$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: DV+vxHhl767oI9wo1XkjSFeYKcVnd1fMfeP04NCAy5I= Subject key identifier: 58:FF:DD:B5:0B:61:10:24:48:15:C4:C9:63:63:E6:C4:F9:6A:1E:81 Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 11AD7711111D1FEE89577EB42C2B3AA67CC50D91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 01DE Signing time: Thu 07 Aug 2025 16:01:07 +0000 Manifest this update: Thu 07 Aug 2025 15:56:07 +0000 Manifest next update: Sun 10 Aug 2025 19:24:07 +0000 Files and hashes: 1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: V532nMR+yfc8KwqYQ/ad/sOdVDjz5McQtIb91iP/AD8=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: AsMeUOteqEXHlEkIekpGYqBMNAoMYPpcU5LYFAHddbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ad:77:11:11:1d:1f:ee:89:57:7e:b4:2c:2b:3a:a6:7c:c5:0d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Aug 7 15:56:07 2025 GMT Not After : Aug 10 19:24:07 2025 GMT Subject: CN=58FFDDB50B6110244815C4C96363E6C4F96A1E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:35:80:b5:58:55:07:1d:48:46:1a:66:7a: 77:02:27:34:d1:85:54:48:55:f1:79:f9:9f:b6:50: ca:ba:d7:4c:49:44:79:9f:a1:15:3b:5a:61:4c:45: 7d:48:b1:79:c9:a8:dc:15:f4:8e:38:23:c8:ae:d9: 35:1b:e7:5c:31:8b:89:45:c1:e4:4a:1a:eb:e9:9e: 3e:f1:df:b0:3d:c1:43:2b:8f:f3:e0:b1:c3:bf:22: 37:14:24:7e:00:87:d4:6b:09:18:c2:fb:c5:f3:2d: 5d:4f:2f:16:6d:05:ae:89:07:20:d1:38:04:e2:01: 1d:c1:95:65:67:82:c7:02:10:b4:9f:4f:0b:01:5c: 7c:9e:6c:ce:02:59:96:0e:24:60:5f:14:9a:84:7e: 50:f3:57:02:cb:37:62:33:23:a5:3f:f3:1b:1f:f1: 04:56:ef:38:d8:49:aa:21:3c:93:07:31:22:3d:e1: 76:d6:57:3f:74:25:bf:21:91:3a:6b:89:82:65:3e: 88:70:19:d4:eb:e6:14:ee:4a:6e:8e:ff:09:fc:52: 9d:b7:57:75:18:17:4b:ad:af:21:40:d1:73:94:f0: 90:fd:bd:de:f3:a2:80:8a:62:32:36:0f:7b:82:e1: d9:1c:94:24:3c:81:99:ef:15:f0:ce:ad:26:1a:66: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FF:DD:B5:0B:61:10:24:48:15:C4:C9:63:63:E6:C4:F9:6A:1E:81 X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4c:14:ac:80:38:b9:7f:93:de:70:fc:a0:6e:5e:13:01:44: 23:14:b4:80:56:ff:29:fd:71:6b:c1:ef:63:ce:f9:21:84:90: 15:af:be:06:a8:d1:83:ff:78:b7:b6:a0:09:c6:ec:c8:e1:f5: 0f:1e:68:e0:87:ae:9f:6e:3c:18:33:1b:ae:73:32:f0:f7:6c: 43:af:46:fa:da:6e:89:30:48:5d:5e:bf:3b:c7:72:e0:ee:e8: 35:2f:a5:b4:df:bb:dc:2a:a7:51:cb:bc:e1:d4:e8:4c:f8:b2: ca:29:80:ae:4f:bd:d3:8d:cf:c0:d2:7f:e5:16:f4:87:2f:16: 61:6d:da:68:38:8b:24:65:be:1c:7b:23:a5:3b:f1:a9:b6:92: 4b:0d:24:a0:80:79:30:b4:7e:85:e6:eb:75:f8:30:3d:10:30: b4:74:33:17:99:17:45:42:95:06:04:de:a7:85:95:bd:36:ee: 4f:80:7b:96:b6:3d:73:54:63:74:62:49:87:d3:88:fb:ae:1e: d2:a3:47:db:61:98:b5:af:70:be:e7:8e:c6:cf:31:49:bc:7e: f4:6e:ec:0b:04:08:1b:7f:91:7a:64:48:a5:df:d8:45:85:ba: a3:00:f9:9d:a5:26:99:46:ec:54:3d:fe:72:25:9f:0f:4b:0b: 08:5a:dd:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEa13EREdH+6JV360LCs6pnzFDZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNTA4MDcxNTU2MDdaFw0yNTA4MTAxOTI0MDdaMDMxMTAvBgNV BAMTKDU4RkZEREI1MEI2MTEwMjQ0ODE1QzRDOTYzNjNFNkM0Rjk2QTFFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhDWAtVhVBx1IRhpmencCJzTR hVRIVfF5+Z+2UMq610xJRHmfoRU7WmFMRX1IsXnJqNwV9I44I8iu2TUb51wxi4lF weRKGuvpnj7x37A9wUMrj/PgscO/IjcUJH4Ah9RrCRjC+8XzLV1PLxZtBa6JByDR OATiAR3BlWVngscCELSfTwsBXHyebM4CWZYOJGBfFJqEflDzVwLLN2IzI6U/8xsf 8QRW7zjYSaohPJMHMSI94XbWVz90Jb8hkTpriYJlPohwGdTr5hTuSm6O/wn8Up23 V3UYF0utryFA0XOU8JD9vd7zooCKYjI2D3uC4dkclCQ8gZnvFfDOrSYaZq3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWP/dtQthECRIFcTJY2PmxPlqHoEwHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZMFKyAOLl/k95w/KBuXhMBRCMUtIBW/yn9 cWvB72PO+SGEkBWvvgao0YP/eLe2oAnG7Mjh9Q8eaOCHrp9uPBgzG65zMvD3bEOv RvrabokwSF1evzvHcuDu6DUvpbTfu9wqp1HLvOHU6Ez4ssopgK5PvdONz8DSf+UW 9IcvFmFt2mg4iyRlvhx7I6U78am2kksNJKCAeTC0foXm63X4MD0QMLR0MxeZF0VC lQYE3qeFlb027k+Ae5a2PXNUY3RiSYfTiPuuHtKjR9thmLWvcL7njsbPMUm8fvRu 7AsECBt/kXpkSKXf2EWFuqMA+Z2lJplG7FQ9/nIlnw9LCwha3eA= -----END CERTIFICATE-----Generated at Fri Aug 8 10:11:03 2025 by rpki-client