$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: gajqov09lGi7YrjOAMuGt9T8nrKhUwjeHDXkONz4Nc4= Subject key identifier: 1A:07:66:70:E4:B2:7E:98:EF:DD:D8:8E:07:34:7E:EB:68:DE:AA:72 Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 6A0881EF377E1BD0AD56C90F8C7402485F14BCEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: 9F Signing time: Wed 02 Jul 2025 07:11:32 +0000 Manifest this update: Wed 02 Jul 2025 07:06:32 +0000 Manifest next update: Sat 05 Jul 2025 11:31:32 +0000 Files and hashes: 1: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: a1FYyy/vKazdeERHLTYxhwXlynBgvghgv8uwPIjK9XQ=) 2: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=) 3: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=) 4: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:08:81:ef:37:7e:1b:d0:ad:56:c9:0f:8c:74:02:48:5f:14:bc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Jul 2 07:06:32 2025 GMT Not After : Jul 5 11:31:32 2025 GMT Subject: CN=1A076670E4B27E98EFDDD88E07347EEB68DEAA72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:f6:30:ad:9a:54:78:35:1c:55:f8:c5:11: 33:ae:f4:51:f6:38:3e:a6:e5:70:40:4c:c9:79:df: 06:00:a5:13:65:77:17:f5:4e:50:63:6d:b0:89:50: 09:ee:c7:4c:90:89:d8:10:d1:f7:e2:e9:d0:43:0b: 75:dc:53:9e:d3:7f:c9:3d:08:a9:f3:08:3e:72:f0: 3d:dd:07:37:f4:1f:e3:99:a2:27:0e:a9:dd:43:5e: 17:8b:e2:fc:66:64:92:03:88:9f:b7:5b:a0:c2:0e: f9:69:97:48:08:38:fd:74:27:1a:97:b4:8e:bf:e1: e5:0a:64:b9:6d:ef:91:c3:a9:83:37:fd:f8:9f:d3: b2:e7:87:42:da:33:4d:f8:fa:d3:be:fc:39:ed:65: 29:8c:ee:96:89:9c:51:a5:82:4a:85:ab:88:e8:78: c5:94:74:a6:0c:82:d4:37:fc:f2:1c:f9:16:9f:a7: 59:c3:eb:46:a7:1d:92:15:2f:40:e7:ec:5e:8b:fb: 7d:e2:10:09:34:66:1c:36:00:ca:ba:1f:09:a8:66: 10:b7:63:2a:d4:70:47:ea:26:6e:43:eb:3a:18:a4: 63:70:80:21:69:0b:18:2c:06:fd:62:74:80:3a:b0: 55:d6:9a:d8:28:28:59:36:f3:b2:9a:11:ac:0f:06: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:07:66:70:E4:B2:7E:98:EF:DD:D8:8E:07:34:7E:EB:68:DE:AA:72 X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:33:bb:16:81:4f:d9:02:57:dc:b4:51:67:53:cb:be:70:a9: 70:08:b8:33:07:4a:ad:9a:18:50:a4:f1:07:48:1e:f8:4e:3d: ce:af:0b:27:9c:8f:66:cf:d7:a5:3d:ff:f7:fb:45:92:ee:ff: 71:c1:eb:ca:ad:8f:a2:7a:2b:d4:20:13:4a:cf:7a:19:ca:32: e0:69:9d:3e:e0:0b:60:2b:58:fc:60:42:9a:f4:29:9e:f0:5e: 39:12:5b:d1:4b:b2:1c:81:99:c8:35:43:c6:b3:32:d1:c4:50: d7:fb:16:f9:e2:26:f3:06:c4:9a:16:4e:c4:42:aa:8f:97:2b: 7f:1c:0a:0b:ea:55:9e:08:80:db:ca:aa:91:6c:63:90:5b:fa: bf:30:8b:a4:bd:b0:c3:60:df:ae:4e:84:79:27:2d:24:ed:50: 27:6a:eb:06:fa:d1:f8:66:e1:6a:3f:ae:1b:7e:41:1a:a2:fe: 64:9a:05:03:07:9f:c7:3c:b1:d2:e9:c8:bc:ad:ce:1d:2f:82: 24:5e:8e:00:37:8a:11:12:33:c1:2a:5e:d4:c5:22:8f:1d:c6: 64:74:94:fb:5d:53:2d:cd:2f:3d:a5:6b:26:16:14:d2:81:67: 44:0d:05:6e:76:98:4e:b4:39:24:2a:4e:2e:cd:27:a8:ba:f4: 91:9f:d6:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagiB7zd+G9CtVskPjHQCSF8UvO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTA3MDIwNzA2MzJaFw0yNTA3MDUxMTMxMzJaMDMxMTAvBgNV BAMTKDFBMDc2NjcwRTRCMjdFOThFRkRERDg4RTA3MzQ3RUVCNjhERUFBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7u/YwrZpUeDUcVfjFETOu9FH2 OD6m5XBATMl53wYApRNldxf1TlBjbbCJUAnux0yQidgQ0ffi6dBDC3XcU57Tf8k9 CKnzCD5y8D3dBzf0H+OZoicOqd1DXheL4vxmZJIDiJ+3W6DCDvlpl0gIOP10JxqX tI6/4eUKZLlt75HDqYM3/fif07Lnh0LaM034+tO+/DntZSmM7paJnFGlgkqFq4jo eMWUdKYMgtQ3/PIc+Rafp1nD60anHZIVL0Dn7F6L+33iEAk0Zhw2AMq6HwmoZhC3 YyrUcEfqJm5D6zoYpGNwgCFpCxgsBv1idIA6sFXWmtgoKFk287KaEawPBtrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgdmcOSyfpjv3diOBzR+62jeqnIwHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8zuxaBT9kCV9y0UWdTy75wqXAIuDMHSq2a GFCk8QdIHvhOPc6vCyecj2bP16U9//f7RZLu/3HB68qtj6J6K9QgE0rPehnKMuBp nT7gC2ArWPxgQpr0KZ7wXjkSW9FLshyBmcg1Q8azMtHEUNf7FvniJvMGxJoWTsRC qo+XK38cCgvqVZ4IgNvKqpFsY5Bb+r8wi6S9sMNg365OhHknLSTtUCdq6wb60fhm 4Wo/rht+QRqi/mSaBQMHn8c8sdLpyLytzh0vgiRejgA3ihESM8EqXtTFIo8dxmR0 lPtdUy3NLz2layYWFNKBZ0QNBW52mE60OSQqTi7NJ6i69JGf1sI= -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:59 2025 by rpki-client