$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: vqw+bLcYRqUmgll6bhoJA1fiwd9F9pdt3m616vsWT5w= Subject key identifier: 1E:E3:06:0C:CA:77:1D:C5:DD:73:6D:0D:5A:9E:BA:BC:62:FC:1B:29 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 02ADD8193F3D6CC3CC00643F33EAEEB05E976BCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 0508 Signing time: Fri 05 Sep 2025 08:52:21 +0000 Manifest this update: Fri 05 Sep 2025 08:47:21 +0000 Manifest next update: Mon 08 Sep 2025 17:45:21 +0000 Files and hashes: 1: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: bnriLWKEBfPNE7aaQ61+X2psFkAbio9/gPLZ8Ct+kOU=) 2: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 3: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 4: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 5: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ad:d8:19:3f:3d:6c:c3:cc:00:64:3f:33:ea:ee:b0:5e:97:6b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Sep 5 08:47:21 2025 GMT Not After : Sep 8 17:45:21 2025 GMT Subject: CN=1EE3060CCA771DC5DD736D0D5A9EBABC62FC1B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:d3:5c:c8:69:4c:8d:09:cb:ce:0e:d9:46: e2:4a:09:0c:12:a1:05:b8:27:56:97:d2:da:71:a6: 16:b9:ed:ac:7b:9c:42:8d:5d:05:65:72:30:e1:7e: e2:f0:e8:3f:62:dd:27:55:d4:cf:bb:8f:02:02:31: a3:10:fc:80:a9:47:2a:b9:32:08:b2:c7:4a:7a:a8: b1:6d:d2:ce:2a:8c:f2:ba:7c:30:b9:a4:43:c2:32: f7:5b:21:35:93:d0:58:24:eb:d5:7e:ce:49:85:e0: 39:85:a0:bd:93:3e:99:ae:5f:1c:da:78:39:9e:b3: cd:7a:7c:68:17:b1:1a:6f:93:8c:27:ae:b2:f9:cb: 97:3c:63:a6:cc:22:73:ed:65:fb:a3:1e:68:23:b9: 7b:2b:dc:c2:c3:25:3a:07:da:f8:1e:ca:ad:e0:6d: 14:63:85:cb:bf:10:36:6e:4c:db:03:5e:fc:d7:a8: be:f7:99:7b:c5:21:ed:1b:ea:9b:6d:3d:ca:7a:4c: 93:a6:20:1c:fa:7d:b2:97:46:3c:aa:6b:68:52:7f: 0f:b0:6f:bf:43:01:43:54:e1:e3:c4:c7:34:08:a8: fa:59:95:db:2d:0b:33:b8:b8:67:af:18:7e:45:d2: c0:9f:ef:83:13:5b:af:7c:36:3c:54:b3:e9:8b:8b: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:06:0C:CA:77:1D:C5:DD:73:6D:0D:5A:9E:BA:BC:62:FC:1B:29 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:38:60:81:53:9f:88:4a:f5:11:5f:ee:b7:9a:32:81:36:f3: 6a:f5:b6:b4:fb:5d:88:b7:59:d6:59:74:46:6f:7b:f6:77:57: a2:c3:c0:71:e2:1a:4d:1c:40:c4:12:4d:f2:47:b2:54:10:46: 68:2d:0b:1f:9c:61:4c:32:2b:60:94:3c:76:03:01:ea:8f:23: 77:33:e2:70:38:4e:4a:bc:ac:78:9e:b0:c6:ad:df:12:45:04: 69:0b:5b:28:1b:fe:28:e2:5f:53:e1:34:74:ab:4d:2b:79:32: 38:08:b3:88:11:ef:87:60:b3:a7:cb:90:8e:f1:db:e9:66:b6: 42:e2:86:3d:47:2c:42:82:ca:89:2c:d8:55:3f:7a:98:55:e2: 00:79:b6:d0:ce:d6:ec:28:81:86:cc:23:fc:bc:de:fd:f4:b6: 6f:af:a3:77:85:78:01:e1:45:4a:3c:2b:42:00:55:c4:b3:34: 75:cc:f6:88:7f:63:17:38:81:90:c8:d0:5f:f6:d7:25:45:03: 45:c7:7b:4d:db:09:37:ae:89:cb:a2:78:87:16:e2:ee:5d:20: 4d:0e:70:d0:1c:5b:a7:a7:95:af:6d:b2:a1:61:25:03:85:15: a4:ef:3d:2d:86:44:0f:65:15:82:54:c9:57:65:bd:81:02:75: ea:92:f5:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAq3YGT89bMPMAGQ/M+rusF6Xa8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA5MDUwODQ3MjFaFw0yNTA5MDgxNzQ1MjFaMDMxMTAvBgNV BAMTKDFFRTMwNjBDQ0E3NzFEQzVERDczNkQwRDVBOUVCQUJDNjJGQzFCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQtNcyGlMjQnLzg7ZRuJKCQwS oQW4J1aX0tpxpha57ax7nEKNXQVlcjDhfuLw6D9i3SdV1M+7jwICMaMQ/ICpRyq5 Mgiyx0p6qLFt0s4qjPK6fDC5pEPCMvdbITWT0Fgk69V+zkmF4DmFoL2TPpmuXxza eDmes816fGgXsRpvk4wnrrL5y5c8Y6bMInPtZfujHmgjuXsr3MLDJToH2vgeyq3g bRRjhcu/EDZuTNsDXvzXqL73mXvFIe0b6pttPcp6TJOmIBz6fbKXRjyqa2hSfw+w b79DAUNU4ePExzQIqPpZldstCzO4uGevGH5F0sCf74MTW698NjxUs+mLi59lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHuMGDMp3HcXdc20NWp66vGL8GykwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE04YIFTn4hK9RFf7reaMoE282r1trT7XYi3 WdZZdEZve/Z3V6LDwHHiGk0cQMQSTfJHslQQRmgtCx+cYUwyK2CUPHYDAeqPI3cz 4nA4Tkq8rHiesMat3xJFBGkLWygb/ijiX1PhNHSrTSt5MjgIs4gR74dgs6fLkI7x 2+lmtkLihj1HLEKCyoks2FU/ephV4gB5ttDO1uwogYbMI/y83v30tm+vo3eFeAHh RUo8K0IAVcSzNHXM9oh/Yxc4gZDI0F/21yVFA0XHe03bCTeuicuieIcW4u5dIE0O cNAcW6enla9tsqFhJQOFFaTvPS2GRA9lFYJUyVdlvYECdeqS9QQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:26 2025 by rpki-client