$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: sX36ApdGsi1n897h3yAicYMgmQEXb4iAaygAyJCaN1I= Subject key identifier: 5A:01:75:0F:16:F0:4E:16:57:E7:5E:EE:4A:BF:17:01:E6:B9:9B:D2 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 3F58B2F77FBD5326180F04E94A81770C58C1A560 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 0505 Signing time: Wed 03 Sep 2025 11:22:06 +0000 Manifest this update: Wed 03 Sep 2025 11:17:06 +0000 Manifest next update: Sat 06 Sep 2025 23:15:06 +0000 Files and hashes: 1: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: +T3Pt96JdYaCjZwslFQEnLh95PR6Wr1CkWYzNuxLhQk=) 2: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: VzkkG2VrXtJCR5wzPT9zkQlxjE8Im9WGQ+zYHfckMAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:58:b2:f7:7f:bd:53:26:18:0f:04:e9:4a:81:77:0c:58:c1:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Sep 3 11:17:06 2025 GMT Not After : Sep 6 23:15:06 2025 GMT Subject: CN=5A01750F16F04E1657E75EEE4ABF1701E6B99BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:96:0e:0f:4d:58:30:16:b9:25:ea:99:eb: f5:a5:7e:ea:70:92:d3:0c:a2:4f:b3:94:d0:9a:eb: 03:ce:bd:ec:90:63:f7:9a:a2:8c:3c:43:28:f2:fc: 5a:4d:65:83:4c:8c:8e:a0:b7:fc:50:3c:4e:b4:93: 3c:ff:ce:5a:e8:5e:30:4f:84:d4:ca:34:57:69:e9: 2d:98:61:a8:6a:7d:08:14:17:f6:68:b8:b4:de:72: 61:b3:90:14:4d:30:27:cb:f7:cc:53:87:49:70:5c: d5:4f:0d:41:13:b6:d9:41:4a:e8:4a:41:40:1a:4e: e4:b2:db:fc:5f:52:62:ba:82:58:63:6c:5e:01:22: 4a:70:f1:32:08:69:6e:c6:b4:3c:d1:84:f4:89:b9: a3:78:c9:3c:38:0f:d6:b3:29:24:8a:63:bd:a1:cc: 41:42:e1:e1:03:61:24:e4:09:d7:ee:4e:ca:3a:81: cc:4c:e6:f1:6f:28:a8:ce:ff:24:8e:11:0c:88:57: 8c:bc:d7:5d:d4:35:a2:34:83:74:56:45:3c:88:a2: 8f:8a:3f:d7:33:f0:b8:82:81:95:ac:f7:f3:b8:67: 1a:c0:bd:d0:f4:d7:6f:b3:80:e6:b0:95:50:08:cc: a7:b2:9f:df:57:42:a2:e0:b4:01:b2:7c:c4:de:00: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:01:75:0F:16:F0:4E:16:57:E7:5E:EE:4A:BF:17:01:E6:B9:9B:D2 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c6:ac:41:af:a7:17:12:88:3d:ec:fd:ee:0c:80:f5:69:95: 08:27:b2:28:b9:22:6a:ce:67:3e:98:38:cf:8e:82:15:1a:3d: 10:7a:c6:23:36:24:d2:ed:5b:38:65:e0:35:f8:d0:45:1c:fe: df:76:55:02:40:db:c3:e4:e1:97:de:23:57:51:3c:a1:86:fb: f1:df:de:47:ba:2c:04:67:90:2a:cb:80:c4:5a:86:d4:a0:f7: 47:39:b8:0a:69:83:37:8e:c2:52:d8:60:83:2f:5c:3a:81:80: e9:2d:8c:02:63:6d:cd:b0:c6:61:82:d3:d6:2c:c8:91:66:ec: d9:50:70:67:bb:b1:2e:17:f0:24:6b:b8:e3:6d:2c:ce:fa:c3: 0f:c3:2b:ab:70:d9:7a:0d:5c:f3:4a:5f:20:98:ed:4b:7e:4f: fc:6b:b2:ed:1c:55:35:35:15:b3:64:02:d0:eb:3b:25:7b:67: c3:af:18:04:df:30:23:a5:73:6a:08:2d:f7:e9:5c:4d:31:80: 6a:fe:d1:12:7e:d0:b9:a1:c9:5f:9d:d8:21:68:de:27:14:c7: 07:ab:b5:90:45:fd:97:eb:61:70:cc:8a:5f:6d:7b:0f:70:d7: 74:a3:6c:52:9c:0c:94:11:2c:d4:b2:dd:20:c4:14:75:9a:4e: 40:78:84:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1iy93+9UyYYDwTpSoF3DFjBpWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTA5MDMxMTE3MDZaFw0yNTA5MDYyMzE1MDZaMDMxMTAvBgNV BAMTKDVBMDE3NTBGMTZGMDRFMTY1N0U3NUVFRTRBQkYxNzAxRTZCOTlCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTZYOD01YMBa5JeqZ6/Wlfupw ktMMok+zlNCa6wPOveyQY/eaoow8Qyjy/FpNZYNMjI6gt/xQPE60kzz/zlroXjBP hNTKNFdp6S2YYahqfQgUF/ZouLTecmGzkBRNMCfL98xTh0lwXNVPDUETttlBSuhK QUAaTuSy2/xfUmK6glhjbF4BIkpw8TIIaW7GtDzRhPSJuaN4yTw4D9azKSSKY72h zEFC4eEDYSTkCdfuTso6gcxM5vFvKKjO/ySOEQyIV4y8113UNaI0g3RWRTyIoo+K P9cz8LiCgZWs9/O4ZxrAvdD012+zgOawlVAIzKeyn99XQqLgtAGyfMTeAM55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWgF1DxbwThZX517uSr8XAea5m9IwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHGrEGvpxcSiD3s/e4MgPVplQgnsii5ImrO Zz6YOM+OghUaPRB6xiM2JNLtWzhl4DX40EUc/t92VQJA28Pk4ZfeI1dRPKGG+/Hf 3ke6LARnkCrLgMRahtSg90c5uAppgzeOwlLYYIMvXDqBgOktjAJjbc2wxmGC09Ys yJFm7NlQcGe7sS4X8CRruONtLM76ww/DK6tw2XoNXPNKXyCY7Ut+T/xrsu0cVTU1 FbNkAtDrOyV7Z8OvGATfMCOlc2oILffpXE0xgGr+0RJ+0LmhyV+d2CFo3icUxwer tZBF/ZfrYXDMil9tew9w13SjbFKcDJQRLNSy3SDEFHWaTkB4hEk= -----END CERTIFICATE-----Generated at Fri Sep 5 20:40:18 2025 by rpki-client