$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: cNLI7qsCNDi6ynXpD/ZhDvIMpDtc0Gd7Z6Cx82G5qKU= Subject key identifier: E6:22:E5:5D:1B:78:4A:E3:54:8A:80:6F:BB:EF:5B:EB:1E:DE:50:F6 Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 73C00005B1AC71A2D3FE1FC556E76C4AD6A335FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 01CD Signing time: Sun 29 Jun 2025 18:01:07 +0000 Manifest this update: Sun 29 Jun 2025 17:56:07 +0000 Manifest next update: Thu 03 Jul 2025 03:45:07 +0000 Files and hashes: 1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: uuouVONEREDkCQUYWv21MRKWF95ZMqtw+GnWwlNMzLk=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: AsMeUOteqEXHlEkIekpGYqBMNAoMYPpcU5LYFAHddbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c0:00:05:b1:ac:71:a2:d3:fe:1f:c5:56:e7:6c:4a:d6:a3:35:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Jun 29 17:56:07 2025 GMT Not After : Jul 3 03:45:07 2025 GMT Subject: CN=E622E55D1B784AE3548A806FBBEF5BEB1EDE50F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:07:db:28:c1:48:79:02:c6:57:c9:99:13: df:38:93:b0:9b:f2:57:21:62:c7:69:50:4e:c6:dd: 08:6d:96:7b:56:08:53:cd:1b:68:a7:39:98:31:32: 22:f2:01:b3:c7:11:18:3a:18:30:55:12:0d:2e:69: af:a3:52:b5:18:ab:2c:2d:58:30:89:b0:72:d8:2d: d4:f3:18:9d:82:eb:48:64:06:42:f4:1a:3b:bd:d2: 73:b5:e1:44:3b:c1:d9:03:51:96:1b:91:2d:cd:a4: 5b:11:a3:ea:5a:e4:d5:47:7e:95:c1:d5:22:1a:f4: 03:2b:66:62:57:9b:b6:ad:e9:40:01:86:91:fe:d0: 58:46:08:48:bf:ca:ae:96:89:c8:01:55:cf:da:e7: 3d:05:0f:eb:ae:4f:1b:db:79:00:54:4b:17:7f:32: 5a:47:ca:21:3d:fa:1f:7c:7d:ea:11:f6:05:4e:f6: 66:17:d5:90:ee:fd:6b:f0:fe:9d:18:63:15:89:86: 98:10:9b:fe:ce:4b:6d:5e:f4:4d:43:93:b0:10:65: 8c:81:77:9d:3e:1f:e8:ec:01:b0:f6:d2:64:b8:ba: 53:6c:ab:de:e6:90:4f:dd:a7:63:a9:18:e2:63:58: df:16:77:96:b0:08:7e:c1:61:f2:61:95:9a:cb:86: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:22:E5:5D:1B:78:4A:E3:54:8A:80:6F:BB:EF:5B:EB:1E:DE:50:F6 X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:82:b2:b9:e0:30:83:c0:44:72:54:ec:56:00:f4:68:2f:fb: 45:05:e0:c4:8f:3c:93:46:e4:ea:a9:f4:dc:76:11:87:3c:01: 1e:b6:36:c8:02:4f:f8:9d:76:9c:b9:0d:4f:d1:af:96:cb:8c: ba:72:85:01:e2:a4:eb:38:ab:92:d6:49:91:4a:dc:24:c3:68: bf:1c:0e:bb:7e:a8:1e:b8:e8:7c:16:70:30:bd:e8:da:25:7e: ca:ac:1d:3d:30:5f:5d:af:cf:55:01:cb:ac:d2:1c:06:1a:9b: f4:0d:aa:1e:32:36:2c:d9:70:c6:cc:63:02:eb:ac:45:59:c9: 0e:0a:8e:f0:0e:38:9b:a2:55:05:16:da:ad:0c:a4:55:19:b0: 62:98:d2:96:0f:d7:0b:1c:bc:b4:88:9e:73:2f:05:fe:84:71: 35:fb:bd:3f:46:7c:30:7e:85:3c:0f:4b:c0:f0:af:4d:50:fe: 9b:ff:d1:10:01:ae:26:a4:87:f9:04:07:3c:3b:90:17:f7:c4: 3c:e2:48:00:34:4f:51:bf:c1:cf:a6:27:f6:75:b9:4e:fa:bb: de:4e:08:14:ee:69:5b:ee:3f:8c:b0:78:65:28:30:da:7f:5c: eb:1b:80:cb:72:50:c8:d7:f9:8a:b5:ef:d1:40:a2:2a:7c:04: d3:91:97:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8AABbGscaLT/h/FVudsStajNf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNTA2MjkxNzU2MDdaFw0yNTA3MDMwMzQ1MDdaMDMxMTAvBgNV BAMTKEU2MjJFNTVEMUI3ODRBRTM1NDhBODA2RkJCRUY1QkVCMUVERTUwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLgfbKMFIeQLGV8mZE984k7Cb 8lchYsdpUE7G3QhtlntWCFPNG2inOZgxMiLyAbPHERg6GDBVEg0uaa+jUrUYqywt WDCJsHLYLdTzGJ2C60hkBkL0Gju90nO14UQ7wdkDUZYbkS3NpFsRo+pa5NVHfpXB 1SIa9AMrZmJXm7at6UABhpH+0FhGCEi/yq6WicgBVc/a5z0FD+uuTxvbeQBUSxd/ MlpHyiE9+h98feoR9gVO9mYX1ZDu/Wvw/p0YYxWJhpgQm/7OS21e9E1Dk7AQZYyB d50+H+jsAbD20mS4ulNsq97mkE/dp2OpGOJjWN8Wd5awCH7BYfJhlZrLhoA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iLlXRt4SuNUioBvu+9b6x7eUPYwHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISCsrngMIPARHJU7FYA9Ggv+0UF4MSPPJNG 5Oqp9Nx2EYc8AR62NsgCT/iddpy5DU/Rr5bLjLpyhQHipOs4q5LWSZFK3CTDaL8c Drt+qB646HwWcDC96NolfsqsHT0wX12vz1UBy6zSHAYam/QNqh4yNizZcMbMYwLr rEVZyQ4KjvAOOJuiVQUW2q0MpFUZsGKY0pYP1wscvLSInnMvBf6EcTX7vT9GfDB+ hTwPS8Dwr01Q/pv/0RABriakh/kEBzw7kBf3xDziSAA0T1G/wc+mJ/Z1uU76u95O CBTuaVvuP4yweGUoMNp/XOsbgMtyUMjX+Yq179FAoip8BNORl6I= -----END CERTIFICATE-----Generated at Tue Jul 1 11:42:03 2025 by rpki-client