$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json) Hash identifier: qdbXv0GVptlXY7thavDe4lkn0+x1dE8+Wpp2haSwFfc= Subject key identifier: BD:55:32:EE:9D:1F:3B:8B:25:E5:CE:B0:F5:01:C6:23:CE:77:0C:0E Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Certificate serial: 1F9357EDD903BA27477343B847084C3E732719F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft Manifest number: 023D Signing time: Sat 23 Aug 2025 07:02:01 +0000 Manifest this update: Sat 23 Aug 2025 06:57:01 +0000 Manifest next update: Tue 26 Aug 2025 16:27:01 +0000 Files and hashes: 1: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: l93JLeZA0gHjGNi7RBGQjT/AKkoQS/8tDgy6vQr6gv8=) 2: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: Vjl5z9Sz1xrwJF5f5PSr6kwWjreFU3EpJmg9p7NKE/Q=) 3: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: pKR339ofpGjf7MVHBnj0O7EOFG9t26YO8GsduB5PdCI=) 4: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: N0w92gR5xXJkUFuuUY2BN3bbASWTDKF/bpFamzwc+s0=) 5: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: qEX4OYiN2K5aBSYBNnOOR/c3wxxgYWgILOryM5GH2lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:93:57:ed:d9:03:ba:27:47:73:43:b8:47:08:4c:3e:73:27:19:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Validity Not Before: Aug 23 06:57:01 2025 GMT Not After : Aug 26 16:27:01 2025 GMT Subject: CN=BD5532EE9D1F3B8B25E5CEB0F501C623CE770C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:53:97:9b:68:dd:41:37:a3:6a:5f:c2:1a: 3e:13:96:b5:bd:b3:cb:cd:e6:87:ab:93:84:6f:66: e2:3f:10:68:97:d9:81:7b:f7:1b:30:c9:fd:47:82: dd:cf:54:f7:e6:9f:30:bb:77:eb:0e:9b:9a:e5:d8: 1e:16:c1:4f:8d:a0:0c:8a:2d:f1:3e:14:0b:20:27: a1:d2:d7:44:ad:33:6a:8f:a5:c9:66:c6:24:da:08: 1a:a3:21:ed:e2:f5:49:70:33:05:17:58:40:6f:59: 37:a4:24:c4:13:ed:3d:9f:ef:2f:d8:ad:03:d5:31: 38:8a:f2:58:74:87:da:b5:5f:37:0a:c0:28:5e:78: 32:d3:bc:ae:29:df:49:25:8d:f4:d5:67:71:ee:7a: d6:c6:52:63:9a:bb:af:03:ff:d3:b3:47:5b:b3:31: 01:28:8e:65:28:d4:5a:04:57:ae:b2:83:b2:21:60: e2:1a:a6:a0:4f:8e:82:f6:3b:fe:4d:0a:69:2a:25: 22:03:fc:81:a7:4c:bd:57:f2:4a:8e:ba:28:7e:7c: 44:83:c4:a3:4f:6b:a2:0f:fd:4c:e8:07:cc:1d:09: d7:cf:ec:2d:79:0a:eb:15:b4:83:59:79:c3:d1:d5: 31:e7:26:3b:18:fe:85:66:9e:0d:c5:9f:4b:96:a2: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:55:32:EE:9D:1F:3B:8B:25:E5:CE:B0:F5:01:C6:23:CE:77:0C:0E X509v3 Authority Key Identifier: keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:36:db:80:d2:80:a5:97:0c:cc:b2:f1:fb:4e:c5:56:87:0a: c6:db:b4:94:93:b0:00:4f:26:30:37:25:dc:d5:a6:de:21:7f: a1:9d:b0:d1:b5:1b:bd:79:33:44:79:4e:3c:cf:a2:a2:6a:21: 67:8c:93:23:fe:7d:ca:13:e2:79:27:66:f9:75:c2:3c:4a:25: 29:b7:4b:4f:0c:2d:01:19:55:ae:70:fc:7f:13:47:ae:ee:d5: 01:99:5b:d3:f0:8e:19:87:e9:10:79:5b:a8:5e:3b:0d:45:d2: 8b:8e:6a:a4:70:48:f2:67:44:19:5b:55:72:a5:5d:6a:67:1e: aa:b4:da:59:9e:17:be:b4:80:66:37:3f:b6:2e:7b:4f:02:27: 45:79:a5:f7:bb:01:ca:f0:c6:8b:5c:8f:85:4f:cf:87:0c:53: 8b:b5:82:90:c5:77:3a:dd:e3:bc:55:a9:d1:06:d6:e6:4e:e2: c9:c1:45:b6:ba:af:68:e3:96:e7:6e:9c:54:04:e9:5b:01:a2: e7:07:1a:88:d8:87:09:ad:f4:e8:ba:81:29:35:66:01:d9:60: 9c:ed:0b:32:58:f1:18:3b:cf:ca:17:d7:9e:24:34:7b:68:c5: b0:cd:bd:b1:8f:a5:b6:16:d3:ec:b8:c5:34:f4:c1:d8:c9:e4: ca:16:9b:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5NX7dkDuidHc0O4RwhMPnMnGfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1 RThFMjIwQjAeFw0yNTA4MjMwNjU3MDFaFw0yNTA4MjYxNjI3MDFaMDMxMTAvBgNV BAMTKEJENTUzMkVFOUQxRjNCOEIyNUU1Q0VCMEY1MDFDNjIzQ0U3NzBDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB21OXm2jdQTejal/CGj4TlrW9 s8vN5oerk4RvZuI/EGiX2YF79xswyf1Hgt3PVPfmnzC7d+sOm5rl2B4WwU+NoAyK LfE+FAsgJ6HS10StM2qPpclmxiTaCBqjIe3i9UlwMwUXWEBvWTekJMQT7T2f7y/Y rQPVMTiK8lh0h9q1XzcKwCheeDLTvK4p30kljfTVZ3HuetbGUmOau68D/9OzR1uz MQEojmUo1FoEV66yg7IhYOIapqBPjoL2O/5NCmkqJSID/IGnTL1X8kqOuih+fESD xKNPa6IP/UzoB8wdCdfP7C15CusVtINZecPR1THnJjsY/oVmng3Fn0uWovAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvVUy7p0fO4sl5c6w9QHGI853DA4wHwYDVR0j BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF MjIwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJG QkQ1RThFMjIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE224DSgKWXDMyy8ftOxVaHCsbbtJSTsABP JjA3JdzVpt4hf6GdsNG1G715M0R5TjzPoqJqIWeMkyP+fcoT4nknZvl1wjxKJSm3 S08MLQEZVa5w/H8TR67u1QGZW9PwjhmH6RB5W6heOw1F0ouOaqRwSPJnRBlbVXKl XWpnHqq02lmeF760gGY3P7Yue08CJ0V5pfe7Acrwxotcj4VPz4cMU4u1gpDFdzrd 47xVqdEG1uZO4snBRba6r2jjludunFQE6VsBoucHGojYhwmt9Oi6gSk1ZgHZYJzt CzJY8Rg7z8oX154kNHtoxbDNvbGPpbYW0+y4xTT0wdjJ5MoWm9I= -----END CERTIFICATE-----Generated at Sat Aug 23 13:34:40 2025 by rpki-client