$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: 9Vee43c8L9VtplJAPtxtCtMulXvI4n5gscYwoVKsZqg= Subject key identifier: 74:8C:5E:DA:8C:56:84:D7:DC:0C:94:3B:DB:01:63:CE:33:44:0A:68 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 14FA7080FE0B470929B7FB16DA1100DC99361FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 04F5 Signing time: Thu 07 Aug 2025 16:30:45 +0000 Manifest this update: Thu 07 Aug 2025 16:25:45 +0000 Manifest next update: Sun 10 Aug 2025 21:04:45 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: 7f8kFqwrPXRnzT9e8qrRAwTP9OoinW/DSQxMkxv8tSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fa:70:80:fe:0b:47:09:29:b7:fb:16:da:11:00:dc:99:36:1f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Aug 7 16:25:45 2025 GMT Not After : Aug 10 21:04:45 2025 GMT Subject: CN=748C5EDA8C5684D7DC0C943BDB0163CE33440A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:34:d0:29:50:41:58:04:29:0b:07:ba:7e: 04:ff:5b:0d:71:78:7a:41:e1:bf:8a:c7:12:45:e4: c3:33:e1:8f:35:25:78:57:4f:25:f8:6f:06:e7:c8: d8:83:0d:94:71:6b:07:69:6b:cc:7d:39:30:5d:c1: a6:3d:fe:62:3a:46:18:dd:cb:e4:2c:80:3d:36:28: 79:a1:1a:26:5f:61:fa:02:32:ce:3f:e5:69:cc:2a: 9d:de:4d:42:78:1d:49:10:8c:26:9b:e6:3f:5c:8e: 54:ea:c1:ee:44:85:bb:3f:27:2c:cf:f2:9c:4c:bd: 59:8a:1b:47:52:40:e6:6c:6f:f7:73:ae:42:15:d2: 16:33:29:fb:a0:f0:b8:eb:a0:81:f4:5f:68:33:f8: 1e:a8:61:0f:c8:d8:89:4d:0b:da:1e:73:b3:8c:e3: 22:2c:f2:ad:98:51:39:65:0e:56:55:f8:33:fc:b5: 67:5b:94:df:dd:9c:74:df:41:3d:e9:63:ba:2e:a2: d5:fb:2d:3b:99:01:87:f3:0d:4f:62:da:0a:60:32: 57:0e:6b:6c:84:a6:b8:02:61:bc:ba:06:ff:29:55: ac:65:16:62:dc:e0:0d:91:89:04:3f:b9:f7:d8:b0: cf:77:34:fa:f9:3e:ac:0a:7a:7d:f0:51:f6:91:87: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8C:5E:DA:8C:56:84:D7:DC:0C:94:3B:DB:01:63:CE:33:44:0A:68 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2b:d1:34:f3:8a:c0:f6:19:93:cb:8c:4d:63:28:7b:e0:8e: c4:91:de:94:68:f0:20:7b:f6:05:75:02:d4:63:ac:a2:bd:73: 51:ed:5c:fa:3d:45:c0:f8:7e:4b:79:de:70:56:5a:c5:24:bb: 4b:ee:67:a2:8e:cf:72:79:5f:15:b4:dd:e0:28:7f:7e:28:8c: be:d0:d2:55:06:fd:d9:fc:70:e8:bd:5d:ad:fe:3d:92:d8:e9: b0:82:1e:6c:38:d9:cd:8c:a8:fa:4c:63:5b:03:c2:48:e4:ce: 8c:b8:81:b1:09:ae:f2:d6:b3:71:4a:f8:a7:2d:c1:4f:79:b5: 60:da:1e:62:7c:10:7c:69:92:cd:13:1c:16:c2:1d:35:19:02: 9e:22:95:38:0f:b5:8b:78:44:7b:ff:3d:4a:43:4d:e9:23:09: bd:0a:61:79:c4:4c:8c:6a:ab:f4:70:43:1f:ee:b8:62:d5:e4: 0d:70:1c:19:9e:07:85:be:a8:53:da:c6:43:20:30:f6:33:f7: 52:f7:43:ff:de:34:28:ac:a1:1e:1a:e7:70:2e:46:a0:48:6d: d1:d4:a5:de:d3:e9:6c:f3:86:6e:db:d0:0f:1f:84:97:1c:2e: ba:26:c4:b0:ce:d2:4d:28:1a:5b:cc:db:c1:df:f2:8e:71:16: c0:78:d7:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPpwgP4LRwkpt/sW2hEA3Jk2H+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTA4MDcxNjI1NDVaFw0yNTA4MTAyMTA0NDVaMDMxMTAvBgNV BAMTKDc0OEM1RURBOEM1Njg0RDdEQzBDOTQzQkRCMDE2M0NFMzM0NDBBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKjTQKVBBWAQpCwe6fgT/Ww1x eHpB4b+KxxJF5MMz4Y81JXhXTyX4bwbnyNiDDZRxawdpa8x9OTBdwaY9/mI6Rhjd y+QsgD02KHmhGiZfYfoCMs4/5WnMKp3eTUJ4HUkQjCab5j9cjlTqwe5Ehbs/JyzP 8pxMvVmKG0dSQOZsb/dzrkIV0hYzKfug8LjroIH0X2gz+B6oYQ/I2IlNC9oec7OM 4yIs8q2YUTllDlZV+DP8tWdblN/dnHTfQT3pY7ouotX7LTuZAYfzDU9i2gpgMlcO a2yEprgCYby6Bv8pVaxlFmLc4A2RiQQ/uffYsM93NPr5PqwKen3wUfaRh455AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIxe2oxWhNfcDJQ72wFjzjNECmgwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0r0TTzisD2GZPLjE1jKHvgjsSR3pRo8CB7 9gV1AtRjrKK9c1HtXPo9RcD4fkt53nBWWsUku0vuZ6KOz3J5XxW03eAof34ojL7Q 0lUG/dn8cOi9Xa3+PZLY6bCCHmw42c2MqPpMY1sDwkjkzoy4gbEJrvLWs3FK+Kct wU95tWDaHmJ8EHxpks0THBbCHTUZAp4ilTgPtYt4RHv/PUpDTekjCb0KYXnETIxq q/RwQx/uuGLV5A1wHBmeB4W+qFPaxkMgMPYz91L3Q//eNCisoR4a53AuRqBIbdHU pd7T6Wzzhm7b0A8fhJccLromxLDO0k0oGlvM28Hf8o5xFsB412w= -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:14 2025 by rpki-client