$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: ygrcXah+NWUblnbHuv1gnsWZFKCEYjvdTTzjAKRcQpw= Subject key identifier: 07:C1:A1:0C:38:01:04:54:0D:9F:A3:AC:32:99:74:B6:5F:55:D5:C0 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 377F07AEB24CA32DF52240C11099500553E55069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: E6 Signing time: Mon 04 Aug 2025 16:20:02 +0000 Manifest this update: Mon 04 Aug 2025 16:15:02 +0000 Manifest next update: Fri 08 Aug 2025 00:48:02 +0000 Files and hashes: 1: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: /PYsoYMJloSAW2IVuMRKrcof60Ux4mgySqVpguEDGQY=) 2: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) 3: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7f:07:ae:b2:4c:a3:2d:f5:22:40:c1:10:99:50:05:53:e5:50:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Aug 4 16:15:02 2025 GMT Not After : Aug 8 00:48:02 2025 GMT Subject: CN=07C1A10C380104540D9FA3AC329974B65F55D5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:9a:4a:c9:f7:11:a3:86:fd:ed:5d:34:35: 3c:18:4b:b1:a3:a7:fa:63:44:a3:86:ce:52:b5:94: 64:69:c1:d3:d3:86:aa:42:98:6a:9a:3d:fb:25:32: 06:34:16:ed:ba:fb:f1:71:13:0d:f8:52:d9:7a:cb: 80:93:0b:98:e6:d2:da:5a:cc:1d:21:b8:b3:f7:81: b8:b3:42:14:04:51:de:89:8e:bd:e7:6d:46:ab:2e: cb:05:8a:c5:cc:f6:71:fb:39:8c:e5:1a:4d:a1:3e: bd:4e:fb:81:3c:f2:c1:a8:b4:57:bc:9d:5d:7f:32: 59:5d:ef:7d:7c:fa:6b:a9:6d:67:91:06:97:07:7e: ce:2b:35:56:55:f8:d2:3b:08:a8:65:bc:14:b6:bd: d9:6d:22:c6:93:fa:19:8c:78:34:db:61:fb:c4:87: 30:7b:99:d1:d3:de:25:27:97:8f:43:08:8b:cc:2e: f4:d6:a2:46:9e:27:f0:c6:57:0a:22:19:bf:e5:a7: 82:31:fb:cf:75:94:67:84:3b:ad:88:c6:41:a0:27: 85:ad:b7:d5:ef:c3:a7:c3:02:e0:04:a8:bf:72:34: ae:b7:af:f7:b6:fb:13:88:a6:15:91:40:3b:62:41: e4:c4:38:28:11:ff:e2:35:78:ca:f3:0d:00:ba:c8: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:A1:0C:38:01:04:54:0D:9F:A3:AC:32:99:74:B6:5F:55:D5:C0 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:30:e7:6c:c8:9e:59:03:cd:61:73:8c:f9:74:a7:ea:e0:3b: 2a:41:cf:51:b6:25:76:7a:d4:f8:92:23:49:41:25:71:ce:df: 44:67:e1:a1:10:a0:67:d2:8f:4a:63:25:85:f2:20:eb:a0:74: fc:5a:1d:64:61:d9:0c:c6:2f:b5:70:b8:b5:e5:de:ee:61:8f: 6c:45:3a:72:c4:0d:82:fc:44:91:7b:d6:0c:b1:ca:05:94:4f: 13:4b:8b:10:ce:12:fe:3e:89:24:3a:7c:78:64:0b:09:d7:79: 7c:26:76:b3:c9:3b:15:4c:52:7a:c9:01:29:8d:72:eb:9a:9f: e8:89:ab:f4:25:46:11:7f:3a:db:74:fe:12:33:8f:c1:0f:94: e0:4e:be:c3:89:97:d6:8c:87:8a:6e:2f:2b:e3:4e:cc:26:37: 4b:b8:77:dd:56:2e:41:0c:e3:b3:f9:3d:90:75:e9:8d:0d:9c: f9:18:a5:06:d0:9a:57:1d:9d:07:9b:bf:63:db:e5:88:10:a9: 49:8f:b2:97:46:ec:f2:83:67:e5:e1:81:a7:02:83:1f:fe:45: cf:38:83:4e:c6:60:86:7d:ba:90:d0:cf:75:23:52:22:80:8b: 43:98:be:3a:b0:95:cc:bc:45:81:b0:7a:6c:c4:a1:2d:e5:3b: 27:f7:2c:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN38HrrJMoy31IkDBEJlQBVPlUGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTA4MDQxNjE1MDJaFw0yNTA4MDgwMDQ4MDJaMDMxMTAvBgNV BAMTKDA3QzFBMTBDMzgwMTA0NTQwRDlGQTNBQzMyOTk3NEI2NUY1NUQ1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiZpKyfcRo4b97V00NTwYS7Gj p/pjRKOGzlK1lGRpwdPThqpCmGqaPfslMgY0Fu26+/FxEw34Utl6y4CTC5jm0tpa zB0huLP3gbizQhQEUd6Jjr3nbUarLssFisXM9nH7OYzlGk2hPr1O+4E88sGotFe8 nV1/Mlld7318+mupbWeRBpcHfs4rNVZV+NI7CKhlvBS2vdltIsaT+hmMeDTbYfvE hzB7mdHT3iUnl49DCIvMLvTWokaeJ/DGVwoiGb/lp4Ix+891lGeEO62IxkGgJ4Wt t9Xvw6fDAuAEqL9yNK63r/e2+xOIphWRQDtiQeTEOCgR/+I1eMrzDQC6yBc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB8GhDDgBBFQNn6OsMpl0tl9V1cAwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcw52zInlkDzWFzjPl0p+rgOypBz1G2JXZ6 1PiSI0lBJXHO30Rn4aEQoGfSj0pjJYXyIOugdPxaHWRh2QzGL7VwuLXl3u5hj2xF OnLEDYL8RJF71gyxygWUTxNLixDOEv4+iSQ6fHhkCwnXeXwmdrPJOxVMUnrJASmN cuuan+iJq/QlRhF/Ott0/hIzj8EPlOBOvsOJl9aMh4puLyvjTswmN0u4d91WLkEM 47P5PZB16Y0NnPkYpQbQmlcdnQebv2Pb5YgQqUmPspdG7PKDZ+XhgacCgx/+Rc84 g07GYIZ9upDQz3UjUiKAi0OYvjqwlcy8RYGwemzEoS3lOyf3LPc= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:08 2025 by rpki-client