:73:30:95:e9:76:5f: 68:8f:30:f2:97:e1:b9:30:59:3b:3d:4a:46:50:10:ca:67:ee: 07:44:cb:60:50:36:ac:0e:05:39:dc:b9:05:f8:8d:44:1e:a8: 07:c5:a5:c7:32:8f:5c:a2:31:e1:f8:54:6d:b7:1b:ec:b3:db: bb:4c:92:1d:1e:a0:ab:d9:87:3c:db:6a:19:24:d5:eb:f3:ff: cc:65:09:ec:f0:c6:58:8c:e0:a7:44:9d:ec:19:f4:8b:cd:ea: 69:5d:8e:70:3f:d6:fa:86:db:51:ed:92:be:53:9e:fa:4a:de: 40:8b:f1:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7w57ycVipL4qXZHOCnX9pn0/PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTA3MTkyMzA2MjRaFw0yNTA3MjMwMzA2MjRaMDMxMTAvBgNV BAMTKEFFQjBDQThCMjA0QUJDNUNBMzI4NEYxMTI0OEUyRTIwM0ZCNDczMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+xU9wXzaOuNC+UqlScsB4ECL 8wfr7pUJhqMQke1llndzgLB3PqCZFPjLnmMcLRIlGU6OH+FNoKhxQx99lzIT9u5J BXuc1jHnQa/oMeAaRU8WRw75Xg6mQhTzvnWW2nEpiAjxfDW2FULW682pqoYem57f cZkmCdsm4SuQEFWcSnxzbwyvBKtXC44US/AHce5eFDm+Odz7IUaEU4Cje8hRRcdI ehtY2Tktr/75TxLgy1fb5aWcjOQDJGms3rPszfXNWRJxp5Oo0ScqKFjgpKY32zlW xolxdMpRBTxb+8/iGqFm5ZierKuUZWLuGEPvKsXQsKtikerM64lvwbssuJ3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrrDKiyBKvFyjKE8RJI4uID+0cx0wHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXfMxEcjuCVOBbP5wLzp/vIM1HKQeACV7G8 9Hclmd37v5Kb8cbB+HI+92b7z11Hwh7ia49Voeo7slE1sfjIrA9e29U2DOqW8S/A E9F/1nOOmps+X5TvRmm+Yt4QEtke+sQhHv6Ej1kctnNuFLYTCnxlQyLz5Sv1e28Y AhsYIrndT5bexwnudReam3Mwlel2X2iPMPKX4bkwWTs9SkZQEMpn7gdEy2BQNqwO BTncuQX4jUQeqAfFpccyj1yiMeH4VG23G+yz27tMkh0eoKvZhzzbahkk1evz/8xl CezwxliM4KdEnewZ9IvN6mldjnA/1vqG21Htkr5TnvpK3kCL8Vk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:30 2025 by rpki-client