$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: OHoTCyuZIVJCxZvleQjp7pidpSY6cbI7qyFq4ctW+OM= Subject key identifier: 86:86:4E:CE:5B:5E:FA:2A:B7:DE:4E:B4:A8:BB:DF:8A:2D:D8:42:FA Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 08723C4E9D4825E27C1D5867EBA7B4A1AF4BABEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 0108 Signing time: Sun 19 Oct 2025 23:10:02 +0000 Manifest this update: Sun 19 Oct 2025 23:05:02 +0000 Manifest next update: Thu 23 Oct 2025 05:05:02 +0000 Files and hashes: 1: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) 2: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: 8o6zzUepgDqgN3o7OwpdvFN0I0MNp4wep/bColxqKCc=) 3: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:72:3c:4e:9d:48:25:e2:7c:1d:58:67:eb:a7:b4:a1:af:4b:ab:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Oct 19 23:05:02 2025 GMT Not After : Oct 23 05:05:02 2025 GMT Subject: CN=86864ECE5B5EFA2AB7DE4EB4A8BBDF8A2DD842FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:1f:0a:21:36:23:58:06:3d:9b:b0:e3:b2: 99:93:c3:20:2b:92:0f:5e:ea:c1:96:4c:ae:7c:ad: 35:a6:88:7d:12:c2:6c:c6:de:20:e6:d3:3e:58:9c: 9b:3d:44:2a:7c:e0:7b:e7:11:20:7e:48:5e:da:4c: 14:ca:f6:0f:53:53:09:d2:85:fb:ad:78:b4:37:ef: 89:2e:c3:4c:5f:81:3e:5b:e3:df:8f:e7:55:ec:fc: 77:0f:cd:f2:ad:b8:14:61:df:81:7b:f0:4b:41:e7: 36:7d:46:6b:7d:0e:df:b9:15:c1:a7:4e:b9:4a:38: 80:52:1d:81:6e:6e:9f:51:6d:20:84:ac:02:1c:12: 1e:55:f3:cb:a7:20:45:b5:a6:4e:ae:5b:e8:8c:14: 54:5a:24:a7:02:93:63:bd:bc:d1:de:c6:8f:be:0c: 11:0f:a8:25:49:38:5a:fc:b0:df:23:ae:00:0f:70: d1:73:d3:4c:22:c1:2c:61:c2:19:0b:55:70:df:52: ca:a2:8e:7c:c7:78:dd:15:4b:e0:ef:f9:04:b4:09: 3e:61:77:1f:10:19:f9:27:7c:db:aa:b5:e2:b2:1e: 37:33:b8:5d:1b:c5:ed:7e:2e:7c:a2:97:19:71:d3: ff:38:e4:ec:4c:c0:cb:97:59:8f:12:fe:8c:a8:f0: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:4E:CE:5B:5E:FA:2A:B7:DE:4E:B4:A8:BB:DF:8A:2D:D8:42:FA X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a6:72:c2:a5:ce:3c:31:65:a0:ac:15:f6:c4:64:30:83:07: 87:2a:e6:31:1c:36:45:51:8f:f6:45:93:e9:b6:13:d0:10:d1: ee:e5:57:b4:9c:69:36:12:28:09:44:02:b1:0b:35:a6:0b:ea: 1a:7b:7e:d7:e1:0d:ec:ff:ff:af:35:d5:4b:47:e5:9a:71:cb: 21:0d:fa:40:32:75:95:b7:af:da:fd:43:f5:96:72:ca:fb:05: d0:ab:af:a9:6f:ff:21:e8:7a:12:86:5a:af:15:e1:9e:3f:66: ff:5f:f5:da:3a:b3:01:2b:ed:66:bc:65:5d:fe:41:c1:a5:6e: 07:a7:08:30:da:0f:ef:5f:ac:6a:a7:ed:8d:08:53:c1:2f:23: 10:61:04:0a:37:c3:33:45:2d:af:cc:e4:01:82:5b:07:37:66: cb:36:18:f5:1a:69:c1:57:59:1b:ad:68:5e:1c:1e:71:fc:23: cc:dd:26:88:5f:c1:84:b6:5a:00:d7:63:a8:47:fd:79:f1:43: 9f:db:f0:e9:74:40:b4:75:19:79:1b:24:d2:d2:ca:52:ab:0f: 1e:da:9a:34:d5:3f:1c:2e:4d:a1:d9:cd:7b:9e:b7:e4:7d:ab: 4d:6c:4a:90:a9:7c:c5:e2:cd:25:16:89:9e:88:15:10:c4:3d: 4e:f8:be:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHI8Tp1IJeJ8HVhn66e0oa9Lq+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTEwMTkyMzA1MDJaFw0yNTEwMjMwNTA1MDJaMDMxMTAvBgNV BAMTKDg2ODY0RUNFNUI1RUZBMkFCN0RFNEVCNEE4QkJERjhBMkREODQyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Rx8KITYjWAY9m7DjspmTwyAr kg9e6sGWTK58rTWmiH0SwmzG3iDm0z5YnJs9RCp84HvnESB+SF7aTBTK9g9TUwnS hfuteLQ374kuw0xfgT5b49+P51Xs/HcPzfKtuBRh34F78EtB5zZ9Rmt9Dt+5FcGn TrlKOIBSHYFubp9RbSCErAIcEh5V88unIEW1pk6uW+iMFFRaJKcCk2O9vNHexo++ DBEPqCVJOFr8sN8jrgAPcNFz00wiwSxhwhkLVXDfUsqijnzHeN0VS+Dv+QS0CT5h dx8QGfknfNuqteKyHjczuF0bxe1+Lnyilxlx0/845OxMwMuXWY8S/oyo8Cs7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhoZOzlte+iq33k60qLvfii3YQvowHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHymcsKlzjwxZaCsFfbEZDCDB4cq5jEcNkVR j/ZFk+m2E9AQ0e7lV7ScaTYSKAlEArELNaYL6hp7ftfhDez//6811UtH5ZpxyyEN +kAydZW3r9r9Q/WWcsr7BdCrr6lv/yHoehKGWq8V4Z4/Zv9f9do6swEr7Wa8ZV3+ QcGlbgenCDDaD+9frGqn7Y0IU8EvIxBhBAo3wzNFLa/M5AGCWwc3Zss2GPUaacFX WRutaF4cHnH8I8zdJohfwYS2WgDXY6hH/XnxQ5/b8Ol0QLR1GXkbJNLSylKrDx7a mjTVPxwuTaHZzXuet+R9q01sSpCpfMXizSUWiZ6IFRDEPU74vtY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:45 2025 by rpki-client