$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: e73Pytt/DBsp/lUUhx2hX8MetaNCfAPPMToRAt1dBQM= Subject key identifier: 14:D5:4C:8D:8C:50:43:04:E9:91:9A:98:4D:38:25:66:5F:F4:4C:BC Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 0939DEDEAD3FFCC852A56BCF68446C14B9199D15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 04FA Signing time: Tue 05 Aug 2025 08:56:24 +0000 Manifest this update: Tue 05 Aug 2025 08:51:24 +0000 Manifest next update: Fri 08 Aug 2025 15:02:24 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 2: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 3: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 4: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: ALDZu3D4+kpGD4anOIUTjbcdTKGfMZxhaJrEI1Ld6Vw=) 5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:39:de:de:ad:3f:fc:c8:52:a5:6b:cf:68:44:6c:14:b9:19:9d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Aug 5 08:51:24 2025 GMT Not After : Aug 8 15:02:24 2025 GMT Subject: CN=14D54C8D8C504304E9919A984D3825665FF44CBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:7b:1e:35:c6:ab:f6:88:f0:83:f0:c5:1d: e7:aa:54:c8:c6:6a:0f:4a:5d:fc:8e:54:91:42:fd: 37:66:b6:c3:56:2f:a4:c4:f8:1a:d2:eb:bf:c0:d4: 6e:27:2e:80:cc:0d:2b:7f:26:49:d9:8a:bf:c9:be: 45:01:33:a5:1a:63:8b:05:0b:c1:30:a2:ef:54:57: 5a:a1:e4:b9:a8:25:0e:fb:b0:f5:bf:bd:89:cc:db: 88:e2:bf:7d:bc:ae:b2:48:9b:93:0d:03:e2:ce:7f: d6:54:d0:15:6e:0e:e9:45:dc:96:81:7c:52:e6:81: c0:93:94:9c:97:79:a7:80:e6:7c:4e:85:f5:f1:fc: 00:36:91:22:f7:49:16:e3:b4:b2:fb:a9:81:91:8c: 29:0e:ef:4d:44:d6:00:31:a7:6d:e6:6d:9f:35:01: e8:02:02:e9:9a:3d:b0:c3:82:b3:4d:38:65:4a:1a: 3e:b4:86:6a:6e:49:65:f8:7a:78:4f:18:c7:46:96: 73:5f:8d:fc:be:e3:91:6d:69:12:ee:a3:9a:45:51: c8:89:21:9f:c0:50:7c:07:75:22:5c:b8:43:94:87: f6:9f:e4:d1:d5:8e:0b:da:a8:fc:89:9f:68:27:23: d5:fd:23:a1:52:77:14:0d:84:e6:1c:86:34:7a:b4: 0f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:4C:8D:8C:50:43:04:E9:91:9A:98:4D:38:25:66:5F:F4:4C:BC X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bb:17:4f:e2:0c:f3:a4:57:34:bb:cf:ae:0f:40:41:ef:a9: 2e:50:5b:77:62:93:7e:db:05:63:4d:42:54:8d:9b:05:1d:99: e7:1c:a2:84:4f:d8:17:c0:57:47:9f:57:9b:d5:43:bc:17:1b: f6:82:a2:93:e7:c9:e7:1f:d0:f6:0b:87:59:5b:b2:35:5b:07: ef:97:07:87:a5:9e:4a:39:31:0f:ff:4f:28:2b:e5:c1:c5:5a: ab:2f:fe:e3:a4:88:79:e7:3e:6f:8f:4a:8f:21:df:5d:1e:d4: b8:21:9c:82:cd:92:58:f7:0b:f1:2e:8e:62:b7:2d:21:b8:f7: 93:c1:b9:74:64:9e:03:2f:8f:4e:65:0f:89:5b:bd:13:7d:ff: dc:4a:74:8c:f2:a2:fc:45:ab:73:97:82:f9:16:24:c6:3c:44: 54:3e:da:3e:8d:8d:e2:2b:24:d2:60:55:b7:68:e4:19:73:94: 0b:76:eb:5d:c7:d5:79:96:38:b8:8d:48:0c:8b:9e:13:91:29: 27:6b:1d:53:d1:af:38:db:8b:eb:f4:66:fd:fa:9b:d2:08:c3: 84:22:9f:87:76:7c:79:a1:e8:be:d0:81:f4:ed:2c:35:67:89: e1:21:01:cf:02:e2:8f:1c:2d:98:72:1b:2b:d6:7d:44:a3:0f: 7b:76:1c:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTne3q0//MhSpWvPaERsFLkZnRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA4MDUwODUxMjRaFw0yNTA4MDgxNTAyMjRaMDMxMTAvBgNV BAMTKDE0RDU0QzhEOEM1MDQzMDRFOTkxOUE5ODREMzgyNTY2NUZGNDRDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqnseNcar9ojwg/DFHeeqVMjG ag9KXfyOVJFC/TdmtsNWL6TE+BrS67/A1G4nLoDMDSt/JknZir/JvkUBM6UaY4sF C8Ewou9UV1qh5LmoJQ77sPW/vYnM24jiv328rrJIm5MNA+LOf9ZU0BVuDulF3JaB fFLmgcCTlJyXeaeA5nxOhfXx/AA2kSL3SRbjtLL7qYGRjCkO701E1gAxp23mbZ81 AegCAumaPbDDgrNNOGVKGj60hmpuSWX4enhPGMdGlnNfjfy+45FtaRLuo5pFUciJ IZ/AUHwHdSJcuEOUh/af5NHVjgvaqPyJn2gnI9X9I6FSdxQNhOYchjR6tA/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNVMjYxQQwTpkZqYTTglZl/0TLwwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF27F0/iDPOkVzS7z64PQEHvqS5QW3dik37b BWNNQlSNmwUdmeccooRP2BfAV0efV5vVQ7wXG/aCopPnyecf0PYLh1lbsjVbB++X B4elnko5MQ//Tygr5cHFWqsv/uOkiHnnPm+PSo8h310e1LghnILNklj3C/EujmK3 LSG495PBuXRkngMvj05lD4lbvRN9/9xKdIzyovxFq3OXgvkWJMY8RFQ+2j6NjeIr JNJgVbdo5BlzlAt2613H1XmWOLiNSAyLnhORKSdrHVPRrzjbi+v0Zv36m9IIw4Qi n4d2fHmh6L7QgfTtLDVnieEhAc8C4o8cLZhyGyvWfUSjD3t2HJs= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:22 2025 by rpki-client