$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json) Hash identifier: hIdVQGjKI4Jn6ckY3uJJIq2oG09V60oScyhKIEz32/0= Subject key identifier: C1:9C:A5:D8:1D:7C:B8:9B:D6:30:E8:AB:2D:15:4F:58:DF:18:9E:84 Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Certificate serial: 1945A7C5201B2B35730156E34C5B3DC840B669FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft Manifest number: 0500 Signing time: Mon 04 Aug 2025 15:50:00 +0000 Manifest this update: Mon 04 Aug 2025 15:45:00 +0000 Manifest next update: Thu 07 Aug 2025 17:54:00 +0000 Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=) 2: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: NXF71+FhbJVwdFejSVVsV1w6cb4wK5qAHpZ0IRaxzFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 17:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:45:a7:c5:20:1b:2b:35:73:01:56:e3:4c:5b:3d:c8:40:b6:69:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Validity Not Before: Aug 4 15:45:00 2025 GMT Not After : Aug 7 17:54:00 2025 GMT Subject: CN=C19CA5D81D7CB89BD630E8AB2D154F58DF189E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:8d:7e:17:58:07:c0:0f:f4:0b:50:2b:ce: c4:7c:43:e7:2d:e4:d1:ab:89:9f:40:80:47:5b:ec: ce:db:83:c7:ae:cb:67:a2:9a:6b:fd:27:59:4b:14: 73:d5:f4:52:3d:03:e9:78:c3:ac:11:f4:5a:58:fc: 6f:bc:4a:77:6f:79:b8:c9:29:b8:26:c9:a1:1e:56: 33:3d:d6:90:49:5e:20:e6:86:30:a7:e1:1b:e8:65: a0:2e:9e:9f:4e:e4:1e:1f:45:53:a3:a3:4e:51:9b: 42:db:8a:94:77:6d:4c:20:f3:cd:57:06:98:a8:7d: f1:c3:00:23:74:74:ad:3e:6c:b1:eb:f0:ce:93:6a: b1:41:ed:f1:7a:b5:3f:08:40:0c:20:6a:11:b7:a6: 3d:ec:5c:2a:33:e1:12:9b:d4:28:24:5f:41:23:52: ce:a8:8e:bc:6f:df:55:48:92:25:b1:21:e9:f5:c9: e3:8d:50:bc:e2:aa:f1:c7:89:63:83:75:03:43:76: 62:64:94:8a:f6:02:0b:80:95:3d:9d:e1:88:41:d5: 2a:9f:20:a5:33:74:e7:2b:d8:6d:52:0f:c3:cd:d6: bf:0e:73:fc:06:17:47:25:91:8e:5e:fa:33:6a:0f: bc:34:ac:35:8b:61:f6:6a:2b:06:4a:41:68:67:46: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:A5:D8:1D:7C:B8:9B:D6:30:E8:AB:2D:15:4F:58:DF:18:9E:84 X509v3 Authority Key Identifier: keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:54:6c:92:73:88:99:7b:fd:a5:e0:79:05:6e:18:32:1b:00: fc:d4:b2:bb:b7:67:f3:4e:0f:95:c0:78:b0:5e:74:10:7f:63: ab:43:6b:f6:a0:d5:da:2b:f1:47:b0:10:2e:f8:78:4d:d8:95: 1f:52:4b:a3:a2:49:13:cf:2d:bc:3e:09:72:19:ee:92:4f:72: 6b:01:c2:20:4e:25:55:5f:4e:8d:e3:f2:dc:24:4c:d7:bd:15: 34:75:a0:c5:54:0b:61:3f:aa:29:ef:e6:f9:b1:45:67:f3:4a: 89:e9:1d:b3:a8:74:67:bc:fa:aa:16:a1:fd:27:8b:15:84:ae: e5:61:04:bd:aa:d4:99:28:09:19:37:e2:67:07:20:41:91:3d: b5:d6:4a:4b:0d:2a:86:f2:a2:2d:3f:62:57:ca:1b:9a:9b:5d: 01:74:ed:21:f9:60:01:aa:58:22:2c:a3:fd:20:10:bb:f1:83: e3:7a:64:58:ea:a0:ac:b6:40:c8:42:7d:8c:94:f2:9c:52:fe: f3:90:75:3a:3b:67:59:a4:e0:8d:60:6a:1e:7f:f6:02:27:d9: 0e:0c:c1:b0:c2:6b:d7:01:0c:07:b3:d3:c0:ff:6f:df:93:ac: 7f:7e:5c:d5:aa:cd:4a:f6:6d:8c:2f:37:98:33:e2:a1:b6:36: 5e:de:0c:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUWnxSAbKzVzAVbjTFs9yEC2af4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQy NkU4QkE5ODAeFw0yNTA4MDQxNTQ1MDBaFw0yNTA4MDcxNzU0MDBaMDMxMTAvBgNV BAMTKEMxOUNBNUQ4MUQ3Q0I4OUJENjMwRThBQjJEMTU0RjU4REYxODlFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsH41+F1gHwA/0C1ArzsR8Q+ct 5NGriZ9AgEdb7M7bg8euy2eimmv9J1lLFHPV9FI9A+l4w6wR9FpY/G+8SndvebjJ KbgmyaEeVjM91pBJXiDmhjCn4RvoZaAunp9O5B4fRVOjo05Rm0LbipR3bUwg881X BpioffHDACN0dK0+bLHr8M6TarFB7fF6tT8IQAwgahG3pj3sXCoz4RKb1CgkX0Ej Us6ojrxv31VIkiWxIen1yeONULziqvHHiWODdQNDdmJklIr2AguAlT2d4YhB1Sqf IKUzdOcr2G1SD8PN1r8Oc/wGF0clkY5e+jNqD7w0rDWLYfZqKwZKQWhnRlCZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZyl2B18uJvWMOirLRVPWN8YnoQwHwYDVR0j BBgwFoAU9UNirStrGRy303tU3NJGhCboupgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9GNTQzNjJBRDJC NkIxOTFDQjdEMzdCNTREQ0QyNDY4NDI2RThCQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQyNkU4 QkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2 ODQyNkU4QkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBUbJJziJl7/aXgeQVuGDIbAPzUsru3Z/NO D5XAeLBedBB/Y6tDa/ag1dor8UewEC74eE3YlR9SS6OiSRPPLbw+CXIZ7pJPcmsB wiBOJVVfTo3j8twkTNe9FTR1oMVUC2E/qinv5vmxRWfzSonpHbOodGe8+qoWof0n ixWEruVhBL2q1JkoCRk34mcHIEGRPbXWSksNKobyoi0/YlfKG5qbXQF07SH5YAGq WCIso/0gELvxg+N6ZFjqoKy2QMhCfYyU8pxS/vOQdTo7Z1mk4I1gah5/9gIn2Q4M wbDCa9cBDAez08D/b9+TrH9+XNWqzUr2bYwvN5gz4qG2Nl7eDA8= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:21 2025 by rpki-client