$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: tXWjCsrAA5XYDDdJvPKF/vSWrXl8AqbkQaO+pHM0XjU= Subject key identifier: C6:3B:EF:85:09:D2:E4:4A:62:10:D1:5D:EC:71:A3:07:EE:2E:AA:0C Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 1435D9886C2891DD150F0A49D003B09A2CDA99BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 01D6 Signing time: Sun 20 Jul 2025 17:41:07 +0000 Manifest this update: Sun 20 Jul 2025 17:36:07 +0000 Manifest next update: Wed 23 Jul 2025 20:17:07 +0000 Files and hashes: 1: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: AsMeUOteqEXHlEkIekpGYqBMNAoMYPpcU5LYFAHddbA=) 2: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: MhCKSlr5u1wo6D3z8BcLhC0jCuL7bJXf1sf25e4RLfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:35:d9:88:6c:28:91:dd:15:0f:0a:49:d0:03:b0:9a:2c:da:99:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Jul 20 17:36:07 2025 GMT Not After : Jul 23 20:17:07 2025 GMT Subject: CN=C63BEF8509D2E44A6210D15DEC71A307EE2EAA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:a5:d1:4b:e9:84:67:c9:ac:99:45:ed:14: e0:eb:fc:96:b8:b6:6b:f1:8e:1c:2e:46:94:07:7e: 29:1e:be:1c:c8:49:77:94:d7:0e:eb:4a:30:68:28: 7f:77:50:41:dd:6b:94:0d:c0:dc:1a:e2:75:38:11: 76:26:99:da:68:d6:c0:bb:f4:cf:87:19:52:35:d3: 09:c8:50:49:3b:92:ab:11:31:9c:3a:35:bc:0f:22: 92:4e:3c:41:f7:3c:81:00:87:3e:29:1f:57:0c:c8: 60:73:72:7f:7f:a0:6a:20:07:f0:8d:e9:f5:02:a6: 25:06:22:45:58:41:d3:24:db:e3:eb:ab:c9:f7:47: 19:a0:84:a8:65:31:5c:36:7b:a6:4e:cc:e4:d3:a1: 65:f5:4a:e5:ec:51:5f:7e:e8:88:a8:67:ef:00:c8: 9a:44:00:2d:df:dc:4b:f5:d3:00:3b:cf:fa:ff:40: 23:3a:9a:8c:f0:d1:11:b8:6d:b4:ea:06:49:dc:55: 13:c0:a6:49:f0:8f:51:a6:2b:90:9f:a2:17:12:b1: aa:1a:6e:28:ab:67:71:22:98:55:58:75:bf:2c:3d: 00:b9:69:d9:93:6e:61:20:4d:f5:11:cf:27:c1:7f: 4e:69:1b:ea:06:ee:05:36:9b:aa:4f:c9:a7:f5:fc: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3B:EF:85:09:D2:E4:4A:62:10:D1:5D:EC:71:A3:07:EE:2E:AA:0C X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:03:eb:7c:76:1f:df:5b:0e:05:d7:bb:59:ff:3d:68:37:77: fe:d1:0a:88:f6:e0:fc:76:4a:8a:75:11:97:82:3b:e6:7d:83: fd:44:f0:79:65:c1:1f:81:5f:aa:fa:fc:b7:84:66:71:22:47: c0:a1:20:ea:7a:29:01:94:0c:84:cb:46:cb:9e:52:1e:9e:1d: 73:10:aa:0d:39:76:b9:66:63:0e:4c:07:c7:0d:94:a1:e6:a8: df:de:da:1a:a3:2b:7b:5e:f5:10:66:56:6e:84:96:cb:56:09: 6c:55:de:b9:62:9c:c1:e3:a5:47:cc:70:ec:25:c9:60:96:23: 27:3e:ce:ec:eb:d4:33:d4:1d:25:7d:34:85:80:01:39:32:e8: b8:44:84:7b:a0:d2:be:af:ec:01:41:12:6a:e9:66:4b:67:59: 96:bd:89:b0:e7:87:c8:9e:41:09:31:c9:94:4b:1b:27:7a:46: a7:ed:ca:4f:51:03:94:60:e6:f1:35:b1:33:29:d8:a1:a5:48: 2f:b9:9c:b4:6a:23:6f:16:c7:ef:45:4b:9a:60:a5:5b:de:35: 35:84:6d:2e:1a:a6:93:28:65:dc:6e:7d:0b:67:8f:c8:35:ee: a0:68:07:38:eb:8d:c1:5e:d5:26:73:ee:56:e2:02:45:09:70: 9b:15:6d:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDXZiGwokd0VDwpJ0AOwmizambowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNTA3MjAxNzM2MDdaFw0yNTA3MjMyMDE3MDdaMDMxMTAvBgNV BAMTKEM2M0JFRjg1MDlEMkU0NEE2MjEwRDE1REVDNzFBMzA3RUUyRUFBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp6XRS+mEZ8msmUXtFODr/Ja4 tmvxjhwuRpQHfikevhzISXeU1w7rSjBoKH93UEHda5QNwNwa4nU4EXYmmdpo1sC7 9M+HGVI10wnIUEk7kqsRMZw6NbwPIpJOPEH3PIEAhz4pH1cMyGBzcn9/oGogB/CN 6fUCpiUGIkVYQdMk2+Prq8n3RxmghKhlMVw2e6ZOzOTToWX1SuXsUV9+6IioZ+8A yJpEAC3f3Ev10wA7z/r/QCM6mozw0RG4bbTqBkncVRPApknwj1GmK5CfohcSsaoa biirZ3EimFVYdb8sPQC5admTbmEgTfURzyfBf05pG+oG7gU2m6pPyaf1/BcVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxjvvhQnS5EpiENFd7HGjB+4uqgwwHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMID63x2H99bDgXXu1n/PWg3d/7RCoj24Px2 Sop1EZeCO+Z9g/1E8HllwR+BX6r6/LeEZnEiR8ChIOp6KQGUDITLRsueUh6eHXMQ qg05drlmYw5MB8cNlKHmqN/e2hqjK3te9RBmVm6ElstWCWxV3rlinMHjpUfMcOwl yWCWIyc+zuzr1DPUHSV9NIWAATky6LhEhHug0r6v7AFBEmrpZktnWZa9ibDnh8ie QQkxyZRLGyd6Rqftyk9RA5Rg5vE1sTMp2KGlSC+5nLRqI28Wx+9FS5pgpVveNTWE bS4appMoZdxufQtnj8g17qBoBzjrjcFe1SZz7lbiAkUJcJsVbYE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:53 2025 by rpki-client