$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: FnNif0/+4M9hwLXNmxYPP5wyfimEvQDtl7cDG6n3U2M= Subject key identifier: 93:B3:18:BF:90:03:27:79:AC:11:94:E0:69:CF:32:BC:01:BF:AB:52 Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 3FE901F4C0820CC1C8484FEBA58089B96525DFF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: C3 Signing time: Sun 19 Oct 2025 18:01:24 +0000 Manifest this update: Sun 19 Oct 2025 17:56:24 +0000 Manifest next update: Thu 23 Oct 2025 01:52:24 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: knJSL9Drd8pW5Nf2lXWjXRS1BoR7dXA5uT7eDIwPGGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e9:01:f4:c0:82:0c:c1:c8:48:4f:eb:a5:80:89:b9:65:25:df:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Oct 19 17:56:24 2025 GMT Not After : Oct 23 01:52:24 2025 GMT Subject: CN=93B318BF90032779AC1194E069CF32BC01BFAB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:83:a3:b3:1b:37:6c:0b:49:7b:f1:ce:ed: 73:a4:43:c6:c6:8f:bd:2e:ca:00:0b:4e:c0:a1:82: a5:a4:c2:7e:d6:35:1c:d6:e1:93:2e:e8:cb:a9:bb: 61:e6:6d:47:df:2a:29:02:e9:b5:00:2e:88:03:6c: 18:ab:31:c3:fd:67:0c:56:a5:31:aa:a1:1e:9c:66: 49:f9:17:83:f5:f2:c2:98:4e:b8:61:65:f1:37:d6: dc:e3:d5:d5:78:c9:05:c8:f8:f3:d2:16:d1:f5:b3: 53:1a:9b:aa:69:1a:12:06:f6:06:38:99:fb:2c:94: 29:92:74:3a:b0:98:69:a2:c5:96:2f:bf:b2:e0:30: 6f:59:de:03:dc:d9:3c:3b:4c:c9:5c:a4:ba:7f:5c: cb:3d:24:07:85:1c:8a:23:aa:14:97:05:0c:da:39: 0c:d7:9f:73:d9:4b:f8:0b:11:6b:14:26:b5:33:7a: 75:1a:8e:ed:0e:87:20:36:0c:f0:07:1c:80:26:70: 1c:6f:84:e1:9b:31:a1:c0:54:90:12:57:98:06:25: d1:0e:04:46:91:8d:9d:be:78:2e:72:c0:6f:e6:23: 36:a8:67:11:dc:c9:c9:8d:6c:49:2f:c4:fc:f6:2f: 44:e8:39:cf:ec:06:fa:14:5d:28:db:31:14:74:1a: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:18:BF:90:03:27:79:AC:11:94:E0:69:CF:32:BC:01:BF:AB:52 X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f1:44:bc:f4:04:88:96:2d:ee:1b:ed:d4:b5:21:4c:80:64: 06:30:c1:62:19:2e:98:71:30:8f:d5:72:af:e1:62:d5:4a:8e: 83:a0:06:41:dd:e2:f2:3a:3c:82:1c:a2:13:8c:8e:1b:53:2f: 27:4a:0b:e2:f9:2e:2c:62:99:d6:2d:89:9a:14:46:15:ad:79: 3b:88:79:83:48:48:2d:0e:30:ec:89:64:1b:01:79:b2:0a:35: 04:6d:9f:ce:2e:a4:76:b7:54:b4:79:de:6e:c0:75:52:8f:9d: 65:5e:c6:36:5d:ef:4f:07:18:b4:24:6a:46:11:2d:a4:57:9d: 29:22:54:7d:4f:36:68:6a:f1:a8:6f:b0:26:26:a3:c1:8a:a5: 6d:ca:c1:74:69:3d:5c:41:af:12:86:f9:8f:db:ed:c9:1e:19: 27:15:06:a2:e1:c8:9c:d1:21:97:99:23:92:c3:fd:00:45:5f: 86:db:91:6c:46:69:95:ff:16:8c:e4:7d:5b:09:aa:a4:8e:8d: d3:0a:6c:79:4b:36:04:1f:eb:78:1a:f1:4b:45:33:bb:d7:ef: 06:80:6c:d0:36:b4:3f:61:a2:b1:1c:03:86:47:02:06:7d:c4: d5:7c:1f:b1:98:b4:0e:c1:3d:36:cb:5f:98:9d:89:8b:6d:d2: 4e:19:a6:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+kB9MCCDMHISE/rpYCJuWUl3/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTEwMTkxNzU2MjRaFw0yNTEwMjMwMTUyMjRaMDMxMTAvBgNV BAMTKDkzQjMxOEJGOTAwMzI3NzlBQzExOTRFMDY5Q0YzMkJDMDFCRkFCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoYOjsxs3bAtJe/HO7XOkQ8bG j70uygALTsChgqWkwn7WNRzW4ZMu6Mupu2HmbUffKikC6bUALogDbBirMcP9ZwxW pTGqoR6cZkn5F4P18sKYTrhhZfE31tzj1dV4yQXI+PPSFtH1s1Mam6ppGhIG9gY4 mfsslCmSdDqwmGmixZYvv7LgMG9Z3gPc2Tw7TMlcpLp/XMs9JAeFHIojqhSXBQza OQzXn3PZS/gLEWsUJrUzenUaju0OhyA2DPAHHIAmcBxvhOGbMaHAVJASV5gGJdEO BEaRjZ2+eC5ywG/mIzaoZxHcycmNbEkvxPz2L0ToOc/sBvoUXSjbMRR0GuKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk7MYv5ADJ3msEZTgac8yvAG/q1IwHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTxRLz0BIiWLe4b7dS1IUyAZAYwwWIZLphx MI/Vcq/hYtVKjoOgBkHd4vI6PIIcohOMjhtTLydKC+L5LiximdYtiZoURhWteTuI eYNISC0OMOyJZBsBebIKNQRtn84upHa3VLR53m7AdVKPnWVexjZd708HGLQkakYR LaRXnSkiVH1PNmhq8ahvsCYmo8GKpW3KwXRpPVxBrxKG+Y/b7ckeGScVBqLhyJzR IZeZI5LD/QBFX4bbkWxGaZX/FozkfVsJqqSOjdMKbHlLNgQf63ga8UtFM7vX7waA bNA2tD9horEcA4ZHAgZ9xNV8H7GYtA7BPTbLX5idiYtt0k4ZphQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:16 2025 by rpki-client