$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: JytYu1zm6mT6zv+dyoOp3eqZJLSh0YSiNvubR0flmY0= Subject key identifier: AF:B1:06:1C:54:D1:B3:64:95:0F:A8:66:87:5C:D1:D4:2D:BB:D1:50 Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 6B3EBE718B1F6B5F4745BA24E35ACD73B25D7DB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 014C Signing time: Mon 03 Nov 2025 03:21:52 +0000 Manifest this update: Mon 03 Nov 2025 03:16:52 +0000 Manifest next update: Thu 06 Nov 2025 06:27:52 +0000 Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=) 2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: C6BcHcemG7iT2lWlfIPAtt/oTmz9keHQleo7TaTe1cE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3e:be:71:8b:1f:6b:5f:47:45:ba:24:e3:5a:cd:73:b2:5d:7d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Nov 3 03:16:52 2025 GMT Not After : Nov 6 06:27:52 2025 GMT Subject: CN=AFB1061C54D1B364950FA866875CD1D42DBBD150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:dd:2e:ea:98:32:f0:e3:7e:69:b5:c7:30: 04:81:b1:1e:0b:06:12:d1:53:9b:17:4a:de:08:ee: 80:46:3f:3e:f0:f3:5f:de:b8:d8:5f:9c:0b:56:af: 0f:00:96:fd:8f:9d:ba:35:fe:2f:44:ab:a7:4c:9a: f0:be:86:72:35:b3:77:8e:dd:46:be:c7:53:96:b9: d5:59:36:3f:5c:09:a2:61:91:9e:0b:cf:7b:1a:e7: a5:4f:19:bb:4e:0f:69:d6:af:27:85:27:d0:93:48: 00:59:50:aa:43:65:0b:f6:c7:a1:c1:c0:fb:cd:af: 12:22:73:5d:68:48:65:cb:33:79:97:dc:aa:0a:4e: bd:b8:49:7f:0d:88:05:b6:88:17:dd:bf:79:54:9f: 73:fa:d8:e6:fb:a0:8d:3f:f2:a8:b2:ee:34:cf:4c: 38:ba:e1:81:59:93:c3:2f:fc:dd:cf:c6:85:e3:08: 7d:8e:33:9c:bb:01:85:c8:76:e8:28:24:c1:ae:e0: b7:2c:5a:f7:84:45:5a:bc:0d:e6:61:99:67:40:e5: e7:d1:2e:7b:a2:bc:73:2c:f1:7d:83:35:64:62:53: 74:d0:00:90:f1:7b:99:c2:1d:fc:87:ec:1f:a9:33: b0:8e:19:d8:8d:86:19:50:a2:79:e0:74:6b:ce:4e: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B1:06:1C:54:D1:B3:64:95:0F:A8:66:87:5C:D1:D4:2D:BB:D1:50 X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5d:cb:83:a0:72:84:4d:a0:8b:1e:1c:df:8e:fb:4c:8f:2c: 29:67:3c:60:e6:60:92:01:3d:05:43:09:bc:b7:f5:1b:5f:a5: 33:8b:da:1f:b5:a6:f7:de:f5:85:e3:e0:40:5c:66:17:d8:44: 4c:2d:0d:af:0c:6d:cf:e7:b7:13:9f:2d:fa:c6:f1:4f:6c:c0: 59:49:57:b2:40:44:45:e7:8c:b3:ff:7b:83:e3:13:c9:7b:72: dd:bd:17:48:dd:5f:09:83:4c:72:ae:d0:dc:1a:67:dd:93:58: ee:d1:51:4c:13:e4:db:38:cb:a7:6d:a5:88:b2:e5:49:50:c6: 10:7a:3e:e5:1f:27:35:9a:93:15:57:0e:e1:25:ce:46:0a:9f: 87:8d:09:2b:c8:cb:e3:5e:21:ca:0e:7b:2d:5f:da:8e:67:19: 8e:2c:4d:c8:18:cd:5c:08:46:79:6b:6f:ba:39:39:de:b1:7e: ff:20:3a:c7:5a:14:a9:17:a2:eb:01:21:ad:0b:15:9c:f6:cc: 26:0f:5d:59:10:dc:06:a9:e6:e7:6b:9e:f7:8a:2d:1a:e5:79: 54:be:91:f3:b5:38:a9:33:9f:f9:5c:8c:5f:44:40:0f:d6:67: 62:e7:b9:a7:2d:a0:5f:e8:be:6c:86:36:0b:37:46:e9:79:16: ec:bd:6e:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaz6+cYsfa19HRbok41rNc7JdfbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTExMDMwMzE2NTJaFw0yNTExMDYwNjI3NTJaMDMxMTAvBgNV BAMTKEFGQjEwNjFDNTREMUIzNjQ5NTBGQTg2Njg3NUNEMUQ0MkRCQkQxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtN0u6pgy8ON+abXHMASBsR4L BhLRU5sXSt4I7oBGPz7w81/euNhfnAtWrw8Alv2Pnbo1/i9Eq6dMmvC+hnI1s3eO 3Ua+x1OWudVZNj9cCaJhkZ4Lz3sa56VPGbtOD2nWryeFJ9CTSABZUKpDZQv2x6HB wPvNrxIic11oSGXLM3mX3KoKTr24SX8NiAW2iBfdv3lUn3P62Ob7oI0/8qiy7jTP TDi64YFZk8Mv/N3PxoXjCH2OM5y7AYXIdugoJMGu4LcsWveERVq8DeZhmWdA5efR LnuivHMs8X2DNWRiU3TQAJDxe5nCHfyH7B+pM7COGdiNhhlQonngdGvOTuEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr7EGHFTRs2SVD6hmh1zR1C270VAwHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtdy4OgcoRNoIseHN+O+0yPLClnPGDmYJIB PQVDCby39RtfpTOL2h+1pvfe9YXj4EBcZhfYREwtDa8Mbc/ntxOfLfrG8U9swFlJ V7JAREXnjLP/e4PjE8l7ct29F0jdXwmDTHKu0NwaZ92TWO7RUUwT5Ns4y6dtpYiy 5UlQxhB6PuUfJzWakxVXDuElzkYKn4eNCSvIy+NeIcoOey1f2o5nGY4sTcgYzVwI Rnlrb7o5Od6xfv8gOsdaFKkXousBIa0LFZz2zCYPXVkQ3Aap5udrnveKLRrleVS+ kfO1OKkzn/lcjF9EQA/WZ2LnuactoF/ovmyGNgs3Rul5Fuy9bsg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:08:16 2025 by rpki-client