$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: fK08JR61FkYBERArRCnR6B9qJTeFZuH0mJDST5jZZ1k= Subject key identifier: FC:2C:B3:E9:65:AB:D2:C5:B5:1B:D2:AE:49:EA:25:C0:0F:15:6C:CC Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 0A179306366BA3637A147FBEC3195787C29E4F08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01D2 Signing time: Sat 23 Aug 2025 00:40:44 +0000 Manifest this update: Sat 23 Aug 2025 00:35:44 +0000 Manifest next update: Tue 26 Aug 2025 01:56:44 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: jCwSLw1Bg1Q+Q9CzhRJOr7g4Jd/hmxg40KeG9qh080I=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:17:93:06:36:6b:a3:63:7a:14:7f:be:c3:19:57:87:c2:9e:4f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Aug 23 00:35:44 2025 GMT Not After : Aug 26 01:56:44 2025 GMT Subject: CN=FC2CB3E965ABD2C5B51BD2AE49EA25C00F156CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:c6:2c:c7:fd:15:1c:2f:27:a5:88:e0:fd: 02:2a:2a:24:58:f2:e2:7d:cc:a6:60:b7:75:b2:d0: 79:7d:92:96:fc:ee:db:59:99:58:51:f2:5d:1b:d0: 07:fd:01:b3:7b:0d:a6:4f:f2:f3:c7:5b:aa:33:31: 26:25:19:84:f4:28:d4:fd:d9:1f:75:d6:93:f3:ff: 06:b2:58:fa:9f:34:85:b7:db:15:a4:36:f4:37:43: d6:65:5f:63:a9:a3:21:ee:59:e7:8a:94:f1:e5:d5: bd:86:0e:f3:d0:26:86:b8:a9:cd:ee:5a:c3:24:64: b7:52:c5:5a:94:5c:90:42:6a:7f:a6:3a:ef:3d:07: f0:a6:35:ce:f3:da:2e:f7:64:e0:ab:1a:8b:d9:ea: 7d:f1:2d:61:c4:c2:47:8d:2f:ef:76:e7:d8:80:6e: 28:a9:88:3a:f9:47:e6:a2:37:35:1f:16:c4:e5:b7: 64:c3:73:ef:62:c3:a5:03:d3:d8:de:ce:54:6c:de: d1:20:7e:aa:3b:b0:6c:25:20:95:1c:db:be:7d:91: c8:54:eb:7c:fa:6b:31:1d:5e:a7:74:7b:e5:67:ae: 0f:62:1f:f2:03:7a:dc:a0:93:7c:0f:fe:a8:74:64: 44:6d:c1:19:a2:ce:60:c6:eb:76:d5:9f:91:0f:63: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2C:B3:E9:65:AB:D2:C5:B5:1B:D2:AE:49:EA:25:C0:0F:15:6C:CC X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:94:9c:be:1f:61:4f:a9:0d:a1:f1:49:88:6e:c4:5a:0a:84: f0:aa:d3:91:51:19:92:f0:97:2e:4f:16:be:4c:c4:ea:8e:2a: 65:1b:a9:5e:35:31:41:a3:c1:71:7a:99:95:1e:00:f1:9b:ea: 61:db:fd:88:8a:10:c5:8e:83:46:51:86:1d:f1:70:93:9f:6a: 1e:67:ba:44:20:f5:3d:5a:bc:80:c4:fc:fb:ef:c2:12:00:67: 1c:0e:60:e1:61:9b:59:17:6e:60:25:3a:a5:e9:af:76:70:f8: a9:63:a7:f4:57:ac:b6:a5:ef:e4:31:3d:39:00:7c:c7:f1:36: dc:82:a2:d9:58:ca:cd:79:18:d3:82:8b:b9:75:e6:0f:17:c3: 05:81:fb:96:50:9b:af:b1:19:ad:1b:e7:3e:10:4d:9c:0b:22: 52:ff:30:64:3a:86:1b:9f:44:47:77:13:17:b2:04:73:0d:7d: 0f:d5:b9:19:63:0e:66:0c:3e:27:1f:c8:58:5c:d8:fd:8a:3e: cc:b0:b6:00:dd:1f:e5:8e:0c:0c:a2:da:76:75:0f:73:f7:90: 14:6f:1f:e4:3f:a2:40:46:de:1b:7f:8b:0e:08:58:32:b1:a5: 5a:97:1d:ea:2f:2e:19:08:2f:a1:6b:59:61:14:14:1b:0e:c5: a2:2e:8e:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCheTBjZro2N6FH++wxlXh8KeTwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTA4MjMwMDM1NDRaFw0yNTA4MjYwMTU2NDRaMDMxMTAvBgNV BAMTKEZDMkNCM0U5NjVBQkQyQzVCNTFCRDJBRTQ5RUEyNUMwMEYxNTZDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+8Ysx/0VHC8npYjg/QIqKiRY 8uJ9zKZgt3Wy0Hl9kpb87ttZmVhR8l0b0Af9AbN7DaZP8vPHW6ozMSYlGYT0KNT9 2R911pPz/wayWPqfNIW32xWkNvQ3Q9ZlX2OpoyHuWeeKlPHl1b2GDvPQJoa4qc3u WsMkZLdSxVqUXJBCan+mOu89B/CmNc7z2i73ZOCrGovZ6n3xLWHEwkeNL+9259iA biipiDr5R+aiNzUfFsTlt2TDc+9iw6UD09jezlRs3tEgfqo7sGwlIJUc2759kchU 63z6azEdXqd0e+Vnrg9iH/IDetygk3wP/qh0ZERtwRmizmDG63bVn5EPY6tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Cyz6WWr0sW1G9KuSeolwA8VbMwwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiUnL4fYU+pDaHxSYhuxFoKhPCq05FRGZLw ly5PFr5MxOqOKmUbqV41MUGjwXF6mZUeAPGb6mHb/YiKEMWOg0ZRhh3xcJOfah5n ukQg9T1avIDE/PvvwhIAZxwOYOFhm1kXbmAlOqXpr3Zw+Kljp/RXrLal7+QxPTkA fMfxNtyCotlYys15GNOCi7l15g8XwwWB+5ZQm6+xGa0b5z4QTZwLIlL/MGQ6hhuf REd3ExeyBHMNfQ/VuRljDmYMPicfyFhc2P2KPsywtgDdH+WODAyi2nZ1D3P3kBRv H+Q/okBG3ht/iw4IWDKxpVqXHeovLhkIL6FrWWEUFBsOxaIujjA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:00 2025 by rpki-client