$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: qb9QtffmQfoAZzzQORdo7YuVzK0fWmiqL8wxo6fWzdA= Subject key identifier: 3F:6E:14:01:E7:9A:75:C1:9E:8F:E5:6F:0E:93:0D:22:61:66:53:00 Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 015B5EA07C2196E7AF67EAC0629B2B073041F835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 0505 Signing time: Sat 06 Sep 2025 10:11:11 +0000 Manifest this update: Sat 06 Sep 2025 10:06:11 +0000 Manifest next update: Tue 09 Sep 2025 10:29:11 +0000 Files and hashes: 1: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=) 2: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: O7ms2O+UhtZVKkE81cuQDtuTyN3BEIVlVc+cc3/gZMg=) 3: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: pWb4KXnq2AGqFEIShewzaaEzj0yENsL0SKp829fl4D4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5b:5e:a0:7c:21:96:e7:af:67:ea:c0:62:9b:2b:07:30:41:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Sep 6 10:06:11 2025 GMT Not After : Sep 9 10:29:11 2025 GMT Subject: CN=3F6E1401E79A75C19E8FE56F0E930D2261665300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:ef:84:f2:a5:1f:ae:1b:db:cd:be:08:4c: f6:b1:d4:f9:13:9f:88:5f:11:c4:16:4b:3d:36:fa: 7b:30:bf:a5:9e:21:61:43:29:21:ee:f4:fc:60:c8: f6:a9:71:01:d0:a8:9f:24:37:48:a9:03:b8:7d:f3: 64:48:0c:f9:43:d7:e1:65:d1:e3:b3:32:48:37:ab: 6e:94:65:6b:dc:37:48:d9:f3:e7:ec:a0:eb:70:57: f9:ff:9f:dd:d6:ac:59:44:c7:02:99:90:5f:3d:f0: 59:a1:6d:9d:06:2d:3e:f4:19:7a:7f:51:5f:87:f7: 9f:c6:23:03:2d:61:bf:54:f1:20:d4:dc:c2:0f:8a: 43:0a:f9:1b:37:d2:23:5d:1f:05:6c:07:57:8a:2c: e9:79:07:05:c1:d5:27:71:65:95:4a:1b:d2:78:75: 35:0f:50:80:48:b7:86:31:c4:69:47:55:7a:67:fa: 16:da:d5:49:5c:8c:c5:de:4b:ae:b0:93:66:1d:0f: ed:25:06:32:c7:66:83:4f:18:ea:92:72:66:cc:a8: c9:e6:30:25:4e:a8:16:1d:14:aa:4d:22:74:26:62: a8:e8:eb:79:36:33:a7:60:49:42:0e:57:20:0c:5b: 16:27:bf:1f:48:e1:df:93:fd:45:b3:25:bc:e2:f7: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:14:01:E7:9A:75:C1:9E:8F:E5:6F:0E:93:0D:22:61:66:53:00 X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:08:57:39:40:57:3f:88:cd:5a:0f:1c:55:0b:c8:b4:9d:6d: a7:66:bd:5c:e1:9c:a5:60:ed:e8:a2:d6:ee:ed:a7:41:6f:42: 9f:37:97:0f:83:78:4c:51:b4:14:ea:77:63:72:c4:f3:cc:52: 91:0b:79:b6:53:72:83:4a:ef:4e:4d:03:5b:58:b1:57:1c:20: 7e:d3:97:85:fc:4e:7a:3d:b5:f5:89:b6:26:8b:30:97:2a:3b: 4c:66:86:0b:ae:5e:ed:e6:b0:05:b0:b0:01:bd:ce:8e:85:c1: 10:7e:51:5c:c3:69:65:d4:93:03:fb:54:ce:df:24:e6:44:de: 6d:41:a4:02:74:7c:8a:ca:b9:67:02:d8:06:fa:d5:a7:0e:6a: 67:37:99:df:e4:20:08:57:47:cb:47:d5:db:07:fb:aa:11:53: 9e:ea:1c:35:6d:0b:2e:e9:60:df:a6:94:9a:72:79:ae:b7:33: d0:c0:b4:47:9f:49:04:4a:c7:37:16:1f:d7:36:b4:71:8c:c2: 43:fb:38:1c:fc:ad:17:5f:b3:2f:ff:34:ab:48:0d:ae:94:5b: 20:ca:4e:fa:8d:71:e4:a1:ad:4f:fd:79:34:19:d4:28:60:51: e7:87:41:3e:6f:36:a2:41:94:3d:95:e3:17:87:9e:21:c6:b3: e7:0b:3e:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVteoHwhluevZ+rAYpsrBzBB+DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTA5MDYxMDA2MTFaFw0yNTA5MDkxMDI5MTFaMDMxMTAvBgNV BAMTKDNGNkUxNDAxRTc5QTc1QzE5RThGRTU2RjBFOTMwRDIyNjE2NjUzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xu+E8qUfrhvbzb4ITPax1PkT n4hfEcQWSz02+nswv6WeIWFDKSHu9PxgyPapcQHQqJ8kN0ipA7h982RIDPlD1+Fl 0eOzMkg3q26UZWvcN0jZ8+fsoOtwV/n/n93WrFlExwKZkF898FmhbZ0GLT70GXp/ UV+H95/GIwMtYb9U8SDU3MIPikMK+Rs30iNdHwVsB1eKLOl5BwXB1SdxZZVKG9J4 dTUPUIBIt4YxxGlHVXpn+hba1UlcjMXeS66wk2YdD+0lBjLHZoNPGOqScmbMqMnm MCVOqBYdFKpNInQmYqjo63k2M6dgSUIOVyAMWxYnvx9I4d+T/UWzJbzi9zszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP24UAeeadcGej+VvDpMNImFmUwAwHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQIVzlAVz+IzVoPHFULyLSdbadmvVzhnKVg 7eii1u7tp0FvQp83lw+DeExRtBTqd2NyxPPMUpELebZTcoNK705NA1tYsVccIH7T l4X8Tno9tfWJtiaLMJcqO0xmhguuXu3msAWwsAG9zo6FwRB+UVzDaWXUkwP7VM7f JOZE3m1BpAJ0fIrKuWcC2Ab61acOamc3md/kIAhXR8tH1dsH+6oRU57qHDVtCy7p YN+mlJpyea63M9DAtEefSQRKxzcWH9c2tHGMwkP7OBz8rRdfsy//NKtIDa6UWyDK TvqNceShrU/9eTQZ1ChgUeeHQT5vNqJBlD2V4xeHniHGs+cLPt8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:48 2025 by rpki-client