$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: JUnlb8g3efFB/xZ7YcjNNhEEMoTlez0uubma89mZyIM= Subject key identifier: 6F:AA:46:B7:BC:A2:25:C8:43:3F:C2:3E:16:A9:85:93:3A:BB:77:0F Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 332509A1B40105D7C368597FC291222CF8D5560E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: FA Signing time: Sat 23 Aug 2025 00:31:34 +0000 Manifest this update: Sat 23 Aug 2025 00:26:34 +0000 Manifest next update: Tue 26 Aug 2025 07:49:34 +0000 Files and hashes: 1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) 2: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) 3: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: 5qOSLS9zQ014ipoIfO1MGqKOHB7n/KXrg7uD4JMvnqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:25:09:a1:b4:01:05:d7:c3:68:59:7f:c2:91:22:2c:f8:d5:56:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Aug 23 00:26:34 2025 GMT Not After : Aug 26 07:49:34 2025 GMT Subject: CN=6FAA46B7BCA225C8433FC23E16A985933ABB770F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:04:65:f1:8c:57:d5:e5:2d:69:7d:9b:44: 70:5c:85:bd:06:b1:42:fa:62:70:c2:8e:46:a2:57: 47:28:24:6c:33:62:d8:23:19:f3:b1:61:60:1e:90: 23:81:20:6f:86:c2:41:b3:c2:28:9e:0d:c0:8d:88: 29:4e:3e:8b:fb:3f:fd:d2:51:92:21:e7:2f:4f:6e: b4:63:6e:63:e4:69:76:cc:4b:d0:16:c7:de:31:27: 66:1a:9d:11:54:48:b3:a6:c2:30:2e:45:67:cc:8c: cb:a2:e8:6a:f6:c8:40:e0:33:1c:aa:c1:70:73:15: d9:10:f0:2f:ea:eb:88:a4:5c:79:cd:a1:2a:07:91: 72:14:7e:eb:71:be:2a:a3:08:2f:d3:b1:90:1e:5b: e4:73:d7:c9:99:7d:ab:45:ce:73:71:aa:a1:ec:ea: 89:1a:ab:42:0b:eb:25:00:f4:46:11:1b:fe:4e:28: 94:20:ae:ea:87:13:7e:d0:a3:7c:dc:a2:86:75:27: 46:78:be:63:ee:29:a9:37:7c:5b:3e:38:7e:d4:ab: 20:5d:9b:ea:53:5d:3b:28:de:d7:49:74:9b:0c:e7: b5:12:85:fa:e3:09:27:6b:69:2a:ce:60:5c:9d:b3: d3:0f:b2:ca:b7:4a:3e:38:72:39:3b:5b:96:28:4d: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AA:46:B7:BC:A2:25:C8:43:3F:C2:3E:16:A9:85:93:3A:BB:77:0F X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ad:34:9d:2c:76:5c:5b:50:01:1b:4a:6e:54:66:75:3b:3c: 97:b0:78:8f:4a:7e:88:55:5a:5b:97:cb:b1:4e:69:27:35:8e: dd:74:8a:89:12:04:41:08:82:b4:e6:9a:29:58:1b:93:ad:53: ce:33:98:9b:b8:48:09:17:03:d3:8b:66:ad:e9:b4:1a:f8:42: 27:55:93:68:5c:22:63:e7:59:c4:a8:4a:32:34:c8:f9:87:21: 4a:70:76:35:63:20:d9:30:fb:50:25:c6:2a:65:03:30:a8:d0: ff:ca:a4:20:07:e4:c2:5b:3e:1a:3a:80:e4:84:10:03:4e:88: 4a:ba:ea:83:54:e4:76:00:d2:76:bf:21:7c:8e:f4:03:e2:4b: 24:84:ea:35:02:61:ea:cd:d5:e5:ba:4f:1e:f0:d0:07:77:f7: 09:c1:aa:a4:f9:3b:3e:3c:79:cb:94:c9:2b:0c:d0:c9:1c:73: e5:2a:0d:f0:c6:47:44:95:cc:d5:50:f0:ad:78:6c:d6:90:79: 0f:6c:0f:4d:e1:fa:82:26:50:6b:64:a6:a1:ee:78:d3:be:af: f0:83:e4:cc:0e:38:b1:ff:f2:bb:92:97:3d:12:65:f2:cf:ad: 17:b1:82:2f:90:08:0b:0a:11:a1:1c:28:e7:22:f4:e6:bf:9b: 76:a8:92:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyUJobQBBdfDaFl/wpEiLPjVVg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNTA4MjMwMDI2MzRaFw0yNTA4MjYwNzQ5MzRaMDMxMTAvBgNV BAMTKDZGQUE0NkI3QkNBMjI1Qzg0MzNGQzIzRTE2QTk4NTkzM0FCQjc3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8wRl8YxX1eUtaX2bRHBchb0G sUL6YnDCjkaiV0coJGwzYtgjGfOxYWAekCOBIG+GwkGzwiieDcCNiClOPov7P/3S UZIh5y9PbrRjbmPkaXbMS9AWx94xJ2YanRFUSLOmwjAuRWfMjMui6Gr2yEDgMxyq wXBzFdkQ8C/q64ikXHnNoSoHkXIUfutxviqjCC/TsZAeW+Rz18mZfatFznNxqqHs 6okaq0IL6yUA9EYRG/5OKJQgruqHE37Qo3zcooZ1J0Z4vmPuKak3fFs+OH7UqyBd m+pTXTso3tdJdJsM57UShfrjCSdraSrOYFyds9MPssq3Sj44cjk7W5YoTbZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb6pGt7yiJchDP8I+FqmFkzq7dw8wHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2tNJ0sdlxbUAEbSm5UZnU7PJeweI9KfohV WluXy7FOaSc1jt10iokSBEEIgrTmmilYG5OtU84zmJu4SAkXA9OLZq3ptBr4QidV k2hcImPnWcSoSjI0yPmHIUpwdjVjINkw+1AlxiplAzCo0P/KpCAH5MJbPho6gOSE EANOiEq66oNU5HYA0na/IXyO9APiSySE6jUCYerN1eW6Tx7w0Ad39wnBqqT5Oz48 ecuUySsM0Mkcc+UqDfDGR0SVzNVQ8K14bNaQeQ9sD03h+oImUGtkpqHueNO+r/CD 5MwOOLH/8ruSlz0SZfLPrRexgi+QCAsKEaEcKOci9Oa/m3aoko0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:29 2025 by rpki-client