$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: 6dHP+w7a+bo0lNnP3QSilX9jLzzUdl+sbDuHUqFBjoM= Subject key identifier: ED:15:3F:38:6D:02:A5:39:BD:07:5A:02:7B:87:64:5D:1B:E3:60:10 Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 78BBA8C08D4C3053A010A8EFB84215C31C731C94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 0146 Signing time: Mon 20 Oct 2025 04:21:52 +0000 Manifest this update: Mon 20 Oct 2025 04:16:52 +0000 Manifest next update: Thu 23 Oct 2025 07:41:52 +0000 Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=) 2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: xNT2CllFLcfnyaJ62KyvZP+YAK9ZO3Fzv77Gla/2WsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bb:a8:c0:8d:4c:30:53:a0:10:a8:ef:b8:42:15:c3:1c:73:1c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Oct 20 04:16:52 2025 GMT Not After : Oct 23 07:41:52 2025 GMT Subject: CN=ED153F386D02A539BD075A027B87645D1BE36010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:2e:f6:05:69:36:e2:18:d6:51:9c:fe:78: 1f:89:f8:6d:99:df:27:6d:04:17:08:aa:21:21:25: fe:c0:09:c8:98:12:89:45:35:c0:c6:47:2a:11:6f: f9:5a:91:01:b3:b3:1b:31:39:c2:26:b1:fa:8b:18: 74:90:5a:d1:1d:20:96:32:8e:b7:6e:b8:95:d7:5f: 8e:05:2c:6d:67:fe:89:1f:b2:25:a2:cd:52:99:5c: ec:99:83:c3:46:c6:5f:f7:dd:67:79:e9:e3:a2:09: 3e:d8:7f:63:65:51:52:a7:72:ab:dd:42:18:04:68: 3a:cb:bd:ab:95:93:92:40:b5:4c:29:95:e6:17:1e: 11:3b:9f:94:dd:da:b8:be:aa:b8:ce:62:a5:22:69: f2:b7:9d:9f:aa:d1:fd:2a:76:c9:45:b8:3c:a3:77: 17:70:51:04:08:d4:0b:4e:31:4b:5b:40:32:04:c8: dc:60:0d:25:65:56:ef:7d:e6:14:67:ec:fe:7b:c7: dd:46:9c:79:84:80:ec:3d:51:b8:af:94:63:45:a2: 62:02:ef:e9:c9:69:08:84:9a:a8:fb:b2:6c:30:06: f1:65:80:f8:84:6e:5e:44:76:5a:57:de:21:35:9c: 64:44:e9:bd:59:52:79:19:64:81:49:64:37:cd:80: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:15:3F:38:6D:02:A5:39:BD:07:5A:02:7B:87:64:5D:1B:E3:60:10 X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:2d:94:74:d2:f8:0a:7f:49:61:ce:55:8f:c9:6d:b2:c7:d0: d3:61:0e:e1:15:18:70:b5:9c:cd:01:a1:80:59:ba:09:6a:62: 87:cb:f4:0f:9c:87:09:1e:c4:41:55:e2:66:9d:c1:4c:bc:5c: 2a:8e:ac:4e:6e:51:0b:0f:8b:e4:c3:47:ed:bb:b6:71:a7:81: 01:4e:f3:f9:cd:b0:6d:19:24:af:9a:04:41:8c:11:21:c2:c7: 69:0b:89:02:12:12:8c:8f:a5:75:77:6c:a4:cf:c7:7f:20:bc: 15:7f:a0:fb:43:2b:47:16:ec:8f:f0:21:83:a0:c6:39:f2:7c: 8f:22:1b:bd:79:5d:c2:90:5e:84:7c:aa:e8:53:0b:85:a4:67: e7:21:72:7b:14:ef:b0:22:46:56:3e:7f:fe:35:1b:61:02:6a: 43:d6:40:33:67:da:b6:dd:8a:ee:ba:30:92:20:f3:6c:be:63: db:d1:ba:24:fc:f6:9e:da:e3:f5:19:5e:3c:98:b1:99:98:f2: f7:03:eb:a5:09:4b:00:54:d5:69:9e:6e:32:d8:c3:ec:e1:f8: f3:8e:4b:2e:2b:aa:0d:64:f0:ca:cd:4a:a0:ae:2f:01:0c:d3: 7d:8b:af:5d:8d:15:66:32:9e:97:49:e6:06:ea:59:66:a5:b4: 4d:0b:5b:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLuowI1MMFOgEKjvuEIVwxxzHJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTEwMjAwNDE2NTJaFw0yNTEwMjMwNzQxNTJaMDMxMTAvBgNV BAMTKEVEMTUzRjM4NkQwMkE1MzlCRDA3NUEwMjdCODc2NDVEMUJFMzYwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHi72BWk24hjWUZz+eB+J+G2Z 3ydtBBcIqiEhJf7ACciYEolFNcDGRyoRb/lakQGzsxsxOcImsfqLGHSQWtEdIJYy jrduuJXXX44FLG1n/okfsiWizVKZXOyZg8NGxl/33Wd56eOiCT7Yf2NlUVKncqvd QhgEaDrLvauVk5JAtUwpleYXHhE7n5Td2ri+qrjOYqUiafK3nZ+q0f0qdslFuDyj dxdwUQQI1AtOMUtbQDIEyNxgDSVlVu995hRn7P57x91GnHmEgOw9UbivlGNFomIC 7+nJaQiEmqj7smwwBvFlgPiEbl5EdlpX3iE1nGRE6b1ZUnkZZIFJZDfNgMzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7RU/OG0CpTm9B1oCe4dkXRvjYBAwHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAItlHTS+Ap/SWHOVY/JbbLH0NNhDuEVGHC1 nM0BoYBZuglqYofL9A+chwkexEFV4madwUy8XCqOrE5uUQsPi+TDR+27tnGngQFO 8/nNsG0ZJK+aBEGMESHCx2kLiQISEoyPpXV3bKTPx38gvBV/oPtDK0cW7I/wIYOg xjnyfI8iG715XcKQXoR8quhTC4WkZ+chcnsU77AiRlY+f/41G2ECakPWQDNn2rbd iu66MJIg82y+Y9vRuiT89p7a4/UZXjyYsZmY8vcD66UJSwBU1WmebjLYw+zh+POO Sy4rqg1k8MrNSqCuLwEM032Lr12NFWYynpdJ5gbqWWaltE0LWw4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:26 2025 by rpki-client