$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: 0hGta5EU+MV79hJElt4xKdFKSakwxxPdzlJdYcA7M1A= Subject key identifier: 34:0D:27:A0:0E:AF:56:DF:FF:26:A2:E5:B2:36:66:B1:DC:11:F1:73 Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 570E04F111422E22EDE305C8E297F82624B2425F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 01EA Signing time: Wed 03 Sep 2025 15:41:08 +0000 Manifest this update: Wed 03 Sep 2025 15:36:08 +0000 Manifest next update: Sat 06 Sep 2025 23:15:08 +0000 Files and hashes: 1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: RYotkFsEWfYoJmtkaM+cfLNX1aYY/jJZ6CJNze3H440=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: AsMeUOteqEXHlEkIekpGYqBMNAoMYPpcU5LYFAHddbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0e:04:f1:11:42:2e:22:ed:e3:05:c8:e2:97:f8:26:24:b2:42:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Sep 3 15:36:08 2025 GMT Not After : Sep 6 23:15:08 2025 GMT Subject: CN=340D27A00EAF56DFFF26A2E5B23666B1DC11F173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:26:61:3e:6a:5b:9d:a6:07:46:71:5c:4b: 2e:df:e0:e4:00:c0:4d:c5:c1:eb:6f:0d:6a:74:4f: 44:4b:35:34:8a:80:b4:38:fd:58:d5:e1:f5:ce:29: 20:3e:c0:c3:77:e0:18:0d:fb:5b:d6:3a:05:2a:b8: 49:9b:85:b9:36:67:e2:64:e7:6a:4c:c9:ff:b0:3a: 9c:79:6a:34:c2:47:3e:c8:3f:75:c8:18:de:be:20: 2b:6c:0f:d8:4c:78:85:79:7b:bf:06:ec:cc:8e:67: 72:80:7a:bb:d1:45:32:d4:75:11:f7:3a:f3:2e:ee: db:82:d2:4c:81:db:b0:db:63:6b:51:4d:39:43:36: 90:79:91:af:77:24:cd:1d:d8:87:82:8a:07:0d:67: 92:8e:8f:91:66:e4:5d:f5:cf:5b:28:0f:e2:3a:48: b4:33:18:60:f1:9d:aa:7b:01:f8:cc:43:8b:0f:60: ec:d0:9c:19:0b:8d:bf:03:52:db:90:66:6c:6a:1a: f7:1d:4b:51:2e:62:cf:db:b0:b5:d4:5b:04:4e:7b: 15:90:f3:67:b6:99:78:f8:76:a7:75:6f:da:69:af: 12:a1:9e:1f:d3:c7:da:a9:42:fc:87:6b:35:3a:80: b5:fb:61:a2:d8:65:4e:05:36:f2:61:3d:42:e6:08: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0D:27:A0:0E:AF:56:DF:FF:26:A2:E5:B2:36:66:B1:DC:11:F1:73 X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:47:a4:09:84:12:1f:ea:f5:b2:d4:e9:57:4a:0e:61:b1:24: 99:fe:c2:f6:b4:2d:fa:6a:43:bc:53:0c:49:e7:3c:4a:2f:11: 71:36:c9:78:3f:ea:72:17:6c:70:5f:6c:c6:e3:f2:77:28:ab: e5:b3:c6:53:49:49:e7:ea:66:96:ca:87:8f:d3:91:e8:80:65: 8e:28:25:7f:ba:9b:55:15:1c:f8:cd:5d:b1:ae:c0:de:22:55: ab:b1:e0:b6:7e:67:e6:af:84:28:68:41:d6:97:fa:66:63:72: 7a:6e:28:85:2a:75:a0:ec:10:f0:db:b7:99:44:f8:eb:c0:b3: 4d:f8:9c:39:b4:37:d6:03:23:75:dd:e6:ec:0c:50:33:82:62: 00:0a:97:59:f2:d0:6a:b0:14:6e:05:ee:ec:64:f4:5a:72:45: 86:66:69:b2:d0:5e:9c:91:d4:90:5c:8c:6d:6e:04:6b:c0:d8: 2c:0d:f2:f7:2c:a6:db:ad:a9:74:ac:30:f2:aa:fd:b6:85:1c: c1:ca:3e:0a:cc:08:70:b2:69:d1:f3:85:56:45:f2:33:d3:23: 15:5e:e9:99:b0:1c:bd:56:63:e7:d8:25:ce:17:33:8d:88:f9: 35:de:46:61:e7:69:62:ed:98:8f:e4:51:5d:56:f8:ca:df:24: 51:d5:4d:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVw4E8RFCLiLt4wXI4pf4JiSyQl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNTA5MDMxNTM2MDhaFw0yNTA5MDYyMzE1MDhaMDMxMTAvBgNV BAMTKDM0MEQyN0EwMEVBRjU2REZGRjI2QTJFNUIyMzY2NkIxREMxMUYxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGyZhPmpbnaYHRnFcSy7f4OQA wE3FwetvDWp0T0RLNTSKgLQ4/VjV4fXOKSA+wMN34BgN+1vWOgUquEmbhbk2Z+Jk 52pMyf+wOpx5ajTCRz7IP3XIGN6+ICtsD9hMeIV5e78G7MyOZ3KAervRRTLUdRH3 OvMu7tuC0kyB27DbY2tRTTlDNpB5ka93JM0d2IeCigcNZ5KOj5Fm5F31z1soD+I6 SLQzGGDxnap7AfjMQ4sPYOzQnBkLjb8DUtuQZmxqGvcdS1EuYs/bsLXUWwROexWQ 82e2mXj4dqd1b9pprxKhnh/Tx9qpQvyHazU6gLX7YaLYZU4FNvJhPULmCASNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNA0noA6vVt//JqLlsjZmsdwR8XMwHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFHpAmEEh/q9bLU6VdKDmGxJJn+wva0Lfpq Q7xTDEnnPEovEXE2yXg/6nIXbHBfbMbj8ncoq+WzxlNJSefqZpbKh4/TkeiAZY4o JX+6m1UVHPjNXbGuwN4iVaux4LZ+Z+avhChoQdaX+mZjcnpuKIUqdaDsEPDbt5lE +OvAs034nDm0N9YDI3Xd5uwMUDOCYgAKl1ny0GqwFG4F7uxk9FpyRYZmabLQXpyR 1JBcjG1uBGvA2CwN8vcsptutqXSsMPKq/baFHMHKPgrMCHCyadHzhVZF8jPTIxVe 6ZmwHL1WY+fYJc4XM42I+TXeRmHnaWLtmI/kUV1W+MrfJFHVTTI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:11 2025 by rpki-client