$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: DwmKEC9jjwwqtxD5OVlDsUDm4pwOerugm7g3xAHun8o= Subject key identifier: A1:C0:AD:05:97:F5:DE:6C:C9:2B:78:2A:5F:D9:38:95:E5:08:DB:EB Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 3EA6A96C5758609517C442C3E8CF490FFF6AE260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: CA Signing time: Tue 04 Nov 2025 02:41:25 +0000 Manifest this update: Tue 04 Nov 2025 02:36:25 +0000 Manifest next update: Fri 07 Nov 2025 04:57:25 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: bNz3dAj1CCQgbgUfP+tMgK3NMu4PUMvWTZAs6RGzies=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a6:a9:6c:57:58:60:95:17:c4:42:c3:e8:cf:49:0f:ff:6a:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Nov 4 02:36:25 2025 GMT Not After : Nov 7 04:57:25 2025 GMT Subject: CN=A1C0AD0597F5DE6CC92B782A5FD93895E508DBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:37:11:3f:e4:bf:3c:34:3e:f4:3f:0c:a6: 9a:ee:fc:4d:6c:4f:4a:8a:34:c4:1b:78:78:84:35: da:c5:78:87:2e:a6:92:d6:71:3a:a7:c2:4c:ae:19: ac:a0:33:13:d0:5b:8e:95:6a:da:74:6c:8d:40:15: 2a:7c:89:c7:8e:26:8a:e0:87:d5:19:02:09:50:05: 70:14:7e:1e:03:6e:65:53:90:af:a5:24:20:db:32: 41:32:39:62:3a:9e:23:0b:49:71:fc:3f:76:27:14: e7:46:85:cc:e5:35:16:b4:9c:14:85:ec:e7:13:3b: 96:97:0b:02:3a:1b:fa:94:e1:27:14:dc:6a:cd:1b: 18:95:50:e5:61:7b:37:08:86:92:02:e5:f3:f1:cb: 4f:42:5d:ec:96:75:51:42:c1:44:60:03:cf:19:09: 35:c3:4c:07:bf:ae:86:75:40:db:92:9e:f5:5d:ed: f9:96:b3:eb:8a:e9:87:d6:24:54:0d:31:96:80:dd: ac:67:23:61:06:27:23:28:fc:95:e0:ee:86:17:8a: 44:94:25:3e:5a:1e:97:71:86:c4:a8:d9:0b:bb:ca: 8e:19:6b:fa:45:4f:19:52:2d:d5:ff:21:32:7b:bf: 50:44:11:13:f2:39:aa:9e:6f:c7:d6:42:a3:23:e9: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C0:AD:05:97:F5:DE:6C:C9:2B:78:2A:5F:D9:38:95:E5:08:DB:EB X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:c6:b8:f1:ae:5f:fb:32:f0:c0:68:c8:be:29:97:1d:38: 82:ae:70:ce:ba:82:70:29:d0:28:31:ba:e9:10:f3:78:de:23: 07:d7:de:44:ea:1a:ac:75:fd:37:4f:57:20:6d:59:de:de:1f: fe:c4:50:9b:ad:66:5f:e8:18:ed:74:e2:23:b4:6c:bf:0b:23: 9b:6f:6a:d7:30:32:c0:ae:53:6b:f3:d5:a9:5b:40:9c:e3:32: 87:34:f8:09:b1:92:10:12:2b:08:d4:d4:78:22:53:eb:d7:22: d3:9e:38:72:e3:36:f8:cb:17:e3:7c:25:63:66:37:a6:56:6e: 4a:01:cb:09:ec:a7:8f:8c:fe:37:64:fb:eb:46:bf:0e:50:4c: 7b:3c:55:c5:12:ed:cb:11:e2:8b:2e:71:15:a7:23:fa:f2:83: a9:23:93:2c:03:3d:d4:f2:c1:5a:c9:63:63:ca:06:b2:54:a6: bc:d9:26:bf:ce:a6:89:e0:f7:f5:52:f4:69:a6:f0:b5:52:9d: 4f:e7:93:39:11:40:0e:04:c7:e7:44:72:2f:e9:d7:8c:30:89: 30:74:a7:73:4b:1f:9f:79:6a:43:f0:30:82:f5:ed:ab:bb:60: 8a:06:5b:ab:f1:11:11:2d:68:65:6c:83:be:96:6f:89:fa:7c: 52:22:63:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqapbFdYYJUXxELD6M9JD/9q4mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTExMDQwMjM2MjVaFw0yNTExMDcwNDU3MjVaMDMxMTAvBgNV BAMTKEExQzBBRDA1OTdGNURFNkNDOTJCNzgyQTVGRDkzODk1RTUwOERCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVzcRP+S/PDQ+9D8Mppru/E1s T0qKNMQbeHiENdrFeIcuppLWcTqnwkyuGaygMxPQW46Vatp0bI1AFSp8iceOJorg h9UZAglQBXAUfh4DbmVTkK+lJCDbMkEyOWI6niMLSXH8P3YnFOdGhczlNRa0nBSF 7OcTO5aXCwI6G/qU4ScU3GrNGxiVUOVhezcIhpIC5fPxy09CXeyWdVFCwURgA88Z CTXDTAe/roZ1QNuSnvVd7fmWs+uK6YfWJFQNMZaA3axnI2EGJyMo/JXg7oYXikSU JT5aHpdxhsSo2Qu7yo4Za/pFTxlSLdX/ITJ7v1BEERPyOaqeb8fWQqMj6fvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocCtBZf13mzJK3gqX9k4leUI2+swHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABRxrjxrl/7MvDAaMi+KZcdOIKucM66gnAp 0CgxuukQ83jeIwfX3kTqGqx1/TdPVyBtWd7eH/7EUJutZl/oGO104iO0bL8LI5tv atcwMsCuU2vz1albQJzjMoc0+AmxkhASKwjU1HgiU+vXItOeOHLjNvjLF+N8JWNm N6ZWbkoBywnsp4+M/jdk++tGvw5QTHs8VcUS7csR4osucRWnI/ryg6kjkywDPdTy wVrJY2PKBrJUprzZJr/Opong9/VS9Gmm8LVSnU/nkzkRQA4Ex+dEci/p14wwiTB0 p3NLH595akPwMIL17au7YIoGW6vxEREtaGVsg76Wb4n6fFIiYwU= -----END CERTIFICATE-----Generated at Tue Nov 4 18:37:06 2025 by rpki-client