$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: 2rLjUUU3pnUNkLx+jGQf4LpcWrMW9g4VepJF0DPuedg= Subject key identifier: 5A:5F:2A:46:8B:BF:60:D5:D5:E1:34:1E:8D:FF:9D:81:F4:51:C9:B3 Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 1BB9138CA0615BB004E32FB0786BD2420B0DDDB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: B2 Signing time: Mon 21 Jul 2025 11:50:38 +0000 Manifest this update: Mon 21 Jul 2025 11:45:38 +0000 Manifest next update: Thu 24 Jul 2025 21:03:38 +0000 Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: utSfmon4BTNAbiEN6Sm2/fdcQIreEKBmC6X/QqFrKGU=) 2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b9:13:8c:a0:61:5b:b0:04:e3:2f:b0:78:6b:d2:42:0b:0d:dd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Jul 21 11:45:38 2025 GMT Not After : Jul 24 21:03:38 2025 GMT Subject: CN=5A5F2A468BBF60D5D5E1341E8DFF9D81F451C9B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:17:5b:79:f4:3e:17:e5:81:7e:f3:15:d6: 37:8b:c1:c7:c5:cf:15:a0:4d:09:f2:28:f9:4a:d5: b9:b0:b6:25:88:df:f7:e1:d5:3c:64:90:60:5a:bb: ed:f0:1e:38:ae:4f:a0:ba:a9:f9:84:ae:15:ff:8d: 9e:6b:a0:0c:2a:be:c9:79:75:7f:1d:70:a7:5a:b9: 3f:2a:99:ca:b6:6d:67:dc:53:8d:a0:2e:b5:7a:9d: bc:4a:19:e3:bc:72:f2:ec:3d:43:f0:44:ff:21:28: c4:f5:46:bc:35:48:de:ab:6c:04:2d:17:f1:73:a3: fb:83:c5:84:9d:b5:00:65:2b:a1:20:d7:dd:9d:38: 8e:cf:71:03:66:ab:60:a4:07:7f:ed:01:80:2b:a5: a4:e0:53:cc:81:b7:d3:f8:9c:2a:0e:13:19:9d:35: 6b:86:82:04:cb:f0:cf:ec:bf:51:74:aa:9c:9c:15: c1:26:7a:95:50:d0:56:87:bf:b2:54:62:72:4e:7d: 1b:8b:70:82:e1:2b:b9:2f:2b:24:62:3a:0c:1d:89: 20:53:82:04:db:df:70:47:71:f7:44:aa:3b:a8:99: 18:0a:e7:56:5a:cb:ed:fa:bf:a4:f0:6b:c7:f5:33: 35:08:ba:cf:cc:ef:c9:dd:e6:7d:48:38:a9:ff:9a: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:2A:46:8B:BF:60:D5:D5:E1:34:1E:8D:FF:9D:81:F4:51:C9:B3 X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5a:80:ce:1e:a3:a8:7b:6d:ea:62:c3:04:72:71:50:be:2f: 24:d8:d9:25:15:d9:54:28:c5:f6:f1:00:44:19:8a:4b:c6:0a: 49:38:5d:e8:4e:79:95:e1:a4:7a:66:e1:d9:bc:98:97:32:6a: 9d:4d:23:bf:77:78:e1:da:c8:54:b1:1f:4b:18:ff:eb:9b:aa: 65:8e:26:76:d5:ef:60:d6:e2:6e:68:15:0c:c5:37:2f:ee:b1: 4f:7f:1a:e9:f1:0f:9e:33:d5:e6:a7:4b:42:35:c7:cd:f3:b4: f4:28:3d:58:a0:5b:85:22:e4:8b:40:db:92:4d:19:9d:6a:ed: 91:05:97:56:6e:bf:dd:d1:4d:e0:be:e0:30:87:d5:38:a7:03: 87:3b:11:30:9b:ef:6e:c7:8e:ad:f1:a2:13:13:e0:b8:a2:d6: 48:3a:bb:6e:08:51:e7:09:55:4c:4d:00:37:55:80:7b:98:80: 56:d5:8b:81:14:47:1d:d1:df:93:2e:2f:41:8b:9d:bb:18:9d: 5b:62:b3:c6:52:a7:9e:e9:de:6f:30:28:04:ea:49:97:fa:ac: bb:6b:c2:2e:20:e4:98:45:a4:77:4d:42:07:a4:ad:da:bb:a8: 2a:45:a0:a9:97:89:80:d0:37:2c:b4:57:b3:52:35:6d:60:00: 61:a0:07:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7kTjKBhW7AE4y+weGvSQgsN3bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTA3MjExMTQ1MzhaFw0yNTA3MjQyMTAzMzhaMDMxMTAvBgNV BAMTKDVBNUYyQTQ2OEJCRjYwRDVENUUxMzQxRThERkY5RDgxRjQ1MUM5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1RdbefQ+F+WBfvMV1jeLwcfF zxWgTQnyKPlK1bmwtiWI3/fh1TxkkGBau+3wHjiuT6C6qfmErhX/jZ5roAwqvsl5 dX8dcKdauT8qmcq2bWfcU42gLrV6nbxKGeO8cvLsPUPwRP8hKMT1Rrw1SN6rbAQt F/Fzo/uDxYSdtQBlK6Eg192dOI7PcQNmq2CkB3/tAYArpaTgU8yBt9P4nCoOExmd NWuGggTL8M/sv1F0qpycFcEmepVQ0FaHv7JUYnJOfRuLcILhK7kvKyRiOgwdiSBT ggTb33BHcfdEqjuomRgK51Zay+36v6Twa8f1MzUIus/M78nd5n1IOKn/muaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWl8qRou/YNXV4TQejf+dgfRRybMwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdagM4eo6h7bepiwwRycVC+LyTY2SUV2VQo xfbxAEQZikvGCkk4XehOeZXhpHpm4dm8mJcyap1NI793eOHayFSxH0sY/+ubqmWO JnbV72DW4m5oFQzFNy/usU9/GunxD54z1eanS0I1x83ztPQoPVigW4Ui5ItA25JN GZ1q7ZEFl1Zuv93RTeC+4DCH1TinA4c7ETCb727Hjq3xohMT4Lii1kg6u24IUecJ VUxNADdVgHuYgFbVi4EURx3R35MuL0GLnbsYnVtis8ZSp57p3m8wKATqSZf6rLtr wi4g5JhFpHdNQgekrdq7qCpFoKmXiYDQNyy0V7NSNW1gAGGgB8A= -----END CERTIFICATE-----Generated at Tue Jul 22 11:56:47 2025 by rpki-client