$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: pp/17obbm2AQuk/AxWWsfUm6QcFVmib+SnfwEULhVoY= Subject key identifier: F3:31:A1:C2:B4:3C:48:A3:6C:7A:64:6F:EF:E7:43:79:CD:1A:DF:B5 Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 5F42301C0356D64B02CBD9B94F419FD9B36643AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: DD Signing time: Fri 06 Jun 2025 05:21:27 +0000 Manifest this update: Fri 06 Jun 2025 05:16:27 +0000 Manifest next update: Mon 09 Jun 2025 11:21:27 +0000 Files and hashes: 1: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: kgLrBbWuM9UHKNPwbXwadbnXKWgBGV3AxO0qdXAp02A=) 2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: 82foMffwQwzyR9wKrvwkyZl1LONBJ6UBCu4U17RUdAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:42:30:1c:03:56:d6:4b:02:cb:d9:b9:4f:41:9f:d9:b3:66:43:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Jun 6 05:16:27 2025 GMT Not After : Jun 9 11:21:27 2025 GMT Subject: CN=F331A1C2B43C48A36C7A646FEFE74379CD1ADFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:cb:f5:41:26:0b:00:0b:6e:64:58:b2:33: 3d:68:02:be:78:98:32:c3:30:97:9a:07:00:00:a6: 10:f1:86:d6:77:68:65:04:83:d6:54:19:e7:17:8b: 68:88:4a:aa:8e:b2:33:d5:b0:68:2d:3d:95:54:0b: b6:c8:a5:30:22:46:7d:e7:8d:13:16:19:18:29:73: 71:75:07:9f:3c:4e:ad:23:92:ca:73:f1:42:0b:08: d3:a0:95:7d:08:f3:f2:c7:6a:95:12:3f:86:95:5a: 91:0d:ae:67:14:3d:0a:75:bf:c1:d4:ff:f5:34:1c: 94:58:42:12:05:69:b5:1a:c5:37:23:e8:20:cb:19: 1c:07:94:0e:29:d6:bb:fa:4d:a3:35:b5:0f:3f:0f: ed:8d:22:6b:ad:ea:da:03:23:5c:7c:00:a4:00:2b: 8d:95:02:c4:d5:56:b5:aa:2e:27:e6:e7:2c:a7:d6: dd:5a:00:48:db:ef:95:a9:68:42:70:cd:94:3e:80: 77:f3:f8:8d:42:d2:26:c5:12:71:45:51:15:bc:61: 73:ee:8b:9f:bc:5e:4b:3c:dd:ac:5b:83:e2:95:f7: 55:75:48:df:f5:7b:da:fa:52:a6:99:9f:1b:c5:eb: f6:10:76:c7:a4:66:95:05:c9:c9:a4:97:27:14:84: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:31:A1:C2:B4:3C:48:A3:6C:7A:64:6F:EF:E7:43:79:CD:1A:DF:B5 X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:6e:13:35:23:86:ca:bf:dd:97:c5:a6:79:92:7d:e9:56: 08:53:4c:77:2b:47:81:54:00:85:4d:97:dd:70:51:fa:71:c6: 7a:e5:01:0d:ab:bd:11:70:91:d2:4b:2f:b1:4b:87:74:f2:6c: f1:bc:9b:56:ef:74:a7:4f:43:46:e8:ad:85:d3:f3:6d:a5:46: 42:fd:7f:6d:c5:d0:b3:d0:fc:fa:a0:f2:8a:be:13:ce:d2:cc: 2e:97:51:3e:0d:ab:76:a5:9d:04:66:a4:d6:ed:60:5c:d9:f7: 35:c6:e3:a1:a2:9f:c1:d0:c1:77:1e:6b:68:ab:18:45:8a:01: a9:a3:4f:7c:67:6c:48:21:77:72:0f:ab:50:10:56:9d:e3:d8: dc:0c:31:62:bd:1e:b4:95:4d:94:60:b3:80:d4:af:1d:7c:43: b9:fd:a0:58:fc:a7:7a:89:30:16:7e:73:42:70:01:40:37:dd: f6:1c:11:0b:11:7e:3b:50:93:41:9e:39:61:a9:f6:f0:df:fe: c8:d8:f8:38:40:6c:8b:bf:bd:d8:7d:d4:82:bb:c6:bc:49:a5: f9:ce:38:f1:37:5c:6c:24:5a:ae:61:ba:04:cb:f2:f3:b3:28: 75:6f:be:b7:21:9b:0e:ce:d0:df:03:13:7e:23:0c:f3:5f:43: dc:a1:aa:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0IwHANW1ksCy9m5T0Gf2bNmQ6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTA2MDYwNTE2MjdaFw0yNTA2MDkxMTIxMjdaMDMxMTAvBgNV BAMTKEYzMzFBMUMyQjQzQzQ4QTM2QzdBNjQ2RkVGRTc0Mzc5Q0QxQURGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbcv1QSYLAAtuZFiyMz1oAr54 mDLDMJeaBwAAphDxhtZ3aGUEg9ZUGecXi2iISqqOsjPVsGgtPZVUC7bIpTAiRn3n jRMWGRgpc3F1B588Tq0jkspz8UILCNOglX0I8/LHapUSP4aVWpENrmcUPQp1v8HU //U0HJRYQhIFabUaxTcj6CDLGRwHlA4p1rv6TaM1tQ8/D+2NImut6toDI1x8AKQA K42VAsTVVrWqLifm5yyn1t1aAEjb75WpaEJwzZQ+gHfz+I1C0ibFEnFFURW8YXPu i5+8Xks83axbg+KV91V1SN/1e9r6UqaZnxvF6/YQdsekZpUFycmklycUhGZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zGhwrQ8SKNsemRv7+dDec0a37UwHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8RbhM1I4bKv92XxaZ5kn3pVghTTHcrR4FU AIVNl91wUfpxxnrlAQ2rvRFwkdJLL7FLh3TybPG8m1bvdKdPQ0borYXT822lRkL9 f23F0LPQ/Pqg8oq+E87SzC6XUT4Nq3alnQRmpNbtYFzZ9zXG46Gin8HQwXcea2ir GEWKAamjT3xnbEghd3IPq1AQVp3j2NwMMWK9HrSVTZRgs4DUrx18Q7n9oFj8p3qJ MBZ+c0JwAUA33fYcEQsRfjtQk0GeOWGp9vDf/sjY+DhAbIu/vdh91IK7xrxJpfnO OPE3XGwkWq5hugTL8vOzKHVvvrchmw7O0N8DE34jDPNfQ9yhqnc= -----END CERTIFICATE-----Generated at Sat Jun 7 12:04:40 2025 by rpki-client