$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: b/ccdF87ejIXAkgpfF2xdcDopJxVibwFUradrkw1+X8= Subject key identifier: 06:52:3D:D0:4D:EA:CA:42:59:8B:65:3E:CE:91:40:38:10:B8:00:62 Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 0C89A366B31B18F0850BAA0370FBCBE1F17C65BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: A2 Signing time: Wed 06 Aug 2025 17:21:26 +0000 Manifest this update: Wed 06 Aug 2025 17:16:26 +0000 Manifest next update: Sat 09 Aug 2025 21:42:26 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: IB+7bJLjOtgrQmpZ9uBtz+0wc+EWfJLrjFM5aaUTkso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:89:a3:66:b3:1b:18:f0:85:0b:aa:03:70:fb:cb:e1:f1:7c:65:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Aug 6 17:16:26 2025 GMT Not After : Aug 9 21:42:26 2025 GMT Subject: CN=06523DD04DEACA42598B653ECE91403810B80062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:f1:6e:a5:66:e6:fd:56:f1:d0:4f:99:4f: 89:58:bc:28:dc:42:73:29:fa:fb:e1:17:a5:aa:58: 73:57:b4:ab:3c:0b:b2:df:0b:58:34:a2:c2:ee:f2: 22:f4:db:20:58:0f:06:64:ef:88:09:a9:f6:4b:01: d3:cb:0b:27:23:f6:a1:a7:33:4c:c2:56:f9:d8:85: 99:32:62:b5:48:99:60:8d:67:bb:33:fe:62:e8:36: 80:41:d7:82:c7:51:19:9a:25:22:ff:77:4e:4d:bd: 37:11:02:77:33:c4:66:cd:e4:67:52:07:c9:f7:c3: f9:6d:f9:6b:78:af:e4:cf:18:55:60:ce:d7:bd:89: 0e:4c:80:7a:36:e5:9f:46:87:ca:13:cf:74:b6:7e: cd:36:45:b3:bb:7c:d5:2f:c5:e2:57:25:c8:16:9c: b9:5b:96:88:c1:d9:06:49:6f:d8:65:0c:69:ea:1c: 9c:ef:4d:bf:d2:e7:40:21:3d:1f:2f:bc:5c:ad:03: 11:a3:25:35:db:2d:cf:c6:6b:4a:42:cb:01:0b:ba: 19:62:0e:65:b9:c6:38:e1:a6:96:a9:d1:ec:08:21: f7:28:bb:a1:9c:41:87:75:26:4a:8f:b6:b2:f6:72: c9:da:ad:b5:94:0f:6c:8b:31:b8:eb:87:36:f4:41: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:52:3D:D0:4D:EA:CA:42:59:8B:65:3E:CE:91:40:38:10:B8:00:62 X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4f:9d:0e:ea:b9:16:52:23:70:07:d7:69:92:26:90:df:a7: 58:9e:e8:77:12:ad:e2:9a:02:0a:32:6c:58:f7:42:65:09:4d: 50:41:ab:cc:cc:78:a2:bc:08:e6:a9:3c:b9:93:20:96:80:76: 33:71:ea:4c:a0:32:17:0e:5a:32:88:ca:8b:bf:97:ea:53:36: 7b:d2:e0:08:de:8c:5d:c9:b0:3a:ef:7f:0f:68:03:c3:0b:96: e7:9b:f7:29:a3:4b:8f:4a:f0:c7:3c:c7:84:ab:0f:1a:23:bb: 81:2f:16:b4:7e:05:9a:7b:dc:44:97:a2:05:35:8e:8d:87:52: 5a:37:83:11:a7:57:dc:f1:cb:c2:f8:92:0a:65:80:7d:af:e1: f1:54:c0:57:04:0f:24:37:f7:36:2c:f1:62:ab:c2:27:20:52: c6:bd:56:40:c4:02:4d:8b:24:22:59:20:a4:b2:2b:82:24:96: 68:cf:f0:5d:f2:ad:65:04:a2:96:da:b0:40:c5:bc:f9:cd:58: 03:f3:ea:5e:86:b0:1c:7c:a8:32:79:72:0a:91:0d:9b:17:86: 33:b9:b2:44:9a:cb:1b:aa:dd:22:e7:6c:91:5b:b7:b0:93:61: 87:57:5e:81:8b:dc:89:bb:cf:fe:b3:98:9e:d9:4b:c6:2e:3e: 2b:bd:69:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDImjZrMbGPCFC6oDcPvL4fF8Zb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTA4MDYxNzE2MjZaFw0yNTA4MDkyMTQyMjZaMDMxMTAvBgNV BAMTKDA2NTIzREQwNERFQUNBNDI1OThCNjUzRUNFOTE0MDM4MTBCODAwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTU/FupWbm/Vbx0E+ZT4lYvCjc QnMp+vvhF6WqWHNXtKs8C7LfC1g0osLu8iL02yBYDwZk74gJqfZLAdPLCycj9qGn M0zCVvnYhZkyYrVImWCNZ7sz/mLoNoBB14LHURmaJSL/d05NvTcRAnczxGbN5GdS B8n3w/lt+Wt4r+TPGFVgzte9iQ5MgHo25Z9Gh8oTz3S2fs02RbO7fNUvxeJXJcgW nLlblojB2QZJb9hlDGnqHJzvTb/S50AhPR8vvFytAxGjJTXbLc/Ga0pCywELuhli DmW5xjjhppap0ewIIfcou6GcQYd1JkqPtrL2csnarbWUD2yLMbjrhzb0Qb7hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlI90E3qykJZi2U+zpFAOBC4AGIwHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtPnQ7quRZSI3AH12mSJpDfp1ie6HcSreKa AgoybFj3QmUJTVBBq8zMeKK8COapPLmTIJaAdjNx6kygMhcOWjKIyou/l+pTNnvS 4AjejF3JsDrvfw9oA8MLlueb9ymjS49K8Mc8x4SrDxoju4EvFrR+BZp73ESXogU1 jo2HUlo3gxGnV9zxy8L4kgplgH2v4fFUwFcEDyQ39zYs8WKrwicgUsa9VkDEAk2L JCJZIKSyK4IklmjP8F3yrWUEopbasEDFvPnNWAPz6l6GsBx8qDJ5cgqRDZsXhjO5 skSayxuq3SLnbJFbt7CTYYdXXoGL3Im7z/6zmJ7ZS8YuPiu9aZA= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:31 2025 by rpki-client