$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: 57KS27RkFHwUJ4M+1OdmzsGWjI+dikIs+HUh0JFALZs= Subject key identifier: 0A:75:D3:A0:8A:9B:7F:50:0E:AE:C5:B0:1D:F3:2C:0C:0C:CA:FB:09 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 3C2DCD7B35CD6F077210D5B8588A64B975C6548D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 11:32:08 +0000 Manifest this update: Sat 18 Oct 2025 11:27:08 +0000 Manifest next update: Tue 21 Oct 2025 15:48:08 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: QXC0eXHt3mefBMOLU2RSHWcMGI2fAo0WO9gDVnYdrAs=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2d:cd:7b:35:cd:6f:07:72:10:d5:b8:58:8a:64:b9:75:c6:54:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Oct 18 11:27:08 2025 GMT Not After : Oct 21 15:48:08 2025 GMT Subject: CN=0A75D3A08A9B7F500EAEC5B01DF32C0C0CCAFB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:df:fe:2c:02:6e:09:74:14:a2:1d:3d:57: da:b4:6e:79:58:c0:7f:d0:17:5b:10:41:8d:02:0d: 2e:ba:8a:8e:d3:d3:a4:d5:93:cb:c9:45:bd:7d:48: 4d:2f:aa:e4:15:b5:8e:ca:0e:ca:88:1b:f2:6d:a8: 80:5e:63:64:bb:51:7d:2b:d5:37:3f:c0:dd:75:c1: 59:02:45:f8:11:75:9a:a8:0a:88:5d:b9:75:9d:45: 24:9e:a3:07:58:27:6b:22:0a:ac:16:d1:ab:52:16: 2a:a2:43:84:e4:ee:b8:ed:3a:cc:27:20:2f:f5:38: f8:7c:83:c7:84:6e:02:89:df:34:a1:61:3f:f8:f3: 3d:cd:98:9e:d8:fa:7e:d9:72:f6:9a:ab:a1:d9:3c: 63:34:b4:db:08:9e:a7:4b:d8:77:2e:7f:e8:15:64: 18:aa:1b:9a:17:9c:4d:d3:4a:49:15:eb:e1:1a:25: 82:be:31:06:d3:9d:e3:f9:88:5c:1c:ae:82:87:f3: 1d:51:5b:65:42:b5:d4:dc:fd:2d:12:52:70:79:06: d2:a4:3a:12:0a:94:36:e5:1b:77:25:83:6e:cd:3d: 34:5f:6c:57:64:50:1c:18:20:f4:8d:77:82:19:19: ef:b6:b6:5c:94:9c:74:24:60:9f:86:c1:e7:c6:79: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:75:D3:A0:8A:9B:7F:50:0E:AE:C5:B0:1D:F3:2C:0C:0C:CA:FB:09 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:15:bf:da:07:17:8a:49:2e:08:c9:01:e4:e9:7f:cf:6b:fc: a9:ca:dd:6e:53:50:92:03:a8:60:68:fb:e7:b4:01:9a:29:92: d6:53:54:91:2d:f5:ab:f6:67:fc:a1:de:01:dd:23:93:f4:c1: d8:64:bb:80:8a:dc:0b:bc:83:8f:2e:4a:7b:67:52:45:ee:7d: d3:1c:77:0d:5b:01:48:29:ab:e9:98:04:13:74:f2:12:01:da: 9e:8a:dc:c0:3b:20:3e:af:e5:aa:29:06:20:70:86:78:68:d8: c4:11:cd:5f:ae:5a:2d:dd:b3:7d:3d:78:36:9d:11:d5:ee:5a: f2:44:68:6b:2e:ad:21:fa:36:d3:ae:c5:17:82:9e:65:45:30: 82:97:04:f4:78:3f:f4:32:f9:31:0d:83:9c:eb:9a:2d:ab:09: 3f:65:c5:f8:d6:29:7d:ea:ae:21:1c:bb:84:ee:88:71:6a:7a: 72:b0:b2:ef:ef:bc:74:50:a6:22:ef:7c:b2:a4:66:3e:b6:70: 79:41:93:ac:5a:99:47:ff:9d:43:7d:8e:bb:46:a7:34:05:56: 00:ae:c9:aa:ab:a9:1d:ae:56:b0:56:a0:c9:95:3c:5d:53:f3: e1:3f:36:87:e2:52:a7:36:ba:e9:be:8e:c3:be:8c:21:22:07: 07:fe:81:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPC3NezXNbwdyENW4WIpkuXXGVI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTEwMTgxMTI3MDhaFw0yNTEwMjExNTQ4MDhaMDMxMTAvBgNV BAMTKDBBNzVEM0EwOEE5QjdGNTAwRUFFQzVCMDFERjMyQzBDMENDQUZCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tN/+LAJuCXQUoh09V9q0bnlY wH/QF1sQQY0CDS66io7T06TVk8vJRb19SE0vquQVtY7KDsqIG/JtqIBeY2S7UX0r 1Tc/wN11wVkCRfgRdZqoCohduXWdRSSeowdYJ2siCqwW0atSFiqiQ4Tk7rjtOswn IC/1OPh8g8eEbgKJ3zShYT/48z3NmJ7Y+n7Zcvaaq6HZPGM0tNsInqdL2Hcuf+gV ZBiqG5oXnE3TSkkV6+EaJYK+MQbTneP5iFwcroKH8x1RW2VCtdTc/S0SUnB5BtKk OhIKlDblG3clg27NPTRfbFdkUBwYIPSNd4IZGe+2tlyUnHQkYJ+GwefGeSHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnXToIqbf1AOrsWwHfMsDAzK+wkwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Vv9oHF4pJLgjJAeTpf89r/KnK3W5TUJID qGBo++e0AZopktZTVJEt9av2Z/yh3gHdI5P0wdhku4CK3Au8g48uSntnUkXufdMc dw1bAUgpq+mYBBN08hIB2p6K3MA7ID6v5aopBiBwhnho2MQRzV+uWi3ds309eDad EdXuWvJEaGsurSH6NtOuxReCnmVFMIKXBPR4P/Qy+TENg5zrmi2rCT9lxfjWKX3q riEcu4TuiHFqenKwsu/vvHRQpiLvfLKkZj62cHlBk6xamUf/nUN9jrtGpzQFVgCu yaqrqR2uVrBWoMmVPF1T8+E/NofiUqc2uum+jsO+jCEiBwf+gcI= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:03 2025 by rpki-client