$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: 0VpFEteaQmSCZAu2ZU+i9ayE8H6Tb+DVHsd5ZuAmWEA= Subject key identifier: DB:CC:22:93:C3:1F:80:F1:3A:E5:60:D2:28:D6:05:7A:46:79:5F:CB Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 17434CA856BDADC97D33E99C0C395AEBC4C0DA42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 012C Signing time: Thu 21 Aug 2025 12:01:40 +0000 Manifest this update: Thu 21 Aug 2025 11:56:40 +0000 Manifest next update: Sun 24 Aug 2025 13:45:40 +0000 Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=) 2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: htMmoI/pAAj87IAvmasUYKg/lHlVDj9PPeoevGSRRMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:43:4c:a8:56:bd:ad:c9:7d:33:e9:9c:0c:39:5a:eb:c4:c0:da:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Aug 21 11:56:40 2025 GMT Not After : Aug 24 13:45:40 2025 GMT Subject: CN=DBCC2293C31F80F13AE560D228D6057A46795FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:ad:90:03:bb:d4:10:6b:92:5b:d6:f9:14: 9f:a7:64:e2:6b:11:2e:e4:c1:24:cf:2e:72:69:19: 52:fb:33:8e:0c:34:96:3c:0c:e5:6e:f1:bc:29:df: b0:f5:b5:58:e2:0d:87:9e:97:d3:49:0d:21:2e:43: 3a:85:a9:6d:f1:a6:e2:c5:78:b7:3d:49:7b:6c:c8: 5e:74:be:32:16:3d:41:34:53:ca:e3:e5:f1:16:a5: 60:20:31:86:e4:06:85:05:62:78:72:5c:61:6d:3c: 88:41:27:d8:8a:07:75:4d:65:28:27:f9:fc:7d:91: 7d:ac:84:c9:bf:a9:6e:9b:8a:7a:47:e9:33:30:96: 22:09:67:99:29:5f:49:73:3a:f6:da:70:3c:f2:25: 71:79:78:b2:56:17:fe:00:64:75:ba:63:f8:c3:a7: d8:88:3e:6a:62:2e:82:f5:0e:e1:f1:62:c1:5a:82: cb:07:c2:9f:5c:6e:80:36:cc:5f:29:27:13:76:68: 43:ed:3c:35:f8:4e:4c:4e:d3:09:60:80:83:ea:17: d4:cc:5f:65:c7:b6:38:93:48:97:de:e9:39:a8:ca: dc:ce:65:18:c0:2b:8c:3a:b7:24:b4:d6:d7:85:6f: c0:e5:d1:de:4b:70:98:80:65:77:9b:9c:c8:b4:07: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CC:22:93:C3:1F:80:F1:3A:E5:60:D2:28:D6:05:7A:46:79:5F:CB X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:38:4c:30:10:16:0a:fe:25:a4:ec:37:3d:a7:30:46:e7:da: 77:d3:bf:89:7b:ba:0e:d8:2c:6f:a5:55:40:3b:e8:a9:04:cd: 31:f8:21:1e:bc:05:4c:87:3d:11:77:6b:fd:30:16:17:c8:36: 3c:cb:e5:49:7e:d9:dd:84:8c:32:0a:d2:a2:e6:1e:de:38:a1: 10:1d:13:2d:68:aa:d9:48:24:1b:37:09:c2:49:71:b0:37:4b: 4a:7b:d9:bf:00:9c:f7:5d:28:cb:fc:bd:c2:77:a1:e5:66:ff: 0f:db:2c:56:c5:a5:23:91:fe:89:7c:c6:80:cc:a8:a1:91:fb: 2d:85:29:f5:e7:18:9f:92:a9:c8:a4:7e:d2:31:b2:4a:b4:e5: d5:66:66:16:b9:19:53:48:83:4d:ab:a0:07:7b:53:01:fd:d1: 4a:08:5d:09:ba:f7:87:d8:8f:b7:a7:e0:c9:ec:83:26:94:7c: ef:ee:ab:ef:1e:c2:f5:3c:4b:e1:2a:33:d6:f9:ee:07:d7:13: d8:7a:9f:2f:de:cb:d6:73:f0:0c:2f:e8:c9:34:37:e2:8f:86: d8:d6:14:84:fb:be:dd:e1:98:48:b4:82:6e:c5:56:bd:38:f3: b8:a1:10:0f:ac:0e:ad:85:68:5b:39:b0:48:1e:9d:a9:77:75: c5:7a:f9:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0NMqFa9rcl9M+mcDDla68TA2kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTA4MjExMTU2NDBaFw0yNTA4MjQxMzQ1NDBaMDMxMTAvBgNV BAMTKERCQ0MyMjkzQzMxRjgwRjEzQUU1NjBEMjI4RDYwNTdBNDY3OTVGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaa2QA7vUEGuSW9b5FJ+nZOJr ES7kwSTPLnJpGVL7M44MNJY8DOVu8bwp37D1tVjiDYeel9NJDSEuQzqFqW3xpuLF eLc9SXtsyF50vjIWPUE0U8rj5fEWpWAgMYbkBoUFYnhyXGFtPIhBJ9iKB3VNZSgn +fx9kX2shMm/qW6binpH6TMwliIJZ5kpX0lzOvbacDzyJXF5eLJWF/4AZHW6Y/jD p9iIPmpiLoL1DuHxYsFagssHwp9cboA2zF8pJxN2aEPtPDX4TkxO0wlggIPqF9TM X2XHtjiTSJfe6TmoytzOZRjAK4w6tyS01teFb8Dl0d5LcJiAZXebnMi0By8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU28wik8MfgPE65WDSKNYFekZ5X8swHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU4TDAQFgr+JaTsNz2nMEbn2nfTv4l7ug7Y LG+lVUA76KkEzTH4IR68BUyHPRF3a/0wFhfINjzL5Ul+2d2EjDIK0qLmHt44oRAd Ey1oqtlIJBs3CcJJcbA3S0p72b8AnPddKMv8vcJ3oeVm/w/bLFbFpSOR/ol8xoDM qKGR+y2FKfXnGJ+SqcikftIxskq05dVmZha5GVNIg02roAd7UwH90UoIXQm694fY j7en4MnsgyaUfO/uq+8ewvU8S+EqM9b57gfXE9h6ny/ey9Zz8Awv6Mk0N+KPhtjW FIT7vt3hmEi0gm7FVr0487ihEA+sDq2FaFs5sEgenal3dcV6+Us= -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:34 2025 by rpki-client