$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: h8RwXz+Aa65yCdLwyJJkQ8GoGw7Jr7WAl/t9yf6bV18= Subject key identifier: 83:8D:0A:48:C6:77:0F:02:98:AE:8E:E0:B6:0E:6F:BD:65:AD:EF:7B Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 7D8690BBEE6F588E9B0EBF604254E0106B99D840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0347 Signing time: Mon 20 Oct 2025 05:02:05 +0000 Manifest this update: Mon 20 Oct 2025 04:57:05 +0000 Manifest next update: Thu 23 Oct 2025 05:50:05 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) 4: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: ctPJmdr3R4HabAi8GYC6FfFOifE4wd/ArDu/BolVX78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:86:90:bb:ee:6f:58:8e:9b:0e:bf:60:42:54:e0:10:6b:99:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Oct 20 04:57:05 2025 GMT Not After : Oct 23 05:50:05 2025 GMT Subject: CN=838D0A48C6770F0298AE8EE0B60E6FBD65ADEF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:92:45:b6:eb:60:79:67:82:47:84:e7:66: 33:67:2e:9b:30:5d:2b:63:8b:be:83:9a:85:b9:e6: 62:12:ba:43:e2:92:1a:18:2a:40:88:84:4f:a1:e4: 17:8f:d1:0d:a9:73:f6:57:ee:73:b3:a2:e9:29:a0: c8:8c:86:32:43:56:b4:44:8b:e1:68:cd:e8:97:ed: 31:96:d7:98:f2:f2:ab:4a:17:a3:53:d5:ce:7c:b3: ef:1b:76:95:66:39:e7:e5:b3:1c:ea:5c:cf:d0:ca: 4d:2c:3f:47:e0:fb:54:12:f7:90:23:5e:99:3a:17: 27:fc:e9:26:da:bf:ad:2c:54:16:6e:fc:58:2b:02: 58:a0:3b:d6:50:b2:08:01:85:80:71:1f:61:34:5e: 7b:3f:15:7c:27:12:71:ad:52:92:91:48:50:3c:20: 73:fe:f2:71:28:19:0d:77:fd:6d:95:68:3c:19:dc: 86:28:f3:80:95:29:f6:80:2c:fc:22:ad:93:5a:5e: 96:24:6b:5d:2a:2a:11:eb:0f:19:1e:1d:22:61:b4: df:e2:05:09:10:30:32:c5:f2:15:53:c0:78:8c:8d: 8b:4d:17:79:62:31:f6:e5:e9:c8:31:2e:26:4b:08: a4:a8:22:f7:b3:ba:f9:c9:99:fb:ae:51:d9:ab:fd: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:0A:48:C6:77:0F:02:98:AE:8E:E0:B6:0E:6F:BD:65:AD:EF:7B X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:24:c4:65:8e:f2:a9:5f:83:75:00:7b:2c:5e:af:45:5c:fc: a5:dc:0c:17:5c:0d:5c:1e:5f:63:f2:f1:a0:1a:a5:49:55:ee: d6:4f:85:61:bd:02:ec:d5:20:bd:80:46:cd:43:c6:ea:ed:90: fb:12:5c:03:cf:f4:6a:27:4e:8e:df:60:dd:7b:2f:44:36:17: 36:69:56:d8:d5:54:8f:59:61:61:73:e2:d5:5e:70:2f:54:5b: ed:4b:06:9b:54:1b:b9:cd:ba:4f:1d:53:50:ad:f2:2f:31:76: 75:8f:6a:9d:16:24:03:bc:3a:21:36:a5:ec:f1:38:9a:ee:e4: 0a:19:18:8b:94:41:ff:05:d1:66:d2:83:dd:1b:9d:dd:9f:ec: 72:f3:df:48:c1:04:70:45:13:70:e5:4d:90:60:6c:c3:1a:b4: 6e:5b:61:29:0f:76:88:76:4a:41:7f:d3:ec:be:09:89:7e:e8: a5:dd:cd:7b:10:db:6d:2a:4b:56:13:e1:ce:2d:06:5a:2b:fc: fb:13:b6:10:d7:c3:e2:a6:7a:74:99:87:bd:dd:8c:59:2e:e3: 80:53:cc:58:5b:a2:4a:68:c5:6f:e6:98:f4:2d:de:47:d3:eb: 98:19:ee:6d:97:df:7b:d2:23:84:7f:6e:fe:91:9c:7f:33:45: bd:be:d4:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYaQu+5vWI6bDr9gQlTgEGuZ2EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTEwMjAwNDU3MDVaFw0yNTEwMjMwNTUwMDVaMDMxMTAvBgNV BAMTKDgzOEQwQTQ4QzY3NzBGMDI5OEFFOEVFMEI2MEU2RkJENjVBREVGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWZJFtutgeWeCR4TnZjNnLpsw XStji76DmoW55mISukPikhoYKkCIhE+h5BeP0Q2pc/ZX7nOzoukpoMiMhjJDVrRE i+FozeiX7TGW15jy8qtKF6NT1c58s+8bdpVmOeflsxzqXM/Qyk0sP0fg+1QS95Aj Xpk6Fyf86Sbav60sVBZu/FgrAligO9ZQsggBhYBxH2E0Xns/FXwnEnGtUpKRSFA8 IHP+8nEoGQ13/W2VaDwZ3IYo84CVKfaALPwirZNaXpYka10qKhHrDxkeHSJhtN/i BQkQMDLF8hVTwHiMjYtNF3liMfbl6cgxLiZLCKSoIvezuvnJmfuuUdmr/Q3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg40KSMZ3DwKYro7gtg5vvWWt73swHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgkxGWO8qlfg3UAeyxer0Vc/KXcDBdcDVwe X2Py8aAapUlV7tZPhWG9AuzVIL2ARs1DxurtkPsSXAPP9GonTo7fYN17L0Q2FzZp VtjVVI9ZYWFz4tVecC9UW+1LBptUG7nNuk8dU1Ct8i8xdnWPap0WJAO8OiE2pezx OJru5AoZGIuUQf8F0WbSg90bnd2f7HLz30jBBHBFE3DlTZBgbMMatG5bYSkPdoh2 SkF/0+y+CYl+6KXdzXsQ220qS1YT4c4tBlor/PsTthDXw+KmenSZh73djFku44BT zFhbokpoxW/mmPQt3kfT65gZ7m2X33vSI4R/bv6RnH8zRb2+1F4= -----END CERTIFICATE-----Generated at Tue Oct 21 13:48:39 2025 by rpki-client