$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: k8GenyH4BevHtGN8yyMFIxngU9Br8uMJDp6WDDh5DIU= Subject key identifier: 2A:1F:3E:C9:A5:FE:40:BA:7D:B6:1E:DD:45:3F:A7:8F:EB:7E:87:E3 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 2253580C22697B057B469133F5EBE99256BFD686 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 04E9 Signing time: Sat 28 Jun 2025 21:52:20 +0000 Manifest this update: Sat 28 Jun 2025 21:47:20 +0000 Manifest next update: Wed 02 Jul 2025 03:06:20 +0000 Files and hashes: 1: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: i7hGY9LDnYvap28PjqcxTpN+eAj5paCVBU2iNB1qvdk=) 2: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 3: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 4: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 5: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:53:58:0c:22:69:7b:05:7b:46:91:33:f5:eb:e9:92:56:bf:d6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Jun 28 21:47:20 2025 GMT Not After : Jul 2 03:06:20 2025 GMT Subject: CN=2A1F3EC9A5FE40BA7DB61EDD453FA78FEB7E87E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:0b:3b:95:2f:31:09:5a:41:c9:f8:3a:bd: 7e:97:27:4f:f6:de:31:f8:bd:3a:70:34:87:4f:98: 10:2d:11:25:88:c5:6b:0f:65:86:e7:28:9a:0e:28: 43:83:9a:cb:d6:36:10:09:bc:fa:16:6c:e9:42:c7: ce:22:fb:6a:50:df:d6:7a:8d:a8:93:df:73:13:46: 2c:ff:db:0a:86:7b:e9:48:20:77:a8:65:0e:55:f5: 21:14:74:84:96:d7:6b:46:24:ee:b8:2b:c1:dd:69: 2f:ff:96:47:39:e8:c3:79:64:26:85:0a:41:5c:8a: 34:c9:32:91:1f:57:d5:7c:8d:52:2b:f8:f0:42:57: 8e:27:8a:91:02:92:28:df:56:8d:fa:80:e5:c5:c8: 1d:fc:a8:74:46:da:47:66:38:2c:d6:f3:35:69:dc: ef:0a:08:4e:a6:38:43:2a:42:81:0e:42:19:98:32: 29:7f:81:68:cd:af:52:5e:69:39:9f:97:1a:62:27: 66:1f:58:14:a7:11:f6:b1:f1:03:cb:dc:d4:3f:b8: 39:dd:2a:b1:cc:4c:0b:3c:9b:28:b9:ab:12:a7:01: 4b:fc:8b:f9:e1:42:9d:1b:bb:dd:0d:c9:c2:23:d8: 58:1a:c5:cd:a4:a2:d1:e9:fd:51:c3:3e:1d:db:d3: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:3E:C9:A5:FE:40:BA:7D:B6:1E:DD:45:3F:A7:8F:EB:7E:87:E3 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4d:a3:9f:01:54:26:45:f3:a1:70:de:d5:6f:2f:61:29:da: 45:51:69:7e:2e:e4:bf:23:f3:c2:56:36:01:c2:01:84:41:ed: 61:f7:59:07:55:20:71:4c:10:21:d6:a3:ab:9a:a6:d2:e1:6d: d5:ba:fd:4b:f0:9f:66:7e:6b:b8:79:fa:53:72:89:09:b0:a4: b3:ec:a5:ad:a5:1b:de:53:88:c4:7b:82:4f:18:da:ed:2f:87: fd:8e:1e:bf:19:18:1b:fc:fe:7d:a1:a6:96:5c:89:fa:7e:7d: 68:89:21:e6:b3:25:64:92:f5:49:55:6c:46:2e:0d:ff:0f:db: 9e:cf:fd:aa:ef:b3:9c:f4:f3:d0:08:71:7a:47:77:09:91:ca: 87:41:9a:68:6f:a9:55:18:53:bd:7a:01:f6:ea:c8:f0:6e:90: 15:7a:38:3e:15:7c:f0:87:fe:c1:ea:e4:c2:8d:d8:2e:b7:4a: 64:ff:23:19:f8:f3:79:bd:14:0f:5d:9a:60:ad:f6:56:bc:32: cb:3b:63:bf:74:90:56:b1:94:1a:a1:c4:b1:3c:04:5f:a8:8b: 22:5d:cf:f6:f5:20:df:cc:32:2b:f9:47:00:9e:ad:4d:2e:65: 21:ba:ff:16:79:48:51:25:6e:55:a3:63:ce:25:cb:7f:28:3e: 73:f8:91:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlNYDCJpewV7RpEz9evpkla/1oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA2MjgyMTQ3MjBaFw0yNTA3MDIwMzA2MjBaMDMxMTAvBgNV BAMTKDJBMUYzRUM5QTVGRTQwQkE3REI2MUVERDQ1M0ZBNzhGRUI3RTg3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IQs7lS8xCVpByfg6vX6XJ0/2 3jH4vTpwNIdPmBAtESWIxWsPZYbnKJoOKEODmsvWNhAJvPoWbOlCx84i+2pQ39Z6 jaiT33MTRiz/2wqGe+lIIHeoZQ5V9SEUdISW12tGJO64K8HdaS//lkc56MN5ZCaF CkFcijTJMpEfV9V8jVIr+PBCV44nipECkijfVo36gOXFyB38qHRG2kdmOCzW8zVp 3O8KCE6mOEMqQoEOQhmYMil/gWjNr1JeaTmflxpiJ2YfWBSnEfax8QPL3NQ/uDnd KrHMTAs8myi5qxKnAUv8i/nhQp0bu90NycIj2Fgaxc2kotHp/VHDPh3b0zDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKh8+yaX+QLp9th7dRT+nj+t+h+MwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlNo58BVCZF86Fw3tVvL2Ep2kVRaX4u5L8j 88JWNgHCAYRB7WH3WQdVIHFMECHWo6uaptLhbdW6/Uvwn2Z+a7h5+lNyiQmwpLPs pa2lG95TiMR7gk8Y2u0vh/2OHr8ZGBv8/n2hppZcifp+fWiJIeazJWSS9UlVbEYu Df8P257P/arvs5z089AIcXpHdwmRyodBmmhvqVUYU716AfbqyPBukBV6OD4VfPCH /sHq5MKN2C63SmT/Ixn483m9FA9dmmCt9la8Mss7Y790kFaxlBqhxLE8BF+oiyJd z/b1IN/MMiv5RwCerU0uZSG6/xZ5SFElblWjY84ly38oPnP4kbM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:40 2025 by rpki-client