$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: 9GJ6GGBR2ljBzt0MPgxhtLIIsf7paX7hei80ul81OiQ= Subject key identifier: BB:23:A5:B6:EA:E5:C1:BD:3F:9F:32:D3:7E:3E:37:E5:05:27:C7:5B Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 136AADC793A1F60170C1CBDB0DB0B4D87EB7BAB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 0502 Signing time: Fri 22 Aug 2025 19:52:35 +0000 Manifest this update: Fri 22 Aug 2025 19:47:35 +0000 Manifest next update: Tue 26 Aug 2025 02:37:35 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 2: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 3: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 4: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: KaWnfEZOSdwd4tKtHVaWn5Cdp/vlXRthtMc1YMq7StA=) 5: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6a:ad:c7:93:a1:f6:01:70:c1:cb:db:0d:b0:b4:d8:7e:b7:ba:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Aug 22 19:47:35 2025 GMT Not After : Aug 26 02:37:35 2025 GMT Subject: CN=BB23A5B6EAE5C1BD3F9F32D37E3E37E50527C75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:39:83:e2:5f:97:5d:9a:79:90:aa:7c:3a: c2:66:2f:cb:82:1e:16:b0:95:f1:6a:94:cd:ad:50: 8b:cf:81:c7:9c:8b:ea:f0:5a:eb:94:ca:fa:0a:be: b8:1e:37:ab:27:29:b2:88:77:ec:fa:07:23:46:f0: 80:95:ba:75:6a:2f:8f:52:26:4c:2c:94:b3:07:74: 6c:19:e1:e0:57:63:82:26:43:1d:59:2d:ed:0e:b6: de:aa:fd:8c:d7:27:35:be:ca:46:3c:b7:69:c3:2b: 33:f7:1c:81:73:e0:4f:6f:e6:2a:69:ec:8f:15:ea: 5c:c8:cf:23:b9:e5:01:cb:f2:fa:bb:75:50:74:88: 43:ba:e7:65:21:cf:6a:be:ae:d2:0b:fa:de:e5:63: 00:9b:c0:db:bb:2c:2c:57:5b:3a:a2:b9:26:f3:01: 45:6d:84:31:c2:89:64:39:5d:c6:c9:91:51:ff:d4: bb:1a:5b:3c:5e:fd:c7:65:ed:f2:39:6d:6e:e9:e2: ab:bb:8c:72:a6:cd:ba:2b:c0:ce:2c:d9:74:fc:be: 36:1e:50:ea:3c:c2:73:70:b3:8d:f0:2c:4f:0f:63: 6a:2d:bc:1e:3f:05:0d:51:be:14:8e:99:af:20:e1: f7:9d:d2:15:b8:66:f2:54:2f:a2:7b:87:74:1a:19: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:23:A5:B6:EA:E5:C1:BD:3F:9F:32:D3:7E:3E:37:E5:05:27:C7:5B X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:74:24:fb:c1:16:6c:89:de:ff:0f:d9:e4:46:cd:06:85:20: fe:f9:76:15:26:b0:d7:78:17:dd:ef:fa:3c:f1:29:b2:2f:e6: d7:20:56:e3:33:5b:7e:c0:36:a3:a4:b4:fe:64:ef:a5:d8:7c: 77:cd:72:76:e1:3d:ac:12:ef:07:33:69:2b:80:d0:89:99:2e: 49:67:7f:a3:0b:40:fd:91:67:74:f0:9a:d2:d7:f1:6c:0c:ab: 34:ed:db:d5:c4:ac:4a:90:ee:0d:44:c8:2b:2e:f1:e2:0f:07: 35:8c:fd:5d:65:e4:de:d1:e2:bb:45:41:ee:3a:88:ab:44:b0: 68:06:aa:20:01:8c:95:c0:6e:01:35:8d:f5:85:b3:fa:73:1a: fe:ae:ca:d6:40:02:59:fd:1e:20:62:9c:a5:58:c1:01:3a:b7: ad:d0:e3:6e:4f:b1:d3:ae:3a:bf:75:45:03:87:66:d7:55:6b: 4b:b8:d4:62:1a:42:dd:ba:c1:0f:02:fa:c9:41:d7:28:d6:1f: b3:79:74:d8:44:1e:08:3b:89:0d:5d:b7:d8:a8:10:57:d7:a8: 13:42:58:06:54:ee:bf:db:b3:3c:da:00:db:5e:d1:e0:c8:2c: 44:d7:90:6a:8c:38:7d:dd:a8:12:ef:16:4e:c4:57:bb:eb:4c: e2:25:f8:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2qtx5Oh9gFwwcvbDbC02H63urQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA4MjIxOTQ3MzVaFw0yNTA4MjYwMjM3MzVaMDMxMTAvBgNV BAMTKEJCMjNBNUI2RUFFNUMxQkQzRjlGMzJEMzdFM0UzN0U1MDUyN0M3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72zmD4l+XXZp5kKp8OsJmL8uC HhawlfFqlM2tUIvPgceci+rwWuuUyvoKvrgeN6snKbKId+z6ByNG8ICVunVqL49S JkwslLMHdGwZ4eBXY4ImQx1ZLe0Ott6q/YzXJzW+ykY8t2nDKzP3HIFz4E9v5ipp 7I8V6lzIzyO55QHL8vq7dVB0iEO652Uhz2q+rtIL+t7lYwCbwNu7LCxXWzqiuSbz AUVthDHCiWQ5XcbJkVH/1LsaWzxe/cdl7fI5bW7p4qu7jHKmzborwM4s2XT8vjYe UOo8wnNws43wLE8PY2otvB4/BQ1RvhSOma8g4fed0hW4ZvJUL6J7h3QaGTpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyOlturlwb0/nzLTfj435QUnx1swHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF0JPvBFmyJ3v8P2eRGzQaFIP75dhUmsNd4 F93v+jzxKbIv5tcgVuMzW37ANqOktP5k76XYfHfNcnbhPawS7wczaSuA0ImZLkln f6MLQP2RZ3TwmtLX8WwMqzTt29XErEqQ7g1EyCsu8eIPBzWM/V1l5N7R4rtFQe46 iKtEsGgGqiABjJXAbgE1jfWFs/pzGv6uytZAAln9HiBinKVYwQE6t63Q425PsdOu Or91RQOHZtdVa0u41GIaQt26wQ8C+slB1yjWH7N5dNhEHgg7iQ1dt9ioEFfXqBNC WAZU7r/bszzaANte0eDILETXkGqMOH3dqBLvFk7EV7vrTOIl+Dk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:32 2025 by rpki-client