$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: n1SzTtV94+p46htOMT0Y4YYaD0FowiKaTX5k8vBZuhA= Subject key identifier: 89:43:38:53:57:0D:E2:29:BD:49:0B:B4:0A:A1:2A:1D:79:70:89:EB Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 57EAFC33CA50DFD071E82E3480BE8E4FE2A15DD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: EE Signing time: Fri 22 Aug 2025 23:30:02 +0000 Manifest this update: Fri 22 Aug 2025 23:25:02 +0000 Manifest next update: Tue 26 Aug 2025 00:32:02 +0000 Files and hashes: 1: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: yQrqL3p9ByIjHqlqJ/D4xqsc7kLneJFXAtpwdmxl/EM=) 2: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) 3: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) 4: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:fc:33:ca:50:df:d0:71:e8:2e:34:80:be:8e:4f:e2:a1:5d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Aug 22 23:25:02 2025 GMT Not After : Aug 26 00:32:02 2025 GMT Subject: CN=89433853570DE229BD490BB40AA12A1D797089EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:8a:a4:a6:3f:09:4c:14:5b:9a:45:f5:96: 75:26:79:ef:d0:a7:d8:93:b4:11:a3:5f:a5:ab:0e: 93:36:66:b5:f2:cb:f6:c6:b7:40:27:6a:44:31:8a: 11:6f:d4:fe:94:48:d4:50:c9:fd:b4:63:91:a5:4e: a8:2a:50:1d:f6:15:e5:3d:07:4b:46:43:32:19:c8: c5:3b:d3:9a:cb:16:61:d7:0f:a3:da:58:f1:62:40: ac:d6:5c:54:ea:12:61:9c:d9:89:5f:ac:6e:65:28: 4d:b6:8c:90:be:9d:5d:99:2e:25:fe:00:c8:e2:b9: 70:43:db:02:e2:f0:45:1d:b2:b5:7d:42:ff:44:89: e8:28:71:33:d5:e9:53:ed:d3:6e:3d:c2:a9:34:3d: f5:6e:cf:d9:6d:bc:95:a5:f3:02:8d:7c:77:d1:f0: 51:67:3b:16:6f:60:f6:d2:24:4b:7d:80:30:2f:97: 6b:c8:ff:2f:42:6b:8f:a5:fd:30:a2:ad:62:33:3e: ae:3a:00:b7:04:d0:23:fd:41:36:7d:07:38:34:3b: ad:f0:4f:bc:ab:e3:7a:ab:1f:27:81:26:5c:69:9a: 19:bf:f2:17:4e:b7:fd:5a:99:90:9d:32:3f:da:93: 83:49:cb:b5:0a:db:c9:71:fb:05:75:3d:9f:e4:be: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:38:53:57:0D:E2:29:BD:49:0B:B4:0A:A1:2A:1D:79:70:89:EB X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a7:05:63:e2:67:6a:84:20:22:f5:b7:02:ed:c3:b9:8c:a7: 5e:d5:ce:ca:ab:1f:ac:33:6a:79:12:df:9b:e4:fa:cf:c5:fc: 9f:64:87:2e:11:6c:a0:84:b1:f1:27:26:b8:1d:35:4e:8d:5d: 99:e1:8f:40:a8:d0:bf:f9:18:7e:1a:e5:6f:1b:22:2c:4f:3b: b7:42:c6:90:ba:04:a2:cd:1e:db:01:ce:a6:f8:39:4a:06:2f: 93:3c:3b:ed:3e:53:74:24:01:44:86:2f:8e:ee:e9:5b:38:80: e3:0b:a6:93:08:3c:f9:42:4d:62:90:87:b2:5f:d1:f7:8b:8f: 90:7f:e6:48:99:d5:b9:dd:ec:85:54:e5:cc:35:df:1b:cd:23: cc:86:9f:18:63:9e:c6:af:ab:28:67:91:8d:16:ff:5c:a2:37: 82:94:e8:f3:aa:4f:4a:f2:b1:02:88:54:7b:a2:67:32:cf:20: 72:33:be:c2:a6:75:30:cf:b2:a3:fa:08:31:49:92:c6:77:b7: 8f:6a:9a:31:7c:98:be:65:70:90:1e:cf:a6:84:42:97:ed:a9: 14:c4:48:68:9e:9b:3c:fc:9f:e3:5e:88:2a:3a:9b:f2:0d:4c: 26:95:ca:28:f2:63:71:b7:c9:34:1d:a5:89:e5:ec:83:f9:68: 8e:46:f4:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+r8M8pQ39Bx6C40gL6OT+KhXdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTA4MjIyMzI1MDJaFw0yNTA4MjYwMDMyMDJaMDMxMTAvBgNV BAMTKDg5NDMzODUzNTcwREUyMjlCRDQ5MEJCNDBBQTEyQTFENzk3MDg5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FIqkpj8JTBRbmkX1lnUmee/Q p9iTtBGjX6WrDpM2ZrXyy/bGt0AnakQxihFv1P6USNRQyf20Y5GlTqgqUB32FeU9 B0tGQzIZyMU705rLFmHXD6PaWPFiQKzWXFTqEmGc2YlfrG5lKE22jJC+nV2ZLiX+ AMjiuXBD2wLi8EUdsrV9Qv9EiegocTPV6VPt0249wqk0PfVuz9ltvJWl8wKNfHfR 8FFnOxZvYPbSJEt9gDAvl2vI/y9Ca4+l/TCirWIzPq46ALcE0CP9QTZ9Bzg0O63w T7yr43qrHyeBJlxpmhm/8hdOt/1amZCdMj/ak4NJy7UK28lx+wV1PZ/kvmvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUM4U1cN4im9SQu0CqEqHXlwieswHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2nBWPiZ2qEICL1twLtw7mMp17VzsqrH6wz ankS35vk+s/F/J9khy4RbKCEsfEnJrgdNU6NXZnhj0Co0L/5GH4a5W8bIixPO7dC xpC6BKLNHtsBzqb4OUoGL5M8O+0+U3QkAUSGL47u6Vs4gOMLppMIPPlCTWKQh7Jf 0feLj5B/5kiZ1bnd7IVU5cw13xvNI8yGnxhjnsavqyhnkY0W/1yiN4KU6POqT0ry sQKIVHuiZzLPIHIzvsKmdTDPsqP6CDFJksZ3t49qmjF8mL5lcJAez6aEQpftqRTE SGiemzz8n+NeiCo6m/INTCaVyijyY3G3yTQdpYnl7IP5aI5G9P8= -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:39 2025 by rpki-client