$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: YM4+w+LLstcMI4vftksyd5wsArc+3t6E7P7z0Ad4+zg= Subject key identifier: 19:D9:E0:7E:17:8C:0F:3E:7C:79:41:82:08:49:6B:46:DA:BA:0B:50 Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 60D96EDAAEDE1354264DC16F983F0D562B7679DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: DA Signing time: Mon 20 Oct 2025 04:30:39 +0000 Manifest this update: Mon 20 Oct 2025 04:25:39 +0000 Manifest next update: Thu 23 Oct 2025 15:08:39 +0000 Files and hashes: 1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) 2: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: d68zhukxTBcqraih8hzzUZgZeymNJGksyeqk+SJccfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d9:6e:da:ae:de:13:54:26:4d:c1:6f:98:3f:0d:56:2b:76:79:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Oct 20 04:25:39 2025 GMT Not After : Oct 23 15:08:39 2025 GMT Subject: CN=19D9E07E178C0F3E7C79418208496B46DABA0B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:76:8e:e2:fa:34:05:c1:c7:22:74:d6:00: f9:b0:45:c5:3a:b5:99:7e:3d:2a:89:a2:41:59:1b: 81:5f:77:f9:97:d3:9c:a0:9f:64:86:24:45:82:db: f6:4b:6a:67:15:17:7b:6e:77:cb:b3:dd:b4:05:31: b1:14:68:25:80:37:d9:2b:ca:21:7f:94:8a:0b:81: 9a:44:2b:e9:45:8b:9a:7c:15:93:2a:5f:ad:92:86: 1c:ec:fc:3b:30:97:02:c4:ce:67:dd:7a:9c:93:91: c6:ac:85:17:08:20:ec:d9:4b:93:91:ca:b6:1f:53: 9b:51:f6:25:64:31:37:43:9c:e0:5b:09:de:f3:fb: ba:2d:ab:88:e8:e1:34:1c:7f:f6:c8:74:47:ad:4a: 8f:88:50:1e:b1:3d:5f:f4:20:9d:4d:50:29:20:8a: c2:85:89:46:40:b9:50:0a:f5:3e:d4:02:1a:aa:ae: 16:13:34:bd:82:ec:50:c2:79:21:e8:1f:f8:8b:6d: 34:b9:d6:ed:3d:7a:fa:e6:23:66:00:21:41:27:25: 65:39:6d:8c:9a:f5:95:35:e0:cd:d3:8d:99:50:a4: 70:7e:66:d8:1a:5b:12:87:20:20:f4:1d:b9:6d:89: 35:a3:15:e8:a3:6b:10:30:a0:3e:71:5c:15:d2:d5: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:E0:7E:17:8C:0F:3E:7C:79:41:82:08:49:6B:46:DA:BA:0B:50 X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d9:ed:6c:61:2f:13:b9:a0:d8:d6:46:ad:88:b0:a4:95:2d: e6:f0:6a:78:32:92:03:fc:2d:42:61:23:df:3f:dd:ba:1a:61: b5:68:de:70:7e:b6:c5:52:14:8b:5e:40:af:ed:8b:bf:99:3c: 35:aa:fc:86:ca:8c:e6:c5:e3:e8:3c:a8:cc:8f:97:7a:fd:5b: c0:18:cb:88:43:b3:1c:11:a5:b6:e6:47:c8:c2:2a:35:76:32: ed:96:c0:bf:a9:b0:cf:37:f5:f5:df:73:74:aa:09:a9:d7:11: 7a:f3:a6:ea:55:77:a7:87:e5:a7:1f:76:ce:43:97:fb:de:d8: c1:21:93:35:8f:9b:8d:02:6c:a4:fc:46:9f:54:54:e8:dd:6f: 37:98:e8:04:cf:3d:bc:d4:c3:4d:2b:d6:07:88:b2:1b:46:a9: 55:07:f4:79:c4:0e:e2:42:da:fc:f1:58:bb:1a:c4:5e:1f:83: b7:2c:01:f8:ba:78:7f:fb:be:7f:ef:43:74:24:e7:96:bf:a7: f1:2f:2e:bc:77:58:8b:ad:b0:36:2b:6e:0d:ee:2a:3d:4c:ef: a2:43:e4:04:76:a2:00:39:4b:43:a5:86:ea:4e:97:00:1f:a6: 7a:17:ea:10:56:5c:ad:1a:ea:48:a6:df:4b:0b:7a:ca:c7:72: 7d:5e:89:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNlu2q7eE1QmTcFvmD8NVit2ed4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTEwMjAwNDI1MzlaFw0yNTEwMjMxNTA4MzlaMDMxMTAvBgNV BAMTKDE5RDlFMDdFMTc4QzBGM0U3Qzc5NDE4MjA4NDk2QjQ2REFCQTBCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63naO4vo0BcHHInTWAPmwRcU6 tZl+PSqJokFZG4Ffd/mX05ygn2SGJEWC2/ZLamcVF3tud8uz3bQFMbEUaCWAN9kr yiF/lIoLgZpEK+lFi5p8FZMqX62Shhzs/DswlwLEzmfdepyTkcashRcIIOzZS5OR yrYfU5tR9iVkMTdDnOBbCd7z+7otq4jo4TQcf/bIdEetSo+IUB6xPV/0IJ1NUCkg isKFiUZAuVAK9T7UAhqqrhYTNL2C7FDCeSHoH/iLbTS51u09evrmI2YAIUEnJWU5 bYya9ZU14M3TjZlQpHB+ZtgaWxKHICD0HbltiTWjFeijaxAwoD5xXBXS1UWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdngfheMDz58eUGCCElrRtq6C1AwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzZ7WxhLxO5oNjWRq2IsKSVLebwangykgP8 LUJhI98/3boaYbVo3nB+tsVSFIteQK/ti7+ZPDWq/IbKjObF4+g8qMyPl3r9W8AY y4hDsxwRpbbmR8jCKjV2Mu2WwL+psM839fXfc3SqCanXEXrzpupVd6eH5acfds5D l/ve2MEhkzWPm40CbKT8Rp9UVOjdbzeY6ATPPbzUw00r1geIshtGqVUH9HnEDuJC 2vzxWLsaxF4fg7csAfi6eH/7vn/vQ3Qk55a/p/EvLrx3WIutsDYrbg3uKj1M76JD 5AR2ogA5S0OlhupOlwAfpnoX6hBWXK0a6kim30sLesrHcn1eiUY= -----END CERTIFICATE-----Generated at Tue Oct 21 07:14:00 2025 by rpki-client