$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: hoH5LWe2yUZIzoqNOJHoBWNfS6q9e1ja5wzhSV6O7Oo= Subject key identifier: 14:0C:E3:EB:7B:ED:52:77:09:AE:1E:71:BA:69:83:56:78:AA:44:D4 Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 7B14695AAA3A21E5C1B3549077F44D136B441B48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: 91 Signing time: Sun 29 Jun 2025 09:51:21 +0000 Manifest this update: Sun 29 Jun 2025 09:46:21 +0000 Manifest next update: Wed 02 Jul 2025 13:11:21 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: fgXPSQsqaItwV85kVDw1BpY1q2P/h3jwxlkF9YcsUtA=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: h5TeGNJ3eUIud6AyrcC9G8qQXo+of2mpo0A7rBYwIcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:14:69:5a:aa:3a:21:e5:c1:b3:54:90:77:f4:4d:13:6b:44:1b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Jun 29 09:46:21 2025 GMT Not After : Jul 2 13:11:21 2025 GMT Subject: CN=140CE3EB7BED527709AE1E71BA69835678AA44D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:29:33:ab:25:88:79:01:fa:8a:da:c2:0e: 2d:91:b6:5d:60:2f:ac:4d:c0:32:09:ca:9c:70:98: cf:2b:52:6b:4d:f5:12:4b:d6:13:76:a1:fa:1b:c0: 6b:2e:c0:3f:2c:b5:b5:9d:f4:41:00:f2:03:d7:e6: 84:77:3d:95:af:67:1e:b9:03:5a:79:18:da:94:48: bf:68:56:aa:fe:75:5e:f3:ea:f7:ef:b9:f6:ef:9d: 0b:ea:08:10:00:31:65:5a:7f:8c:4b:76:f3:47:c5: c7:10:3c:d4:7b:d4:2a:a9:29:44:e1:3c:ca:b0:10: c3:e0:6d:19:b7:7b:b2:89:41:2b:da:39:1b:0f:af: be:16:c6:cc:43:4b:20:cd:21:d1:ff:b1:3b:7c:ed: 5e:37:d8:cb:50:06:a7:44:3f:a4:32:b5:e8:77:a1: ff:ee:6a:5f:97:f7:07:db:01:4e:1c:8e:78:fc:aa: 32:b4:c3:40:b3:66:8e:2d:ed:af:4c:c6:4c:6d:d2: 42:11:c7:b1:be:af:88:37:47:60:09:38:31:09:7d: 54:0c:2d:d5:68:4c:3c:ac:16:b6:35:4d:09:80:aa: 30:b3:41:f8:3c:c9:0c:e8:00:b0:01:78:5b:46:c1: 51:74:c4:eb:56:11:67:2f:91:51:e8:2e:64:92:65: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:E3:EB:7B:ED:52:77:09:AE:1E:71:BA:69:83:56:78:AA:44:D4 X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:88:c2:6b:e3:3a:7f:4d:b8:1d:1b:68:07:19:fc:6a:97:25: 62:da:ab:d3:5d:41:5c:36:b1:8a:0e:27:d1:be:b1:96:12:a0: 6b:13:15:85:cd:68:b3:f9:28:cc:77:a5:3a:85:c9:aa:1e:ad: b2:59:6e:73:d5:e2:42:4b:a4:7d:35:b4:90:b2:b6:37:17:f1: 2a:13:11:3f:48:ce:6f:88:39:55:85:3c:56:54:e3:38:b1:cd: 41:5e:ba:39:a5:f4:02:9e:68:cb:84:88:c6:c6:ee:2b:39:e0: 37:f6:b7:ea:ca:18:97:ca:bc:21:81:e2:27:7d:6d:b0:68:71: 9f:4e:76:41:47:fc:95:5b:34:c4:22:cf:24:f7:4a:f0:7c:66: 6a:e1:d8:5a:dd:7d:6d:ee:4d:27:b4:bb:e2:f0:80:83:f7:00: 63:3c:ad:40:35:3e:48:9a:a8:6a:8b:43:91:ac:86:20:9b:98: 5d:41:0a:56:11:93:dc:5d:af:36:b5:e4:7e:3d:5b:c3:d5:09: 8e:0e:0d:75:ff:97:dc:76:b8:c4:09:35:f8:95:be:3d:cf:e6: 06:48:cf:3f:d8:1c:5d:48:83:5b:1c:91:ec:f2:12:fb:5d:7b: 6b:1f:eb:51:b6:32:2f:88:8f:a8:7e:7e:b3:70:77:01:8b:43: bc:0f:d2:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexRpWqo6IeXBs1SQd/RNE2tEG0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTA2MjkwOTQ2MjFaFw0yNTA3MDIxMzExMjFaMDMxMTAvBgNV BAMTKDE0MENFM0VCN0JFRDUyNzcwOUFFMUU3MUJBNjk4MzU2NzhBQTQ0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoCkzqyWIeQH6itrCDi2Rtl1g L6xNwDIJypxwmM8rUmtN9RJL1hN2ofobwGsuwD8stbWd9EEA8gPX5oR3PZWvZx65 A1p5GNqUSL9oVqr+dV7z6vfvufbvnQvqCBAAMWVaf4xLdvNHxccQPNR71CqpKUTh PMqwEMPgbRm3e7KJQSvaORsPr74WxsxDSyDNIdH/sTt87V432MtQBqdEP6Qyteh3 of/ual+X9wfbAU4cjnj8qjK0w0CzZo4t7a9Mxkxt0kIRx7G+r4g3R2AJODEJfVQM LdVoTDysFrY1TQmAqjCzQfg8yQzoALABeFtGwVF0xOtWEWcvkVHoLmSSZUifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFAzj63vtUncJrh5xummDVniqRNQwHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2IwmvjOn9NuB0baAcZ/GqXJWLaq9NdQVw2 sYoOJ9G+sZYSoGsTFYXNaLP5KMx3pTqFyaoerbJZbnPV4kJLpH01tJCytjcX8SoT ET9Izm+IOVWFPFZU4zixzUFeujml9AKeaMuEiMbG7is54Df2t+rKGJfKvCGB4id9 bbBocZ9OdkFH/JVbNMQizyT3SvB8Zmrh2FrdfW3uTSe0u+LwgIP3AGM8rUA1Pkia qGqLQ5GshiCbmF1BClYRk9xdrza15H49W8PVCY4ODXX/l9x2uMQJNfiVvj3P5gZI zz/YHF1Ig1sckezyEvtde2sf61G2Mi+Ij6h+frNwdwGLQ7wP0qY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:19:37 2025 by rpki-client