$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: G9ZM5UXQb541GkPLkh6ECNxdDRg1UvKV1tFelhMgDus= Subject key identifier: 66:B0:97:01:6B:1F:FF:81:24:56:CA:20:F5:01:7D:C1:40:B4:9C:D1 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 70197253D7FEB3090F4DF2F8761A18BEDCE0643E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: AA Signing time: Sun 07 Sep 2025 09:31:03 +0000 Manifest this update: Sun 07 Sep 2025 09:26:03 +0000 Manifest next update: Wed 10 Sep 2025 14:29:03 +0000 Files and hashes: 1: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) 2: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) 3: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: GaL0Lr1OkDYWI28AtYiBMY+TleFiAFqrwKYHGw+dITA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:19:72:53:d7:fe:b3:09:0f:4d:f2:f8:76:1a:18:be:dc:e0:64:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Sep 7 09:26:03 2025 GMT Not After : Sep 10 14:29:03 2025 GMT Subject: CN=66B097016B1FFF812456CA20F5017DC140B49CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:eb:5b:a0:91:f6:1f:3f:98:a0:6e:91:a4: 1d:3c:cd:89:f9:2a:ba:45:24:16:57:85:9e:61:ad: 5e:7d:a8:27:9b:fb:fe:8a:f6:73:0a:71:bd:32:f2: 88:57:43:96:c3:f1:e7:35:f3:5e:85:38:4e:a5:fa: d5:4b:0d:44:6e:ff:54:ad:ea:e6:c5:70:22:81:20: 80:77:ca:86:6d:f8:20:9e:d7:d3:dc:cc:77:db:5f: bb:31:96:54:8e:1e:43:b8:98:20:1b:14:3a:c2:b7: 3f:07:7c:88:d0:87:cd:f9:d6:89:22:d2:0d:1f:12: cd:69:d7:bc:ff:77:0f:79:8a:2d:bb:a7:50:18:5e: 9f:1c:f8:70:bb:8c:1f:96:a4:cc:90:c3:cf:a7:ef: 69:0e:ae:24:f7:53:e9:1e:aa:f5:75:9e:6a:6c:4d: 6e:a5:0a:c8:9e:06:c3:2a:71:98:b8:40:6b:a4:2b: 44:01:1b:59:0e:b5:a1:56:59:2d:62:a0:8d:b7:bf: 38:07:28:ea:c3:c7:a1:ff:51:0f:5e:d0:40:71:19: db:2d:bc:06:a0:3e:b7:40:78:02:64:70:a3:d9:45: 4b:fb:01:d7:ff:ac:54:b9:ee:2b:08:b7:50:d5:46: 5a:e0:87:79:32:5b:c2:91:76:28:c9:0d:75:09:9d: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:97:01:6B:1F:FF:81:24:56:CA:20:F5:01:7D:C1:40:B4:9C:D1 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b9:09:21:9e:51:3e:2b:6d:7f:bc:be:df:5b:c2:fe:30:b4: 56:4f:fa:ab:ad:43:21:e3:58:ac:47:dc:fb:3f:9c:91:5e:22: b6:dd:9f:b4:05:43:fc:d5:65:30:cd:2d:ba:d3:fd:4d:8f:72: 4b:eb:ea:a5:75:5b:9e:ba:29:ee:03:e0:37:26:e2:84:4c:17: c0:68:67:b8:96:0f:61:2b:03:09:08:0c:8d:36:d8:d7:a4:42: 66:c0:f9:33:98:da:0a:f1:0d:c4:ba:06:a5:3b:78:01:4e:d6: 74:8a:1e:98:e1:ee:88:9d:ca:be:1e:bb:5e:03:83:da:5d:ad: 62:7b:dc:14:1c:5d:69:e5:99:db:aa:7f:08:b0:63:e3:f3:c0: 71:a1:ca:b8:9d:b0:30:94:bd:6d:7c:01:9a:5d:7b:42:e2:79: e2:4d:cf:28:02:58:b9:4a:49:da:97:83:41:98:70:c7:42:b6: 0d:a1:5d:e0:af:76:30:60:fc:aa:f7:67:30:f3:64:0d:73:96: ca:c2:11:ab:14:1e:43:74:90:96:1f:ac:e4:38:3b:cd:ac:a0: c2:5f:39:e8:b1:4c:10:87:da:3d:16:e7:ac:42:b8:08:dc:f6: a3:ef:43:26:64:67:2a:29:36:26:71:44:06:a0:a6:eb:6b:63: ea:a8:dc:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBlyU9f+swkPTfL4dhoYvtzgZD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA5MDcwOTI2MDNaFw0yNTA5MTAxNDI5MDNaMDMxMTAvBgNV BAMTKDY2QjA5NzAxNkIxRkZGODEyNDU2Q0EyMEY1MDE3REMxNDBCNDlDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhs+tboJH2Hz+YoG6RpB08zYn5 KrpFJBZXhZ5hrV59qCeb+/6K9nMKcb0y8ohXQ5bD8ec1816FOE6l+tVLDURu/1St 6ubFcCKBIIB3yoZt+CCe19PczHfbX7sxllSOHkO4mCAbFDrCtz8HfIjQh8351oki 0g0fEs1p17z/dw95ii27p1AYXp8c+HC7jB+WpMyQw8+n72kOriT3U+keqvV1nmps TW6lCsieBsMqcZi4QGukK0QBG1kOtaFWWS1ioI23vzgHKOrDx6H/UQ9e0EBxGdst vAagPrdAeAJkcKPZRUv7Adf/rFS57isIt1DVRlrgh3kyW8KRdijJDXUJna8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrCXAWsf/4EkVsog9QF9wUC0nNEwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG5CSGeUT4rbX+8vt9bwv4wtFZP+qutQyHj WKxH3Ps/nJFeIrbdn7QFQ/zVZTDNLbrT/U2Pckvr6qV1W566Ke4D4Dcm4oRMF8Bo Z7iWD2ErAwkIDI022NekQmbA+TOY2grxDcS6BqU7eAFO1nSKHpjh7oidyr4eu14D g9pdrWJ73BQcXWnlmduqfwiwY+PzwHGhyridsDCUvW18AZpde0LieeJNzygCWLlK SdqXg0GYcMdCtg2hXeCvdjBg/Kr3ZzDzZA1zlsrCEasUHkN0kJYfrOQ4O82soMJf OeixTBCH2j0W56xCuAjc9qPvQyZkZyopNiZxRAagputrY+qo3CE= -----END CERTIFICATE-----Generated at Mon Sep 8 05:35:23 2025 by rpki-client