$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: 243AfU+Q5teM3BZtJI4SCXWqpGBvAyRLKRAVexoEIBs= Subject key identifier: 01:37:CC:AB:89:8D:3E:EA:8C:5F:34:E8:ED:E0:63:40:9C:15:C9:EA Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 043E0B22AF6C8A4C88A0D071E5035137FF6744CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 0180 Signing time: Thu 24 Jul 2025 13:21:15 +0000 Manifest this update: Thu 24 Jul 2025 13:16:15 +0000 Manifest next update: Sun 27 Jul 2025 21:38:15 +0000 Files and hashes: 1: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: xerWyNAOUhqeLcL1ScPK74nI7v1XaxhSHxJdLJoDqG4=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3e:0b:22:af:6c:8a:4c:88:a0:d0:71:e5:03:51:37:ff:67:44:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Jul 24 13:16:15 2025 GMT Not After : Jul 27 21:38:15 2025 GMT Subject: CN=0137CCAB898D3EEA8C5F34E8EDE063409C15C9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:15:22:f9:ec:af:0e:23:e2:5a:cc:c3:6c: d4:c1:6d:ab:8e:84:42:e2:cb:a9:f0:77:fb:98:19: 38:0d:42:1f:9c:0b:cb:66:c4:88:37:81:30:2a:d8: b5:e4:e4:52:cf:d5:47:0c:5a:86:e5:ae:3e:7c:4d: 9d:6f:24:6e:3a:b5:54:fd:13:ec:87:27:51:ff:7c: da:98:ad:b0:ce:d2:9e:c3:87:af:4e:39:a5:bb:a6: ac:5e:58:c3:f8:d2:af:25:83:16:3f:97:34:a8:37: 82:a4:1d:71:fa:dc:ed:9b:94:de:1d:f5:51:9e:30: 75:82:c7:24:99:97:0b:a3:36:c3:d0:5e:57:73:73: b2:20:6f:d5:ec:ac:f2:62:da:47:90:b5:1f:01:ea: 13:b2:76:42:a7:9f:c3:fb:3f:a4:50:a1:38:38:8e: 19:59:a6:d9:5d:37:93:4e:ce:e0:fb:a3:bf:ef:e4: 0d:01:52:4b:4c:58:31:4b:a7:d8:4d:43:f1:6e:75: a3:02:db:6a:0c:71:0b:19:a7:c4:16:2e:17:70:3d: 2b:98:98:1e:ea:d4:da:da:82:42:5d:c1:83:81:ba: 4f:84:cb:b4:74:9f:8b:22:67:39:71:4b:6a:1e:f7: cb:7e:14:b5:d0:df:1b:d0:0c:d0:60:68:14:1d:fc: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:CC:AB:89:8D:3E:EA:8C:5F:34:E8:ED:E0:63:40:9C:15:C9:EA X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cf:75:cd:f5:fd:7b:05:dd:ad:66:0b:ad:1d:c6:a6:58:b5: 61:0e:e0:58:94:8c:87:78:fa:26:ed:7e:93:43:1f:74:80:da: 12:a4:5f:15:3d:65:b0:df:45:81:50:f4:be:3b:eb:b1:36:c5: 43:65:e2:fd:0b:5e:6a:32:dc:72:83:92:f8:5b:16:8a:27:4b: c8:f2:23:07:51:8f:22:13:d8:3e:29:aa:27:0e:17:27:a5:3e: d6:dd:20:64:da:df:e5:cd:66:0f:db:a6:bd:2b:64:65:58:e1: 46:84:e9:d5:08:4d:65:55:40:2f:a0:4c:a8:c0:c1:f3:0b:04: 32:26:db:60:42:1d:ac:0b:14:cb:4b:b7:0d:14:9d:9e:ff:3b: cf:96:c5:68:a1:a7:e4:2f:48:63:ae:85:06:f0:8a:63:d2:6d: e5:d6:7d:d0:0d:12:86:aa:f1:62:3a:0d:41:8f:d8:53:1e:28: 20:85:14:14:f2:23:12:1b:5f:00:fa:04:c6:ef:09:35:5e:3f: 90:96:05:7d:4e:db:04:7f:7d:36:47:28:ec:b2:6f:d2:79:7c: 7a:5f:59:a4:0f:f5:7a:94:38:a5:66:94:04:c9:18:8f:18:bb: df:82:b8:81:b5:f8:1f:47:7c:93:44:8d:73:70:3b:e7:08:ca: bd:b6:f2:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBD4LIq9sikyIoNBx5QNRN/9nRM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTA3MjQxMzE2MTVaFw0yNTA3MjcyMTM4MTVaMDMxMTAvBgNV BAMTKDAxMzdDQ0FCODk4RDNFRUE4QzVGMzRFOEVERTA2MzQwOUMxNUM5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANhUi+eyvDiPiWszDbNTBbauO hELiy6nwd/uYGTgNQh+cC8tmxIg3gTAq2LXk5FLP1UcMWoblrj58TZ1vJG46tVT9 E+yHJ1H/fNqYrbDO0p7Dh69OOaW7pqxeWMP40q8lgxY/lzSoN4KkHXH63O2blN4d 9VGeMHWCxySZlwujNsPQXldzc7Igb9XsrPJi2keQtR8B6hOydkKnn8P7P6RQoTg4 jhlZptldN5NOzuD7o7/v5A0BUktMWDFLp9hNQ/FudaMC22oMcQsZp8QWLhdwPSuY mB7q1NragkJdwYOBuk+Ey7R0n4siZzlxS2oe98t+FLXQ3xvQDNBgaBQd/J8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATfMq4mNPuqMXzTo7eBjQJwVyeowHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHPdc31/XsF3a1mC60dxqZYtWEO4FiUjId4 +ibtfpNDH3SA2hKkXxU9ZbDfRYFQ9L4767E2xUNl4v0LXmoy3HKDkvhbFoonS8jy IwdRjyIT2D4pqicOFyelPtbdIGTa3+XNZg/bpr0rZGVY4UaE6dUITWVVQC+gTKjA wfMLBDIm22BCHawLFMtLtw0UnZ7/O8+WxWihp+QvSGOuhQbwimPSbeXWfdANEoaq 8WI6DUGP2FMeKCCFFBTyIxIbXwD6BMbvCTVeP5CWBX1O2wR/fTZHKOyyb9J5fHpf WaQP9XqUOKVmlATJGI8Yu9+CuIG1+B9HfJNEjXNwO+cIyr228po= -----END CERTIFICATE-----Generated at Fri Jul 25 06:28:49 2025 by rpki-client