$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: ZrDXxgKwo+y3LjGw5A3O2RcRscQE+KOGj9YOl8zFkQw= Subject key identifier: 1E:DA:3A:9D:0A:0C:BF:0D:32:E9:8B:63:37:BF:6C:4F:1E:15:77:37 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 231D4CAC5198A256C2471F9C1D996CE65FD48BBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0503 Signing time: Sat 06 Sep 2025 03:50:44 +0000 Manifest this update: Sat 06 Sep 2025 03:45:44 +0000 Manifest next update: Tue 09 Sep 2025 13:33:44 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: kX57A4G3Yv4OD4i5UJl0kr1hny0wpW9Wy6ftqU3S7m8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1d:4c:ac:51:98:a2:56:c2:47:1f:9c:1d:99:6c:e6:5f:d4:8b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Sep 6 03:45:44 2025 GMT Not After : Sep 9 13:33:44 2025 GMT Subject: CN=1EDA3A9D0A0CBF0D32E98B6337BF6C4F1E157737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:d9:e9:2c:16:34:a0:0d:36:7e:68:f2:c3: 6f:13:3e:2b:c4:5a:39:a6:88:b7:0a:a3:c6:af:a8: 1e:1d:fc:8e:5b:87:cb:16:03:77:42:1b:0b:ce:f3: 62:45:03:25:cf:8c:4b:8d:46:dd:62:e6:26:e3:d3: 85:60:dc:0b:40:3d:6f:71:ad:12:41:37:cb:33:c9: de:ab:f9:5a:c2:3a:21:84:ae:e7:b7:a3:67:12:ee: 5e:fa:9a:98:ab:4b:de:55:90:89:9b:f6:8e:bc:0d: e1:dd:63:96:9c:83:4d:e4:0c:07:4a:f8:ba:ae:32: 97:29:3b:36:8b:dc:6c:6f:86:d9:2f:3b:85:fb:b3: 01:22:97:80:e6:67:db:a4:fb:8e:06:d6:37:71:51: a4:a6:85:72:b7:38:7c:59:d8:a5:c5:cc:63:32:f4: cf:69:d0:6c:55:f9:93:bc:cb:06:28:4d:05:5e:b7: 07:32:32:f6:29:70:66:29:78:4b:42:a7:fb:e9:b8: 59:e9:58:26:f4:98:1c:02:a6:8e:85:7c:4f:99:c7: 0c:e0:d9:5c:2b:d6:c7:7e:2f:13:6e:a3:f8:92:fe: 75:ff:60:78:75:a6:84:34:e4:33:0d:d0:cb:80:c7: 92:29:2a:ba:55:7b:9c:cb:94:e9:67:25:ae:77:9b: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DA:3A:9D:0A:0C:BF:0D:32:E9:8B:63:37:BF:6C:4F:1E:15:77:37 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:82:96:27:8b:98:d4:da:3a:24:e5:72:b4:30:42:7b:06:37: cb:97:08:7d:f5:28:46:36:ce:b3:b2:b1:9a:12:9f:ca:00:49: 6e:19:63:53:e4:1d:c5:d6:63:48:3c:90:98:d1:9f:63:ed:ad: 58:67:a7:35:c3:08:8c:f0:42:50:46:84:bb:68:0c:00:ec:d6: 5e:f4:ec:2e:ba:b9:c4:d8:55:4a:83:3e:5c:82:23:cd:25:c4: 4a:ab:a7:a0:0a:9c:75:d6:86:03:7d:dc:2e:9c:5b:e2:4a:e4: a9:7e:ca:47:71:5d:73:15:24:17:c5:85:ac:49:ad:27:d8:59: 63:d1:5c:b6:f3:22:d3:f1:b9:37:f7:23:68:77:b0:65:3b:ff: 02:07:f0:f0:35:a3:dd:9d:7c:3b:e6:4d:67:a2:43:e5:28:1c: af:22:c4:0d:e1:be:1d:01:86:39:77:ef:9c:14:6d:af:c8:e3: 05:82:9d:be:ad:48:5b:6f:be:fe:aa:42:94:5c:66:69:22:cb: 7b:9b:d6:59:17:5b:e5:de:85:87:b1:a4:a0:68:b2:b5:35:f5: 39:4f:7d:fc:48:78:c8:3e:b9:02:12:be:2d:a9:2f:70:2c:85: b6:f8:58:c4:c0:95:9d:b4:c1:73:97:ac:a7:d7:44:e8:14:d8: f6:07:fa:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIx1MrFGYolbCRx+cHZls5l/Ui74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTA5MDYwMzQ1NDRaFw0yNTA5MDkxMzMzNDRaMDMxMTAvBgNV BAMTKDFFREEzQTlEMEEwQ0JGMEQzMkU5OEI2MzM3QkY2QzRGMUUxNTc3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKdnpLBY0oA02fmjyw28TPivE WjmmiLcKo8avqB4d/I5bh8sWA3dCGwvO82JFAyXPjEuNRt1i5ibj04Vg3AtAPW9x rRJBN8szyd6r+VrCOiGErue3o2cS7l76mpirS95VkImb9o68DeHdY5acg03kDAdK +LquMpcpOzaL3GxvhtkvO4X7swEil4DmZ9uk+44G1jdxUaSmhXK3OHxZ2KXFzGMy 9M9p0GxV+ZO8ywYoTQVetwcyMvYpcGYpeEtCp/vpuFnpWCb0mBwCpo6FfE+Zxwzg 2Vwr1sd+LxNuo/iS/nX/YHh1poQ05DMN0MuAx5IpKrpVe5zLlOlnJa53m60dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHto6nQoMvw0y6YtjN79sTx4VdzcwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaClieLmNTaOiTlcrQwQnsGN8uXCH31KEY2 zrOysZoSn8oASW4ZY1PkHcXWY0g8kJjRn2PtrVhnpzXDCIzwQlBGhLtoDADs1l70 7C66ucTYVUqDPlyCI80lxEqrp6AKnHXWhgN93C6cW+JK5Kl+ykdxXXMVJBfFhaxJ rSfYWWPRXLbzItPxuTf3I2h3sGU7/wIH8PA1o92dfDvmTWeiQ+UoHK8ixA3hvh0B hjl375wUba/I4wWCnb6tSFtvvv6qQpRcZmkiy3ub1lkXW+XehYexpKBosrU19TlP ffxIeMg+uQISvi2pL3Ashbb4WMTAlZ20wXOXrKfXROgU2PYH+hc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:40 2025 by rpki-client