$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json) Hash identifier: gd0/38A6JaJ9w0WU+EKAQIof8k/13iLNdTMG5CqXVHY= Subject key identifier: 04:9F:8E:F0:B6:8A:F7:16:E6:84:D5:72:C6:BF:84:D5:1D:E4:E5:35 Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Certificate serial: 7951966DB3F36D13CA9C7E38BEBB4A4A58A33171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft Manifest number: 0235 Signing time: Tue 05 Aug 2025 08:31:59 +0000 Manifest this update: Tue 05 Aug 2025 08:26:59 +0000 Manifest next update: Fri 08 Aug 2025 17:47:59 +0000 Files and hashes: 1: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: pKR339ofpGjf7MVHBnj0O7EOFG9t26YO8GsduB5PdCI=) 2: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: l93JLeZA0gHjGNi7RBGQjT/AKkoQS/8tDgy6vQr6gv8=) 3: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: XFrUcpgWUCXxehUbSTMuWAR9IspCS/hm0rkUt1e/IiM=) 4: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: Vjl5z9Sz1xrwJF5f5PSr6kwWjreFU3EpJmg9p7NKE/Q=) 5: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: qEX4OYiN2K5aBSYBNnOOR/c3wxxgYWgILOryM5GH2lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:51:96:6d:b3:f3:6d:13:ca:9c:7e:38:be:bb:4a:4a:58:a3:31:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Validity Not Before: Aug 5 08:26:59 2025 GMT Not After : Aug 8 17:47:59 2025 GMT Subject: CN=049F8EF0B68AF716E684D572C6BF84D51DE4E535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:47:8b:61:dc:f0:b8:90:9f:cc:c7:1c:f5:41: 35:3a:3b:b0:fe:37:3e:ff:0a:a2:3d:7b:63:56:37: bc:f4:0b:34:c6:66:26:20:a9:e6:36:28:9e:ef:18: cf:a2:75:a4:23:f7:9e:30:a9:38:be:6e:6d:b5:7c: d4:0c:35:42:df:f5:eb:2b:5f:1f:30:44:c7:2f:23: c3:1b:fe:35:c0:18:d8:db:f4:e6:43:35:36:4b:41: f2:70:67:e1:c0:6b:5f:c0:a4:ae:92:81:df:f5:89: c9:45:e9:bb:91:6a:62:70:46:4c:37:20:50:80:ed: 73:de:6a:62:99:3f:64:da:6b:c2:95:7f:29:70:5c: bd:fb:1e:9e:bb:c2:75:17:8e:bb:72:e7:52:39:57: 49:0a:8e:01:e0:2b:f6:a3:52:55:e6:62:5e:21:96: e1:ff:b9:8a:b7:ca:f2:f0:53:f6:64:e8:fe:82:a8: a9:bf:a1:c7:15:c2:57:db:c7:40:c4:60:e3:10:b2: 7c:1c:ac:36:1e:78:ef:ce:1c:61:f1:6a:4c:db:f3: af:2a:f4:28:de:18:79:b6:8e:e8:69:ac:f9:f9:38: 4b:11:49:ef:70:80:b0:ed:2a:5c:6d:25:85:8f:ae: c4:78:c2:d6:87:13:ed:7f:95:5e:69:20:6b:ff:33: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9F:8E:F0:B6:8A:F7:16:E6:84:D5:72:C6:BF:84:D5:1D:E4:E5:35 X509v3 Authority Key Identifier: keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b8:78:1a:c2:fc:6c:a6:99:31:a1:ab:04:3b:d2:82:3b:21: 44:2d:f6:fc:fa:6b:e3:8c:19:df:b9:63:3a:98:40:3a:82:65: 7a:ec:61:48:bd:4e:ca:40:45:dd:d5:65:5f:2b:ed:eb:00:62: a5:5a:96:79:e5:e8:61:2f:cd:f7:a8:e8:db:df:e9:1e:c4:e1: 1b:1a:65:c6:1a:cd:21:4e:7e:dd:f8:68:9a:38:67:d4:e2:77: f5:be:db:86:18:c2:d6:b8:fe:3d:1e:85:6a:89:91:6a:0c:ff: 49:d1:a7:14:60:37:b8:2e:a9:18:f8:ba:85:c9:1b:fe:d9:f6: 0e:93:17:1b:66:33:24:21:df:9b:e0:da:e8:07:e5:5d:bc:0e: 1f:f9:78:9f:41:ac:dd:cb:a7:20:83:63:7b:c2:32:65:08:ea: 05:af:87:35:e0:4a:ec:a8:76:22:54:44:76:3b:ce:23:c1:bf: 56:36:d9:8f:66:8e:8e:86:f3:1d:2e:b1:20:3e:dc:1d:87:b4: 9a:0d:9f:89:21:74:76:84:af:2b:00:d0:24:df:4d:1c:cd:c2: 94:72:95:38:1c:3d:d7:4f:20:c6:2b:2a:b9:95:88:4b:92:38: 4f:a4:4e:89:eb:dc:77:c4:9a:4d:ce:36:76:e4:4e:7f:7a:a7: 55:6a:20:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVGWbbPzbRPKnH44vrtKSlijMXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1 RThFMjIwQjAeFw0yNTA4MDUwODI2NTlaFw0yNTA4MDgxNzQ3NTlaMDMxMTAvBgNV BAMTKDA0OUY4RUYwQjY4QUY3MTZFNjg0RDU3MkM2QkY4NEQ1MURFNEU1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaR4th3PC4kJ/Mxxz1QTU6O7D+ Nz7/CqI9e2NWN7z0CzTGZiYgqeY2KJ7vGM+idaQj954wqTi+bm21fNQMNULf9esr Xx8wRMcvI8Mb/jXAGNjb9OZDNTZLQfJwZ+HAa1/ApK6Sgd/1iclF6buRamJwRkw3 IFCA7XPeamKZP2Taa8KVfylwXL37Hp67wnUXjrty51I5V0kKjgHgK/ajUlXmYl4h luH/uYq3yvLwU/Zk6P6CqKm/occVwlfbx0DEYOMQsnwcrDYeeO/OHGHxakzb868q 9CjeGHm2juhprPn5OEsRSe9wgLDtKlxtJYWPrsR4wtaHE+1/lV5pIGv/MwFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJ+O8LaK9xbmhNVyxr+E1R3k5TUwHwYDVR0j BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF MjIwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJG QkQ1RThFMjIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe4eBrC/GymmTGhqwQ70oI7IUQt9vz6a+OM Gd+5YzqYQDqCZXrsYUi9TspARd3VZV8r7esAYqValnnl6GEvzfeo6Nvf6R7E4Rsa ZcYazSFOft34aJo4Z9Tid/W+24YYwta4/j0ehWqJkWoM/0nRpxRgN7guqRj4uoXJ G/7Z9g6TFxtmMyQh35vg2ugH5V28Dh/5eJ9BrN3LpyCDY3vCMmUI6gWvhzXgSuyo diJURHY7ziPBv1Y22Y9mjo6G8x0usSA+3B2HtJoNn4khdHaErysA0CTfTRzNwpRy lTgcPddPIMYrKrmViEuSOE+kTonr3HfEmk3ONnbkTn96p1VqIBc= -----END CERTIFICATE-----Generated at Thu Aug 7 07:21:34 2025 by rpki-client