$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: YK8n1D0dUbuXgSConLgk/KB0r6wwg6IIXUgeVSLB9Mg= Subject key identifier: 24:2E:8D:9D:C4:B5:0C:42:27:0B:31:7F:52:28:93:A2:7D:82:46:0D Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 5D12A51C3FB30F6914C0B6E19EF0CACC80CA6ACD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 019E Signing time: Wed 06 Aug 2025 06:40:53 +0000 Manifest this update: Wed 06 Aug 2025 06:35:53 +0000 Manifest next update: Sat 09 Aug 2025 13:28:53 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: XPzsUkVEKY3h5z5HJMLLd7ct8obUKMbQ9EqWCcBdZec=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:12:a5:1c:3f:b3:0f:69:14:c0:b6:e1:9e:f0:ca:cc:80:ca:6a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Aug 6 06:35:53 2025 GMT Not After : Aug 9 13:28:53 2025 GMT Subject: CN=242E8D9DC4B50C42270B317F522893A27D82460D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:a9:50:08:a0:58:59:be:2e:ec:e3:d6:a4: 7a:88:af:f0:92:6d:f2:94:92:79:26:0f:44:50:1f: f1:33:b5:05:bc:38:ca:82:b7:67:16:4e:7f:c4:c7: d6:9e:a8:56:c0:41:92:b8:b8:f9:b7:14:50:1e:db: ab:ba:ea:74:3f:93:0c:1d:22:dd:e5:d8:63:9e:8e: 96:23:1c:93:62:d9:47:89:84:98:63:7c:e7:98:f8: 40:de:a3:6b:6d:0c:c2:c9:9f:dd:b4:c4:ff:b4:c6: d5:66:50:f8:70:2f:62:cc:3e:a5:56:b7:5c:0b:b6: ee:94:23:94:28:cc:6c:e6:33:ad:1d:52:7f:46:36: a4:0c:cd:3e:14:a0:3b:18:57:ec:dd:de:c4:28:ab: ad:d5:56:0f:53:77:e3:db:2f:f7:08:30:0e:05:f8: 1b:08:09:8d:29:fa:4f:fb:4a:48:b4:75:62:c5:18: 83:f5:e8:88:96:35:fd:c1:57:54:ac:a5:00:81:3c: be:d0:ed:e2:17:8d:96:36:4f:56:fd:e2:ef:ad:8c: b8:ea:35:40:fa:1a:49:42:56:a2:65:44:e3:f4:9c: b6:e1:25:4e:ab:c3:98:3a:b0:ae:a9:b0:e8:4c:e4: 25:a1:f6:91:e8:b3:1e:28:bc:23:8b:24:1a:0a:88: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:8D:9D:C4:B5:0C:42:27:0B:31:7F:52:28:93:A2:7D:82:46:0D X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1e:5b:34:2d:03:93:3a:78:c4:d8:9b:af:5f:fb:bc:93:4a: 57:c3:d3:32:3d:ad:0f:bb:ac:b6:94:5e:2c:ea:ce:70:89:95: 95:ec:8b:65:e6:98:b4:9a:cb:cf:e4:bc:8a:77:12:49:b6:82: 7c:15:e6:2c:65:c1:98:a4:3f:d0:93:64:d0:a1:76:cc:3e:99: 91:57:35:bf:2b:c8:e8:78:3d:8b:1f:17:61:a8:64:78:a3:c2: 46:57:ee:20:c3:8b:c1:82:9a:2d:f5:37:09:dc:64:32:48:5d: 3f:50:25:0a:a2:0f:b4:c9:e0:e5:74:40:81:3e:b0:87:e9:b6: 40:2b:bc:ff:aa:1d:10:3f:3d:51:a5:eb:31:bb:49:49:bb:c7: 3f:6a:de:1f:c1:c9:29:80:b8:a9:a4:d8:a5:60:cc:e0:9c:dc: 74:be:90:94:f1:b4:8d:6d:a3:f8:8c:dc:0f:ea:fc:87:8d:b9: e7:28:84:73:a7:0d:0d:a7:67:dc:4f:57:95:4a:80:14:4b:27: 8c:0a:d5:11:81:03:67:18:1a:44:e6:90:6e:77:f7:59:7f:d6: 8a:be:7c:1d:2d:6d:e9:cf:5f:b8:6a:c4:7f:19:70:c9:23:5b: 55:dc:52:13:c2:8e:cf:2f:66:60:49:6c:f4:0c:4e:f2:91:da: 93:16:73:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRKlHD+zD2kUwLbhnvDKzIDKas0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNTA4MDYwNjM1NTNaFw0yNTA4MDkxMzI4NTNaMDMxMTAvBgNV BAMTKDI0MkU4RDlEQzRCNTBDNDIyNzBCMzE3RjUyMjg5M0EyN0Q4MjQ2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2a6lQCKBYWb4u7OPWpHqIr/CS bfKUknkmD0RQH/EztQW8OMqCt2cWTn/Ex9aeqFbAQZK4uPm3FFAe26u66nQ/kwwd It3l2GOejpYjHJNi2UeJhJhjfOeY+EDeo2ttDMLJn920xP+0xtVmUPhwL2LMPqVW t1wLtu6UI5QozGzmM60dUn9GNqQMzT4UoDsYV+zd3sQoq63VVg9Td+PbL/cIMA4F +BsICY0p+k/7Ski0dWLFGIP16IiWNf3BV1SspQCBPL7Q7eIXjZY2T1b94u+tjLjq NUD6GklCVqJlROP0nLbhJU6rw5g6sK6psOhM5CWh9pHosx4ovCOLJBoKiHvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJC6NncS1DEInCzF/UiiTon2CRg0wHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEeWzQtA5M6eMTYm69f+7yTSlfD0zI9rQ+7 rLaUXizqznCJlZXsi2XmmLSay8/kvIp3Ekm2gnwV5ixlwZikP9CTZNChdsw+mZFX Nb8ryOh4PYsfF2GoZHijwkZX7iDDi8GCmi31NwncZDJIXT9QJQqiD7TJ4OV0QIE+ sIfptkArvP+qHRA/PVGl6zG7SUm7xz9q3h/BySmAuKmk2KVgzOCc3HS+kJTxtI1t o/iM3A/q/IeNuecohHOnDQ2nZ9xPV5VKgBRLJ4wK1RGBA2cYGkTmkG5391l/1oq+ fB0tbenPX7hqxH8ZcMkjW1XcUhPCjs8vZmBJbPQMTvKR2pMWc5M= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:31 2025 by rpki-client