$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: OcK6KGxXi1kCATeKSDNhELD+Rjj+RCtzR0V5d7CHYdU= Subject key identifier: 53:BF:53:4C:E5:70:E9:B9:A5:A8:71:6A:4C:8E:8D:D2:28:0B:C5:2C Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 0F6C6EFED55D46E934394E0F46C7C5D672C59D79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 032D Signing time: Fri 22 Aug 2025 16:42:06 +0000 Manifest this update: Fri 22 Aug 2025 16:37:06 +0000 Manifest next update: Tue 26 Aug 2025 04:28:06 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 2: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: az/m1LQZyLznH3xjf0KtlYcEmIoSOm3BHz08AwIcOGE=) 3: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6c:6e:fe:d5:5d:46:e9:34:39:4e:0f:46:c7:c5:d6:72:c5:9d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Aug 22 16:37:06 2025 GMT Not After : Aug 26 04:28:06 2025 GMT Subject: CN=53BF534CE570E9B9A5A8716A4C8E8DD2280BC52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:f3:4d:7b:b2:88:57:9d:6d:17:ae:87:37: 83:96:0f:ba:b9:52:9c:52:95:85:66:92:43:be:29: d9:d3:cb:25:a1:68:75:08:ed:c1:44:d7:de:39:c5: 24:3e:61:31:a1:58:0a:64:1f:42:b5:f6:f9:b6:a1: 7a:f2:72:13:d3:22:33:ad:bf:8f:f8:12:78:68:3e: 0f:db:53:cb:df:3d:ce:8b:54:86:75:3e:f8:6b:2f: 22:0a:65:83:59:3c:ec:ed:c0:6e:7e:86:b1:53:d6: 7c:be:c8:bd:74:63:44:33:4a:49:fd:63:e1:c2:7b: 31:28:0e:b7:94:e6:ee:73:61:b8:79:67:ef:5f:51: ec:8e:68:8a:6b:21:57:de:51:60:d6:b8:76:f6:54: 58:40:ed:a5:23:fc:ae:4d:c9:e5:4d:74:e3:10:4a: 46:91:b5:c8:f5:52:d4:61:d1:44:1f:b1:d9:b1:2b: b3:09:ad:72:cc:71:ec:00:d2:1a:8b:cf:6b:cc:23: 50:1e:97:8d:33:fd:1e:84:8c:70:18:69:e5:2c:c4: 5c:cc:88:d0:9e:fd:ad:0a:78:3b:49:de:89:93:44: eb:e5:61:9d:20:b0:09:fa:29:c1:28:01:ac:12:08: 36:3e:4c:ef:2e:72:e2:61:8b:9b:d8:82:95:db:43: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:53:4C:E5:70:E9:B9:A5:A8:71:6A:4C:8E:8D:D2:28:0B:C5:2C X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9b:57:2b:a5:a1:27:28:88:1d:b0:98:48:0b:4d:fa:0a:f5: 6b:4e:a2:77:d2:70:85:88:a6:33:5e:e4:54:1d:ea:01:1a:69: 83:94:88:fb:c1:e8:3a:a8:62:ed:2f:3c:fa:54:4a:60:9f:c9: 03:d9:3a:68:1e:46:6f:e5:f5:8a:e9:3a:74:df:25:de:e1:63: bd:67:3f:ed:2c:ed:9c:c3:2b:81:7e:22:0e:5f:85:12:8b:65: a3:2a:06:56:40:cd:38:53:96:50:f5:e2:ed:f5:63:b6:f6:76: 74:7c:c8:a4:27:08:89:52:56:ac:80:ff:7c:17:cf:74:92:09: 5f:78:25:01:93:c0:c4:53:da:9b:22:87:da:33:10:f9:d2:6c: d3:c5:96:b9:fa:2c:b3:f1:c7:4b:3b:4f:04:38:59:71:a3:6c: 4a:4f:b0:16:43:d2:db:9f:cc:89:ac:3f:87:50:fe:a0:25:23: e3:b3:91:ff:e3:f6:30:7f:f1:5f:34:8a:80:f6:6b:10:29:8c: a1:83:0e:3e:02:4b:c6:e1:47:6c:a1:52:03:93:6a:a3:ea:c9: 87:a0:cd:35:11:c0:de:ab:c5:32:87:1d:10:25:15:9c:fd:a2: 14:00:27:a8:e4:be:45:6e:0e:94:98:df:ac:05:d2:47:a2:89: c6:97:14:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2xu/tVdRuk0OU4PRsfF1nLFnXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA4MjIxNjM3MDZaFw0yNTA4MjYwNDI4MDZaMDMxMTAvBgNV BAMTKDUzQkY1MzRDRTU3MEU5QjlBNUE4NzE2QTRDOEU4REQyMjgwQkM1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp//NNe7KIV51tF66HN4OWD7q5 UpxSlYVmkkO+KdnTyyWhaHUI7cFE1945xSQ+YTGhWApkH0K19vm2oXrychPTIjOt v4/4EnhoPg/bU8vfPc6LVIZ1PvhrLyIKZYNZPOztwG5+hrFT1ny+yL10Y0QzSkn9 Y+HCezEoDreU5u5zYbh5Z+9fUeyOaIprIVfeUWDWuHb2VFhA7aUj/K5NyeVNdOMQ SkaRtcj1UtRh0UQfsdmxK7MJrXLMcewA0hqLz2vMI1Ael40z/R6EjHAYaeUsxFzM iNCe/a0KeDtJ3omTROvlYZ0gsAn6KcEoAawSCDY+TO8ucuJhi5vYgpXbQzpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU79TTOVw6bmlqHFqTI6N0igLxSwwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKbVyuloScoiB2wmEgLTfoK9WtOonfScIWI pjNe5FQd6gEaaYOUiPvB6DqoYu0vPPpUSmCfyQPZOmgeRm/l9YrpOnTfJd7hY71n P+0s7ZzDK4F+Ig5fhRKLZaMqBlZAzThTllD14u31Y7b2dnR8yKQnCIlSVqyA/3wX z3SSCV94JQGTwMRT2psih9ozEPnSbNPFlrn6LLPxx0s7TwQ4WXGjbEpPsBZD0tuf zImsP4dQ/qAlI+Ozkf/j9jB/8V80ioD2axApjKGDDj4CS8bhR2yhUgOTaqPqyYeg zTURwN6rxTKHHRAlFZz9ohQAJ6jkvkVuDpSY36wF0keiicaXFD4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:00 2025 by rpki-client