$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: 9KgbijmGXXUlfS8zkNsXGBpHNw+qOYb7Fjai3mgVRGk= Subject key identifier: C1:35:BF:28:11:FA:4E:15:96:55:05:71:33:68:D8:1F:21:EA:0F:33 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 205DF538930DB5842DDDF3732A8757AC0F5CE2F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 051A Signing time: Mon 20 Oct 2025 15:52:08 +0000 Manifest this update: Mon 20 Oct 2025 15:47:08 +0000 Manifest next update: Thu 23 Oct 2025 19:21:08 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: fLgSN1MAtgEfztTxj3SSP7jYcWpguhMufYGo4Be/evs=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5d:f5:38:93:0d:b5:84:2d:dd:f3:73:2a:87:57:ac:0f:5c:e2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Oct 20 15:47:08 2025 GMT Not After : Oct 23 19:21:08 2025 GMT Subject: CN=C135BF2811FA4E15965505713368D81F21EA0F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:c8:02:2d:2e:57:57:9d:19:9d:f7:98:2c: c2:b8:46:fe:0d:d1:38:35:15:5b:3f:cd:f3:43:0c: f2:2b:7c:d1:1c:86:ef:db:25:5d:cd:8b:16:75:09: af:4e:74:91:e1:f6:c8:fc:84:da:88:92:14:d2:97: 4d:a2:98:04:46:36:28:24:fd:42:39:ae:87:e5:ee: 5d:5d:1e:2e:74:e3:ef:e7:c6:d5:9e:fd:15:6f:ca: d7:68:52:c7:05:ea:fe:a6:10:cd:26:bc:b2:7a:68: dd:71:93:2b:d2:8a:b4:37:35:8c:2e:77:c8:ef:6c: c1:5f:bd:66:51:f3:aa:7e:76:58:c9:ba:44:09:7b: ac:61:d9:4c:24:81:b5:05:40:90:a9:3e:24:e0:ec: 37:60:9c:8c:d0:e7:6f:f0:26:57:26:b2:2d:4a:3b: ff:7c:d7:68:2b:ef:21:7f:de:4d:20:24:97:ee:fa: 60:cb:b9:b0:1b:0c:ec:18:c2:fb:c7:59:10:d0:c2: e3:13:96:43:6e:ce:46:5e:3c:ba:a5:32:6c:1e:8b: 2c:c7:01:63:40:64:88:41:04:bc:f0:24:1e:a4:65: 9e:26:ee:63:15:3b:ee:71:85:88:c1:8d:80:87:71: 64:6f:5b:32:f7:72:07:c9:d9:a2:ca:54:25:b2:ae: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:35:BF:28:11:FA:4E:15:96:55:05:71:33:68:D8:1F:21:EA:0F:33 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4c:8d:ef:91:93:6d:1b:0a:ba:78:50:8a:0b:4b:1f:b5:d1: 81:89:55:7b:36:ea:05:1f:a0:4c:37:5d:fd:b0:f2:85:cd:31: 50:59:2d:27:c0:58:5c:9d:78:28:45:37:81:2e:63:3a:18:fd: f8:79:68:ec:61:27:f8:dc:33:83:5a:21:4b:7a:1a:84:ca:8b: a0:11:ee:f1:e2:8e:b0:9d:b0:a5:00:94:15:2f:6f:49:d5:43: 45:3a:a2:29:80:b2:c8:45:15:17:59:ef:06:95:2d:77:6e:a5: 05:51:87:7e:23:69:ba:7d:84:21:f3:c2:12:d1:82:8b:17:e1: 39:41:ef:6e:f1:57:26:96:6f:be:c2:01:2c:da:b7:fb:94:c7: 1f:27:92:f8:bf:ca:a8:01:23:19:97:b0:1e:37:ea:be:87:c8: 99:22:21:cf:75:e1:72:80:19:e5:b4:53:4c:75:9f:ef:ae:be: a4:ab:db:61:e0:1c:39:25:0e:ea:3f:5c:ec:b7:d9:0f:f6:9e: 09:ac:93:bd:df:91:06:04:e8:24:38:c3:af:8c:b0:10:23:6f: 86:21:f2:d6:eb:04:bb:d0:fb:13:85:f2:ab:28:5b:05:c7:81: a8:a9:7c:4b:5c:3d:73:9b:cc:3e:7f:16:f0:9e:9c:96:a5:79: cf:6a:55:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIF31OJMNtYQt3fNzKodXrA9c4vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTEwMjAxNTQ3MDhaFw0yNTEwMjMxOTIxMDhaMDMxMTAvBgNV BAMTKEMxMzVCRjI4MTFGQTRFMTU5NjU1MDU3MTMzNjhEODFGMjFFQTBGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj5sgCLS5XV50ZnfeYLMK4Rv4N 0Tg1FVs/zfNDDPIrfNEchu/bJV3NixZ1Ca9OdJHh9sj8hNqIkhTSl02imARGNigk /UI5rofl7l1dHi504+/nxtWe/RVvytdoUscF6v6mEM0mvLJ6aN1xkyvSirQ3NYwu d8jvbMFfvWZR86p+dljJukQJe6xh2UwkgbUFQJCpPiTg7DdgnIzQ52/wJlcmsi1K O/9812gr7yF/3k0gJJfu+mDLubAbDOwYwvvHWRDQwuMTlkNuzkZePLqlMmweiyzH AWNAZIhBBLzwJB6kZZ4m7mMVO+5xhYjBjYCHcWRvWzL3cgfJ2aLKVCWyrvupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTW/KBH6ThWWVQVxM2jYHyHqDzMwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpMje+Rk20bCrp4UIoLSx+10YGJVXs26gUf oEw3Xf2w8oXNMVBZLSfAWFydeChFN4EuYzoY/fh5aOxhJ/jcM4NaIUt6GoTKi6AR 7vHijrCdsKUAlBUvb0nVQ0U6oimAsshFFRdZ7waVLXdupQVRh34jabp9hCHzwhLR gosX4TlB727xVyaWb77CASzat/uUxx8nkvi/yqgBIxmXsB436r6HyJkiIc914XKA GeW0U0x1n++uvqSr22HgHDklDuo/XOy32Q/2ngmsk73fkQYE6CQ4w6+MsBAjb4Yh 8tbrBLvQ+xOF8qsoWwXHgaipfEtcPXObzD5/FvCenJalec9qVTc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:16 2025 by rpki-client