$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: kFvAlIk329oatjjQ8GsjYroMJ9IUtaVlvl6MnFMGRRA= Subject key identifier: 2B:07:DF:81:B0:87:FF:8B:8C:DA:39:DB:CC:CA:D9:E1:0E:63:9F:8E Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 4741CD62F1CF95118B8EC4E828C6A354A7AA3875 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: E2 Signing time: Sun 29 Jun 2025 04:51:32 +0000 Manifest this update: Sun 29 Jun 2025 04:46:32 +0000 Manifest next update: Wed 02 Jul 2025 10:53:32 +0000 Files and hashes: 1: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: D7e+ha7kQr6QO6F0UCcyv+xoix8S4w+dZ5rY3/rTRlQ=) 2: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:41:cd:62:f1:cf:95:11:8b:8e:c4:e8:28:c6:a3:54:a7:aa:38:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Jun 29 04:46:32 2025 GMT Not After : Jul 2 10:53:32 2025 GMT Subject: CN=2B07DF81B087FF8B8CDA39DBCCCAD9E10E639F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:52:16:62:89:a8:bb:bd:2e:fd:9b:02:fb: 93:a4:b7:8e:21:c9:42:43:31:82:a3:02:ce:c3:84: 9a:75:24:83:82:ca:f8:e7:aa:be:55:9e:5d:f3:7c: 73:66:8e:2d:75:1b:c3:d9:a7:bd:89:d8:96:6d:a7: f5:55:56:93:b1:47:9a:90:63:56:44:4d:30:0d:a0: 31:fd:47:8f:ce:58:de:4f:ba:65:15:fe:29:95:63: fc:69:7e:0d:62:da:92:25:88:bc:bf:1a:5d:db:40: 86:94:0d:ec:48:be:1b:e9:92:f9:a7:0a:1d:78:0c: 52:7f:35:a4:cc:b3:28:a0:c3:2a:65:fc:d2:2e:3d: 85:8d:52:7a:a3:cc:bb:8e:7b:ee:eb:aa:ac:c4:ce: a6:2d:4c:f2:e0:63:06:fa:70:65:b4:02:da:9d:c3: a3:88:af:ee:dd:49:2c:57:a5:14:ec:82:e6:2c:e8: e4:ad:fa:c0:a7:5b:49:dc:e4:c7:5f:1d:d2:eb:bd: e8:fb:d1:10:c3:1b:8d:f9:15:b0:24:12:9a:9b:10: 33:77:29:36:f1:c6:50:a3:1a:dd:e2:6c:ed:fe:64: 79:88:c3:6e:35:7e:78:b4:e3:5d:4c:40:0e:ef:75: 8d:0a:2d:b1:56:39:55:96:6b:d1:68:d1:ed:94:ad: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:07:DF:81:B0:87:FF:8B:8C:DA:39:DB:CC:CA:D9:E1:0E:63:9F:8E X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:0c:df:9f:3a:9c:ec:37:19:f1:05:57:a4:d1:20:27:c0:0d: 94:6d:68:78:37:f3:39:fe:3b:14:72:a6:b7:bd:ac:82:01:e8: 49:6c:75:81:79:5f:b7:2b:c2:0f:a4:a2:93:18:ad:1c:12:f3: 3f:27:34:9d:6e:03:1a:25:79:bd:96:d8:0c:cb:c1:d7:50:b7: 8f:e0:81:5f:61:73:1a:70:fb:78:30:aa:0b:e4:16:59:dd:3e: a0:14:0c:5c:93:a4:79:2e:60:16:40:dd:4f:2b:f4:3d:78:13: 35:f5:4e:d4:c2:33:fa:fa:68:32:ec:fa:5a:02:d5:1b:d6:5f: 22:53:90:c8:8a:2f:1b:55:63:b0:1f:21:aa:e8:38:6e:7b:83: 0c:bc:46:41:6a:d3:9e:31:65:f5:bd:8e:ba:ea:72:74:63:2b: 2b:4e:82:18:ad:12:1b:07:9c:f4:5a:7d:2e:e3:77:f1:d2:0f: f8:02:68:f4:a5:f9:8d:6f:f6:a6:e9:96:81:99:bb:18:30:3b: f4:60:76:92:79:fd:f2:47:bb:31:5e:32:3c:f7:de:4e:7d:08: 06:a6:8f:8b:4e:38:90:54:f8:a6:f9:23:33:03:9b:8e:03:e6: db:80:44:66:cd:45:cd:4e:c0:3f:d0:ac:67:9a:08:fc:d6:bf: 3b:9a:8a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0HNYvHPlRGLjsToKMajVKeqOHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNTA2MjkwNDQ2MzJaFw0yNTA3MDIxMDUzMzJaMDMxMTAvBgNV BAMTKDJCMDdERjgxQjA4N0ZGOEI4Q0RBMzlEQkNDQ0FEOUUxMEU2MzlGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFVIWYomou70u/ZsC+5Okt44h yUJDMYKjAs7DhJp1JIOCyvjnqr5Vnl3zfHNmji11G8PZp72J2JZtp/VVVpOxR5qQ Y1ZETTANoDH9R4/OWN5PumUV/imVY/xpfg1i2pIliLy/Gl3bQIaUDexIvhvpkvmn Ch14DFJ/NaTMsyigwypl/NIuPYWNUnqjzLuOe+7rqqzEzqYtTPLgYwb6cGW0Atqd w6OIr+7dSSxXpRTsguYs6OSt+sCnW0nc5MdfHdLrvej70RDDG435FbAkEpqbEDN3 KTbxxlCjGt3ibO3+ZHmIw241fni0411MQA7vdY0KLbFWOVWWa9Fo0e2UrRDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwffgbCH/4uM2jnbzMrZ4Q5jn44wHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANEM3586nOw3GfEFV6TRICfADZRtaHg38zn+ OxRypre9rIIB6ElsdYF5X7crwg+kopMYrRwS8z8nNJ1uAxoleb2W2AzLwddQt4/g gV9hcxpw+3gwqgvkFlndPqAUDFyTpHkuYBZA3U8r9D14EzX1TtTCM/r6aDLs+loC 1RvWXyJTkMiKLxtVY7AfIaroOG57gwy8RkFq054xZfW9jrrqcnRjKytOghitEhsH nPRafS7jd/HSD/gCaPSl+Y1v9qbploGZuxgwO/RgdpJ5/fJHuzFeMjz33k59CAam j4tOOJBU+Kb5IzMDm44D5tuARGbNRc1OwD/QrGeaCPzWvzuaimA= -----END CERTIFICATE-----Generated at Mon Jun 30 04:19:29 2025 by rpki-client