$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: gf37NJpF+vkzRNcNzp6bUCD/eclW2WL/NNQX7T2wfXY= Subject key identifier: 57:51:0D:46:8A:FF:A5:EA:F7:6D:A0:F4:DF:51:56:8F:2D:AF:8B:DB Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 5EC6957C83877D07559769464F2F5398EA785DB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 01E5 Signing time: Sat 23 Aug 2025 07:01:09 +0000 Manifest this update: Sat 23 Aug 2025 06:56:09 +0000 Manifest next update: Tue 26 Aug 2025 11:51:09 +0000 Files and hashes: 1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: PSDh59cFC5MzhjD02VLgPjKR4pEU3VIsHoBoxpGC0V0=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: AsMeUOteqEXHlEkIekpGYqBMNAoMYPpcU5LYFAHddbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c6:95:7c:83:87:7d:07:55:97:69:46:4f:2f:53:98:ea:78:5d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Aug 23 06:56:09 2025 GMT Not After : Aug 26 11:51:09 2025 GMT Subject: CN=57510D468AFFA5EAF76DA0F4DF51568F2DAF8BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:8e:f5:89:ea:08:91:66:85:fb:52:31:f7: 41:bd:5d:b4:11:60:bc:13:82:79:78:04:1d:02:59: b3:e4:dd:b2:7c:65:bb:8c:ec:c6:fe:b8:00:33:0f: f7:c5:b7:2e:59:19:a0:ea:2b:b9:92:30:68:84:25: 5b:4d:c8:91:03:67:a8:0b:c5:6c:e1:b1:cd:06:48: e7:54:f6:c2:f8:a7:db:ca:8c:2e:b6:3a:46:61:08: 18:85:9e:e3:43:9e:78:93:83:a2:be:26:85:b1:a6: bb:60:1d:ba:f4:04:7a:d2:5b:86:a8:53:83:5a:e8: a9:74:9d:af:80:6c:4c:11:8e:5b:dd:db:c4:77:20: 7f:16:2d:73:62:4c:18:35:7c:ca:af:aa:a8:ab:9f: 28:b5:68:2e:9b:a6:aa:44:a4:14:60:58:c1:04:a3: 09:df:c6:3f:a7:d4:04:cd:ed:9a:0f:98:bd:60:c1: b9:b7:79:ce:45:06:55:f9:05:ee:eb:2f:71:36:47: 70:ba:a1:3d:c7:40:62:b4:26:b9:05:7c:9c:7a:2a: 5f:0d:0f:65:0a:cd:81:bf:dc:4a:ef:ee:a2:dd:14: 9f:65:b4:94:23:49:35:c5:b3:d0:98:2d:b0:b8:99: 7a:bd:d9:5b:84:f4:05:07:23:85:ac:4e:4b:e9:30: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:51:0D:46:8A:FF:A5:EA:F7:6D:A0:F4:DF:51:56:8F:2D:AF:8B:DB X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:33:fb:a2:d1:c7:b6:92:ee:7b:ff:6a:6a:eb:4c:fd:3d:5e: 6c:ed:86:e1:21:1d:5a:74:c3:a6:0a:99:74:88:4d:8b:62:ba: c1:1e:2e:69:fa:5f:ea:04:b2:53:87:96:b5:48:d8:9e:14:51: d4:ca:25:a8:d2:d3:42:96:4f:e8:68:d1:c4:ec:36:e8:d0:be: c9:f4:ce:17:f0:93:43:6b:fd:6a:de:6d:fc:6d:fe:fb:c0:28: 14:69:39:cb:42:3c:a8:8a:43:e8:f5:a0:8f:ef:d6:57:31:5c: 63:3a:3a:de:71:0f:03:06:a5:b6:7b:3e:ef:7c:60:fd:9b:41: 24:ea:58:e3:de:d5:22:3a:da:90:f1:3a:13:61:68:a8:88:a8: 00:9c:cb:1a:90:08:df:12:f7:d6:10:31:5b:f8:a8:50:86:77: d4:69:8a:0d:7e:2a:05:80:41:89:3e:25:ea:2d:4f:0c:87:ed: fd:88:57:ac:e4:5b:7d:61:9e:d3:c8:25:c5:b6:9e:18:53:89: 49:1c:87:54:27:3d:50:64:dd:06:76:a9:21:c6:c2:be:5d:92: 3e:91:0d:0e:b9:96:33:ff:2b:db:84:10:2d:13:cd:44:6c:54: 7c:fa:3b:c3:87:bd:c7:e2:f1:68:fc:80:37:e6:97:4a:e2:df: eb:1a:9d:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsaVfIOHfQdVl2lGTy9TmOp4XbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNTA4MjMwNjU2MDlaFw0yNTA4MjYxMTUxMDlaMDMxMTAvBgNV BAMTKDU3NTEwRDQ2OEFGRkE1RUFGNzZEQTBGNERGNTE1NjhGMkRBRjhCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNo71ieoIkWaF+1Ix90G9XbQR YLwTgnl4BB0CWbPk3bJ8ZbuM7Mb+uAAzD/fFty5ZGaDqK7mSMGiEJVtNyJEDZ6gL xWzhsc0GSOdU9sL4p9vKjC62OkZhCBiFnuNDnniTg6K+JoWxprtgHbr0BHrSW4ao U4Na6Kl0na+AbEwRjlvd28R3IH8WLXNiTBg1fMqvqqirnyi1aC6bpqpEpBRgWMEE ownfxj+n1ATN7ZoPmL1gwbm3ec5FBlX5Be7rL3E2R3C6oT3HQGK0JrkFfJx6Kl8N D2UKzYG/3Erv7qLdFJ9ltJQjSTXFs9CYLbC4mXq92VuE9AUHI4WsTkvpMFt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1ENRor/per3baD031FWjy2vi9swHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8z+6LRx7aS7nv/amrrTP09XmzthuEhHVp0 w6YKmXSITYtiusEeLmn6X+oEslOHlrVI2J4UUdTKJajS00KWT+ho0cTsNujQvsn0 zhfwk0Nr/Wrebfxt/vvAKBRpOctCPKiKQ+j1oI/v1lcxXGM6Ot5xDwMGpbZ7Pu98 YP2bQSTqWOPe1SI62pDxOhNhaKiIqACcyxqQCN8S99YQMVv4qFCGd9Rpig1+KgWA QYk+JeotTwyH7f2IV6zkW31hntPIJcW2nhhTiUkch1QnPVBk3QZ2qSHGwr5dkj6R DQ65ljP/K9uEEC0TzURsVHz6O8OHvcfi8Wj8gDfml0ri3+sandI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:16 2025 by rpki-client