$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: M70n1Tc9NYaduhGNhvBHiBSf/kEIPWLu8nBdmAXDFiE= Subject key identifier: 72:44:05:BB:D3:AF:99:AA:63:A0:D7:7B:D0:B4:8D:21:CC:F7:F2:CF Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 43B336DC55E4666661702BCEB7B599E8437A9F5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: 0100 Signing time: Sun 24 Aug 2025 01:51:29 +0000 Manifest this update: Sun 24 Aug 2025 01:46:29 +0000 Manifest next update: Wed 27 Aug 2025 11:57:29 +0000 Files and hashes: 1: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: Tutz5ykEGPckXQ2XtEq3doMZrga9tFmbBNgvrY9X30I=) 2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: 82foMffwQwzyR9wKrvwkyZl1LONBJ6UBCu4U17RUdAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b3:36:dc:55:e4:66:66:61:70:2b:ce:b7:b5:99:e8:43:7a:9f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Aug 24 01:46:29 2025 GMT Not After : Aug 27 11:57:29 2025 GMT Subject: CN=724405BBD3AF99AA63A0D77BD0B48D21CCF7F2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:59:87:36:b7:9f:c2:c7:69:5b:ab:d8:11: e5:d9:2b:75:47:d1:c7:7b:59:08:ba:71:7b:e3:15: 5a:80:7e:c0:f0:4e:b0:45:2b:9e:80:ee:75:a8:d0: 5c:85:b5:2e:65:bc:13:51:9f:56:09:ce:73:63:ff: fb:8b:af:22:53:af:60:ba:ee:4b:e9:02:6c:55:e0: 12:fb:6a:90:89:fc:d7:eb:61:ed:83:77:5d:f6:70: 14:a2:22:06:32:ea:56:07:46:f1:a2:17:df:09:ee: c4:70:a9:df:47:5e:ca:4a:6c:fe:20:e2:54:0e:5a: 02:27:85:4a:fd:84:8b:f0:f9:79:b3:d0:30:92:e6: 56:c3:73:17:c9:7a:4c:e7:66:e1:ab:94:e2:c3:cf: 8c:7e:46:64:e2:49:dc:63:a4:c5:04:7a:0d:9a:a4: 9a:43:3d:97:75:25:50:09:b4:21:9e:76:74:d9:8d: 83:35:00:d0:3c:08:b9:cb:fd:ef:4f:30:0a:2d:88: 70:ff:3c:9e:82:9d:54:53:2b:55:58:40:b8:43:a3: e0:a7:f0:36:dc:f6:0f:56:07:db:86:0b:e5:0a:09: b9:19:ac:9f:04:52:27:47:84:6e:c1:b0:66:76:b7: 9e:fb:b9:b4:56:6c:38:94:da:9f:28:bd:e5:9b:4a: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:44:05:BB:D3:AF:99:AA:63:A0:D7:7B:D0:B4:8D:21:CC:F7:F2:CF X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:78:f6:4b:99:58:53:69:37:ab:5b:d5:cb:05:47:1f:0e:6c: 81:cf:8f:f0:66:b2:01:a6:3f:31:b6:4f:73:08:81:85:44:2c: 20:90:a5:f9:8e:e5:8b:d8:84:26:3b:4b:77:a7:e9:06:f8:77: 52:7f:cc:47:00:29:0a:a0:69:87:a5:60:49:64:88:a4:ed:bd: 77:2e:af:61:cd:bc:0c:8a:26:72:ae:82:df:8f:ad:9e:8c:ea: 62:06:5c:27:03:38:64:b9:83:3b:5d:92:86:f7:01:f6:50:36: 56:e1:96:45:49:ab:3e:82:03:c8:51:f4:21:9f:78:23:4b:48: 27:c9:16:32:14:b6:43:7c:bb:be:94:14:8a:aa:fb:9d:16:77: e5:b9:0e:59:5b:02:58:4c:b9:0b:f2:30:58:fd:01:e9:2e:b4: b2:5e:1f:62:e5:b6:88:d3:bd:6d:19:ec:70:a1:52:cb:e0:c6: 6e:19:b2:d0:90:ae:cb:26:e3:a1:6f:6d:de:29:50:00:32:bd: 58:24:a3:85:3d:6a:40:66:98:54:e8:f0:12:dc:8d:40:df:dc: 2c:21:2d:90:fa:7a:46:ce:aa:66:d1:f8:29:d9:c1:5f:4e:ba: 28:2c:e2:d0:03:69:62:71:02:4c:af:64:25:4e:bf:08:41:06: ec:98:83:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7M23FXkZmZhcCvOt7WZ6EN6n1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTA4MjQwMTQ2MjlaFw0yNTA4MjcxMTU3MjlaMDMxMTAvBgNV BAMTKDcyNDQwNUJCRDNBRjk5QUE2M0EwRDc3QkQwQjQ4RDIxQ0NGN0YyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER1mHNrefwsdpW6vYEeXZK3VH 0cd7WQi6cXvjFVqAfsDwTrBFK56A7nWo0FyFtS5lvBNRn1YJznNj//uLryJTr2C6 7kvpAmxV4BL7apCJ/NfrYe2Dd132cBSiIgYy6lYHRvGiF98J7sRwqd9HXspKbP4g 4lQOWgInhUr9hIvw+Xmz0DCS5lbDcxfJekznZuGrlOLDz4x+RmTiSdxjpMUEeg2a pJpDPZd1JVAJtCGednTZjYM1ANA8CLnL/e9PMAotiHD/PJ6CnVRTK1VYQLhDo+Cn 8Dbc9g9WB9uGC+UKCbkZrJ8EUidHhG7BsGZ2t577ubRWbDiU2p8oveWbSktBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckQFu9OvmapjoNd70LSNIcz38s8wHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC949kuZWFNpN6tb1csFRx8ObIHPj/BmsgGm PzG2T3MIgYVELCCQpfmO5YvYhCY7S3en6Qb4d1J/zEcAKQqgaYelYElkiKTtvXcu r2HNvAyKJnKugt+PrZ6M6mIGXCcDOGS5gztdkob3AfZQNlbhlkVJqz6CA8hR9CGf eCNLSCfJFjIUtkN8u76UFIqq+50Wd+W5DllbAlhMuQvyMFj9AekutLJeH2LltojT vW0Z7HChUsvgxm4ZstCQrssm46Fvbd4pUAAyvVgko4U9akBmmFTo8BLcjUDf3Cwh LZD6ekbOqmbR+CnZwV9Ouigs4tADaWJxAkyvZCVOvwhBBuyYgxo= -----END CERTIFICATE-----Generated at Mon Aug 25 06:32:36 2025 by rpki-client