$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: DvbDL82o+lZNH77LzC6OsCiUpgB0TAHxCxp5Pl9ncSo= Subject key identifier: 9A:E9:1C:B9:E2:7E:6B:6A:C1:8C:03:4E:3A:25:B2:49:1B:30:1C:49 Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 1E2CA18A27BA722D2E2B4D5B7685A15ABC884942 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: B3 Signing time: Wed 23 Jul 2025 21:10:38 +0000 Manifest this update: Wed 23 Jul 2025 21:05:38 +0000 Manifest next update: Sun 27 Jul 2025 07:20:38 +0000 Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: GlKfz0JRjj+w1mlUFJuAxrTyEoaVbKRTHWkVNgdtA78=) 2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 07:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2c:a1:8a:27:ba:72:2d:2e:2b:4d:5b:76:85:a1:5a:bc:88:49:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Jul 23 21:05:38 2025 GMT Not After : Jul 27 07:20:38 2025 GMT Subject: CN=9AE91CB9E27E6B6AC18C034E3A25B2491B301C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:b2:72:ad:33:cc:3a:cb:ae:9f:d3:ae:c4: 55:3b:9a:62:35:dd:c7:fb:5b:ac:4b:41:45:48:d5: 74:00:31:3d:02:e9:5a:f8:28:5c:9e:54:4b:b2:4e: c4:20:78:5b:6c:21:53:40:d2:e5:9f:21:4e:76:06: 1a:77:1b:ba:0a:7d:7f:a1:bf:17:b6:83:c4:21:1e: d1:06:81:dd:f6:e3:8d:2a:4e:11:a3:66:2f:4c:b0: 02:13:5a:32:90:cc:3d:15:12:a0:93:69:a6:56:c0: 55:30:26:35:84:3e:d7:4d:f5:00:34:a3:46:7d:32: 68:7a:45:cb:dc:23:a7:6b:33:a1:0b:87:d8:b4:cf: 56:ba:d7:3d:fe:2f:a7:a2:fe:64:42:7d:9f:88:9e: 97:de:92:f0:44:39:44:cb:1a:35:74:a5:ab:46:cb: 02:d9:8c:29:64:ca:e6:8f:13:7b:15:03:0d:d0:be: 47:e7:b3:e0:b9:77:4b:0e:9b:56:b8:d2:1a:45:3b: 6d:06:02:46:d2:36:4f:ed:68:19:b3:b1:f9:02:a4: cf:4d:e2:b0:b2:5e:99:15:64:1f:e1:58:a9:ca:88: 3d:28:ff:2c:f3:56:9d:3d:82:91:01:92:a6:1a:a7: be:ab:fc:6a:0a:17:cf:66:92:e2:cf:48:d0:00:7a: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E9:1C:B9:E2:7E:6B:6A:C1:8C:03:4E:3A:25:B2:49:1B:30:1C:49 X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cc:9c:52:75:1d:76:7b:df:3c:64:00:c2:c4:bb:5a:18:4c: 52:0d:b9:4b:46:62:f1:3d:11:27:03:f9:ea:aa:87:29:c9:59: 1b:08:b1:1b:af:f2:01:d4:29:a0:95:d4:67:33:96:74:21:db: 2f:8f:a1:ee:75:32:db:f9:21:22:d1:9b:f4:6c:0c:cb:31:86: 57:46:2d:2d:eb:d4:f6:43:49:01:76:ca:7e:6b:1c:d1:c8:7d: f5:a7:e8:d7:b2:4f:70:99:43:8a:4e:be:45:9a:05:26:53:98: ba:ec:e4:12:ab:4b:2a:e8:15:80:bf:e2:bc:a9:31:75:f6:b3: 65:5e:3e:9d:8e:26:90:1f:57:03:c1:25:f1:c6:54:ae:9d:74: 28:e8:44:8c:c2:c2:4e:44:ec:0c:ff:86:28:2d:3c:20:61:7d: 14:83:e5:7d:7b:d7:8d:94:9d:11:c6:e2:80:df:35:54:5b:9c: 6d:67:f8:02:06:af:26:ec:ff:b1:89:d7:25:2a:1d:b4:c2:67: ce:b8:6e:f3:28:84:fc:a0:c6:fd:4c:84:f2:9c:a2:97:f3:28: aa:bd:3e:10:0d:c5:9e:75:a7:09:f0:a8:04:69:e6:e8:b8:79: b3:1f:4d:2c:2f:cf:98:eb:34:cd:86:f1:46:5d:b3:c8:cf:56: d0:f6:fe:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiyhiie6ci0uK01bdoWhWryISUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTA3MjMyMTA1MzhaFw0yNTA3MjcwNzIwMzhaMDMxMTAvBgNV BAMTKDlBRTkxQ0I5RTI3RTZCNkFDMThDMDM0RTNBMjVCMjQ5MUIzMDFDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wrJyrTPMOsuun9OuxFU7mmI1 3cf7W6xLQUVI1XQAMT0C6Vr4KFyeVEuyTsQgeFtsIVNA0uWfIU52Bhp3G7oKfX+h vxe2g8QhHtEGgd32440qThGjZi9MsAITWjKQzD0VEqCTaaZWwFUwJjWEPtdN9QA0 o0Z9Mmh6RcvcI6drM6ELh9i0z1a61z3+L6ei/mRCfZ+InpfekvBEOUTLGjV0patG ywLZjClkyuaPE3sVAw3Qvkfns+C5d0sOm1a40hpFO20GAkbSNk/taBmzsfkCpM9N 4rCyXpkVZB/hWKnKiD0o/yzzVp09gpEBkqYap76r/GoKF89mkuLPSNAAepLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmukcueJ+a2rBjANOOiWySRswHEkwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHMnFJ1HXZ73zxkAMLEu1oYTFINuUtGYvE9 EScD+eqqhynJWRsIsRuv8gHUKaCV1GczlnQh2y+Poe51Mtv5ISLRm/RsDMsxhldG LS3r1PZDSQF2yn5rHNHIffWn6NeyT3CZQ4pOvkWaBSZTmLrs5BKrSyroFYC/4ryp MXX2s2VePp2OJpAfVwPBJfHGVK6ddCjoRIzCwk5E7Az/higtPCBhfRSD5X17142U nRHG4oDfNVRbnG1n+AIGrybs/7GJ1yUqHbTCZ864bvMohPygxv1MhPKcopfzKKq9 PhANxZ51pwnwqARp5ui4ebMfTSwvz5jrNM2G8UZds8jPVtD2/pI= -----END CERTIFICATE-----Generated at Fri Jul 25 13:20:05 2025 by rpki-client