$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: otWriYnpKcrN4DhzB46OQ4/Co2k576+dmeuhwUdWZ9U= Subject key identifier: B3:2F:3E:5F:E5:3A:F8:4A:C2:AC:CC:15:E0:9B:55:94:38:FE:9A:35 Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 7FED9FA227FE0DEEF13DCF19B1123F5A850697C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: E1 Signing time: Tue 04 Nov 2025 10:11:51 +0000 Manifest this update: Tue 04 Nov 2025 10:06:51 +0000 Manifest next update: Fri 07 Nov 2025 15:44:51 +0000 Files and hashes: 1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) 2: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: 3c6WZXiwGpBSU5/bEAxL2AqztYDdyF8bwtoIkvHzPy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ed:9f:a2:27:fe:0d:ee:f1:3d:cf:19:b1:12:3f:5a:85:06:97:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Nov 4 10:06:51 2025 GMT Not After : Nov 7 15:44:51 2025 GMT Subject: CN=B32F3E5FE53AF84AC2ACCC15E09B559438FE9A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:13:95:12:62:17:97:4c:28:e0:cc:0e:58:c3: 91:f5:64:10:58:1b:43:69:66:e9:42:61:b0:5b:99: 9b:ba:69:1f:22:b9:79:34:e2:c1:54:b6:a9:29:f4: 89:3b:02:b2:c3:4c:73:52:f9:c7:1a:a4:59:6e:41: 8a:c4:36:a7:c8:ba:a0:af:f3:f0:4e:35:9e:05:48: 33:0b:40:d1:38:d8:d8:4d:02:ba:7d:85:2b:ea:0f: 83:2d:2c:0c:94:87:e7:dd:49:8d:d3:84:51:1a:a4: 6c:66:7b:e1:f1:74:d2:9b:a7:2a:8d:ef:f5:60:10: 13:3b:e7:6e:05:cd:c1:99:8f:98:c5:fd:21:e1:bf: c7:8c:72:d2:e3:45:e1:c3:1b:3c:49:26:82:f7:67: 0b:b2:6e:24:03:c4:94:c4:70:75:1a:5b:12:b5:d2: 22:98:7c:86:f9:51:98:02:4d:31:fc:58:69:4f:82: 24:fb:89:93:03:c8:69:a6:f4:3a:e6:52:43:05:d2: 07:66:0c:e7:3b:98:2f:c6:25:f5:50:e7:55:b3:b8: 94:76:39:82:82:8c:50:c5:05:95:5e:21:ec:9b:76: 75:de:ab:e3:39:71:07:f9:4c:c9:a7:92:47:84:4f: 19:82:9e:ba:3f:51:a1:7a:41:8c:41:ab:bf:ea:66: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2F:3E:5F:E5:3A:F8:4A:C2:AC:CC:15:E0:9B:55:94:38:FE:9A:35 X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:55:2a:aa:a7:cf:ad:e7:ce:3e:54:7e:b6:a0:70:99:59:86: bb:29:66:2c:0e:ff:c1:f1:04:98:81:19:ed:a2:f6:1b:23:20: 97:77:90:b3:be:a7:64:a1:41:cd:f2:cd:c0:d4:de:e3:03:5e: a4:f0:ba:b5:df:e2:fe:54:27:35:79:42:2d:4e:22:16:81:70: 8c:ef:0b:7c:0a:e7:53:a3:8c:7c:dd:cf:69:0f:a4:2c:4c:0e: 82:57:9b:05:65:9e:c4:6f:6a:1e:20:1c:a8:b1:18:14:bc:7f: b0:c7:a8:89:b1:49:73:93:30:d6:be:74:1b:9c:1d:c1:4b:07: 26:24:f1:bf:8e:fa:7a:2e:58:da:58:e5:97:1d:57:2d:f9:84: 9d:20:4b:8e:fe:2e:e6:b3:1d:0f:ef:d9:d1:ca:b8:63:e9:46: 3a:63:e4:a7:46:1b:1a:fb:31:74:0c:e4:2d:2a:5b:21:92:00: a8:e5:fc:94:66:43:d7:c8:f2:c3:d1:92:8b:88:17:9c:5e:47: 64:5d:9f:a2:b1:e4:1c:ed:9e:7d:8c:d8:9a:f6:d9:05:d1:db: 31:48:ed:46:0b:51:3b:4e:15:a8:d6:fe:41:46:09:6d:d0:85: af:e3:51:c4:2d:ec:d1:08:49:39:b5:ef:75:9e:ea:6b:ec:36: 24:0c:18:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+2foif+De7xPc8ZsRI/WoUGl8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTExMDQxMDA2NTFaFw0yNTExMDcxNTQ0NTFaMDMxMTAvBgNV BAMTKEIzMkYzRTVGRTUzQUY4NEFDMkFDQ0MxNUUwOUI1NTk0MzhGRTlBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrE5USYheXTCjgzA5Yw5H1ZBBY G0NpZulCYbBbmZu6aR8iuXk04sFUtqkp9Ik7ArLDTHNS+ccapFluQYrENqfIuqCv 8/BONZ4FSDMLQNE42NhNArp9hSvqD4MtLAyUh+fdSY3ThFEapGxme+HxdNKbpyqN 7/VgEBM7524FzcGZj5jF/SHhv8eMctLjReHDGzxJJoL3ZwuybiQDxJTEcHUaWxK1 0iKYfIb5UZgCTTH8WGlPgiT7iZMDyGmm9DrmUkMF0gdmDOc7mC/GJfVQ51WzuJR2 OYKCjFDFBZVeIeybdnXeq+M5cQf5TMmnkkeETxmCnro/UaF6QYxBq7/qZmlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsy8+X+U6+ErCrMwV4JtVlDj+mjUwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFVKqqnz63nzj5UfragcJlZhrspZiwO/8Hx BJiBGe2i9hsjIJd3kLO+p2ShQc3yzcDU3uMDXqTwurXf4v5UJzV5Qi1OIhaBcIzv C3wK51OjjHzdz2kPpCxMDoJXmwVlnsRvah4gHKixGBS8f7DHqImxSXOTMNa+dBuc HcFLByYk8b+O+nouWNpY5ZcdVy35hJ0gS47+LuazHQ/v2dHKuGPpRjpj5KdGGxr7 MXQM5C0qWyGSAKjl/JRmQ9fI8sPRkouIF5xeR2Rdn6Kx5Bztnn2M2Jr22QXR2zFI 7UYLUTtOFajW/kFGCW3Qha/jUcQt7NEISTm173We6mvsNiQMGG8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:49 2025 by rpki-client