$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: eejqDb7gtri5ttY1a6zzQLRkF34B1NH4HckTR4aspdk= Subject key identifier: 8C:3B:D6:0E:C2:37:93:34:CF:6B:DE:8A:57:63:A3:F1:67:B5:7D:29 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 3584A3B8BC17B694463409409A310AB730C0E852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0327 Signing time: Fri 08 Aug 2025 22:32:06 +0000 Manifest this update: Fri 08 Aug 2025 22:27:06 +0000 Manifest next update: Tue 12 Aug 2025 08:06:06 +0000 Files and hashes: 1: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: 4hIKn0lncyvnc0CBIxUWxQjNTAtZQk9mNY+tOkCFzZs=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 3: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:84:a3:b8:bc:17:b6:94:46:34:09:40:9a:31:0a:b7:30:c0:e8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Aug 8 22:27:06 2025 GMT Not After : Aug 12 08:06:06 2025 GMT Subject: CN=8C3BD60EC2379334CF6BDE8A5763A3F167B57D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:30:ad:8f:82:56:9b:4a:c9:1d:6d:26:ec: 25:1a:ae:a4:49:dc:a5:3d:b9:1a:4e:07:5f:7c:5c: 19:51:a4:8d:d5:26:26:9b:d8:11:20:31:b5:f1:61: 4a:04:5d:d4:49:1f:12:40:31:38:b1:39:bb:2b:02: f2:c1:87:63:c3:f4:40:6a:31:ab:cb:56:4d:0e:9c: 0e:11:90:9f:dd:be:77:7d:ef:89:7a:3b:2e:8c:23: 9e:be:5a:d8:21:44:40:e4:3d:7b:bc:7b:16:99:cc: 16:91:1d:40:1c:dd:41:0b:a6:2b:6f:ab:9f:5c:dd: b7:3d:ab:81:78:36:fe:19:b1:ae:2b:e6:e6:62:56: ec:40:d3:dd:47:5c:10:d5:3c:91:84:21:10:58:d8: f7:2a:4b:83:fc:84:99:0e:22:e0:df:00:24:f5:e5: fe:d4:66:80:89:4a:21:9a:60:1e:80:98:4f:e8:40: c8:85:71:eb:89:db:b9:5f:02:67:ca:d1:0c:f6:9d: e7:77:c5:90:01:29:fc:c6:dc:d4:df:a6:5c:37:0c: 00:b7:2a:ea:6b:1e:e7:ec:84:af:f3:91:62:f7:3b: 28:81:58:a4:31:c8:ee:82:82:4f:47:ce:77:2a:c3: 4e:bf:f0:a1:2c:8c:73:d5:9a:0c:86:dd:89:01:70: 2d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3B:D6:0E:C2:37:93:34:CF:6B:DE:8A:57:63:A3:F1:67:B5:7D:29 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0b:d6:53:a6:aa:93:c5:36:86:a3:93:03:9d:3a:61:1c:ef: 69:04:90:ea:eb:34:7a:a5:99:f8:7b:39:b4:ed:27:12:85:5e: 03:7a:58:1e:01:6c:ff:03:85:de:a1:30:88:73:b7:b4:22:3e: 0b:83:cb:5e:cc:45:c9:e2:83:f9:fe:bd:5f:aa:b5:3e:b5:14: aa:1e:90:fc:a4:6a:e6:33:4b:22:0a:2f:43:a1:ef:16:3a:1e: da:16:80:cb:35:cb:89:d8:a0:4d:d5:f1:7a:48:18:24:e4:82: 86:67:49:89:a1:8a:fa:76:fd:50:6e:f3:c4:64:b3:eb:87:2c: 85:6a:c5:78:88:9e:2b:6c:f3:4c:dd:8b:4b:1e:47:59:6f:77: 4f:db:07:37:68:7d:86:df:00:49:72:f3:f5:dd:de:91:4f:62: ef:ca:80:d9:c7:ff:61:64:9d:90:24:a6:6d:d2:96:f2:54:e8: dc:87:18:d0:12:ba:a4:1a:7b:1e:8e:d5:93:6f:e2:f8:f4:5d: 59:7f:bc:1e:83:05:49:b0:23:40:8a:d4:8a:d9:92:86:5b:51: b7:e6:4a:bf:72:50:9e:58:dd:1b:67:aa:80:00:d9:1a:a2:c9: 33:5a:58:ea:1c:3d:d4:63:a9:97:26:98:23:b6:59:14:83:94: 72:67:38:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYSjuLwXtpRGNAlAmjEKtzDA6FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA4MDgyMjI3MDZaFw0yNTA4MTIwODA2MDZaMDMxMTAvBgNV BAMTKDhDM0JENjBFQzIzNzkzMzRDRjZCREU4QTU3NjNBM0YxNjdCNTdEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTazCtj4JWm0rJHW0m7CUarqRJ 3KU9uRpOB198XBlRpI3VJiab2BEgMbXxYUoEXdRJHxJAMTixObsrAvLBh2PD9EBq MavLVk0OnA4RkJ/dvnd974l6Oy6MI56+WtghREDkPXu8exaZzBaRHUAc3UELpitv q59c3bc9q4F4Nv4Zsa4r5uZiVuxA091HXBDVPJGEIRBY2PcqS4P8hJkOIuDfACT1 5f7UZoCJSiGaYB6AmE/oQMiFceuJ27lfAmfK0Qz2ned3xZABKfzG3NTfplw3DAC3 KuprHufshK/zkWL3OyiBWKQxyO6Cgk9Hzncqw06/8KEsjHPVmgyG3YkBcC0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDvWDsI3kzTPa96KV2Oj8We1fSkwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoL1lOmqpPFNoajkwOdOmEc72kEkOrrNHql mfh7ObTtJxKFXgN6WB4BbP8Dhd6hMIhzt7QiPguDy17MRcnig/n+vV+qtT61FKoe kPykauYzSyIKL0Oh7xY6HtoWgMs1y4nYoE3V8XpIGCTkgoZnSYmhivp2/VBu88Rk s+uHLIVqxXiInits80zdi0seR1lvd0/bBzdofYbfAEly8/Xd3pFPYu/KgNnH/2Fk nZAkpm3SlvJU6NyHGNASuqQaex6O1ZNv4vj0XVl/vB6DBUmwI0CK1IrZkoZbUbfm Sr9yUJ5Y3RtnqoAA2RqiyTNaWOocPdRjqZcmmCO2WRSDlHJnONg= -----END CERTIFICATE-----Generated at Sat Aug 9 20:45:41 2025 by rpki-client