$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: C1gHFLvL1Z8D1pkctFrn3MVgOcOCZUQdqYW/0ubKkts= Subject key identifier: 75:B6:CD:AB:F4:87:EE:D9:B0:F1:A7:79:02:01:E0:F4:A0:A6:4D:86 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 12ACA33069E2EF181B5859AB153CFA992904F68F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 05:20:44 +0000 Manifest this update: Sun 29 Jun 2025 05:15:44 +0000 Manifest next update: Wed 02 Jul 2025 07:09:44 +0000 Files and hashes: 1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: YyHz9zj+BlqZdbtKIyVWKt4LG6qupgPnCCsWTUL3fgg=) 2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ac:a3:30:69:e2:ef:18:1b:58:59:ab:15:3c:fa:99:29:04:f6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Jun 29 05:15:44 2025 GMT Not After : Jul 2 07:09:44 2025 GMT Subject: CN=75B6CDABF487EED9B0F1A7790201E0F4A0A64D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:33:a3:ab:70:22:8c:25:b3:93:cd:06:e0: a5:ae:47:17:38:d4:b6:33:b1:d4:f9:0b:da:6b:ee: 75:b3:6f:67:d9:9f:e5:0c:5d:9d:89:bb:b7:b3:c5: 8a:f9:af:fb:63:28:76:ae:b1:a0:14:4a:ec:85:61: fb:65:17:7d:7c:e5:ec:ba:1c:0f:84:ec:2b:52:a5: 4b:c8:11:bd:11:9e:b6:d1:2a:37:ad:41:77:ec:3b: 0d:3b:e6:af:6c:0a:51:3f:b0:be:d8:74:c5:f1:e8: 97:2f:be:b0:e5:a8:b1:03:10:a1:f3:3c:6e:eb:03: e4:07:2a:10:93:3b:90:77:e3:c1:8c:35:a6:a2:e8: 06:4e:1c:b9:78:63:1a:fb:28:ea:08:f9:9d:82:11: cb:82:e8:72:00:dd:6d:03:47:39:b9:fc:be:35:12: 25:6b:96:59:30:be:f8:48:ad:5c:7a:df:f1:63:2c: 5d:8d:dd:03:b7:71:93:92:ec:99:98:ad:df:b9:f5: d7:25:f6:2d:9a:24:ac:a9:6e:4e:c5:70:ae:06:cf: b7:54:a5:89:da:f7:53:4a:93:56:f8:fb:95:1e:6a: e4:b8:6b:05:fa:d5:1d:e3:fc:b4:96:1b:5b:0e:d8: 3e:e9:0d:c5:27:eb:eb:b8:9d:17:3c:a8:f6:ed:00: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B6:CD:AB:F4:87:EE:D9:B0:F1:A7:79:02:01:E0:F4:A0:A6:4D:86 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dc:1f:6c:5d:56:35:c0:99:de:f9:df:79:02:eb:19:82:ce: f3:0c:57:fb:8b:bd:83:68:be:bc:2d:4b:a6:67:d8:a0:e2:08: 56:62:58:98:f2:70:fa:e2:1a:b1:d7:7d:4a:a9:e6:f4:14:30: b2:fe:db:2c:8c:bc:04:be:83:d7:6c:72:e0:94:04:b8:09:9d: de:a7:21:75:52:6b:97:02:d0:ce:c2:f3:4d:b0:b2:fa:56:e2: 9a:65:61:1b:fb:8c:5a:16:e8:27:f0:96:b8:a5:46:c6:ac:31: d1:cc:03:3f:3d:eb:d9:40:c0:a2:3c:d1:58:3f:6a:17:43:90: 8f:e8:db:ee:83:2c:7a:70:15:5c:3c:c9:dd:7b:46:07:4a:7b: 2a:98:97:86:96:f8:b3:7e:fe:65:26:fc:1f:54:84:1b:8a:cc: 23:6f:bf:db:ce:53:20:dc:fa:f2:29:7e:59:bd:05:40:85:9d: f5:b1:6b:61:ba:b5:f5:30:3c:d9:61:39:d0:65:1e:be:7e:fe: 1f:98:f5:2c:96:30:3d:71:a7:a9:2c:68:4c:94:9a:b4:d0:4d: c6:2f:b2:00:ce:82:58:66:e7:99:c3:e6:a4:63:d4:a7:d7:32: 94:51:62:6b:b1:6c:0a:71:bf:06:f2:75:07:64:0f:70:02:c2: b5:4b:f4:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqyjMGni7xgbWFmrFTz6mSkE9o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTA2MjkwNTE1NDRaFw0yNTA3MDIwNzA5NDRaMDMxMTAvBgNV BAMTKDc1QjZDREFCRjQ4N0VFRDlCMEYxQTc3OTAyMDFFMEY0QTBBNjREODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQjOjq3AijCWzk80G4KWuRxc4 1LYzsdT5C9pr7nWzb2fZn+UMXZ2Ju7ezxYr5r/tjKHausaAUSuyFYftlF3185ey6 HA+E7CtSpUvIEb0RnrbRKjetQXfsOw075q9sClE/sL7YdMXx6JcvvrDlqLEDEKHz PG7rA+QHKhCTO5B348GMNaai6AZOHLl4Yxr7KOoI+Z2CEcuC6HIA3W0DRzm5/L41 EiVrllkwvvhIrVx63/FjLF2N3QO3cZOS7JmYrd+59dcl9i2aJKypbk7FcK4Gz7dU pYna91NKk1b4+5UeauS4awX61R3j/LSWG1sO2D7pDcUn6+u4nRc8qPbtAG2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdbbNq/SH7tmw8ad5AgHg9KCmTYYwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvcH2xdVjXAmd7533kC6xmCzvMMV/uLvYNo vrwtS6Zn2KDiCFZiWJjycPriGrHXfUqp5vQUMLL+2yyMvAS+g9dscuCUBLgJnd6n IXVSa5cC0M7C802wsvpW4pplYRv7jFoW6CfwlrilRsasMdHMAz8969lAwKI80Vg/ ahdDkI/o2+6DLHpwFVw8yd17RgdKeyqYl4aW+LN+/mUm/B9UhBuKzCNvv9vOUyDc +vIpflm9BUCFnfWxa2G6tfUwPNlhOdBlHr5+/h+Y9SyWMD1xp6ksaEyUmrTQTcYv sgDOglhm55nD5qRj1KfXMpRRYmuxbApxvwbydQdkD3ACwrVL9Jc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:53 2025 by rpki-client