$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: 2qF0FqYEP2GaWMM+mGR5Y1y7ZgBJKZnUXtWYhbKze2o= Subject key identifier: 4B:C5:38:E2:7B:A2:C3:DA:84:C5:66:26:0C:A3:6A:40:11:3F:B5:6F Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 20632A2D9480E8FF3862A909264D2B86195F692E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: A9 Signing time: Fri 22 Aug 2025 16:51:24 +0000 Manifest this update: Fri 22 Aug 2025 16:46:24 +0000 Manifest next update: Tue 26 Aug 2025 00:47:24 +0000 Files and hashes: 1: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: fzaw5/y5iH/LT/YMeeb25yzP0R/Crwib2M3SGbkd9SU=) 2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:63:2a:2d:94:80:e8:ff:38:62:a9:09:26:4d:2b:86:19:5f:69:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Aug 22 16:46:24 2025 GMT Not After : Aug 26 00:47:24 2025 GMT Subject: CN=4BC538E27BA2C3DA84C566260CA36A40113FB56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:38:b7:58:f4:48:32:2d:89:ce:b6:bd:47: 2c:2d:2c:85:8b:bf:b4:d4:59:25:d6:3b:0a:ce:95: 17:54:05:38:b4:5b:4f:aa:f5:67:d7:b8:0a:e3:f9: 29:0b:a9:c0:3e:27:e0:b7:94:b1:42:02:5d:8d:48: b3:1e:62:70:4e:7e:63:48:a8:5d:1e:0c:6c:29:71: 41:92:1e:a6:53:47:8b:a3:4e:37:90:83:cb:3d:1f: 1f:98:df:34:03:cf:90:6e:c5:8f:7b:07:05:42:e0: 41:10:8c:04:e1:2b:6e:e5:c0:d2:43:45:68:7a:bc: a4:fa:a4:a5:36:68:eb:7b:4f:b6:11:c6:8b:f8:a9: e0:8c:90:24:fd:9c:0b:da:29:86:90:5e:6f:6c:db: 5b:1a:71:c3:74:29:da:1d:03:3e:d4:f4:31:d0:be: 6c:44:fa:3a:31:34:8a:65:7b:a6:7c:ef:f2:4e:71: dd:cf:2c:fb:2f:aa:4b:94:13:e0:3c:a7:e2:79:2f: b0:03:f9:7f:a3:25:be:de:75:39:fe:fc:39:79:b4: f9:f1:23:56:9a:ef:d2:fb:4c:81:8a:ad:86:60:df: 60:94:53:02:8c:c2:1a:19:2a:ec:38:68:31:e9:51: 6c:2d:50:e3:ed:c7:20:f7:30:4c:60:ed:5c:40:a7: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:38:E2:7B:A2:C3:DA:84:C5:66:26:0C:A3:6A:40:11:3F:B5:6F X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d1:c5:1c:04:31:2a:5b:25:52:ca:af:49:19:7a:0e:18:40: 3f:79:f7:21:de:0b:d6:b4:ee:47:60:c5:a5:ca:21:e8:dc:17: a3:86:12:fc:8d:48:dc:23:e9:24:cd:08:e9:52:c5:19:8b:1e: a6:fa:8b:ad:8f:34:74:f2:e3:7d:fd:24:8a:71:45:41:8f:60: af:57:1c:18:b4:ae:c6:3b:16:48:06:4a:44:39:0b:8c:c3:ac: 69:3f:11:31:27:7d:8f:59:2e:50:fd:12:99:eb:81:93:94:cf: 4a:ef:3c:5f:7d:ac:46:6c:3d:fc:26:82:8e:87:d5:98:53:aa: 33:b0:23:e3:42:d3:08:8c:8b:00:4d:32:90:84:3b:06:70:2a: a6:c8:29:48:e0:37:75:5a:e6:f0:2b:ed:8c:e4:01:01:39:06: 60:18:39:fb:12:b0:5f:1a:9f:d5:6b:a8:ef:e7:7b:f9:50:89: a9:72:4d:74:c0:8b:4c:0d:4d:c7:99:15:e1:74:aa:9b:56:8d: 28:b5:6e:fb:b5:f9:0a:59:53:48:10:3f:cb:f1:6b:93:af:ad: c2:43:17:71:c2:fd:82:33:86:64:29:7e:a4:b0:1b:b5:10:0e: e4:2a:8b:5d:1a:a0:ae:47:1e:87:9b:a1:8c:06:3e:25:bd:11: 01:91:98:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGMqLZSA6P84YqkJJk0rhhlfaS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTA4MjIxNjQ2MjRaFw0yNTA4MjYwMDQ3MjRaMDMxMTAvBgNV BAMTKDRCQzUzOEUyN0JBMkMzREE4NEM1NjYyNjBDQTM2QTQwMTEzRkI1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMDi3WPRIMi2Jzra9RywtLIWL v7TUWSXWOwrOlRdUBTi0W0+q9WfXuArj+SkLqcA+J+C3lLFCAl2NSLMeYnBOfmNI qF0eDGwpcUGSHqZTR4ujTjeQg8s9Hx+Y3zQDz5BuxY97BwVC4EEQjAThK27lwNJD RWh6vKT6pKU2aOt7T7YRxov4qeCMkCT9nAvaKYaQXm9s21saccN0KdodAz7U9DHQ vmxE+joxNIple6Z87/JOcd3PLPsvqkuUE+A8p+J5L7AD+X+jJb7edTn+/Dl5tPnx I1aa79L7TIGKrYZg32CUUwKMwhoZKuw4aDHpUWwtUOPtxyD3MExg7VxAp53JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8U44nuiw9qExWYmDKNqQBE/tW8wHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3RxRwEMSpbJVLKr0kZeg4YQD959yHeC9a0 7kdgxaXKIejcF6OGEvyNSNwj6STNCOlSxRmLHqb6i62PNHTy4339JIpxRUGPYK9X HBi0rsY7FkgGSkQ5C4zDrGk/ETEnfY9ZLlD9EpnrgZOUz0rvPF99rEZsPfwmgo6H 1ZhTqjOwI+NC0wiMiwBNMpCEOwZwKqbIKUjgN3Va5vAr7YzkAQE5BmAYOfsSsF8a n9VrqO/ne/lQialyTXTAi0wNTceZFeF0qptWjSi1bvu1+QpZU0gQP8vxa5OvrcJD F3HC/YIzhmQpfqSwG7UQDuQqi10aoK5HHoeboYwGPiW9EQGRmKg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:52 2025 by rpki-client