$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: 5g2v2OGZZ4dlt5tkxtRUrQ0tllkFm2iMJPrgQqnuY4U= Subject key identifier: 27:29:C9:1F:51:F7:87:85:76:44:9A:66:40:D2:E6:C1:B6:81:04:32 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 450B8BEB2F30F0C7927FB610C435DD384C79BD39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 04FB Signing time: Tue 12 Aug 2025 04:31:11 +0000 Manifest this update: Tue 12 Aug 2025 04:26:11 +0000 Manifest next update: Fri 15 Aug 2025 10:54:11 +0000 Files and hashes: 1: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 2: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 3: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: HdnXI5TkApdlR64K3LbCJ4gu0fGMDnqgEjcDXJUwoKA=) 4: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 10:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0b:8b:eb:2f:30:f0:c7:92:7f:b6:10:c4:35:dd:38:4c:79:bd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Aug 12 04:26:11 2025 GMT Not After : Aug 15 10:54:11 2025 GMT Subject: CN=2729C91F51F7878576449A6640D2E6C1B6810432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:c5:a5:74:42:f2:b6:19:5d:c3:be:c0:c7: d4:48:21:0b:3f:52:ec:4a:91:dc:40:66:b9:1a:b4: c3:3a:32:16:2f:98:d6:bb:22:9b:65:0b:6f:44:d7: 90:e4:97:91:4c:e1:7e:c4:f6:66:b5:0c:df:dc:4e: 3b:22:4b:10:91:6a:48:33:fe:8e:8b:cb:df:40:1b: e8:4d:77:07:6e:29:b6:d2:cb:11:7f:0c:30:f0:ce: 07:82:42:c1:5f:91:6f:3b:64:07:c2:8f:3c:2c:56: 4d:b1:9c:83:79:d9:79:79:c1:d7:99:5b:ec:31:77: 3f:7b:f4:86:4b:cb:48:3d:09:db:11:70:c3:d2:b9: d3:be:b5:51:38:8f:b4:9b:90:02:50:91:4b:1f:ff: 2c:1e:ab:b4:d6:dd:37:59:2c:58:ef:7a:4c:40:a0: 44:3f:a3:ab:1d:5f:15:b2:52:e2:62:d4:43:b6:e5: 08:f6:fd:2e:cb:65:1b:6b:db:ba:e4:a3:a2:69:a3: 81:c5:28:15:cf:ae:ee:d9:53:61:df:f5:9e:15:9c: 6e:f3:5f:05:47:83:93:4a:f6:ee:12:61:74:f9:6d: 17:d2:4b:a6:40:7b:d1:6c:95:b8:5d:bf:7b:b7:28: 51:67:ba:a5:46:e0:2d:84:1e:71:ce:33:b3:33:2a: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:C9:1F:51:F7:87:85:76:44:9A:66:40:D2:E6:C1:B6:81:04:32 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:47:f0:96:4d:0a:b4:5f:a8:66:84:c6:08:22:2e:81:99: eb:46:db:bc:04:57:c9:93:d3:97:4a:19:aa:07:f7:56:4b:c5: 9a:7a:95:16:3c:bb:e9:50:03:08:e7:69:57:92:bd:21:64:21: ce:b0:25:48:f5:3e:3b:22:19:be:4e:9d:4f:49:d9:63:1c:89: 4f:20:14:d4:ef:a8:57:21:e4:5c:d0:ef:e9:67:f2:97:3d:3f: a5:00:75:45:9d:c0:8a:98:be:76:bd:5e:09:d3:51:00:33:7a: 13:ed:46:7a:28:37:d6:2d:02:a8:2e:6a:d3:7c:ec:88:03:14: db:05:72:9a:9d:fb:c0:b1:22:9d:a3:e8:03:de:60:ad:33:b0: 07:0b:2a:8c:b3:8e:2d:26:ef:ab:70:c6:89:47:36:21:81:f4: ed:a9:94:14:23:1d:46:d9:3f:e7:a4:68:ef:dd:92:41:bc:1a: 18:9c:a2:f6:b0:af:24:44:f6:85:47:d2:f8:ee:b1:50:24:3a: 52:aa:4c:c5:ed:6b:58:d2:5d:9c:78:1c:07:05:2b:72:da:4d: 1c:79:95:2d:6e:d7:d0:ce:82:0d:7a:42:d4:5b:95:a4:5a:2a: 01:63:70:31:78:dc:d8:f5:c6:66:9c:48:b0:7e:5d:96:b8:7b: f9:43:de:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQuL6y8w8MeSf7YQxDXdOEx5vTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA4MTIwNDI2MTFaFw0yNTA4MTUxMDU0MTFaMDMxMTAvBgNV BAMTKDI3MjlDOTFGNTFGNzg3ODU3NjQ0OUE2NjQwRDJFNkMxQjY4MTA0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTcWldELythldw77Ax9RIIQs/ UuxKkdxAZrkatMM6MhYvmNa7IptlC29E15Dkl5FM4X7E9ma1DN/cTjsiSxCRakgz /o6Ly99AG+hNdwduKbbSyxF/DDDwzgeCQsFfkW87ZAfCjzwsVk2xnIN52Xl5wdeZ W+wxdz979IZLy0g9CdsRcMPSudO+tVE4j7SbkAJQkUsf/yweq7TW3TdZLFjvekxA oEQ/o6sdXxWyUuJi1EO25Qj2/S7LZRtr27rko6Jpo4HFKBXPru7ZU2Hf9Z4VnG7z XwVHg5NK9u4SYXT5bRfSS6ZAe9Fslbhdv3u3KFFnuqVG4C2EHnHOM7MzKlGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJynJH1H3h4V2RJpmQNLmwbaBBDIwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2HR/CWTQq0X6hmhMYIIi6BmetG27wEV8mT 05dKGaoH91ZLxZp6lRY8u+lQAwjnaVeSvSFkIc6wJUj1PjsiGb5OnU9J2WMciU8g FNTvqFch5FzQ7+ln8pc9P6UAdUWdwIqYvna9XgnTUQAzehPtRnooN9YtAqguatN8 7IgDFNsFcpqd+8CxIp2j6APeYK0zsAcLKoyzji0m76twxolHNiGB9O2plBQjHUbZ P+ekaO/dkkG8GhicovawryRE9oVH0vjusVAkOlKqTMXta1jSXZx4HAcFK3LaTRx5 lS1u19DOgg16QtRblaRaKgFjcDF43Nj1xmacSLB+XZa4e/lD3nw= -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:01 2025 by rpki-client