$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json) Hash identifier: fdFSc+ZCpxq0qsFkG7YI2kko2jGMS5yQgPdXhjWwIUk= Subject key identifier: 4B:79:36:E8:26:17:C5:A8:91:CA:F9:64:B9:C4:B7:9B:49:CF:06:29 Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Certificate serial: 6970FBBE2910B1629C2A874CC1953AEB69AB598B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft Manifest number: 021E Signing time: Sat 14 Jun 2025 20:32:10 +0000 Manifest this update: Sat 14 Jun 2025 20:27:10 +0000 Manifest next update: Tue 17 Jun 2025 21:46:10 +0000 Files and hashes: 1: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: pKR339ofpGjf7MVHBnj0O7EOFG9t26YO8GsduB5PdCI=) 2: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: Vjl5z9Sz1xrwJF5f5PSr6kwWjreFU3EpJmg9p7NKE/Q=) 3: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: l93JLeZA0gHjGNi7RBGQjT/AKkoQS/8tDgy6vQr6gv8=) 4: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: qEX4OYiN2K5aBSYBNnOOR/c3wxxgYWgILOryM5GH2lc=) 5: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: lmQyTEsf6og6duEkk2QVzL1/weqfWOB29SHKlSrYWB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:70:fb:be:29:10:b1:62:9c:2a:87:4c:c1:95:3a:eb:69:ab:59:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Validity Not Before: Jun 14 20:27:10 2025 GMT Not After : Jun 17 21:46:10 2025 GMT Subject: CN=4B7936E82617C5A891CAF964B9C4B79B49CF0629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:42:1c:79:bc:96:e2:1a:35:02:08:77:cd: dc:1f:21:79:84:55:e2:ce:23:78:2f:92:23:1d:d8: e5:0e:6e:ed:23:79:4c:50:8c:3a:b9:51:1d:8f:6a: 90:8b:3b:14:43:29:3a:0a:8a:e3:83:f5:a8:f0:74: 54:ad:c8:dc:a9:ab:40:4b:12:81:92:e5:0e:d2:ad: 58:f3:a5:fd:2f:e3:35:2e:1d:29:71:3b:85:ca:c2: 06:e1:3f:34:5b:0a:d0:f1:e8:63:2f:9f:5a:8e:fa: 0f:f1:38:88:38:6b:5f:02:21:4e:61:b5:29:6a:cd: 44:73:a4:36:de:37:4a:56:05:16:bd:21:ab:fb:9a: 17:c6:8e:27:23:a0:52:79:d8:c3:51:4a:44:06:dd: 3f:db:64:04:c5:3e:b6:1d:5e:01:d6:e2:e4:66:1e: 53:8f:ad:d6:a5:fb:e6:34:18:21:82:3a:43:eb:11: 8e:40:56:ed:7c:a3:fa:da:ea:57:b0:68:f2:f7:04: ed:55:41:1d:02:76:cf:42:97:95:cd:b0:be:c9:e6: 5d:ce:e5:5e:1f:b8:aa:7f:f7:d8:98:f0:b1:d9:50: f9:9e:0c:b8:ef:f2:9d:d4:55:75:f0:d5:10:4a:49: 5b:b1:81:bf:11:5b:79:ee:29:82:da:a9:2d:c4:1d: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:36:E8:26:17:C5:A8:91:CA:F9:64:B9:C4:B7:9B:49:CF:06:29 X509v3 Authority Key Identifier: keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:b2:f8:00:f4:95:a0:ed:0e:34:5d:04:e7:45:d6:62:42: 59:97:9f:43:1e:e1:76:d7:f7:f0:42:4e:09:39:5a:85:0f:9c: f6:62:5a:ef:1a:53:97:c7:fd:99:44:77:2f:a7:62:3c:26:c8: 44:b1:1d:49:56:46:69:a2:fa:49:49:4a:f4:f4:dd:a5:0f:ba: 00:14:90:0e:7f:b9:b3:7b:b8:a5:5f:3a:0a:c6:2d:ca:a0:08: 35:f2:71:f4:85:fb:fc:ea:ff:5c:57:c5:74:a9:a2:69:e6:7d: 56:e3:91:46:62:7e:14:fe:7e:85:74:af:32:12:e7:ee:05:d6: ce:16:48:33:55:50:9e:e1:1b:a9:f3:e2:9d:41:de:5d:f9:d1: 44:15:1f:47:83:2f:82:2a:7a:09:5f:d3:f0:65:cd:fd:9a:79: 39:67:8b:3c:2a:67:c6:68:27:74:30:d2:4c:25:fb:ed:af:09: e3:d1:b9:de:73:a4:eb:a1:9d:c4:70:25:4f:54:99:97:8e:61: 0f:32:66:49:d9:dd:6f:87:3f:78:7f:c0:82:57:11:ec:40:30: 62:bd:93:1c:b9:04:10:c7:ad:d0:40:0f:a2:21:cd:f5:c0:90: 06:a8:6c:6f:cd:0b:c3:82:b5:4f:f1:82:87:79:f7:03:61:5e: d4:66:d6:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXD7vikQsWKcKodMwZU662mrWYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1 RThFMjIwQjAeFw0yNTA2MTQyMDI3MTBaFw0yNTA2MTcyMTQ2MTBaMDMxMTAvBgNV BAMTKDRCNzkzNkU4MjYxN0M1QTg5MUNBRjk2NEI5QzRCNzlCNDlDRjA2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLEIcebyW4ho1Agh3zdwfIXmE VeLOI3gvkiMd2OUObu0jeUxQjDq5UR2PapCLOxRDKToKiuOD9ajwdFStyNypq0BL EoGS5Q7SrVjzpf0v4zUuHSlxO4XKwgbhPzRbCtDx6GMvn1qO+g/xOIg4a18CIU5h tSlqzURzpDbeN0pWBRa9Iav7mhfGjicjoFJ52MNRSkQG3T/bZATFPrYdXgHW4uRm HlOPrdal++Y0GCGCOkPrEY5AVu18o/ra6lewaPL3BO1VQR0Cds9Cl5XNsL7J5l3O 5V4fuKp/99iY8LHZUPmeDLjv8p3UVXXw1RBKSVuxgb8RW3nuKYLaqS3EHXT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3k26CYXxaiRyvlkucS3m0nPBikwHwYDVR0j BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF MjIwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJG QkQ1RThFMjIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+6svgA9JWg7Q40XQTnRdZiQlmXn0Me4XbX 9/BCTgk5WoUPnPZiWu8aU5fH/ZlEdy+nYjwmyESxHUlWRmmi+klJSvT03aUPugAU kA5/ubN7uKVfOgrGLcqgCDXycfSF+/zq/1xXxXSpomnmfVbjkUZifhT+foV0rzIS 5+4F1s4WSDNVUJ7hG6nz4p1B3l350UQVH0eDL4Iqeglf0/Blzf2aeTlnizwqZ8Zo J3Qw0kwl++2vCePRud5zpOuhncRwJU9UmZeOYQ8yZknZ3W+HP3h/wIJXEexAMGK9 kxy5BBDHrdBAD6IhzfXAkAaobG/NC8OCtU/xgod59wNhXtRm1jw= -----END CERTIFICATE-----Generated at Sun Jun 15 23:00:18 2025 by rpki-client