$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: Mdcu4p+og6wVNIy6zZgU3aOmrjF2QuU7OFJZEkyjCU4= Subject key identifier: 0E:A4:06:11:64:0F:E8:1A:F0:07:2D:45:B2:93:9D:28:DF:3A:E9:82 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 44E8618FBD228B7F6E42F066FC4AD0E03869E952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 04FB Signing time: Thu 21 Aug 2025 07:00:46 +0000 Manifest this update: Thu 21 Aug 2025 06:55:46 +0000 Manifest next update: Sun 24 Aug 2025 17:27:46 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: vcHA7l6XpwmNj2ZUSSwoTbNUyhO7jKNNKMb7x1XC82s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e8:61:8f:bd:22:8b:7f:6e:42:f0:66:fc:4a:d0:e0:38:69:e9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Aug 21 06:55:46 2025 GMT Not After : Aug 24 17:27:46 2025 GMT Subject: CN=0EA40611640FE81AF0072D45B2939D28DF3AE982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:cf:e1:45:25:78:3c:eb:a8:4b:dd:9e:e3: 8d:60:af:a3:0a:7d:72:49:ed:05:fc:1f:16:7b:72: d6:b3:79:a8:1c:7f:c2:42:e4:ec:37:3f:6d:3a:3c: ee:2f:ce:35:db:ec:47:9f:e3:7d:eb:a8:5b:f3:14: 98:f7:bd:32:f6:84:a8:9d:6c:ea:cf:22:1b:e3:2a: 65:4c:29:5a:40:2b:20:78:97:73:a5:90:0f:44:86: ad:81:76:0f:dd:45:89:33:50:ce:7c:32:e3:58:c4: 50:0d:ee:fc:f3:e2:48:54:ac:2c:5e:d9:2e:29:01: ab:bc:73:a0:60:ba:f5:04:92:b3:d0:77:f1:98:9b: f8:11:22:39:8a:87:23:1c:83:fc:4c:6d:ff:08:21: 84:39:30:58:1f:5c:08:0c:cc:8c:6b:47:2b:d2:68: 91:ee:e5:70:a4:13:41:50:43:7a:0c:54:4f:69:d8: 7f:6f:e1:8b:c9:0d:a4:4a:b8:13:dc:ff:9c:9d:ea: 20:cf:ee:62:da:c2:b4:de:69:95:46:18:4c:5d:6f: 94:74:cb:3c:49:6b:55:48:fe:d0:90:b7:01:21:08: 82:59:8c:a7:cc:f3:70:6e:63:ef:18:18:2c:c9:4b: 96:50:58:ae:dd:1c:9f:f1:36:9d:7d:09:2a:2a:58: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A4:06:11:64:0F:E8:1A:F0:07:2D:45:B2:93:9D:28:DF:3A:E9:82 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f2:69:2e:e2:bd:28:63:b8:58:75:30:e7:94:56:52:91:55: 0c:c1:a0:fb:ad:2a:44:b1:a5:b8:0f:ed:84:c2:8e:b1:fc:89: e3:4a:12:28:1c:eb:48:a7:8f:a8:d2:09:a9:06:34:a6:37:aa: 7e:ea:ed:cf:93:45:6f:f5:dd:46:73:df:77:c0:ad:80:56:e3: c1:e9:70:17:22:ee:dd:d9:78:23:db:c4:d9:60:e8:18:66:bb: e2:60:ea:98:e1:7c:d7:0d:1b:23:41:3a:e8:77:69:11:a5:1e: d8:55:a5:09:95:31:5b:2d:53:70:f4:df:24:87:62:f9:46:c2: 44:55:95:61:00:c2:dd:0a:79:8b:0d:c9:47:0c:22:27:c3:b6: 30:24:a8:87:9a:e6:59:af:4a:71:43:34:0f:2d:fb:f1:4e:ed: 10:04:69:fd:77:c0:67:c2:fc:67:a0:a4:03:24:4a:32:f2:82: af:1a:26:8f:f4:5f:70:22:1b:b2:c9:80:a2:93:fe:9a:4b:d6: 74:58:36:7f:8b:51:b8:96:41:f1:fe:b4:1d:11:dd:d2:51:1f: 47:aa:f1:da:09:50:23:89:ab:c5:8c:f3:f8:f9:61:04:65:e2: 21:23:2e:a9:b6:fb:6d:2e:15:72:1a:da:40:de:65:c3:d8:d3: 69:19:84:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROhhj70ii39uQvBm/ErQ4Dhp6VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTA4MjEwNjU1NDZaFw0yNTA4MjQxNzI3NDZaMDMxMTAvBgNV BAMTKDBFQTQwNjExNjQwRkU4MUFGMDA3MkQ0NUIyOTM5RDI4REYzQUU5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAd8/hRSV4POuoS92e441gr6MK fXJJ7QX8HxZ7ctazeagcf8JC5Ow3P206PO4vzjXb7Eef433rqFvzFJj3vTL2hKid bOrPIhvjKmVMKVpAKyB4l3OlkA9Ehq2Bdg/dRYkzUM58MuNYxFAN7vzz4khUrCxe 2S4pAau8c6BguvUEkrPQd/GYm/gRIjmKhyMcg/xMbf8IIYQ5MFgfXAgMzIxrRyvS aJHu5XCkE0FQQ3oMVE9p2H9v4YvJDaRKuBPc/5yd6iDP7mLawrTeaZVGGExdb5R0 yzxJa1VI/tCQtwEhCIJZjKfM83BuY+8YGCzJS5ZQWK7dHJ/xNp19CSoqWFDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDqQGEWQP6BrwBy1FspOdKN866YIwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjyaS7ivShjuFh1MOeUVlKRVQzBoPutKkSx pbgP7YTCjrH8ieNKEigc60inj6jSCakGNKY3qn7q7c+TRW/13UZz33fArYBW48Hp cBci7t3ZeCPbxNlg6Bhmu+Jg6pjhfNcNGyNBOuh3aRGlHthVpQmVMVstU3D03ySH YvlGwkRVlWEAwt0KeYsNyUcMIifDtjAkqIea5lmvSnFDNA8t+/FO7RAEaf13wGfC /GegpAMkSjLygq8aJo/0X3AiG7LJgKKT/ppL1nRYNn+LUbiWQfH+tB0R3dJRH0eq 8doJUCOJq8WM8/j5YQRl4iEjLqm2+20uFXIa2kDeZcPY02kZhHo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:21 2025 by rpki-client