$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: 4v1goVckg9Lb4Dcaf+EiXSLNNSX0iYVH1cKgKGtdw8c= Subject key identifier: 2C:0F:03:25:D1:27:9A:8E:3B:E7:1F:9B:2C:F2:50:85:45:4C:04:E8 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 5B4D43C32226ECDC2CD8B2148E69E40FF7234F46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 017F Signing time: Tue 22 Jul 2025 05:01:17 +0000 Manifest this update: Tue 22 Jul 2025 04:56:17 +0000 Manifest next update: Fri 25 Jul 2025 13:13:17 +0000 Files and hashes: 1: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: D4IrOm7Tkj2diXUzSdy5q/EvTIMfSycqVzdvq4cmFx0=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4d:43:c3:22:26:ec:dc:2c:d8:b2:14:8e:69:e4:0f:f7:23:4f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Jul 22 04:56:17 2025 GMT Not After : Jul 25 13:13:17 2025 GMT Subject: CN=2C0F0325D1279A8E3BE71F9B2CF25085454C04E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a1:10:cf:bf:95:c0:cb:ea:1f:23:d7:aa:82: f0:f2:07:47:f3:f3:7b:ef:45:5b:6e:ff:57:ea:79: 5f:66:ab:b1:fa:37:dd:5e:16:99:36:1b:3e:06:6d: 9a:09:b5:2c:7b:6d:19:d8:45:e0:3f:13:b0:8f:7e: a9:2c:d1:b3:dc:c0:9c:67:9f:87:7b:86:79:f4:47: 38:07:63:09:f4:ff:ce:41:b1:55:6b:fc:16:f1:d0: 84:4f:74:d6:77:ca:4d:3d:22:83:81:94:5a:6c:23: 53:5a:6b:71:67:c9:93:5b:e8:bf:9e:4c:30:fe:55: dd:bf:cb:53:29:40:7f:61:69:81:7a:91:bd:f9:50: 7f:e0:30:91:a2:25:cd:65:4b:0a:01:a5:a1:df:9c: 82:45:84:3b:c3:d3:81:0a:fc:9b:ed:3e:ae:bc:93: aa:8e:c2:ca:a7:1c:78:58:ad:aa:57:7e:a8:42:4d: d8:86:3e:a6:d5:9d:34:cd:49:b0:c2:ad:d8:3d:cf: 8d:80:37:97:ec:6f:54:0d:e1:7b:32:61:cf:33:b1: 38:70:ab:89:e0:2e:cd:8a:f2:05:58:cf:f3:96:84: df:d6:21:29:df:a0:3d:6e:5a:64:c6:d5:1a:78:3a: d1:90:c2:da:35:b6:85:78:ed:f8:ee:75:9a:6c:13: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:03:25:D1:27:9A:8E:3B:E7:1F:9B:2C:F2:50:85:45:4C:04:E8 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:94:17:1b:47:03:8e:f5:43:7c:a7:e5:40:7d:b7:68:d0:d2: 05:13:27:bc:4c:82:ab:28:28:15:7b:d5:ec:75:5a:f0:1c:23: c1:3c:ab:02:02:a7:9e:e3:ea:18:27:17:43:91:5c:d9:58:40: b9:dd:0a:34:e1:b6:e3:99:03:44:23:0a:bc:47:17:d4:3b:4f: 3a:b9:7c:41:4a:db:3e:86:78:28:55:f8:32:ff:a7:38:a6:19: d4:e5:65:70:de:62:f6:c6:af:c4:ef:df:89:b4:cb:0d:c1:82: 35:a8:a6:f8:14:69:64:92:da:eb:7b:28:0e:2d:2d:20:24:00: 52:c4:9a:35:61:57:7c:5f:a8:68:7e:13:e3:77:38:e7:8a:e2: 33:14:7e:93:b7:c9:ca:69:10:38:c3:a0:78:55:47:cb:fe:95: a3:17:38:07:f9:e8:9f:06:69:a9:34:8c:d0:9f:3f:ac:01:26: ad:72:e9:ca:6b:00:8d:f5:57:0a:d1:21:60:30:57:f2:4d:ff: 06:41:08:b0:e2:99:fc:83:5b:fb:cb:62:c8:00:69:8c:ff:67: 09:0f:57:31:48:02:9a:ae:fa:12:37:b1:d6:78:3f:20:85:66: 9d:1d:e9:2b:2d:37:cb:97:c4:ac:27:cb:f8:60:65:dd:d9:ba: 20:34:ff:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW01DwyIm7Nws2LIUjmnkD/cjT0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTA3MjIwNDU2MTdaFw0yNTA3MjUxMzEzMTdaMDMxMTAvBgNV BAMTKDJDMEYwMzI1RDEyNzlBOEUzQkU3MUY5QjJDRjI1MDg1NDU0QzA0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwoRDPv5XAy+ofI9eqgvDyB0fz 83vvRVtu/1fqeV9mq7H6N91eFpk2Gz4GbZoJtSx7bRnYReA/E7CPfqks0bPcwJxn n4d7hnn0RzgHYwn0/85BsVVr/Bbx0IRPdNZ3yk09IoOBlFpsI1Naa3FnyZNb6L+e TDD+Vd2/y1MpQH9haYF6kb35UH/gMJGiJc1lSwoBpaHfnIJFhDvD04EK/JvtPq68 k6qOwsqnHHhYrapXfqhCTdiGPqbVnTTNSbDCrdg9z42AN5fsb1QN4XsyYc8zsThw q4ngLs2K8gVYz/OWhN/WISnfoD1uWmTG1Rp4OtGQwto1toV47fjudZpsE9eLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULA8DJdEnmo475x+bLPJQhUVMBOgwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeUFxtHA471Q3yn5UB9t2jQ0gUTJ7xMgqso KBV71ex1WvAcI8E8qwICp57j6hgnF0ORXNlYQLndCjThtuOZA0QjCrxHF9Q7Tzq5 fEFK2z6GeChV+DL/pzimGdTlZXDeYvbGr8Tv34m0yw3BgjWopvgUaWSS2ut7KA4t LSAkAFLEmjVhV3xfqGh+E+N3OOeK4jMUfpO3ycppEDjDoHhVR8v+laMXOAf56J8G aak0jNCfP6wBJq1y6cprAI31VwrRIWAwV/JN/wZBCLDimfyDW/vLYsgAaYz/ZwkP VzFIApqu+hI3sdZ4PyCFZp0d6SstN8uXxKwny/hgZd3ZuiA0/9U= -----END CERTIFICATE-----Generated at Thu Jul 24 12:06:46 2025 by rpki-client