$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: tYvHmeKwpPchyz9ZU+ue0Y/7H4GlZdcb0tY7TmFDgbI= Subject key identifier: DE:DA:6C:CE:10:32:4B:01:60:F1:B2:74:2B:48:D2:68:C4:A8:A9:93 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 75C647B8085E2A1E336D6B6D6D5D62C60B844344 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 19:00:51 +0000 Manifest this update: Fri 22 Aug 2025 18:55:51 +0000 Manifest next update: Tue 26 Aug 2025 04:56:51 +0000 Files and hashes: 1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: T1flrUJ9jyVHwK+pOwC4BnzhFhznuyP0H+1gMmbyw+U=) 2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c6:47:b8:08:5e:2a:1e:33:6d:6b:6d:6d:5d:62:c6:0b:84:43:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Aug 22 18:55:51 2025 GMT Not After : Aug 26 04:56:51 2025 GMT Subject: CN=DEDA6CCE10324B0160F1B2742B48D268C4A8A993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:7e:15:a7:34:d9:ef:9d:21:97:9b:78:dd: a8:f1:b4:7c:4d:f6:47:1f:e6:f5:94:34:06:b8:fc: 46:43:58:1c:d1:94:96:2e:ce:aa:05:78:5f:28:fc: d5:57:1f:9c:89:d4:a4:b5:d6:39:b3:ca:34:2b:07: 83:ca:d2:46:8c:6e:66:ff:04:f7:31:d8:52:44:e7: 7d:6b:af:99:30:f5:ad:00:ed:04:4c:81:8f:a5:6b: e9:7d:da:e0:3d:a6:0e:93:b8:f2:7e:fd:d3:45:2d: 09:11:43:ee:ff:8f:03:9d:b4:6d:2e:9f:6e:5f:a3: e1:a1:bd:c2:ff:d7:a5:ae:43:e1:a5:d9:92:d4:5d: de:12:fb:60:d3:8e:35:75:63:6c:fc:1b:11:37:ca: 6c:d6:98:0d:6f:b1:3b:7e:82:24:cd:32:a6:63:8e: 77:e8:30:60:cf:f6:57:73:bd:e3:1e:8b:02:83:eb: 5f:9f:7e:2c:17:83:c4:c9:fd:c1:73:fb:ce:df:1d: 66:1a:1b:6e:05:81:fe:9d:fe:e9:9d:77:a9:1d:51: 48:e8:9f:a3:71:2f:46:50:3a:29:ab:70:64:5a:98: ad:45:70:9e:58:67:ca:2f:b6:7f:c6:b4:54:66:84: f9:76:4f:19:5d:aa:bb:1c:b1:82:2e:11:8b:c7:cc: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DA:6C:CE:10:32:4B:01:60:F1:B2:74:2B:48:D2:68:C4:A8:A9:93 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:16:8e:cd:bc:37:76:a2:b1:c7:47:a9:6c:76:76:9a:dc:bd: e7:34:b9:e5:00:75:9e:44:dc:ef:fe:80:12:8c:48:88:55:06: b2:48:d7:df:8c:c4:e6:6a:30:d1:d5:c4:97:64:25:aa:c6:45: 05:96:ad:dc:c3:a2:db:48:22:57:62:8e:32:48:8b:cb:8a:dc: a1:7a:c2:25:0d:dd:78:8e:b1:4e:e7:19:74:f7:5f:79:55:95: 03:29:5b:9e:af:78:a7:0d:2e:72:c0:04:f1:7f:9b:ce:bb:02: ba:a5:8c:26:f2:0c:9d:d4:dd:0d:d9:e0:ca:fd:26:2f:32:3e: 2d:96:2f:48:d2:46:ae:66:22:e1:63:c5:aa:40:e1:83:fb:85: 0d:8c:c4:ad:e3:52:c1:10:ae:45:14:3a:77:0f:26:9d:90:00: db:4d:c6:a7:d3:c5:9f:8d:b0:c7:a1:40:6e:b6:19:ef:be:da: 7f:5f:b9:2a:86:13:70:3c:1e:0d:47:21:00:ba:f3:3d:a1:e5: 53:25:58:3e:ac:b0:70:f7:37:f2:0f:9b:1c:1d:6c:08:6b:2b: 6a:9e:6c:8e:f7:bc:ad:84:fb:49:2e:e9:53:36:f2:97:24:c9: 8d:86:80:fa:29:13:7c:32:a0:a7:fd:1b:bd:15:dc:cb:1a:d9: b1:fe:64:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcZHuAheKh4zbWttbV1ixguEQ0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTA4MjIxODU1NTFaFw0yNTA4MjYwNDU2NTFaMDMxMTAvBgNV BAMTKERFREE2Q0NFMTAzMjRCMDE2MEYxQjI3NDJCNDhEMjY4QzRBOEE5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34X4VpzTZ750hl5t43ajxtHxN 9kcf5vWUNAa4/EZDWBzRlJYuzqoFeF8o/NVXH5yJ1KS11jmzyjQrB4PK0kaMbmb/ BPcx2FJE531rr5kw9a0A7QRMgY+la+l92uA9pg6TuPJ+/dNFLQkRQ+7/jwOdtG0u n25fo+GhvcL/16WuQ+Gl2ZLUXd4S+2DTjjV1Y2z8GxE3ymzWmA1vsTt+giTNMqZj jnfoMGDP9ldzveMeiwKD61+ffiwXg8TJ/cFz+87fHWYaG24Fgf6d/umdd6kdUUjo n6NxL0ZQOimrcGRamK1FcJ5YZ8ovtn/GtFRmhPl2TxldqrscsYIuEYvHzNE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tpszhAySwFg8bJ0K0jSaMSoqZMwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcWjs28N3aiscdHqWx2dprcvec0ueUAdZ5E 3O/+gBKMSIhVBrJI19+MxOZqMNHVxJdkJarGRQWWrdzDottIIldijjJIi8uK3KF6 wiUN3XiOsU7nGXT3X3lVlQMpW56veKcNLnLABPF/m867ArqljCbyDJ3U3Q3Z4Mr9 Ji8yPi2WL0jSRq5mIuFjxapA4YP7hQ2MxK3jUsEQrkUUOncPJp2QANtNxqfTxZ+N sMehQG62Ge++2n9fuSqGE3A8Hg1HIQC68z2h5VMlWD6ssHD3N/IPmxwdbAhrK2qe bI73vK2E+0ku6VM28pckyY2GgPopE3wyoKf9G70V3Msa2bH+ZAs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:25:16 2025 by rpki-client