$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: Sbzvx5lz3b5J2Q52i4WHEN4BLGN3UHBNP67XsWCtl80= Subject key identifier: 1F:57:B8:EC:9D:5F:95:34:1E:3F:99:50:35:62:05:C3:62:F4:3B:F8 Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 1068252C84BA2CE6DE494EEF5C9BA58DF5B2B8D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 0114 Signing time: Sun 29 Jun 2025 23:31:50 +0000 Manifest this update: Sun 29 Jun 2025 23:26:50 +0000 Manifest next update: Thu 03 Jul 2025 07:33:50 +0000 Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: 56z54u+xHay43ruNITFTpnwbxjBWMk76HiIcFsZdZcE=) 2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: sFcgvLTtSycZdsC1IySxUywuCf1MNjZ2nztgDqKm9HE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:68:25:2c:84:ba:2c:e6:de:49:4e:ef:5c:9b:a5:8d:f5:b2:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Jun 29 23:26:50 2025 GMT Not After : Jul 3 07:33:50 2025 GMT Subject: CN=1F57B8EC9D5F95341E3F9950356205C362F43BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:2a:ae:b1:ed:86:dd:8d:f6:2c:23:56:b3: a1:7e:53:35:09:04:6f:58:62:e0:0c:20:50:a7:3e: ee:78:61:48:7a:e0:f9:1d:33:51:5d:77:5f:de:e2: b0:f1:08:a0:bc:6d:56:6a:f1:53:0c:b8:f0:e3:42: e3:df:5e:fe:5c:83:9e:4e:ae:c0:f7:56:5f:9b:7e: 99:7a:00:ab:5a:ae:a8:c3:b2:19:e3:b0:5d:2e:6b: 5b:67:c2:25:fc:40:4e:b1:73:25:c7:6f:3a:7c:43: 11:b1:bb:0c:ef:54:7c:34:0f:c2:ff:da:90:7e:c1: 89:f0:f5:d3:3d:18:27:6f:c4:56:76:4a:74:0d:34: c0:76:d6:89:f2:e5:f2:c5:59:d3:51:74:35:4c:1c: 52:66:7c:a8:30:3d:04:db:61:f3:e1:19:17:30:29: 5c:6f:70:17:1a:cc:b8:6a:df:6f:ae:c3:0a:32:20: e9:4e:b1:6a:96:d7:59:b8:43:10:a4:09:9d:72:e2: 5d:d8:fb:63:3d:81:e4:70:d0:ad:97:bd:e6:25:c1: 31:1c:6b:01:f2:04:94:cc:08:e5:83:c9:df:dd:0e: f3:6a:a8:01:96:bf:ce:d4:b9:60:43:45:7d:f3:78: c2:96:c9:ea:8b:70:22:01:3e:48:02:25:e7:5b:d7: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:57:B8:EC:9D:5F:95:34:1E:3F:99:50:35:62:05:C3:62:F4:3B:F8 X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a7:2c:e2:d6:f8:c3:af:d8:a4:93:a7:8c:58:01:71:ff:ad: bc:36:86:0d:a2:af:97:68:73:5c:94:f6:15:cd:7e:a3:bc:2a: 49:fc:df:ff:07:7f:f6:a4:3d:d6:0f:9b:48:f0:64:16:4d:cc: d8:4a:70:85:f7:97:1d:44:aa:35:de:13:43:72:65:f1:4a:45: 82:5f:37:9c:ae:74:5a:7c:59:a1:4d:87:df:1b:cd:8d:3c:31: 2c:11:22:9e:4f:0a:b5:7b:a9:c8:d8:f6:08:2e:38:97:d5:f8: 1d:e8:68:5e:d0:73:f0:27:42:b6:0a:a5:9e:13:92:dd:d9:75: ba:91:ad:4f:d3:0e:ef:dc:d5:2c:d7:56:be:51:28:2b:44:c7: 61:71:cc:71:85:0b:17:da:60:68:92:af:fb:51:95:37:01:26: 14:86:3f:1b:3c:0a:e2:ef:30:4c:39:42:8a:59:5b:66:4e:d7: 82:86:f5:9c:88:be:f0:0c:e8:a8:dd:f1:85:09:80:be:e0:e7: e3:4c:78:6d:16:65:56:e0:db:e6:12:f7:3c:c8:2e:49:e7:06: 72:97:62:8d:74:b9:77:0b:b6:21:6f:39:69:f4:a5:c8:b8:88: 34:74:56:b5:ae:84:08:52:96:8c:f0:05:f4:0e:6e:88:d2:48: 79:89:83:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGglLIS6LObeSU7vXJuljfWyuNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTA2MjkyMzI2NTBaFw0yNTA3MDMwNzMzNTBaMDMxMTAvBgNV BAMTKDFGNTdCOEVDOUQ1Rjk1MzQxRTNGOTk1MDM1NjIwNUMzNjJGNDNCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVyquse2G3Y32LCNWs6F+UzUJ BG9YYuAMIFCnPu54YUh64PkdM1Fdd1/e4rDxCKC8bVZq8VMMuPDjQuPfXv5cg55O rsD3Vl+bfpl6AKtarqjDshnjsF0ua1tnwiX8QE6xcyXHbzp8QxGxuwzvVHw0D8L/ 2pB+wYnw9dM9GCdvxFZ2SnQNNMB21ony5fLFWdNRdDVMHFJmfKgwPQTbYfPhGRcw KVxvcBcazLhq32+uwwoyIOlOsWqW11m4QxCkCZ1y4l3Y+2M9geRw0K2XveYlwTEc awHyBJTMCOWDyd/dDvNqqAGWv87UuWBDRX3zeMKWyeqLcCIBPkgCJedb1/hhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH1e47J1flTQeP5lQNWIFw2L0O/gwHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGnLOLW+MOv2KSTp4xYAXH/rbw2hg2ir5do c1yU9hXNfqO8Kkn83/8Hf/akPdYPm0jwZBZNzNhKcIX3lx1EqjXeE0NyZfFKRYJf N5yudFp8WaFNh98bzY08MSwRIp5PCrV7qcjY9gguOJfV+B3oaF7Qc/AnQrYKpZ4T kt3ZdbqRrU/TDu/c1SzXVr5RKCtEx2FxzHGFCxfaYGiSr/tRlTcBJhSGPxs8CuLv MEw5QopZW2ZO14KG9ZyIvvAM6Kjd8YUJgL7g5+NMeG0WZVbg2+YS9zzILknnBnKX Yo10uXcLtiFvOWn0pci4iDR0VrWuhAhSlozwBfQObojSSHmJg0I= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:20 2025 by rpki-client