$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: 29lE4aamluBIpprVrI/VL+/kRlao6UOGqsczt9yQOgA= Subject key identifier: 2E:E9:03:54:9E:1A:A0:80:28:CC:EA:33:15:F4:D7:BE:A2:12:59:D2 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 29F5AE1239BAD62B68E719DC65845D92E0405ADC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: F5 Signing time: Sun 07 Sep 2025 08:50:02 +0000 Manifest this update: Sun 07 Sep 2025 08:45:02 +0000 Manifest next update: Wed 10 Sep 2025 16:33:02 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) 2: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: fIvPiZI1BdzQDb2wBr8+ClodQCbAHC7Zgk/FN5obKj4=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 16:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f5:ae:12:39:ba:d6:2b:68:e7:19:dc:65:84:5d:92:e0:40:5a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Sep 7 08:45:02 2025 GMT Not After : Sep 10 16:33:02 2025 GMT Subject: CN=2EE903549E1AA08028CCEA3315F4D7BEA21259D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:bb:88:0d:e4:6c:3c:56:d7:dc:3c:ac:f1: 5c:1e:d0:7a:ae:31:88:0d:e9:82:cb:17:a3:e8:2a: 1c:55:1f:95:97:1f:41:ba:5c:c2:70:48:7c:21:12: 2b:a8:5a:8a:83:b5:3d:f7:d5:60:61:f6:e3:ba:c2: 7a:68:d3:ea:71:d2:84:33:99:70:b8:d4:1b:1a:96: 32:0d:d7:92:ba:be:e7:08:7d:32:21:c6:2a:77:63: 47:38:70:33:00:f1:0c:52:34:d4:ae:ae:07:33:f7: d4:a5:69:81:25:11:6e:22:ac:f1:79:a5:29:53:e8: 37:a8:3f:5f:c5:57:0e:85:63:18:59:92:19:e4:b9: c5:ff:f4:82:7f:33:aa:7d:62:1b:03:6a:fc:a4:e7: 5b:7c:a5:ed:bf:4c:1f:b1:af:9b:bd:00:85:31:f3: 76:56:82:62:b3:a8:c3:1e:c1:89:c9:75:14:5a:98: 03:83:cd:22:ee:2b:e7:a8:78:f6:d7:0b:30:8d:45: dc:cd:b8:65:e4:62:31:b1:3f:82:91:ea:73:40:5a: 8b:1b:29:60:4a:e5:98:fa:49:02:d7:38:1a:59:4b: 20:d3:e0:8e:56:58:6a:f1:ee:c0:00:49:2f:c4:23: 6a:06:4d:f9:69:02:c0:ab:47:1a:7e:13:56:5e:48: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:03:54:9E:1A:A0:80:28:CC:EA:33:15:F4:D7:BE:A2:12:59:D2 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4b:5e:3d:d0:ad:32:f8:ca:ec:77:98:71:b0:97:a9:c7:58: 23:08:81:bd:96:ca:c3:d1:4a:4e:bb:0c:03:46:43:2d:5f:a1: 0d:4c:49:25:60:3f:40:1e:76:3e:ef:7b:6a:46:5d:49:e7:b5: ea:40:f6:db:5f:21:6f:20:0a:f1:cf:e3:6d:a9:93:aa:92:e8: 51:ef:6a:23:51:f2:60:ba:39:e4:cb:b0:26:03:c2:57:99:83: 78:61:ae:43:8c:9c:12:7b:9d:cf:8a:c9:47:3f:1a:f9:f3:72: 20:7d:9e:8f:64:e5:65:e8:d0:ae:88:2a:fd:14:7b:68:db:f8: 38:56:5f:0f:dc:08:f0:62:42:fc:ac:6f:0f:0a:40:22:04:97: 23:64:80:71:f8:50:72:22:ca:39:8d:1c:b6:18:00:92:50:75: 2f:d3:aa:0b:27:d6:96:38:60:2c:97:2e:6a:45:54:85:fd:1c: 10:10:45:08:29:11:b9:cc:f4:c4:09:fb:96:e5:95:5c:3f:08: b1:f6:b7:05:86:16:a2:d6:24:e1:5e:77:68:29:57:7f:c0:26: 71:37:08:3a:1e:79:b1:e2:1e:20:6d:be:e7:30:68:dc:2e:26: 63:3b:fb:e1:99:45:99:fe:4c:73:2d:a5:75:82:74:02:2b:a1: 23:68:c9:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfWuEjm61ito5xncZYRdkuBAWtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTA5MDcwODQ1MDJaFw0yNTA5MTAxNjMzMDJaMDMxMTAvBgNV BAMTKDJFRTkwMzU0OUUxQUEwODAyOENDRUEzMzE1RjREN0JFQTIxMjU5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zbuIDeRsPFbX3Dys8Vwe0Hqu MYgN6YLLF6PoKhxVH5WXH0G6XMJwSHwhEiuoWoqDtT331WBh9uO6wnpo0+px0oQz mXC41BsaljIN15K6vucIfTIhxip3Y0c4cDMA8QxSNNSurgcz99SlaYElEW4irPF5 pSlT6DeoP1/FVw6FYxhZkhnkucX/9IJ/M6p9YhsDavyk51t8pe2/TB+xr5u9AIUx 83ZWgmKzqMMewYnJdRRamAODzSLuK+eoePbXCzCNRdzNuGXkYjGxP4KR6nNAWosb KWBK5Zj6SQLXOBpZSyDT4I5WWGrx7sAASS/EI2oGTflpAsCrRxp+E1ZeSKcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULukDVJ4aoIAozOozFfTXvqISWdIwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhLXj3QrTL4yux3mHGwl6nHWCMIgb2WysPR Sk67DANGQy1foQ1MSSVgP0Aedj7ve2pGXUnntepA9ttfIW8gCvHP422pk6qS6FHv aiNR8mC6OeTLsCYDwleZg3hhrkOMnBJ7nc+KyUc/GvnzciB9no9k5WXo0K6IKv0U e2jb+DhWXw/cCPBiQvysbw8KQCIElyNkgHH4UHIiyjmNHLYYAJJQdS/Tqgsn1pY4 YCyXLmpFVIX9HBAQRQgpEbnM9MQJ+5bllVw/CLH2twWGFqLWJOFed2gpV3/AJnE3 CDoeebHiHiBtvucwaNwuJmM7++GZRZn+THMtpXWCdAIroSNoyaA= -----END CERTIFICATE-----Generated at Mon Sep 8 05:12:30 2025 by rpki-client