$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: 0Agz3mMsQSW0MQ25VlQducy3QwD8xt7/MXvMZwMBtZs= Subject key identifier: 0C:B5:03:3B:42:30:02:10:02:F7:E7:96:5F:17:03:A7:DD:A5:71:06 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 5F604A8ACA11A3A7C9412BFC338319FA072595F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: B4 Signing time: Thu 28 Aug 2025 20:12:07 +0000 Manifest this update: Thu 28 Aug 2025 20:07:07 +0000 Manifest next update: Mon 01 Sep 2025 08:03:07 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) 2: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: T9Ep2aLtzgXot4fbPP1P6d0MzWw6MC+hHGVYLk6phgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:60:4a:8a:ca:11:a3:a7:c9:41:2b:fc:33:83:19:fa:07:25:95:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Aug 28 20:07:07 2025 GMT Not After : Sep 1 08:03:07 2025 GMT Subject: CN=0CB5033B4230021002F7E7965F1703A7DDA57106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:c4:cb:cc:b9:ec:b7:b3:98:e9:b0:36:fb: 4f:78:28:ed:75:20:9b:a3:74:6f:4f:70:30:4e:ac: 0c:d9:2f:5f:32:d5:3f:ea:85:6c:6f:0f:85:0d:92: 60:b4:6b:97:94:4a:d3:1f:b4:a4:97:2b:5e:e2:4e: 27:c1:7f:8c:d4:d4:17:de:da:bd:cc:fc:5f:28:15: cf:87:8c:aa:1b:29:37:89:41:9b:1b:b5:d5:4d:0c: e6:9e:93:ad:d4:6b:43:31:4d:a9:ed:62:90:70:c6: ec:f8:99:8d:7d:f9:7a:32:17:36:94:7d:33:05:42: bf:22:dc:4f:e6:19:8d:cd:a8:1e:ab:83:18:55:75: 4c:d6:fe:cb:e0:b1:66:65:a4:cb:17:4c:32:86:54: 14:38:22:56:97:9a:ca:34:4f:4e:3a:1e:fe:de:fc: d6:f0:4f:4c:57:3c:bc:76:b1:d6:01:62:a2:b1:06: 2f:c5:ba:e5:71:3c:f9:b3:d1:60:f2:6b:18:29:ed: 66:43:2d:c4:b7:c6:87:69:fa:11:7f:97:74:d0:73: ff:8a:3d:b0:5f:b8:d3:b0:9a:6a:13:da:c1:ec:7a: fe:b9:8b:85:de:5b:c4:b9:f0:ef:8f:09:41:a6:c3: a8:70:50:49:fb:89:84:ca:41:86:ab:13:e8:22:29: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B5:03:3B:42:30:02:10:02:F7:E7:96:5F:17:03:A7:DD:A5:71:06 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:28:5a:d8:3a:8a:ef:ad:06:c0:1e:73:fb:cb:dc:56:55:a5: fa:f1:d8:87:da:1b:40:6b:cf:91:5a:ea:ca:ab:90:b0:af:87: d9:8f:05:e4:7e:90:16:ae:ee:38:22:06:49:75:13:f9:ad:98: d7:79:6a:2e:58:10:2e:cb:09:41:8d:f0:d7:44:81:e7:a7:8c: 3b:ae:14:2f:3e:92:c3:7c:43:66:f4:aa:1a:91:98:30:d6:e3: 1f:af:43:e1:b5:c8:3c:40:57:8f:30:6b:18:b7:75:c7:1b:74: 67:bf:31:14:5a:1d:4c:20:c5:cd:48:40:db:f7:4b:41:de:66: e6:b5:7b:b1:eb:f3:00:6a:f6:9e:4a:6f:fa:c9:89:e7:b6:17: c6:0d:ab:71:11:91:cc:30:61:01:e7:92:c3:51:91:27:fd:ca: 65:4a:73:64:f1:c3:d6:ba:c7:c4:60:92:42:c6:62:1c:c0:20: f5:f7:1c:91:50:06:43:7f:4c:66:ef:d8:b3:75:6f:47:18:84: 94:97:6a:df:b5:a0:be:0d:62:6c:a0:da:ae:50:40:4b:6c:ad: 8d:7e:fc:7a:30:7c:63:db:fd:25:a1:d1:aa:09:19:0f:bf:79: 27:80:0e:72:d0:f2:54:57:0c:95:68:de:dc:d8:81:dd:98:4b: 8b:46:85:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2BKisoRo6fJQSv8M4MZ+gcllfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA4MjgyMDA3MDdaFw0yNTA5MDEwODAzMDdaMDMxMTAvBgNV BAMTKDBDQjUwMzNCNDIzMDAyMTAwMkY3RTc5NjVGMTcwM0E3RERBNTcxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeMTLzLnst7OY6bA2+094KO11 IJujdG9PcDBOrAzZL18y1T/qhWxvD4UNkmC0a5eUStMftKSXK17iTifBf4zU1Bfe 2r3M/F8oFc+HjKobKTeJQZsbtdVNDOaek63Ua0MxTantYpBwxuz4mY19+XoyFzaU fTMFQr8i3E/mGY3NqB6rgxhVdUzW/svgsWZlpMsXTDKGVBQ4IlaXmso0T046Hv7e /NbwT0xXPLx2sdYBYqKxBi/FuuVxPPmz0WDyaxgp7WZDLcS3xodp+hF/l3TQc/+K PbBfuNOwmmoT2sHsev65i4XeW8S58O+PCUGmw6hwUEn7iYTKQYarE+giKc0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDLUDO0IwAhAC9+eWXxcDp92lcQYwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4oWtg6iu+tBsAec/vL3FZVpfrx2IfaG0Br z5Fa6sqrkLCvh9mPBeR+kBau7jgiBkl1E/mtmNd5ai5YEC7LCUGN8NdEgeenjDuu FC8+ksN8Q2b0qhqRmDDW4x+vQ+G1yDxAV48waxi3dccbdGe/MRRaHUwgxc1IQNv3 S0HeZua1e7Hr8wBq9p5Kb/rJiee2F8YNq3ERkcwwYQHnksNRkSf9ymVKc2Txw9a6 x8RgkkLGYhzAIPX3HJFQBkN/TGbv2LN1b0cYhJSXat+1oL4NYmyg2q5QQEtsrY1+ /HowfGPb/SWh0aoJGQ+/eSeADnLQ8lRXDJVo3tzYgd2YS4tGhW4= -----END CERTIFICATE-----Generated at Sat Aug 30 23:54:17 2025 by rpki-client