$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: I0ms/Y6F2NqByDmJ2pIGTtV7sBRZTGiI1ICpaMI6b2k= Subject key identifier: CF:5A:A7:8A:AE:3B:A7:A1:68:AF:F8:12:59:4E:34:9D:A3:B4:52:CF Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 2BDB355238F82E8153675C4BC4A5ADD81E99A58F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: FD Signing time: Wed 02 Jul 2025 08:10:00 +0000 Manifest this update: Wed 02 Jul 2025 08:05:00 +0000 Manifest next update: Sat 05 Jul 2025 08:57:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: LY65h1Y/u4hmWDbzlJ3WBpahpDtdelSQpyxeh3tr1Cw=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:db:35:52:38:f8:2e:81:53:67:5c:4b:c4:a5:ad:d8:1e:99:a5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Jul 2 08:05:00 2025 GMT Not After : Jul 5 08:57:00 2025 GMT Subject: CN=CF5AA78AAE3BA7A168AFF812594E349DA3B452CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:bc:63:10:e7:7a:01:a7:96:a7:9e:df:14: bf:34:0d:3e:9f:80:41:6f:49:52:df:b0:96:29:5e: d9:ee:5a:39:9f:85:ec:5f:7d:d6:28:d7:c4:b3:20: 76:75:87:6b:4f:67:34:5f:62:b6:22:a9:b7:20:2c: 49:4d:99:91:a2:85:b3:c4:ba:e0:04:5b:43:4b:e9: da:2f:16:e2:dc:8c:f3:0b:75:ce:5f:66:e2:18:74: 00:d9:93:e5:29:18:bd:f4:dc:53:7e:e2:13:4e:0c: b4:8c:b9:83:44:ea:b8:ee:de:56:1e:5c:4f:39:be: 1e:81:4a:a2:04:1b:91:61:bf:04:9e:3b:55:e3:5e: d9:34:b1:10:76:d5:af:eb:bb:ce:bf:af:c7:d6:40: 53:a5:03:b3:5f:f5:40:00:59:49:f8:bf:16:da:23: 3c:de:dd:2e:7c:1f:18:64:ff:9e:ce:c2:a7:23:75: 8f:07:b4:10:f5:60:b8:7d:f0:cd:b1:e2:19:93:31: e6:7e:f3:e1:e5:30:9b:25:d7:85:6f:33:0a:cd:47: 42:54:93:a0:aa:24:5d:ec:cd:3a:d0:be:c1:ff:6c: e8:ba:83:d0:6b:41:44:94:b8:12:ac:9f:b0:df:cf: 16:9f:5c:6d:ef:ba:3a:50:62:2f:80:d6:15:df:be: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5A:A7:8A:AE:3B:A7:A1:68:AF:F8:12:59:4E:34:9D:A3:B4:52:CF X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:92:22:e7:1f:76:e7:31:b5:ae:0e:33:11:ad:f3:39:ae:25: 8c:f5:89:c7:e6:bb:bb:1e:d8:1b:a8:ee:a2:62:fc:1e:a9:05: 34:87:fc:0c:1e:cb:5e:2a:e3:c5:ff:8d:e9:56:0e:07:5d:99: ee:50:70:a2:1a:f1:a0:bf:5d:6a:75:c2:95:98:4e:9d:dc:c2: 5b:98:9d:6a:37:6f:84:6b:b9:e9:e0:38:fb:c5:31:3e:ce:2f: e2:96:9e:f8:50:26:32:d7:92:43:2d:24:8b:88:07:4d:1e:45: c7:63:19:fc:4b:e2:8d:b2:f9:da:26:a1:1c:7c:e1:10:4c:33: 7d:71:8c:af:11:72:3e:97:14:08:df:0d:e3:af:7a:c1:46:b0: b1:cd:be:2b:00:64:3f:47:47:55:7a:6e:0c:b0:33:91:b7:f6: 45:2d:24:60:4b:53:4f:63:ab:68:8c:49:03:66:23:02:11:da: cd:2d:f9:4f:1e:fc:1d:94:8f:cd:2e:a8:51:46:36:b5:f2:f2: cf:14:12:6c:f3:c3:46:8d:a2:18:fc:2c:65:23:a9:69:fa:0c: f7:dc:a8:0e:09:3c:0b:ce:92:cd:c5:78:68:9f:6d:f3:10:3f: 58:03:58:23:bb:44:71:05:4b:f5:b4:1b:87:03:ce:54:fb:a0: 56:a7:72:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9s1Ujj4LoFTZ1xLxKWt2B6ZpY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA3MDIwODA1MDBaFw0yNTA3MDUwODU3MDBaMDMxMTAvBgNV BAMTKENGNUFBNzhBQUUzQkE3QTE2OEFGRjgxMjU5NEUzNDlEQTNCNDUyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeebxjEOd6AaeWp57fFL80DT6f gEFvSVLfsJYpXtnuWjmfhexffdYo18SzIHZ1h2tPZzRfYrYiqbcgLElNmZGihbPE uuAEW0NL6dovFuLcjPMLdc5fZuIYdADZk+UpGL303FN+4hNODLSMuYNE6rju3lYe XE85vh6BSqIEG5FhvwSeO1XjXtk0sRB21a/ru86/r8fWQFOlA7Nf9UAAWUn4vxba Izze3S58Hxhk/57OwqcjdY8HtBD1YLh98M2x4hmTMeZ+8+HlMJsl14VvMwrNR0JU k6CqJF3szTrQvsH/bOi6g9BrQUSUuBKsn7DfzxafXG3vujpQYi+A1hXfvjPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz1qniq47p6For/gSWU40naO0Us8wHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCSIucfducxta4OMxGt8zmuJYz1icfmu7se 2Buo7qJi/B6pBTSH/Awey14q48X/jelWDgddme5QcKIa8aC/XWp1wpWYTp3cwluY nWo3b4RruengOPvFMT7OL+KWnvhQJjLXkkMtJIuIB00eRcdjGfxL4o2y+domoRx8 4RBMM31xjK8Rcj6XFAjfDeOvesFGsLHNvisAZD9HR1V6bgywM5G39kUtJGBLU09j q2iMSQNmIwIR2s0t+U8e/B2Uj80uqFFGNrXy8s8UEmzzw0aNohj8LGUjqWn6DPfc qA4JPAvOks3FeGifbfMQP1gDWCO7RHEFS/W0G4cDzlT7oFancl4= -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:52 2025 by rpki-client