$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: +AylbLRTlsTM+9D7U7MJTqvZEF4KWSDVjDhzSMVomkA= Subject key identifier: 8F:EE:5D:03:B5:FF:42:E1:4D:88:84:22:33:10:CC:C7:E4:AC:5D:FE Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 0B6C601A6E419C12D3AC549A0E7BD18C88A81C75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: C8 Signing time: Mon 08 Sep 2025 22:20:38 +0000 Manifest this update: Mon 08 Sep 2025 22:15:38 +0000 Manifest next update: Fri 12 Sep 2025 09:50:38 +0000 Files and hashes: 1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) 2: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: lVWbPIGqvtWOXNupoT7/KHbK9TPboN0+htFpwOcWywI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6c:60:1a:6e:41:9c:12:d3:ac:54:9a:0e:7b:d1:8c:88:a8:1c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Sep 8 22:15:38 2025 GMT Not After : Sep 12 09:50:38 2025 GMT Subject: CN=8FEE5D03B5FF42E14D8884223310CCC7E4AC5DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:96:63:17:67:e7:05:eb:98:8d:f4:9a:6b: 73:9d:fc:04:31:63:fc:72:ac:e7:d9:82:6c:f4:11: b1:57:2a:dc:5b:fa:26:ea:65:d4:45:7a:cd:fb:27: ff:5d:ed:b3:8a:4b:f7:d0:8b:e2:66:97:c5:4d:47: db:4f:d9:d5:46:04:36:35:3d:d0:fa:c2:bc:42:36: 76:a3:6d:53:ed:50:3f:2b:cd:c7:5b:34:ac:21:75: 78:5d:a9:0b:bb:02:80:5a:da:0c:72:d8:9a:9e:d1: 78:2f:dc:b3:12:b1:26:61:3e:64:3d:36:12:cf:69: 2c:5c:47:34:5a:54:97:6c:5b:39:41:17:be:9d:21: 5b:38:8c:3b:a2:97:b8:a3:b2:c7:19:a4:9e:41:0c: dd:37:f8:87:ea:8e:92:9d:e8:67:f1:ba:b9:8f:53: 76:09:c5:32:47:56:01:ed:6a:ca:a0:6a:b6:61:7c: e0:6f:c9:cf:c6:3a:0e:17:b8:c3:e5:ca:99:d2:74: 29:cb:bc:ca:95:aa:10:67:ee:37:64:f9:ab:89:a9: 01:7c:42:e1:ea:1f:c4:83:4a:8a:bc:54:85:74:9a: e5:d2:96:e1:1b:2c:0e:3e:8a:ab:bd:c9:ae:73:fd: cd:2d:be:63:ae:b2:23:a9:18:23:78:12:1f:50:50: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EE:5D:03:B5:FF:42:E1:4D:88:84:22:33:10:CC:C7:E4:AC:5D:FE X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4e:78:96:4b:11:28:75:84:f0:67:4c:de:41:48:a0:78:a2: 8c:00:6c:22:f0:27:f0:00:00:57:c7:80:5c:6f:bc:ed:a0:02: 8f:02:ee:e1:44:63:47:b4:86:24:83:99:55:0c:e9:67:26:b1: 0c:5d:06:61:48:ae:28:c4:d7:b3:92:45:0a:9f:e6:63:13:bb: 6f:c1:e2:c6:0a:ab:67:e7:95:d7:f1:f1:00:05:85:c9:d0:fe: fb:2a:53:46:3c:66:b9:c1:31:e5:84:62:10:5b:05:5b:e6:c8: 2a:ca:b0:09:06:d3:f5:3c:c4:f2:a2:7c:16:95:52:b9:95:92: 29:f7:b9:32:64:18:46:8f:9c:50:71:55:05:8a:cf:13:25:d3: 8d:ca:66:a5:61:52:82:8f:37:70:28:3b:f7:5c:39:e9:27:dd: c4:55:19:78:ca:77:ce:bf:0b:b7:c1:0a:76:07:e5:d2:90:dd: aa:78:bb:a0:83:1c:04:95:de:bd:55:25:d2:7f:63:6e:b5:1c: ae:0b:b1:1a:48:a5:e8:db:42:53:86:64:dd:f0:6a:28:b2:5e: 96:25:ee:1a:93:2e:9a:e8:f3:e4:db:b0:3b:0d:7d:df:01:ac: 18:b2:44:60:8e:91:85:ef:3e:dd:c1:5e:1c:7d:5d:08:dc:d8: 44:a6:8c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2xgGm5BnBLTrFSaDnvRjIioHHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTA5MDgyMjE1MzhaFw0yNTA5MTIwOTUwMzhaMDMxMTAvBgNV BAMTKDhGRUU1RDAzQjVGRjQyRTE0RDg4ODQyMjMzMTBDQ0M3RTRBQzVERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifJZjF2fnBeuYjfSaa3Od/AQx Y/xyrOfZgmz0EbFXKtxb+ibqZdRFes37J/9d7bOKS/fQi+Jml8VNR9tP2dVGBDY1 PdD6wrxCNnajbVPtUD8rzcdbNKwhdXhdqQu7AoBa2gxy2Jqe0Xgv3LMSsSZhPmQ9 NhLPaSxcRzRaVJdsWzlBF76dIVs4jDuil7ijsscZpJ5BDN03+IfqjpKd6GfxurmP U3YJxTJHVgHtasqgarZhfOBvyc/GOg4XuMPlypnSdCnLvMqVqhBn7jdk+auJqQF8 QuHqH8SDSoq8VIV0muXSluEbLA4+iqu9ya5z/c0tvmOusiOpGCN4Eh9QUHijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+5dA7X/QuFNiIQiMxDMx+SsXf4wHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5OeJZLESh1hPBnTN5BSKB4oowAbCLwJ/AA AFfHgFxvvO2gAo8C7uFEY0e0hiSDmVUM6WcmsQxdBmFIrijE17OSRQqf5mMTu2/B 4sYKq2fnldfx8QAFhcnQ/vsqU0Y8ZrnBMeWEYhBbBVvmyCrKsAkG0/U8xPKifBaV UrmVkin3uTJkGEaPnFBxVQWKzxMl043KZqVhUoKPN3AoO/dcOekn3cRVGXjKd86/ C7fBCnYH5dKQ3ap4u6CDHASV3r1VJdJ/Y261HK4LsRpIpejbQlOGZN3waiiyXpYl 7hqTLpro8+TbsDsNfd8BrBiyRGCOkYXvPt3BXhx9XQjc2ESmjOU= -----END CERTIFICATE-----Generated at Tue Sep 9 01:24:14 2025 by rpki-client