$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: 5D3zWRP+jrAj6iNxxYU8Ftj6PsmiZJbAHwwO0hUycgU= Subject key identifier: C6:78:ED:7D:83:23:E3:73:72:C3:C0:B9:39:C7:D2:F3:CF:A8:A3:EE Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 1856E5FD7A0AAE0D639089D2ED63F7B3B4FB8EC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0316 Signing time: Thu 03 Jul 2025 05:22:00 +0000 Manifest this update: Thu 03 Jul 2025 05:17:00 +0000 Manifest next update: Sun 06 Jul 2025 17:09:00 +0000 Files and hashes: 1: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: 3SCVLUtVB4zJv3g2GqYDigLH9HktJBAapHliwSy5J1Q=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: zkB5HXDUn4hIZM8BxR9vmf/Op1/JEHll9O9rPcOFDt0=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: tQ4vZuhFeMHPG6Q4JsAfSDt09xj/628G92eqdEQqJxg=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: YPeNafffbCxEDeGWTOYrUeYYiluS0g8ccyYN1CwbY9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 17:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:56:e5:fd:7a:0a:ae:0d:63:90:89:d2:ed:63:f7:b3:b4:fb:8e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Jul 3 05:17:00 2025 GMT Not After : Jul 6 17:09:00 2025 GMT Subject: CN=C678ED7D8323E37372C3C0B939C7D2F3CFA8A3EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:86:e8:32:92:18:02:fa:14:67:cf:bd:91: e2:d0:51:e8:ba:94:4c:e9:82:d2:6d:80:2e:b7:1a: 99:41:3e:68:33:e9:19:95:de:08:90:24:63:97:fb: 65:5b:34:3d:63:19:50:9c:95:97:85:20:04:75:f8: 59:9d:47:a7:bd:a4:53:a4:46:96:3f:e0:2d:92:ae: a7:b5:6b:bd:11:47:7d:1f:e6:b9:77:18:73:80:ad: 0a:53:51:1e:34:5e:63:ff:11:b0:91:c3:28:aa:e7: af:d5:fa:ba:9b:da:52:01:19:22:94:38:2e:cc:60: bd:78:4c:43:41:17:30:1a:c7:c1:6b:cd:e6:df:83: c9:c0:e9:50:36:a7:a6:87:ed:06:41:0e:36:4c:75: 25:ff:69:e9:9c:da:49:6f:37:37:ca:27:72:23:80: b0:b8:ff:ba:03:99:da:92:a5:6c:dc:ef:bd:d9:4e: 5a:7d:2f:03:7d:ce:fa:a0:d7:7f:6a:74:22:26:28: 0d:ac:5f:28:92:58:2b:9f:d2:42:26:22:79:5e:b5: e6:00:9b:cb:c2:0c:2a:bd:37:56:99:55:f4:fd:cc: 42:2e:62:4e:75:78:38:8a:4e:16:7d:b4:5c:cf:7e: 3b:1b:8f:ee:3a:02:32:1f:4f:62:e6:00:f5:3d:5f: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:78:ED:7D:83:23:E3:73:72:C3:C0:B9:39:C7:D2:F3:CF:A8:A3:EE X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:72:24:4a:df:1f:74:56:1f:ba:fe:e6:be:81:97:74:b9:61: 68:1c:75:fc:55:97:3c:a0:a5:93:f9:08:f9:42:3d:b6:26:c5: 23:62:cb:c9:c4:4a:f1:1d:4e:31:bf:cd:2d:18:5c:b4:e1:34: 9c:71:b7:d9:f4:09:1b:23:ab:ca:84:fc:ac:ab:96:a5:65:97: a7:08:f3:23:8d:c1:97:c6:a4:1f:e0:98:64:22:0b:17:cf:70: 09:a7:6f:83:3d:44:da:62:a7:97:ef:69:87:43:3e:f5:41:33: 4a:20:f9:3c:1e:bc:1c:71:80:5e:e2:a9:48:86:e4:7d:78:2d: 3e:13:91:9f:42:67:2c:91:23:9c:da:88:24:0f:9d:59:5f:ae: 04:76:ff:ba:2f:6f:91:0c:01:22:18:e7:20:6e:2f:5f:3b:eb: 93:29:ae:dd:46:ca:ba:5d:c7:28:b9:8d:a9:e6:d8:f3:43:3c: c1:2b:aa:36:46:14:f6:1c:8f:c0:cf:71:55:54:9b:cf:64:06: 9e:2f:1c:cb:fe:d1:56:75:1e:0e:13:83:09:00:4f:f2:5a:07: 2e:b3:40:a1:e8:77:a2:f0:29:16:93:cc:79:d8:2a:17:79:98: 1a:47:46:32:3c:c3:55:11:46:48:9b:12:fa:b0:9b:2b:08:6e: 5a:60:c5:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFbl/XoKrg1jkInS7WP3s7T7jscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA3MDMwNTE3MDBaFw0yNTA3MDYxNzA5MDBaMDMxMTAvBgNV BAMTKEM2NzhFRDdEODMyM0UzNzM3MkMzQzBCOTM5QzdEMkYzQ0ZBOEEzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2poboMpIYAvoUZ8+9keLQUei6 lEzpgtJtgC63GplBPmgz6RmV3giQJGOX+2VbND1jGVCclZeFIAR1+FmdR6e9pFOk RpY/4C2Srqe1a70RR30f5rl3GHOArQpTUR40XmP/EbCRwyiq56/V+rqb2lIBGSKU OC7MYL14TENBFzAax8Frzebfg8nA6VA2p6aH7QZBDjZMdSX/aemc2klvNzfKJ3Ij gLC4/7oDmdqSpWzc773ZTlp9LwN9zvqg139qdCImKA2sXyiSWCuf0kImInleteYA m8vCDCq9N1aZVfT9zEIuYk51eDiKThZ9tFzPfjsbj+46AjIfT2LmAPU9X2SpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnjtfYMj43Nyw8C5OcfS88+oo+4wHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhyJErfH3RWH7r+5r6Bl3S5YWgcdfxVlzyg pZP5CPlCPbYmxSNiy8nESvEdTjG/zS0YXLThNJxxt9n0CRsjq8qE/KyrlqVll6cI 8yONwZfGpB/gmGQiCxfPcAmnb4M9RNpip5fvaYdDPvVBM0og+TwevBxxgF7iqUiG 5H14LT4TkZ9CZyyRI5zaiCQPnVlfrgR2/7ovb5EMASIY5yBuL18765Mprt1Gyrpd xyi5janm2PNDPMErqjZGFPYcj8DPcVVUm89kBp4vHMv+0VZ1Hg4TgwkAT/JaBy6z QKHod6LwKRaTzHnYKhd5mBpHRjI8w1URRkibEvqwmysIblpgxfY= -----END CERTIFICATE-----Generated at Fri Jul 4 17:17:45 2025 by rpki-client