$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: AcTOB0xIwJOQFmlQB5wg+d9ACLz/RrrmLOdoD0Z48cg= Subject key identifier: 51:E4:6F:DA:DF:B8:71:A7:30:ED:FD:3E:57:ED:8B:12:9F:91:1F:0F Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 3BE13A52503B83BB7465C532FF16FC2C4CEE7647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01BA Signing time: Tue 01 Jul 2025 12:20:42 +0000 Manifest this update: Tue 01 Jul 2025 12:15:42 +0000 Manifest next update: Fri 04 Jul 2025 23:38:42 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: oVGmqBeAofEEmPtOAQzy5psJghRWMmfWa8B+1CkVTdg=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: wLIVJyp4gcpafGUjtFHoc9xaXGbdlSQ2XD+q+1zEqSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 23:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e1:3a:52:50:3b:83:bb:74:65:c5:32:ff:16:fc:2c:4c:ee:76:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Jul 1 12:15:42 2025 GMT Not After : Jul 4 23:38:42 2025 GMT Subject: CN=51E46FDADFB871A730EDFD3E57ED8B129F911F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:6b:e2:94:4b:63:9c:31:39:b1:3f:19:71: a2:95:c5:bf:f5:44:79:cc:14:93:c6:df:d7:ca:92: 8d:a8:89:dc:5e:23:4a:ff:a1:25:97:4b:54:7e:c3: ed:f3:7e:ef:ee:10:1e:46:8f:bc:10:ee:29:b5:ff: 6e:ef:56:df:a9:95:0e:fe:57:6b:28:a7:4a:fd:63: be:f0:7e:ce:84:30:e2:5e:b2:b8:e9:c1:37:48:01: 11:ee:1e:1e:aa:1f:cc:5a:53:89:70:d8:d1:7d:be: 2b:37:28:6b:6b:45:27:a2:53:44:ee:b2:61:7e:89: 12:28:98:8a:7f:83:63:49:59:26:4e:87:7d:58:60: cf:b3:93:83:62:05:ae:1e:18:f8:11:f4:56:f8:50: 9a:b9:84:ba:d1:fd:43:32:15:43:b0:92:5d:2a:bb: b2:00:76:96:e7:cc:6d:a1:0b:39:e3:ea:f1:29:53: 93:e8:49:bb:49:2e:7b:f6:dc:91:be:24:87:b9:a7: 41:52:47:27:de:71:d8:d6:19:c9:72:49:1f:de:60: 1e:97:bd:a4:57:84:15:c1:a0:99:6f:17:d4:c2:d4: 89:58:d1:32:c7:cf:0d:bd:b2:91:6b:7f:51:d2:31: 51:1d:8c:f5:48:80:ba:ef:ed:d8:39:9f:db:5e:a8: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:6F:DA:DF:B8:71:A7:30:ED:FD:3E:57:ED:8B:12:9F:91:1F:0F X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fc:0d:22:03:36:d4:9d:91:d3:87:e6:5c:3a:c6:d2:14:d6: 34:60:87:5d:16:dc:fc:46:71:5c:42:d0:d9:10:6a:f0:14:5e: c0:d6:ba:97:e1:39:9b:c2:01:c2:ac:4b:e2:3c:66:ab:57:fc: c6:3c:74:0d:d6:5f:c3:e1:c4:38:10:a8:dc:43:78:4b:af:82: 99:01:ca:7d:b5:33:ab:e0:e6:70:48:ab:cc:7f:9a:55:b0:1c: 27:e8:08:ce:8a:d5:83:f1:c5:a2:01:1a:e5:12:03:f6:14:1f: 92:6d:e5:eb:87:9c:b9:91:c7:6c:21:21:8c:2a:ea:fb:fe:d6: f5:3d:52:e5:0e:5d:66:11:ad:11:26:d7:72:54:89:41:c3:f4: 62:0b:94:86:a9:06:c0:b4:d7:1e:a6:d3:8b:cf:f5:f5:d2:65: 49:ca:09:21:e7:51:90:e5:18:26:bf:18:b8:eb:44:0b:e7:39: 93:9c:f0:a3:4e:0e:26:00:00:b9:a1:4f:b3:77:77:1f:f7:09: 15:c4:8e:88:ee:38:69:ea:72:ab:98:23:1c:95:5d:c5:b0:85: de:69:7e:3c:49:7f:6b:6c:82:cc:f6:b6:b9:78:1b:97:8f:e5: 28:df:d5:f5:ad:bf:90:70:9f:9a:16:41:0d:f9:02:79:4f:1f: ed:74:a3:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+E6UlA7g7t0ZcUy/xb8LEzudkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTA3MDExMjE1NDJaFw0yNTA3MDQyMzM4NDJaMDMxMTAvBgNV BAMTKDUxRTQ2RkRBREZCODcxQTczMEVERkQzRTU3RUQ4QjEyOUY5MTFGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmq2vilEtjnDE5sT8ZcaKVxb/1 RHnMFJPG39fKko2oidxeI0r/oSWXS1R+w+3zfu/uEB5Gj7wQ7im1/27vVt+plQ7+ V2sop0r9Y77wfs6EMOJesrjpwTdIARHuHh6qH8xaU4lw2NF9vis3KGtrRSeiU0Tu smF+iRIomIp/g2NJWSZOh31YYM+zk4NiBa4eGPgR9Fb4UJq5hLrR/UMyFUOwkl0q u7IAdpbnzG2hCznj6vEpU5PoSbtJLnv23JG+JIe5p0FSRyfecdjWGclySR/eYB6X vaRXhBXBoJlvF9TC1IlY0TLHzw29spFrf1HSMVEdjPVIgLrv7dg5n9teqLcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeRv2t+4cacw7f0+V+2LEp+RHw8wHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADD8DSIDNtSdkdOH5lw6xtIU1jRgh10W3PxG cVxC0NkQavAUXsDWupfhOZvCAcKsS+I8ZqtX/MY8dA3WX8PhxDgQqNxDeEuvgpkB yn21M6vg5nBIq8x/mlWwHCfoCM6K1YPxxaIBGuUSA/YUH5Jt5euHnLmRx2whIYwq 6vv+1vU9UuUOXWYRrREm13JUiUHD9GILlIapBsC01x6m04vP9fXSZUnKCSHnUZDl GCa/GLjrRAvnOZOc8KNODiYAALmhT7N3dx/3CRXEjojuOGnqcquYIxyVXcWwhd5p fjxJf2tsgsz2trl4G5eP5Sjf1fWtv5Bwn5oWQQ35AnlPH+10o1c= -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:15 2025 by rpki-client