$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: OvecSFsHGeO2xwkjRlInuFlE59G+BK5pEdeO9fF9Dfk= Subject key identifier: 54:68:67:61:A5:AE:64:CD:F2:90:76:15:9A:73:EA:F4:C6:AC:41:D2 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 5314FE091CC887AEC98B6A81237821BA6043EBE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: CF Signing time: Mon 08 Sep 2025 08:40:41 +0000 Manifest this update: Mon 08 Sep 2025 08:35:41 +0000 Manifest next update: Thu 11 Sep 2025 16:47:41 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: vTGeB1JZZRWMKU/iUgDpTX8GCkriJtvUfADD1zTT8Ls=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:14:fe:09:1c:c8:87:ae:c9:8b:6a:81:23:78:21:ba:60:43:eb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Sep 8 08:35:41 2025 GMT Not After : Sep 11 16:47:41 2025 GMT Subject: CN=54686761A5AE64CDF29076159A73EAF4C6AC41D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:e6:42:82:c7:e5:b4:ed:b2:fc:c3:71:3e: c6:4b:98:64:22:c2:09:1c:e4:5d:5a:b5:10:b9:f3: 64:25:8e:1e:45:a2:7c:b4:4f:98:d8:a1:cc:72:8a: aa:a8:45:82:50:67:e3:dd:69:76:67:ba:6f:34:f7: 14:43:aa:81:b4:de:17:a9:77:58:c3:1a:56:3f:c0: 08:c4:b3:3a:9d:98:e3:3c:b3:9d:59:74:c6:3d:6b: 6e:3a:26:8c:72:d1:dc:a6:15:a6:21:f5:65:8b:84: 63:0b:b7:64:98:91:b9:55:69:c1:57:fa:8b:34:86: 86:72:ba:6e:b6:c2:e7:d2:69:1c:de:48:76:91:3b: ab:f3:0c:80:52:62:cb:a1:2b:d6:6c:9e:5e:c3:5a: 8a:8a:d4:78:70:a0:be:b4:3a:70:87:f9:23:87:79: 70:e6:7a:1b:71:6f:bb:25:d6:38:30:79:86:15:4f: b5:2b:be:53:c7:31:18:c9:5f:39:c9:a5:4f:37:aa: 6f:fb:5f:a1:bf:c6:ae:43:2d:b6:57:3e:36:b7:3f: 79:0d:5d:05:1b:7c:87:93:08:71:69:9d:e0:ce:c3: 38:ef:c1:82:42:14:44:ea:b4:0b:e3:17:09:8b:ca: 23:dc:a8:5e:63:ae:de:8d:94:3b:81:02:ca:46:95: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:67:61:A5:AE:64:CD:F2:90:76:15:9A:73:EA:F4:C6:AC:41:D2 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:56:04:f7:af:83:16:79:8f:20:34:29:46:57:e5:a0:97:ea: 02:26:a1:fb:2e:8c:c8:7e:3d:df:f5:ca:70:68:7a:f7:09:20: fd:c6:cd:1a:74:e7:ea:51:79:5b:56:2f:99:59:db:3b:c9:27: 34:f6:03:f7:69:6b:3c:b2:ac:db:1f:ee:b6:8e:e5:b8:5a:c8: 3b:90:e2:62:b7:3d:ef:0d:5d:10:13:73:2b:b2:01:74:96:59: 16:f7:24:f7:16:95:2d:13:ef:69:00:2a:08:37:43:8e:a7:2f: 77:25:0d:2f:63:74:3b:b2:e6:07:ab:e7:97:e8:1e:f3:de:ee: 94:ff:3a:16:34:60:2e:a2:3c:c5:63:cb:d2:c6:81:39:7a:d1: 8e:61:b0:37:e4:76:e8:24:a1:5a:ed:24:66:8f:eb:dc:81:ec: 9b:ce:6a:16:a5:af:d7:4b:d1:e0:e7:24:29:5c:86:2d:14:1b: c0:4a:74:3b:74:3b:05:29:2f:dd:14:42:10:bb:4b:14:80:87: 85:d9:9b:27:3a:73:84:c8:8b:a2:13:df:9b:02:48:83:37:7d: 15:ad:5d:46:10:59:83:30:5a:53:4b:d9:9a:a1:e7:29:c7:2c: d2:38:93:5d:25:56:1e:46:38:e1:d2:4d:8d:89:cc:47:11:4d: a4:b9:56:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxT+CRzIh67Ji2qBI3ghumBD6+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTA5MDgwODM1NDFaFw0yNTA5MTExNjQ3NDFaMDMxMTAvBgNV BAMTKDU0Njg2NzYxQTVBRTY0Q0RGMjkwNzYxNTlBNzNFQUY0QzZBQzQxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFu+ZCgsfltO2y/MNxPsZLmGQi wgkc5F1atRC582Qljh5Fony0T5jYocxyiqqoRYJQZ+PdaXZnum809xRDqoG03hep d1jDGlY/wAjEszqdmOM8s51ZdMY9a246Joxy0dymFaYh9WWLhGMLt2SYkblVacFX +os0hoZyum62wufSaRzeSHaRO6vzDIBSYsuhK9Zsnl7DWoqK1HhwoL60OnCH+SOH eXDmehtxb7sl1jgweYYVT7UrvlPHMRjJXznJpU83qm/7X6G/xq5DLbZXPja3P3kN XQUbfIeTCHFpneDOwzjvwYJCFETqtAvjFwmLyiPcqF5jrt6NlDuBAspGla8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGhnYaWuZM3ykHYVmnPq9MasQdIwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRWBPevgxZ5jyA0KUZX5aCX6gImofsujMh+ Pd/1ynBoevcJIP3GzRp05+pReVtWL5lZ2zvJJzT2A/dpazyyrNsf7raO5bhayDuQ 4mK3Pe8NXRATcyuyAXSWWRb3JPcWlS0T72kAKgg3Q46nL3clDS9jdDuy5ger55fo HvPe7pT/OhY0YC6iPMVjy9LGgTl60Y5hsDfkdugkoVrtJGaP69yB7JvOahalr9dL 0eDnJClchi0UG8BKdDt0OwUpL90UQhC7SxSAh4XZmyc6c4TIi6IT35sCSIM3fRWt XUYQWYMwWlNL2Zqh5ynHLNI4k10lVh5GOOHSTY2JzEcRTaS5Vmc= -----END CERTIFICATE-----Generated at Mon Sep 8 10:17:54 2025 by rpki-client