$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: CfSTgoXiVaCCM+Ss9OomAK2TV4BHWFzeO3Uqa17rdYs= Subject key identifier: D9:60:2C:10:9C:AD:A7:0B:33:30:11:C4:96:9D:87:15:A9:92:66:0A Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 34527BCA93E59949286C591A496EFDFBB133E81F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: B6 Signing time: Sat 23 Aug 2025 11:53:24 +0000 Manifest this update: Sat 23 Aug 2025 11:48:24 +0000 Manifest next update: Tue 26 Aug 2025 16:07:24 +0000 Files and hashes: 1: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=) 2: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=) 3: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: cgNjyTCeKzGl5pLVsDFj1eZ+rTete3M7MBtDZ4rj724=) 4: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:52:7b:ca:93:e5:99:49:28:6c:59:1a:49:6e:fd:fb:b1:33:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Aug 23 11:48:24 2025 GMT Not After : Aug 26 16:07:24 2025 GMT Subject: CN=D9602C109CADA70B333011C4969D8715A992660A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:79:c6:35:b0:db:26:6e:91:85:26:1b:8a: 9b:cd:aa:e7:6b:e3:be:42:85:d1:4a:05:de:c0:54: 21:45:b7:2e:84:d5:36:f2:9e:b2:7a:63:b3:02:6a: 89:95:31:1c:b6:5d:4e:5e:f7:29:fe:de:1d:57:ce: 65:e7:c0:1a:a0:c6:a2:0b:3b:d9:06:0d:cd:ef:07: 9b:60:a0:81:e8:50:ec:81:3d:39:92:8f:8f:19:72: 3b:be:e4:eb:bb:fd:14:5f:47:9f:45:4f:15:0f:1a: 20:ef:33:b4:1d:b7:db:8b:52:57:6b:53:96:85:02: ac:ff:49:19:3e:1b:27:dc:dc:95:8e:fa:bd:91:bf: fd:9b:56:bd:5a:45:95:11:30:4a:3e:28:64:aa:e5: 4f:bb:a4:1c:5d:01:3d:60:70:10:65:7a:97:d7:ef: 4b:92:a4:6c:db:88:d0:54:1b:d9:72:6e:09:9f:24: ee:d5:56:dd:fc:ff:e7:b8:ab:51:99:0d:fc:fe:da: 68:b3:40:ce:e5:fd:4f:58:43:80:8e:19:de:38:d2: ca:36:3e:ae:0b:00:16:8a:38:9a:86:63:61:bc:45: c0:85:2a:89:20:63:e2:ed:21:80:cd:e0:39:ac:3c: dc:10:7c:a8:81:d1:20:fd:63:4a:4c:51:f4:0b:5e: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:60:2C:10:9C:AD:A7:0B:33:30:11:C4:96:9D:87:15:A9:92:66:0A X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:37:d9:44:a2:b6:42:8b:ad:d8:9f:87:3d:7c:23:d7:cb:7e: 48:76:8d:05:8d:4e:8e:aa:7f:9c:aa:56:c3:1f:9a:f8:05:66: 08:d7:7a:e0:7e:e7:66:6c:67:4a:9e:95:b8:af:8f:03:b9:6a: 0a:ed:e3:f2:cc:83:10:8e:4f:e2:36:66:bd:ed:f5:52:d8:cb: 27:40:f9:18:fc:c5:35:88:80:48:b9:30:4e:7e:5c:84:68:09: 96:a5:a3:ab:35:79:92:7b:eb:9e:b1:96:e1:7b:84:03:b3:52: 78:4d:d8:24:0b:bf:d2:d4:86:e6:3c:3c:96:1f:df:83:71:7b: 1f:a1:fa:08:ca:4a:53:1d:29:63:38:03:9e:cd:87:cb:67:d6: 90:29:55:ed:9e:a8:bf:ef:88:f4:95:c6:2e:ed:cf:fa:36:f4: 97:cf:24:a8:c9:ea:cc:02:44:a8:b0:39:ec:48:a7:e8:a4:92: ef:c8:2a:5b:e1:b9:d5:fb:75:60:17:7a:f7:2a:5e:a8:53:b0: 83:ae:c3:d8:e0:fb:c2:95:f5:ea:d5:5b:cb:a8:ee:b4:f4:21: c9:85:2f:dd:e4:a8:bd:f6:cc:76:02:a8:15:cb:7d:35:21:63: c7:4b:87:1f:93:2a:f6:77:0c:9f:00:be:40:e4:fa:72:72:77: 93:1e:05:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFJ7ypPlmUkobFkaSW79+7Ez6B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTA4MjMxMTQ4MjRaFw0yNTA4MjYxNjA3MjRaMDMxMTAvBgNV BAMTKEQ5NjAyQzEwOUNBREE3MEIzMzMwMTFDNDk2OUQ4NzE1QTk5MjY2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXnnGNbDbJm6RhSYbipvNqudr 475ChdFKBd7AVCFFty6E1TbynrJ6Y7MCaomVMRy2XU5e9yn+3h1XzmXnwBqgxqIL O9kGDc3vB5tgoIHoUOyBPTmSj48Zcju+5Ou7/RRfR59FTxUPGiDvM7Qdt9uLUldr U5aFAqz/SRk+Gyfc3JWO+r2Rv/2bVr1aRZURMEo+KGSq5U+7pBxdAT1gcBBlepfX 70uSpGzbiNBUG9lybgmfJO7VVt38/+e4q1GZDfz+2mizQM7l/U9YQ4COGd440so2 Pq4LABaKOJqGY2G8RcCFKokgY+LtIYDN4DmsPNwQfKiB0SD9Y0pMUfQLXtRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WAsEJytpwszMBHElp2HFamSZgowHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw32USitkKLrdifhz18I9fLfkh2jQWNTo6q f5yqVsMfmvgFZgjXeuB+52ZsZ0qelbivjwO5agrt4/LMgxCOT+I2Zr3t9VLYyydA +Rj8xTWIgEi5ME5+XIRoCZalo6s1eZJ7656xluF7hAOzUnhN2CQLv9LUhuY8PJYf 34Nxex+h+gjKSlMdKWM4A57Nh8tn1pApVe2eqL/viPSVxi7tz/o29JfPJKjJ6swC RKiwOexIp+ikku/IKlvhudX7dWAXevcqXqhTsIOuw9jg+8KV9erVW8uo7rT0IcmF L93kqL32zHYCqBXLfTUhY8dLhx+TKvZ3DJ8AvkDk+nJyd5MeBYA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:10 2025 by rpki-client