$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: 42oUYFYL8WZpreZvfdN/PNMBZj5IflNH0kFM2eUAzho= Subject key identifier: DC:91:81:6F:A8:00:44:74:DC:D9:2E:99:31:F0:CA:8E:54:6C:F9:95 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 5E95AE73670A58F629DEB81C3564F8210DB0294D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 050B Signing time: Thu 21 Aug 2025 16:00:46 +0000 Manifest this update: Thu 21 Aug 2025 15:55:46 +0000 Manifest next update: Mon 25 Aug 2025 02:22:46 +0000 Files and hashes: 1: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 2: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 3: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) 4: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 5: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: 3/Rce9D+7n05rMv3haRAhIJFZIj8mmPjefXsV+diqo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:95:ae:73:67:0a:58:f6:29:de:b8:1c:35:64:f8:21:0d:b0:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Aug 21 15:55:46 2025 GMT Not After : Aug 25 02:22:46 2025 GMT Subject: CN=DC91816FA8004474DCD92E9931F0CA8E546CF995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:95:bf:ce:69:10:0d:a3:4f:46:27:52:06: 55:71:3f:ec:5b:3a:d8:7a:0f:0f:50:8a:b4:8e:a3: be:58:36:88:c5:ad:61:bc:eb:b8:cd:af:08:f5:ca: 8a:0a:6c:c8:6d:d5:84:4b:af:c9:bc:86:71:a2:a5: 5c:e7:52:c0:7d:c0:49:ef:05:85:2a:79:3a:43:13: 52:14:0a:66:16:f6:11:36:04:5e:78:be:10:d6:31: c0:7f:ba:f9:03:8a:9c:c8:33:ba:a0:80:0c:56:18: 3b:1e:79:48:1d:da:a2:d2:a0:d6:ac:7c:20:61:ac: 75:fb:c7:11:bf:45:29:ad:41:98:55:83:28:df:62: b6:32:22:bb:c5:97:c9:ce:b7:60:85:5c:31:58:c7: 3c:ff:ab:27:6d:3a:7b:4b:41:f1:c9:21:96:83:e7: 1e:ae:f8:c0:e0:1e:8c:af:f9:3a:3e:b1:41:62:3f: 4a:b2:74:96:c1:e1:00:6f:d7:9d:17:79:0b:e4:4f: 22:e2:52:fc:0d:85:29:39:0d:bc:83:62:7d:e9:7a: 22:ce:32:1d:af:1d:37:3e:79:a8:20:41:12:ee:39: d6:ed:d5:b3:50:67:a1:d7:7c:22:6b:78:58:9f:b8: c2:a0:f7:f9:fa:cc:3b:14:73:79:82:bf:86:77:71: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:91:81:6F:A8:00:44:74:DC:D9:2E:99:31:F0:CA:8E:54:6C:F9:95 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ad:45:d4:a5:5e:48:09:ee:79:e0:b9:df:33:61:06:b7:d8: 97:6b:9a:df:32:93:a4:ee:db:58:67:91:24:ad:54:1c:f4:bf: 5a:cf:99:9a:b9:85:51:ce:8b:39:f0:9b:ae:62:89:58:a6:1f: 97:13:d7:6e:36:a0:6c:ac:37:e2:7d:b8:a4:c4:49:57:98:a1: b6:7c:8c:e0:93:ac:1c:f9:15:ab:f3:7b:bd:18:c8:70:3f:60: 92:fe:64:70:b2:a4:7d:3b:09:08:e2:90:f9:be:60:00:e3:7c: 28:a6:55:73:2f:fa:b2:b6:db:dc:97:61:27:42:51:b6:ff:9f: 0e:29:26:be:22:06:66:64:c9:a3:a0:ae:e0:77:67:13:72:3d: 00:e8:d2:ec:43:1a:1b:3f:6e:72:f8:29:84:1a:c1:e9:36:43: c3:06:84:13:04:35:69:68:2b:6d:f7:5d:eb:fd:80:2f:01:46: 3b:2a:63:2e:fe:1b:ca:59:90:b0:1b:27:8a:ba:28:55:6e:58: 82:7c:16:7b:2a:4b:3f:0d:cb:ab:0d:e6:27:4b:b9:2c:72:ba: 08:43:68:a5:71:fd:c0:87:e3:28:05:bd:63:63:21:49:af:e3: 2e:c6:ba:7a:27:65:88:72:12:59:81:91:99:96:f0:1b:88:cc: 20:5e:d5:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpWuc2cKWPYp3rgcNWT4IQ2wKU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTA4MjExNTU1NDZaFw0yNTA4MjUwMjIyNDZaMDMxMTAvBgNV BAMTKERDOTE4MTZGQTgwMDQ0NzREQ0Q5MkU5OTMxRjBDQThFNTQ2Q0Y5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPZW/zmkQDaNPRidSBlVxP+xb Oth6Dw9QirSOo75YNojFrWG867jNrwj1yooKbMht1YRLr8m8hnGipVznUsB9wEnv BYUqeTpDE1IUCmYW9hE2BF54vhDWMcB/uvkDipzIM7qggAxWGDseeUgd2qLSoNas fCBhrHX7xxG/RSmtQZhVgyjfYrYyIrvFl8nOt2CFXDFYxzz/qydtOntLQfHJIZaD 5x6u+MDgHoyv+To+sUFiP0qydJbB4QBv150XeQvkTyLiUvwNhSk5DbyDYn3peiLO Mh2vHTc+eaggQRLuOdbt1bNQZ6HXfCJreFifuMKg9/n6zDsUc3mCv4Z3cX5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JGBb6gARHTc2S6ZMfDKjlRs+ZUwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6tRdSlXkgJ7nngud8zYQa32Jdrmt8yk6Tu 21hnkSStVBz0v1rPmZq5hVHOiznwm65iiVimH5cT1242oGysN+J9uKTESVeYobZ8 jOCTrBz5Favze70YyHA/YJL+ZHCypH07CQjikPm+YADjfCimVXMv+rK229yXYSdC Ubb/nw4pJr4iBmZkyaOgruB3ZxNyPQDo0uxDGhs/bnL4KYQawek2Q8MGhBMENWlo K233Xev9gC8BRjsqYy7+G8pZkLAbJ4q6KFVuWIJ8FnsqSz8Ny6sN5idLuSxyughD aKVx/cCH4ygFvWNjIUmv4y7GunonZYhyElmBkZmW8BuIzCBe1a4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:54 2025 by rpki-client