$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft File: F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json) Hash identifier: /XPMPnAagPQvmz7H1RJWhql0jEhol4fzL2fMfYUbd08= Subject key identifier: 2F:DA:2F:B0:42:A6:BD:7B:F6:F7:E0:09:7C:9B:CB:A0:8F:A7:98:8A Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 08011D0CB18BC66195FC5E3473041823A792EC02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft Manifest number: 67 Signing time: Mon 30 Jun 2025 06:31:20 +0000 Manifest this update: Mon 30 Jun 2025 06:26:20 +0000 Manifest next update: Thu 03 Jul 2025 10:36:20 +0000 Files and hashes: 1: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: gaU1EjpaM8r71ThAbIz6mtXnxsIRJNAzkjdNOf+7YXc=) 2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: IcWkQYDLFcPwwtzYdPcj5i2iEcvHXh39BUHPHZLmTXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 10:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:01:1d:0c:b1:8b:c6:61:95:fc:5e:34:73:04:18:23:a7:92:ec:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Jun 30 06:26:20 2025 GMT Not After : Jul 3 10:36:20 2025 GMT Subject: CN=2FDA2FB042A6BD7BF6F7E0097C9BCBA08FA7988A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:3f:60:95:2a:78:23:ef:3e:f7:fd:e0:f4: 61:5a:38:29:72:8d:45:9f:d3:79:5a:4f:e3:fb:28: ce:46:a0:ee:7e:25:15:0c:cf:2a:c2:9d:46:01:6f: d1:05:94:91:19:8f:6a:27:7d:3a:60:a8:35:c7:7e: 08:e0:37:b7:b4:c9:02:ea:ba:be:ea:9d:ef:77:0e: 52:df:e4:55:df:b7:92:d6:68:b1:d2:59:bd:bf:93: 75:e9:f6:35:99:ab:46:8d:d8:9b:7e:2a:5a:4a:af: ea:c1:42:a2:5c:02:3c:fa:11:0e:8f:21:4d:f1:57: 92:1d:02:3f:dd:7c:51:43:31:a0:ea:e4:2f:b2:ae: bf:00:cc:8f:3b:08:ed:47:9b:64:b6:88:d7:ed:28: 44:79:d0:89:b5:ae:94:46:96:c0:f5:c5:93:ab:a6: bc:f9:20:89:8a:da:b2:2d:2e:9c:48:7d:8c:58:f5: fe:ca:fb:ff:b3:01:91:3d:15:a6:13:c7:41:f7:a6: 68:24:bb:96:25:04:d8:11:0c:a8:1f:ee:70:9b:01: be:a6:9e:c2:52:ef:aa:84:5d:5a:d6:43:08:ea:f1: d0:ea:a4:19:a1:b4:73:f4:9f:b3:35:5c:7b:e0:ba: ce:b8:0a:83:98:22:2d:f6:60:6c:bd:b9:f9:d2:12: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:2F:B0:42:A6:BD:7B:F6:F7:E0:09:7C:9B:CB:A0:8F:A7:98:8A X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ba:88:9a:00:d4:23:14:40:fa:28:2f:fc:4a:0e:65:df:9a: 93:17:18:13:6b:0d:a6:8c:15:32:87:14:f1:27:0e:ba:66:fb: fa:d9:e1:0d:da:9f:f2:1b:3b:41:0a:69:f0:28:d2:64:d1:56: a7:ff:b3:4a:16:2a:df:80:84:b1:78:3f:12:0c:4c:42:1f:b2: 2e:72:66:7c:63:47:49:eb:91:64:8e:51:ba:6b:3f:d1:08:cb: 04:19:22:56:e6:c8:ba:95:81:67:bc:01:be:dc:90:dc:a0:01: d3:29:f9:f0:d8:52:0c:b6:32:c4:dc:b0:ae:51:0a:fa:88:e4: 61:c8:79:5c:db:05:26:79:99:4a:21:f6:de:bf:52:13:07:c9: 8f:42:f4:0c:5e:fe:e3:3d:1d:e2:45:24:a6:43:15:dc:83:09: b6:ed:1c:87:26:15:87:a1:b7:2f:58:e1:cc:21:ab:16:60:8d: b3:f8:0c:66:4c:04:5b:14:39:03:57:ac:08:d3:10:d8:2b:3b: e4:cd:b2:6f:c2:dc:58:d8:7b:34:7d:ec:6d:66:86:49:2e:72: 7a:ac:6f:69:aa:9f:2c:47:b2:a7:0f:8c:5e:79:06:a3:52:2e: e6:fa:de:7d:16:7f:29:f0:80:c7:50:f8:51:6d:be:25:88:28: f2:d4:6c:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAEdDLGLxmGV/F40cwQYI6eS7AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNTA2MzAwNjI2MjBaFw0yNTA3MDMxMDM2MjBaMDMxMTAvBgNV BAMTKDJGREEyRkIwNDJBNkJEN0JGNkY3RTAwOTdDOUJDQkEwOEZBNzk4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TT9glSp4I+8+9/3g9GFaOCly jUWf03laT+P7KM5GoO5+JRUMzyrCnUYBb9EFlJEZj2onfTpgqDXHfgjgN7e0yQLq ur7qne93DlLf5FXft5LWaLHSWb2/k3Xp9jWZq0aN2Jt+KlpKr+rBQqJcAjz6EQ6P IU3xV5IdAj/dfFFDMaDq5C+yrr8AzI87CO1Hm2S2iNftKER50Im1rpRGlsD1xZOr prz5IImK2rItLpxIfYxY9f7K+/+zAZE9FaYTx0H3pmgku5YlBNgRDKgf7nCbAb6m nsJS76qEXVrWQwjq8dDqpBmhtHP0n7M1XHvgus64CoOYIi32YGy9ufnSEsNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL9ovsEKmvXv29+AJfJvLoI+nmIowHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4 QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS6iJoA1CMUQPooL/xKDmXfmpMXGBNrDaaM FTKHFPEnDrpm+/rZ4Q3an/IbO0EKafAo0mTRVqf/s0oWKt+AhLF4PxIMTEIfsi5y ZnxjR0nrkWSOUbprP9EIywQZIlbmyLqVgWe8Ab7ckNygAdMp+fDYUgy2MsTcsK5R CvqI5GHIeVzbBSZ5mUoh9t6/UhMHyY9C9Axe/uM9HeJFJKZDFdyDCbbtHIcmFYeh ty9Y4cwhqxZgjbP4DGZMBFsUOQNXrAjTENgrO+TNsm/C3FjYezR97G1mhkkucnqs b2mqnyxHsqcPjF55BqNSLub63n0WfynwgMdQ+FFtviWIKPLUbKo= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:38 2025 by rpki-client