$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: xKgpRhCACWFeif4ua3UgBdQbhLNZBqj0YcDw3L8w4jg= Subject key identifier: DA:84:61:6D:10:EF:FD:25:48:28:C2:5C:54:C5:E8:51:AA:F5:89:C2 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 6EFC60066793040FA2229B04362ADD0BAFF6C28F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0332 Signing time: Wed 03 Sep 2025 07:02:05 +0000 Manifest this update: Wed 03 Sep 2025 06:57:05 +0000 Manifest next update: Sat 06 Sep 2025 10:10:05 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 2: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: uXj9fXU1tVqwcEoVdlGmmQLe6Z+kxN8qPDptTLsYlg4=) 3: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fc:60:06:67:93:04:0f:a2:22:9b:04:36:2a:dd:0b:af:f6:c2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Sep 3 06:57:05 2025 GMT Not After : Sep 6 10:10:05 2025 GMT Subject: CN=DA84616D10EFFD254828C25C54C5E851AAF589C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:95:e7:9a:25:c2:00:e3:39:ee:00:dc:7e: e5:d7:ec:a6:87:48:ee:11:96:98:8a:c6:72:81:56: 9f:b6:0a:e8:00:03:f3:9d:b4:db:16:ca:0a:c7:45: c0:35:e0:7d:da:59:6c:11:25:c4:17:13:5f:8d:14: 74:66:1e:37:da:e7:dd:66:5e:e5:bf:80:cb:81:b8: 12:79:06:44:d1:d7:2f:09:b6:68:fd:c9:fc:f4:74: ba:03:6a:5f:4c:2f:7d:29:26:1c:06:29:7f:d1:cb: 58:b3:62:68:fa:d8:68:05:91:ba:76:c7:a5:10:b4: 10:f6:2c:13:e2:17:1a:f6:37:53:0e:03:f8:d4:3c: e3:7b:7f:bb:f6:be:5a:c4:19:23:4b:98:ef:a6:8c: 1e:2f:72:10:bf:6b:80:87:7a:d5:7e:14:9a:c4:a2: 95:51:4e:00:8d:3c:f5:9d:cb:d8:2b:f1:47:46:1c: 7a:cc:4e:36:ea:e2:dd:76:5f:51:11:f7:03:89:f7: 4a:21:1e:60:0a:38:8d:da:20:ee:b0:8c:6c:71:9e: 32:bb:19:73:44:b4:1c:e5:d9:51:f1:d2:d0:98:bd: 8b:f1:5f:96:2f:9e:38:fc:d2:a3:d5:95:20:aa:4f: d1:01:46:90:71:6b:b1:cb:d9:3d:72:75:da:f1:6e: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:84:61:6D:10:EF:FD:25:48:28:C2:5C:54:C5:E8:51:AA:F5:89:C2 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:37:f9:5a:cd:db:32:d7:b3:81:a8:d3:e6:ae:f5:f3:d9:e6: 16:29:87:49:89:44:89:b0:f8:7c:dd:32:c6:06:11:40:d7:ca: 80:52:e1:01:f4:a0:f1:a1:15:ff:36:9b:44:28:7f:6b:50:0c: 31:56:8d:bf:89:eb:5b:0d:94:a5:72:12:b6:85:25:2f:ff:a6: 08:e2:8b:51:db:9f:7d:06:ce:1c:9e:f7:99:c1:85:1a:22:cc: 57:04:a6:35:12:f0:2b:a7:72:f9:d6:2c:3f:07:bd:50:3e:68: d9:bd:6f:4a:18:de:dd:66:c6:b7:7c:a3:a2:51:25:2d:6a:ce: f1:37:fe:80:e6:9e:2d:3a:ad:a7:41:32:36:97:34:2a:a6:41: b7:e0:45:14:38:f0:ad:d2:9c:09:92:c1:e0:70:5a:f9:97:83: f3:6b:45:74:ea:7a:d9:46:fa:b5:54:fd:f2:d3:fc:07:bb:54: e2:04:88:a8:3e:f2:f5:f6:5f:fc:f8:81:bc:75:06:b5:ff:b7: 0c:86:4e:18:be:47:6c:72:9b:2d:8c:d8:e1:92:8a:e4:ca:02: af:91:07:3d:e8:86:4d:bf:08:2b:cb:4c:f1:99:bb:47:b1:76: 16:ff:b6:ea:c8:88:23:83:12:0e:61:39:3c:50:38:e9:c0:55: 06:ae:d3:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvxgBmeTBA+iIpsENirdC6/2wo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA5MDMwNjU3MDVaFw0yNTA5MDYxMDEwMDVaMDMxMTAvBgNV BAMTKERBODQ2MTZEMTBFRkZEMjU0ODI4QzI1QzU0QzVFODUxQUFGNTg5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsk5XnmiXCAOM57gDcfuXX7KaH SO4RlpiKxnKBVp+2CugAA/OdtNsWygrHRcA14H3aWWwRJcQXE1+NFHRmHjfa591m XuW/gMuBuBJ5BkTR1y8Jtmj9yfz0dLoDal9ML30pJhwGKX/Ry1izYmj62GgFkbp2 x6UQtBD2LBPiFxr2N1MOA/jUPON7f7v2vlrEGSNLmO+mjB4vchC/a4CHetV+FJrE opVRTgCNPPWdy9gr8UdGHHrMTjbq4t12X1ER9wOJ90ohHmAKOI3aIO6wjGxxnjK7 GXNEtBzl2VHx0tCYvYvxX5Yvnjj80qPVlSCqT9EBRpBxa7HL2T1yddrxbr/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oRhbRDv/SVIKMJcVMXoUar1icIwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ3+VrN2zLXs4Go0+au9fPZ5hYph0mJRImw +HzdMsYGEUDXyoBS4QH0oPGhFf82m0Qof2tQDDFWjb+J61sNlKVyEraFJS//pgji i1Hbn30Gzhye95nBhRoizFcEpjUS8CuncvnWLD8HvVA+aNm9b0oY3t1mxrd8o6JR JS1qzvE3/oDmni06radBMjaXNCqmQbfgRRQ48K3SnAmSweBwWvmXg/NrRXTqetlG +rVU/fLT/Ae7VOIEiKg+8vX2X/z4gbx1BrX/twyGThi+R2xymy2M2OGSiuTKAq+R Bz3ohk2/CCvLTPGZu0exdhb/turIiCODEg5hOTxQOOnAVQau08I= -----END CERTIFICATE-----Generated at Fri Sep 5 10:27:07 2025 by rpki-client