$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: Ei/ykfijSVLKrbDuoAfb5pwOAFgUW8aE5KmvtMrBiO0= Subject key identifier: 8F:0F:83:26:EA:C2:B7:0E:9D:2C:78:19:13:2D:C5:C7:53:96:8E:AF Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 7A9C5B1C97D6D88226A58C07CE60768A68926758 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: B1 Signing time: Fri 22 Aug 2025 00:21:59 +0000 Manifest this update: Fri 22 Aug 2025 00:16:59 +0000 Manifest next update: Mon 25 Aug 2025 00:56:59 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: PFSvp/4WaQKb7WBWrMqt5B80nN7+fD2F/I5mrn5qmPM=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9c:5b:1c:97:d6:d8:82:26:a5:8c:07:ce:60:76:8a:68:92:67:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Aug 22 00:16:59 2025 GMT Not After : Aug 25 00:56:59 2025 GMT Subject: CN=8F0F8326EAC2B70E9D2C7819132DC5C753968EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:dd:83:2a:8f:bf:3e:e2:8c:c8:e7:98:49: 42:dc:96:08:8e:bd:c3:d2:a2:73:d8:fc:65:e4:a2: ee:1d:24:34:f9:fc:cf:84:03:c6:87:e1:82:56:0a: 06:d6:95:b4:f2:f4:99:13:07:9c:c4:21:2d:c5:5d: 54:6e:21:83:c1:c0:55:dd:55:1d:04:c6:66:1a:a6: 4a:0f:21:f1:40:2a:50:cf:60:37:6d:30:2c:64:99: 8f:ed:0b:86:61:67:ba:df:a8:30:e6:03:a5:cb:90: 6d:f1:e6:ad:b1:27:77:fa:d8:e6:80:ff:01:7d:2f: 70:70:3c:71:d1:c3:30:79:0d:1b:6b:6d:d6:fd:6d: d6:a3:55:0e:6b:24:d8:74:d1:4b:b1:23:14:a9:30: 04:2d:24:ce:42:8e:e7:1e:21:58:cc:12:c2:39:61: 23:cd:9a:1a:c6:96:02:5a:ec:f5:51:aa:eb:bb:db: 26:a5:31:37:8a:c5:00:76:b1:4e:b7:da:c3:39:0d: b7:84:d0:cd:a4:04:e8:59:20:42:3d:a1:a9:1f:ca: d7:61:0f:45:7a:cd:a2:86:aa:59:62:44:6f:73:f0: bf:f8:7b:78:9b:bf:02:73:93:12:62:b5:c6:5a:27: 2d:0f:2a:1a:8c:b0:b7:d0:1d:5f:47:33:87:10:6e: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0F:83:26:EA:C2:B7:0E:9D:2C:78:19:13:2D:C5:C7:53:96:8E:AF X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8c:e3:f9:51:fa:62:64:ba:4f:86:37:95:ac:d7:aa:9a:a2: fe:d3:73:d1:97:53:ee:0c:7e:8a:a2:b4:c5:a0:86:86:4f:48: 0a:bf:5e:d9:17:66:81:ce:86:f8:ec:77:81:1d:f6:01:ab:29: 50:2d:b7:70:e9:31:2f:1d:0f:ff:91:94:67:24:9b:5a:a4:eb: 37:25:f8:1c:79:f5:0f:fe:e9:cf:60:38:03:0d:0c:6c:02:21: ef:1d:ad:ef:15:7d:3f:92:9c:8e:8b:73:56:2f:03:88:e9:9f: 6c:c0:8a:14:a1:e7:f7:01:8d:45:17:f4:22:5a:a0:0c:b7:61: 3e:a4:56:df:ea:ef:67:a0:2b:ef:1f:1b:c7:aa:7a:67:d6:b1: 80:83:4c:1c:27:24:40:6e:16:d3:be:5a:35:44:cb:fa:7c:d2: 96:9f:47:2e:98:fd:6f:8c:f2:a5:12:d5:a7:f7:2e:9c:81:ce: b7:9a:f4:84:31:a7:55:0f:dc:9c:e9:9f:2d:6e:b4:19:01:1c: 7d:25:55:ed:f8:81:77:4b:4e:66:0c:8f:47:ec:0a:34:39:36: 49:c7:85:6f:ee:12:70:ac:43:ed:fd:93:b4:a7:5f:de:6b:41: 5d:b9:ff:c1:93:c5:b9:17:77:2d:bd:de:89:17:27:e7:b9:2b: 62:ba:f6:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepxbHJfW2IImpYwHzmB2imiSZ1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA4MjIwMDE2NTlaFw0yNTA4MjUwMDU2NTlaMDMxMTAvBgNV BAMTKDhGMEY4MzI2RUFDMkI3MEU5RDJDNzgxOTEzMkRDNUM3NTM5NjhFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFN2DKo+/PuKMyOeYSULclgiO vcPSonPY/GXkou4dJDT5/M+EA8aH4YJWCgbWlbTy9JkTB5zEIS3FXVRuIYPBwFXd VR0ExmYapkoPIfFAKlDPYDdtMCxkmY/tC4ZhZ7rfqDDmA6XLkG3x5q2xJ3f62OaA /wF9L3BwPHHRwzB5DRtrbdb9bdajVQ5rJNh00UuxIxSpMAQtJM5CjuceIVjMEsI5 YSPNmhrGlgJa7PVRquu72yalMTeKxQB2sU632sM5DbeE0M2kBOhZIEI9oakfytdh D0V6zaKGqlliRG9z8L/4e3ibvwJzkxJitcZaJy0PKhqMsLfQHV9HM4cQbhkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjw+DJurCtw6dLHgZEy3Fx1OWjq8wHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiM4/lR+mJkuk+GN5Ws16qaov7Tc9GXU+4M foqitMWghoZPSAq/XtkXZoHOhvjsd4Ed9gGrKVAtt3DpMS8dD/+RlGckm1qk6zcl +Bx59Q/+6c9gOAMNDGwCIe8dre8VfT+SnI6Lc1YvA4jpn2zAihSh5/cBjUUX9CJa oAy3YT6kVt/q72egK+8fG8eqemfWsYCDTBwnJEBuFtO+WjVEy/p80pafRy6Y/W+M 8qUS1af3LpyBzrea9IQxp1UP3Jzpny1utBkBHH0lVe34gXdLTmYMj0fsCjQ5NknH hW/uEnCsQ+39k7SnX95rQV25/8GTxbkXdy293okXJ+e5K2K69kw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:14 2025 by rpki-client