$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft File: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json) Hash identifier: L4hCPNVmfagpBzpwO5v+YvYnB53KCZiHWkYKlXfjFk4= Subject key identifier: E2:AD:96:E8:A0:66:2F:8C:DF:B4:7F:65:F8:E3:6B:D1:9D:22:A1:5B Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 6F00FCE8D4292FCA174E949C5C71E4F292EE9C13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft Manifest number: 01F8 Signing time: Fri 05 Sep 2025 07:12:04 +0000 Manifest this update: Fri 05 Sep 2025 07:07:04 +0000 Manifest next update: Mon 08 Sep 2025 17:38:04 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: kjCPg8CNqMlAMRebUqHb4gpHFMec5lXxDxlOd53bN+M=) 2: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: 4A8AyY6UDw0vw1jHOZtLsmEmriVA1J4N13VASpjuThU=) 3: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: SLcrpmMGhS+iLPHlXSc6GQF6hzriCb0znzXu+cnHQhI=) 4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: fMitGvSIMZKR/xojJDzG2iWApTg4bDt/1kqJnOfFiTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:00:fc:e8:d4:29:2f:ca:17:4e:94:9c:5c:71:e4:f2:92:ee:9c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: Sep 5 07:07:04 2025 GMT Not After : Sep 8 17:38:04 2025 GMT Subject: CN=E2AD96E8A0662F8CDFB47F65F8E36BD19D22A15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:c8:c5:a2:04:ca:3d:52:e3:fa:0e:4b:03: 52:a7:4c:ac:0d:cc:a7:07:9a:0c:b1:83:6e:cb:36: 14:1f:db:6e:02:e4:92:d4:bc:3a:2c:ad:36:20:98: a2:1b:bc:fc:4a:b8:19:b7:0b:82:f5:b3:ec:50:fe: 1d:1d:96:f1:66:f1:e3:23:59:3f:f2:36:04:18:2b: 21:ff:86:7f:d0:59:04:86:07:41:09:0a:4d:25:96: 3a:a1:78:08:d3:4a:b5:b1:fa:4a:82:14:b5:85:ce: 87:2b:d5:b0:d3:58:2a:21:7f:f2:e1:da:58:dc:45: 1e:d0:28:d8:0a:79:24:59:d1:98:a5:95:87:e7:8a: a8:30:82:bf:17:b2:2a:50:0c:ae:53:c7:90:94:95: 85:c7:5b:ba:83:71:09:e8:8a:51:2d:23:82:f3:a0: c0:37:22:da:76:83:ec:69:1e:6f:4e:7c:08:b5:7f: a9:8b:d5:ca:87:d3:3d:c0:33:85:b4:99:94:95:dd: 8d:af:c0:48:fb:1b:48:22:67:b1:91:0c:5c:a0:f0: 90:13:27:04:f2:15:bf:26:db:8c:6b:dc:af:98:c4: 7b:73:f9:cb:c3:ff:df:28:08:2a:51:f1:ff:c9:d0: 76:75:df:c2:bb:c1:77:f0:27:c0:1a:1a:c3:f2:13: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:96:E8:A0:66:2F:8C:DF:B4:7F:65:F8:E3:6B:D1:9D:22:A1:5B X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:56:e6:a9:ed:75:51:d2:e8:7b:3a:7d:55:0c:7b:11:4e:3c: ee:18:f1:06:83:ee:d1:d9:ce:63:b3:0f:26:66:bc:2c:02:45: 9f:09:e1:30:b7:a6:10:28:9b:85:7f:55:d4:ea:15:b7:73:63: 35:8e:3f:ff:31:c0:50:37:6e:6f:63:9d:f9:c8:6b:66:15:61: 59:f9:61:42:ac:5b:c0:15:58:7b:a7:f3:b5:49:30:e2:77:a0: f7:96:89:42:4e:3c:06:db:20:9c:3f:bc:4a:69:7b:d9:0a:e0: 33:5f:d7:46:10:1f:96:97:b6:8c:b5:59:62:f0:3a:e6:8b:df: 8d:15:44:0f:ea:63:38:f1:20:ac:6b:5b:a5:3b:d6:a0:93:20: 5c:6c:73:d4:63:b0:71:76:e6:a9:7f:b6:4c:17:d2:b8:8a:e7: f9:52:7b:34:15:1a:a8:cd:7b:78:0e:9c:58:e2:9e:6f:4e:7d: 71:ad:c3:be:dd:2a:3c:a3:0d:1b:bf:03:39:d3:1c:09:a2:da: aa:76:f5:50:8e:e1:4f:98:02:2f:25:0b:b3:54:87:cd:4b:44: df:ab:c7:9a:37:ba:c4:b0:b4:d8:6d:c8:e7:72:01:ea:ca:c7: 46:6e:80:42:c5:54:9b:67:80:7f:a2:c5:b6:2f:b8:89:aa:79: 3a:6c:2b:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwD86NQpL8oXTpScXHHk8pLunBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNTA5MDUwNzA3MDRaFw0yNTA5MDgxNzM4MDRaMDMxMTAvBgNV BAMTKEUyQUQ5NkU4QTA2NjJGOENERkI0N0Y2NUY4RTM2QkQxOUQyMkExNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxcjFogTKPVLj+g5LA1KnTKwN zKcHmgyxg27LNhQf224C5JLUvDosrTYgmKIbvPxKuBm3C4L1s+xQ/h0dlvFm8eMj WT/yNgQYKyH/hn/QWQSGB0EJCk0lljqheAjTSrWx+kqCFLWFzocr1bDTWCohf/Lh 2ljcRR7QKNgKeSRZ0ZillYfniqgwgr8XsipQDK5Tx5CUlYXHW7qDcQnoilEtI4Lz oMA3Itp2g+xpHm9OfAi1f6mL1cqH0z3AM4W0mZSV3Y2vwEj7G0giZ7GRDFyg8JAT JwTyFb8m24xr3K+YxHtz+cvD/98oCCpR8f/J0HZ138K7wXfwJ8AaGsPyE+9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4q2W6KBmL4zftH9l+ONr0Z0ioVswHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4 MEE5ODI1NERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1W5qntdVHS6Hs6fVUMexFOPO4Y8QaD7tHZ zmOzDyZmvCwCRZ8J4TC3phAom4V/VdTqFbdzYzWOP/8xwFA3bm9jnfnIa2YVYVn5 YUKsW8AVWHun87VJMOJ3oPeWiUJOPAbbIJw/vEppe9kK4DNf10YQH5aXtoy1WWLw OuaL340VRA/qYzjxIKxrW6U71qCTIFxsc9RjsHF25ql/tkwX0riK5/lSezQVGqjN e3gOnFjinm9OfXGtw77dKjyjDRu/AznTHAmi2qp29VCO4U+YAi8lC7NUh81LRN+r x5o3usSwtNhtyOdyAerKx0ZugELFVJtngH+ixbYvuImqeTpsK9c= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:48 2025 by rpki-client