$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: SBC9maDMT83YdKnU9vNH8wuizxhZW2RynllCJhnaJQM= Subject key identifier: E3:11:25:09:57:76:A8:46:5D:2F:DC:7A:D2:BE:6F:55:12:66:FD:6B Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 292FB6C0E4AD1E9148F1C7BEADC15838A36212EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: B0 Signing time: Sun 07 Sep 2025 09:31:22 +0000 Manifest this update: Sun 07 Sep 2025 09:26:22 +0000 Manifest next update: Wed 10 Sep 2025 11:33:22 +0000 Files and hashes: 1: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: mqm9r67m3F01kyxIlpHDsph0L4iNcknGFGK/VXLUSuU=) 2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2f:b6:c0:e4:ad:1e:91:48:f1:c7:be:ad:c1:58:38:a3:62:12:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Sep 7 09:26:22 2025 GMT Not After : Sep 10 11:33:22 2025 GMT Subject: CN=E31125095776A8465D2FDC7AD2BE6F551266FD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:39:f1:84:d6:68:88:3e:98:80:24:ee:f9:3e: 63:7d:aa:8f:2e:15:af:9a:e7:39:6e:92:cd:b1:48: 47:53:9b:34:cc:0c:8c:5c:75:f3:6b:8d:e3:ba:aa: c3:5d:ff:cc:cf:c6:59:c1:9e:3e:b2:03:b4:5a:2a: 0b:da:9f:e5:96:b6:ae:e4:84:49:c6:9b:56:ef:ef: 0d:c2:40:5c:27:f1:7d:49:df:1e:c8:6c:25:0a:4a: a3:12:a1:7d:d6:8a:fe:67:12:61:8d:d3:71:69:63: dc:10:34:f2:83:67:66:ba:41:84:e6:de:56:37:2d: 0b:b7:33:ad:2f:9d:bb:96:cd:09:21:d2:7d:a2:fc: 1c:cc:29:aa:bc:78:1e:1e:07:c6:73:48:bc:b8:f3: 0a:22:28:f0:72:44:2f:3f:e6:19:2d:64:47:6a:a8: 00:74:5e:85:b4:e5:f6:5d:6c:d4:60:e7:b1:15:ff: cd:7b:4d:72:39:e1:a4:14:da:cc:d2:ee:72:b0:0a: 54:f9:eb:ea:13:80:d3:2a:b6:4c:03:5c:4c:3e:a8: af:0d:2b:2d:af:fe:b0:43:bb:77:a8:c5:a7:23:27: bd:62:c0:96:65:53:cd:01:b3:d0:f1:3d:fc:7c:c8: 28:64:5e:f0:4f:64:40:ed:2c:d8:88:9f:9b:b1:48: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:11:25:09:57:76:A8:46:5D:2F:DC:7A:D2:BE:6F:55:12:66:FD:6B X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8a:9c:64:05:bf:86:e4:62:3a:39:84:01:8d:7d:1f:56:ff: fe:6a:3f:35:e4:0e:d5:3f:40:b3:dd:54:4c:49:5d:9e:dc:a7: 7c:29:a6:fb:52:fa:fd:06:12:64:01:6b:f1:03:81:a8:79:e5: e7:a6:2a:bd:e0:a1:85:fd:6e:05:33:89:c3:cf:5c:fc:30:fb: bf:a1:9d:43:2a:fb:64:72:19:ce:19:9a:40:48:4a:73:96:e9: 8b:72:f5:b0:79:03:ee:49:93:fd:d9:7b:5d:9f:81:58:fb:84: a2:57:e9:27:87:a9:16:9e:fd:20:70:d4:d0:fa:bf:c1:20:40: 60:8a:79:e0:bc:5b:e7:4d:24:31:a8:41:bc:1a:d1:11:f9:7b: e8:a7:d8:60:d1:4e:6b:84:6f:ac:b2:68:67:b3:bc:ff:c2:84: 42:c0:d5:37:24:c4:95:40:f9:03:d2:88:09:72:ef:d0:28:21: 0d:78:2d:1c:4d:fa:2c:fb:5a:9e:67:52:84:80:be:72:5b:9b: d2:6a:a0:bd:bb:54:79:a7:d3:39:9e:24:76:4d:f1:e9:8d:1a: d7:e4:d1:e2:5d:5a:43:61:04:6b:73:20:13:d3:78:9c:8f:ea: a2:f7:2d:f3:b8:2b:a2:06:68:27:32:a3:1e:07:2f:ec:2f:a0: 28:37:6f:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKS+2wOStHpFI8ce+rcFYOKNiEuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTA5MDcwOTI2MjJaFw0yNTA5MTAxMTMzMjJaMDMxMTAvBgNV BAMTKEUzMTEyNTA5NTc3NkE4NDY1RDJGREM3QUQyQkU2RjU1MTI2NkZENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOfGE1miIPpiAJO75PmN9qo8u Fa+a5zluks2xSEdTmzTMDIxcdfNrjeO6qsNd/8zPxlnBnj6yA7RaKgvan+WWtq7k hEnGm1bv7w3CQFwn8X1J3x7IbCUKSqMSoX3Wiv5nEmGN03FpY9wQNPKDZ2a6QYTm 3lY3LQu3M60vnbuWzQkh0n2i/BzMKaq8eB4eB8ZzSLy48woiKPByRC8/5hktZEdq qAB0XoW05fZdbNRg57EV/817TXI54aQU2szS7nKwClT56+oTgNMqtkwDXEw+qK8N Ky2v/rBDu3eoxacjJ71iwJZlU80Bs9DxPfx8yChkXvBPZEDtLNiIn5uxSPZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xElCVd2qEZdL9x60r5vVRJm/WswHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaKnGQFv4bkYjo5hAGNfR9W//5qPzXkDtU/ QLPdVExJXZ7cp3wppvtS+v0GEmQBa/EDgah55eemKr3goYX9bgUzicPPXPww+7+h nUMq+2RyGc4ZmkBISnOW6Yty9bB5A+5Jk/3Ze12fgVj7hKJX6SeHqRae/SBw1ND6 v8EgQGCKeeC8W+dNJDGoQbwa0RH5e+in2GDRTmuEb6yyaGezvP/ChELA1TckxJVA +QPSiAly79AoIQ14LRxN+iz7Wp5nUoSAvnJbm9JqoL27VHmn0zmeJHZN8emNGtfk 0eJdWkNhBGtzIBPTeJyP6qL3LfO4K6IGaCcyox4HL+wvoCg3bxo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:50 2025 by rpki-client