$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: 6knuh594BMqRLXW09cylsHJpIeiILCsX6dALwjt3N84= Subject key identifier: 8D:DA:21:34:6C:37:99:98:60:15:E0:1E:2D:E4:FD:34:07:57:63:8C Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 618D477E7241471723C255F4E45C6708AA7B1521 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: D6 Signing time: Sun 29 Jun 2025 15:50:01 +0000 Manifest this update: Sun 29 Jun 2025 15:45:01 +0000 Manifest next update: Wed 02 Jul 2025 21:08:01 +0000 Files and hashes: 1: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) 2: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) 3: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: 2t9qgnBii31JXbTiE2JQb476i7nxlni5aqI/kKey7Ww=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8d:47:7e:72:41:47:17:23:c2:55:f4:e4:5c:67:08:aa:7b:15:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Jun 29 15:45:01 2025 GMT Not After : Jul 2 21:08:01 2025 GMT Subject: CN=8DDA21346C3799986015E01E2DE4FD340757638C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:5e:f1:d3:b8:f3:4d:45:fb:f8:e6:f8:e0: 2b:c0:e8:8d:a9:e4:54:f0:00:88:24:62:bb:70:6b: a1:1e:21:3a:81:5f:4e:1d:a7:08:1a:47:b1:cf:a7: 2f:9e:ca:d2:2a:73:2f:1c:60:70:bf:df:ec:7b:0e: 84:83:d8:4d:57:92:c5:56:5b:ae:cd:e1:1c:11:65: b9:e1:fa:c6:9b:73:d7:53:6f:a7:3e:a6:24:17:ab: 74:b3:79:64:dc:36:db:f5:6c:80:16:56:1a:78:76: 80:f9:29:31:17:bf:6c:b3:23:12:db:1f:2e:d7:0a: 3c:c3:b8:39:88:5d:48:ae:6d:aa:81:ea:29:91:42: b6:b3:69:3a:cc:31:6d:f4:e8:fd:26:fd:34:d7:da: 0f:31:f2:a5:56:dd:e4:d5:c5:14:7c:af:bd:ef:3f: 9d:22:82:ec:f7:43:95:7e:3f:7a:1a:b1:5b:ed:36: 04:37:11:cb:0a:88:77:d0:5b:14:45:8a:c2:b2:21: b5:73:34:c6:a2:84:23:ef:e6:c5:46:61:a6:bd:37: cf:99:91:90:50:c2:ba:94:e3:1c:85:ba:76:f3:cf: a0:20:1a:ae:5e:84:7a:b6:da:66:75:0a:d1:0c:e6: 0c:1c:17:b2:61:93:3a:2a:62:b0:11:d0:9a:27:4b: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DA:21:34:6C:37:99:98:60:15:E0:1E:2D:E4:FD:34:07:57:63:8C X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:66:82:c1:56:a0:05:5c:6e:6f:6c:ff:7d:a1:5f:1f:d7:b7: f3:13:24:d0:d8:7a:9b:8d:3e:49:a6:64:54:60:05:5f:e0:f6: 06:70:3b:75:18:eb:fe:df:9c:ad:e9:7a:ea:84:dd:41:1e:aa: af:22:40:80:a6:e0:dd:e7:1d:2f:a3:23:2c:d2:2e:11:c7:b9: 5d:6f:49:c8:c0:10:e8:aa:50:e4:a4:11:7f:2d:ae:2c:c2:20: 3f:1c:28:85:a3:b4:f3:61:43:eb:6c:ce:4e:3a:f5:8c:dd:c6: 47:0e:c6:ea:97:b2:74:e0:ea:b1:fc:3b:54:d6:02:19:e3:5f: 73:a0:83:ba:b2:70:14:5f:c2:42:d0:6d:b9:98:05:4d:cd:fe: 53:2c:47:cb:db:4d:69:a9:c2:79:3d:18:7a:c7:af:29:f0:35: ab:59:b0:9d:26:b8:04:0d:99:46:91:84:df:6d:e4:59:3a:17: b8:9d:87:3f:b7:ff:36:32:2c:33:b5:9f:b3:19:3c:c3:a0:f2: 9e:25:21:39:78:84:c2:36:7a:43:8e:e8:07:04:97:3e:73:43: 6c:93:91:0f:db:c4:ca:df:a4:9c:a5:a5:2b:1c:0b:e8:5d:10: 1e:7d:10:d0:b9:8b:84:e4:12:37:5e:b9:53:70:fe:6a:55:ca: 90:93:b5:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYY1HfnJBRxcjwlX05FxnCKp7FSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTA2MjkxNTQ1MDFaFw0yNTA3MDIyMTA4MDFaMDMxMTAvBgNV BAMTKDhEREEyMTM0NkMzNzk5OTg2MDE1RTAxRTJERTRGRDM0MDc1NzYzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmV7x07jzTUX7+Ob44CvA6I2p 5FTwAIgkYrtwa6EeITqBX04dpwgaR7HPpy+eytIqcy8cYHC/3+x7DoSD2E1XksVW W67N4RwRZbnh+sabc9dTb6c+piQXq3SzeWTcNtv1bIAWVhp4doD5KTEXv2yzIxLb Hy7XCjzDuDmIXUiubaqB6imRQrazaTrMMW306P0m/TTX2g8x8qVW3eTVxRR8r73v P50iguz3Q5V+P3oasVvtNgQ3EcsKiHfQWxRFisKyIbVzNMaihCPv5sVGYaa9N8+Z kZBQwrqU4xyFunbzz6AgGq5ehHq22mZ1CtEM5gwcF7JhkzoqYrAR0JonS+0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdohNGw3mZhgFeAeLeT9NAdXY4wwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFmgsFWoAVcbm9s/32hXx/Xt/MTJNDYepuN PkmmZFRgBV/g9gZwO3UY6/7fnK3peuqE3UEeqq8iQICm4N3nHS+jIyzSLhHHuV1v ScjAEOiqUOSkEX8trizCID8cKIWjtPNhQ+tszk469YzdxkcOxuqXsnTg6rH8O1TW AhnjX3Ogg7qycBRfwkLQbbmYBU3N/lMsR8vbTWmpwnk9GHrHrynwNatZsJ0muAQN mUaRhN9t5Fk6F7idhz+3/zYyLDO1n7MZPMOg8p4lITl4hMI2ekOO6AcElz5zQ2yT kQ/bxMrfpJylpSscC+hdEB59ENC5i4TkEjdeuVNw/mpVypCTtTY= -----END CERTIFICATE-----Generated at Mon Jun 30 14:37:02 2025 by rpki-client