$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: m+RJqSIxUOTF/BVXA5c+Eya3Axs7GF0OVaQNRb1gaVg= Subject key identifier: 99:B8:B9:74:04:A0:A9:11:FC:EA:40:36:CE:31:75:46:DD:AD:6F:32 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 4ED91E7287279279E8FFFF780950C1817853A250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 04EE Signing time: Sat 19 Jul 2025 15:30:44 +0000 Manifest this update: Sat 19 Jul 2025 15:25:44 +0000 Manifest next update: Wed 23 Jul 2025 02:29:44 +0000 Files and hashes: 1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: B1QkRHtzM3Jfixu5c/KoW+7zUngbRTtl9vDEfCdZqB4=) 2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:1e:72:87:27:92:79:e8:ff:ff:78:09:50:c1:81:78:53:a2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Jul 19 15:25:44 2025 GMT Not After : Jul 23 02:29:44 2025 GMT Subject: CN=99B8B97404A0A911FCEA4036CE317546DDAD6F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:b1:c9:4a:26:1e:41:d9:24:d7:5c:5d:4e: 2b:64:88:40:5e:ea:db:d0:86:ef:10:1f:ff:af:ae: b3:2a:ea:0b:a3:6b:d5:38:ef:e8:7a:b3:6f:61:64: 7d:73:b7:0a:70:d5:a6:91:9b:e6:90:72:bb:42:23: 09:31:b2:ac:95:50:82:e3:de:4e:32:86:76:fd:03: 5d:0a:c5:e5:25:03:f6:c7:92:c6:71:a6:47:2e:a8: 41:63:ea:8c:db:40:47:54:7e:95:9b:9f:ba:ca:26: e3:7f:62:ae:20:43:5c:cb:e0:b6:cc:84:21:dd:b9: 43:ce:40:6d:5a:e4:db:78:88:27:2c:e0:a0:13:04: 46:07:a4:67:08:fb:a0:a8:11:7c:22:27:cb:57:19: 95:71:5a:b0:66:38:bc:20:d7:76:72:b9:a9:8f:9f: e3:dd:a6:98:44:2e:b0:62:e0:e3:77:5d:11:c2:eb: c2:fb:5c:17:f2:96:f0:e8:19:71:7d:de:95:e9:5c: a9:55:6f:38:1b:b9:94:6e:71:e2:66:ea:b1:0e:b3: 19:fd:5e:d5:a6:97:e7:22:14:17:72:54:b7:51:b0: b2:94:4f:96:4a:d8:af:a9:3c:83:6d:74:d9:81:64: 41:78:b6:47:e5:be:01:33:3b:03:97:59:f5:7c:a6: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B8:B9:74:04:A0:A9:11:FC:EA:40:36:CE:31:75:46:DD:AD:6F:32 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:aa:cd:b7:9d:d9:00:14:5b:f8:38:be:76:5d:47:a4:c2:31: cf:86:b5:71:e7:c8:ab:46:8e:85:5d:27:e1:f5:22:bb:8b:3d: 4e:b6:ab:1d:3d:f9:57:ec:b9:97:94:3d:9a:8e:3e:6a:7c:40: b2:8b:8d:31:29:fe:43:31:d0:fd:80:24:ed:11:84:71:6e:6a: 07:24:be:35:53:2f:d0:56:6f:32:c4:a2:47:71:a2:bb:dc:9c: bd:11:a9:f5:3b:5d:3c:a0:04:ba:75:51:99:84:7f:cb:91:f5: 35:1d:2a:29:22:b4:b5:7c:64:04:fd:5b:27:7d:79:80:39:99: 2e:bc:77:17:f2:78:6f:ff:b1:cb:0b:4e:07:6e:41:be:be:4f: 31:46:bd:ca:e8:97:91:87:67:c1:0e:b6:e8:23:c2:6e:28:aa: 10:04:52:65:56:ea:34:90:18:38:73:01:c3:05:5f:cd:a5:9b: 1c:c7:5d:ec:e6:11:eb:3d:c4:ca:bf:3b:65:7d:84:99:e5:60: 04:9f:a7:80:a1:cb:c6:24:92:11:79:f8:b6:12:14:b6:9f:3e: 6f:02:ec:da:97:69:6b:e3:f8:63:b2:d2:6d:97:1a:d8:00:1f: f6:09:ea:cc:f0:d6:2a:39:98:93:91:4f:2c:8e:f2:80:87:0b: 40:67:62:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtkecocnknno//94CVDBgXhTolAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTA3MTkxNTI1NDRaFw0yNTA3MjMwMjI5NDRaMDMxMTAvBgNV BAMTKDk5QjhCOTc0MDRBMEE5MTFGQ0VBNDAzNkNFMzE3NTQ2RERBRDZGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQ7HJSiYeQdkk11xdTitkiEBe 6tvQhu8QH/+vrrMq6guja9U47+h6s29hZH1ztwpw1aaRm+aQcrtCIwkxsqyVUILj 3k4yhnb9A10KxeUlA/bHksZxpkcuqEFj6ozbQEdUfpWbn7rKJuN/Yq4gQ1zL4LbM hCHduUPOQG1a5Nt4iCcs4KATBEYHpGcI+6CoEXwiJ8tXGZVxWrBmOLwg13ZyuamP n+PdpphELrBi4ON3XRHC68L7XBfylvDoGXF93pXpXKlVbzgbuZRuceJm6rEOsxn9 XtWml+ciFBdyVLdRsLKUT5ZK2K+pPINtdNmBZEF4tkflvgEzOwOXWfV8pu+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbi5dASgqRH86kA2zjF1Rt2tbzIwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeqzbed2QAUW/g4vnZdR6TCMc+GtXHnyKtG joVdJ+H1IruLPU62qx09+VfsuZeUPZqOPmp8QLKLjTEp/kMx0P2AJO0RhHFuagck vjVTL9BWbzLEokdxorvcnL0RqfU7XTygBLp1UZmEf8uR9TUdKikitLV8ZAT9Wyd9 eYA5mS68dxfyeG//scsLTgduQb6+TzFGvcrol5GHZ8EOtugjwm4oqhAEUmVW6jSQ GDhzAcMFX82lmxzHXezmEes9xMq/O2V9hJnlYASfp4Chy8YkkhF5+LYSFLafPm8C 7NqXaWvj+GOy0m2XGtgAH/YJ6szw1io5mJORTyyO8oCHC0BnYmU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:40 2025 by rpki-client