$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: lQyDdJlBr52AcVcKRpZXA6ceyCD6ycB/vaoiFHP4wUI= Subject key identifier: 70:F0:66:14:FA:48:0E:FE:88:60:FF:9B:E0:9C:77:AA:37:29:F0:AF Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 4A824038877D2E439E7790C0F976DFB4B79BAB6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 99 Signing time: Sun 29 Jun 2025 18:00:04 +0000 Manifest this update: Sun 29 Jun 2025 17:55:04 +0000 Manifest next update: Wed 02 Jul 2025 21:46:04 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) 2: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: Vqs873VxJ3HPqPG4/BOvlK36WE8WKs0lpgWGDn6EjaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:82:40:38:87:7d:2e:43:9e:77:90:c0:f9:76:df:b4:b7:9b:ab:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Jun 29 17:55:04 2025 GMT Not After : Jul 2 21:46:04 2025 GMT Subject: CN=70F06614FA480EFE8860FF9BE09C77AA3729F0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:85:00:87:6d:99:e9:a0:f2:9f:0d:c0:02: f1:66:19:c1:3c:44:6a:c0:ed:1e:24:52:58:fc:34: 46:91:24:2e:75:61:d7:3a:55:c4:b7:26:7a:ec:cb: b0:b7:c9:b0:78:a0:f3:58:51:40:75:22:88:e6:d4: 4a:77:63:6e:64:51:12:ad:9d:55:92:9a:1e:9e:ff: dc:56:da:91:33:28:5b:64:25:5c:53:ac:ba:f6:bf: 4f:99:99:bc:ea:10:96:fe:73:cb:22:b6:ad:96:87: 61:21:25:64:f8:23:ed:1b:b7:e7:db:84:2d:97:dc: e3:1e:a5:96:54:89:d1:28:24:0f:b0:c1:07:33:16: b5:df:a7:34:2e:46:d7:f8:d5:3d:e3:a0:ff:f7:7a: b2:13:3e:24:31:6c:76:38:fa:e3:2d:0d:66:48:4a: 61:e7:ab:0c:e7:4f:a6:e3:06:44:54:3e:52:92:fc: e6:a8:66:d1:0f:37:30:c2:ab:db:1f:86:ed:99:96: ce:31:ee:45:51:36:10:1e:c4:b0:fc:4c:f0:43:48: e6:fe:76:d4:a1:32:ff:40:e5:7b:6f:6e:92:fb:bc: 60:a8:fc:5f:a0:7a:a1:fb:74:e7:73:6e:98:94:fb: 38:4e:7e:c4:94:57:8e:6e:33:9a:c3:68:51:8e:74: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F0:66:14:FA:48:0E:FE:88:60:FF:9B:E0:9C:77:AA:37:29:F0:AF X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:cb:6a:9a:9d:78:53:b7:7c:a7:40:e9:f9:16:bd:eb:1e:8c: 59:43:61:a7:ef:9f:55:df:47:fb:bd:84:83:df:68:a4:5f:7f: 61:5f:9f:f7:82:f5:59:fe:9e:ef:8e:c4:89:9d:4f:c5:c3:af: 59:40:7c:2b:0e:9a:40:64:d1:93:c3:38:62:6c:35:57:0e:52: 22:75:fa:8e:f2:36:69:ae:51:33:ca:21:81:29:5f:83:c9:e2: 1f:65:1d:c9:91:49:09:cb:a7:bf:4d:39:9f:17:80:24:20:72: 5f:ac:7b:2b:9c:a4:00:89:4f:2c:82:06:86:af:6c:a0:e0:00: 06:94:72:80:69:4a:c9:f3:23:63:0b:33:c7:84:7e:99:bb:c0: 34:4c:74:86:c7:d3:09:ed:2b:d7:ef:8c:34:e4:69:00:08:d5: 0c:87:fe:e8:fa:bc:75:b8:b6:05:92:3b:f7:d4:01:3c:88:81: 06:2d:de:47:0d:34:08:1f:01:a6:4a:ae:04:b7:0d:7d:c7:74: a7:09:13:18:ad:b9:8a:97:64:88:d7:99:ca:fd:57:76:4d:77: b7:ed:89:42:65:27:2f:2e:9e:c8:95:7d:c9:78:22:3f:8f:32: 3a:59:93:68:1d:4b:a6:6e:5e:d1:21:12:83:f2:ad:00:e9:b0: d1:9e:23:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoJAOId9LkOed5DA+XbftLebq2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA2MjkxNzU1MDRaFw0yNTA3MDIyMTQ2MDRaMDMxMTAvBgNV BAMTKDcwRjA2NjE0RkE0ODBFRkU4ODYwRkY5QkUwOUM3N0FBMzcyOUYwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4R4UAh22Z6aDynw3AAvFmGcE8 RGrA7R4kUlj8NEaRJC51Ydc6VcS3Jnrsy7C3ybB4oPNYUUB1Iojm1Ep3Y25kURKt nVWSmh6e/9xW2pEzKFtkJVxTrLr2v0+ZmbzqEJb+c8sitq2Wh2EhJWT4I+0bt+fb hC2X3OMepZZUidEoJA+wwQczFrXfpzQuRtf41T3joP/3erITPiQxbHY4+uMtDWZI SmHnqwznT6bjBkRUPlKS/OaoZtEPNzDCq9sfhu2Zls4x7kVRNhAexLD8TPBDSOb+ dtShMv9A5XtvbpL7vGCo/F+geqH7dOdzbpiU+zhOfsSUV45uM5rDaFGOdISpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPBmFPpIDv6IYP+b4Jx3qjcp8K8wHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANLLapqdeFO3fKdA6fkWvesejFlDYafvn1Xf R/u9hIPfaKRff2Ffn/eC9Vn+nu+OxImdT8XDr1lAfCsOmkBk0ZPDOGJsNVcOUiJ1 +o7yNmmuUTPKIYEpX4PJ4h9lHcmRSQnLp79NOZ8XgCQgcl+seyucpACJTyyCBoav bKDgAAaUcoBpSsnzI2MLM8eEfpm7wDRMdIbH0wntK9fvjDTkaQAI1QyH/uj6vHW4 tgWSO/fUATyIgQYt3kcNNAgfAaZKrgS3DX3HdKcJExituYqXZIjXmcr9V3ZNd7ft iUJlJy8unsiVfcl4Ij+PMjpZk2gdS6ZuXtEhEoPyrQDpsNGeI8Y= -----END CERTIFICATE-----Generated at Mon Jun 30 18:56:05 2025 by rpki-client