$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft File: F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json) Hash identifier: R5VqxOOHAszNRPI287RjDj4pl8Y3LjuHpclKkksTIOs= Subject key identifier: 73:28:47:65:DD:2A:1A:39:F8:2B:F9:87:6B:20:C3:09:CE:8A:B6:17 Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF Certificate issuer: /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Certificate serial: 22D53753C6A7D75816333BD31A377010ACC5C778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft Manifest number: B5 Signing time: Fri 22 Aug 2025 20:32:31 +0000 Manifest this update: Fri 22 Aug 2025 20:27:31 +0000 Manifest next update: Mon 25 Aug 2025 22:44:31 +0000 Files and hashes: 1: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: BAQCxoBW0jvGaHVdvywlob+dkY99A1nNk83VROlGZUM=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: Olb5UAH0bGOuP1xREu1ehDMuAwFsYaccHtg3tVn/tDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d5:37:53:c6:a7:d7:58:16:33:3b:d3:1a:37:70:10:ac:c5:c7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Validity Not Before: Aug 22 20:27:31 2025 GMT Not After : Aug 25 22:44:31 2025 GMT Subject: CN=73284765DD2A1A39F82BF9876B20C309CE8AB617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:d0:2c:36:87:a3:13:d4:e6:27:f3:b0:2f: 18:08:6d:6f:1f:78:e9:ef:04:70:a0:7e:d1:de:df: 2f:b8:9c:e2:71:1c:a8:8a:87:eb:e4:70:00:3e:79: 79:ea:ea:9e:b8:c5:a4:7b:9c:de:b7:2f:72:a4:54: a3:33:f4:e1:11:8e:4a:4a:e3:38:af:f9:c6:6a:23: b2:48:36:2b:02:45:dc:25:5b:5a:15:84:8a:4a:35: 9d:ef:86:64:9b:2d:0e:99:c6:87:41:41:70:f0:e0: a6:b1:4d:46:67:86:67:af:7d:1f:ca:46:f7:92:ce: 6f:3e:ac:1c:70:74:ae:62:2a:58:de:24:ca:98:66: 41:67:08:ce:4f:c9:47:ea:0a:8b:6e:7d:d2:6f:f3: 66:48:9d:04:d7:c9:11:21:28:46:13:d4:71:d4:62: 5d:e8:4c:02:4a:0e:7d:dc:ec:b4:5d:3f:8b:42:af: 1f:d0:f9:cb:bc:23:b2:bf:c3:24:db:93:7f:ac:f3: 81:16:c8:c7:d5:ec:f3:dc:e7:ec:2c:d7:e1:6a:5a: 16:bb:fc:3e:8f:e7:b4:dc:9a:2a:11:38:5b:fd:ab: b8:4f:d1:94:68:b5:52:bd:94:b5:06:7d:3d:89:45: 39:87:1d:68:2b:7d:ff:44:2f:f8:96:db:c5:bc:72: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:47:65:DD:2A:1A:39:F8:2B:F9:87:6B:20:C3:09:CE:8A:B6:17 X509v3 Authority Key Identifier: keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fe:01:ea:8f:c8:3f:5d:66:10:1c:90:5d:20:cb:cb:25:90: 94:54:97:0d:4e:37:e1:ac:7c:05:48:b7:30:52:d8:2d:8a:d2: 09:a6:68:04:95:df:be:ff:b4:5c:dc:46:08:b8:78:7b:a5:40: bd:8e:dd:fb:f5:1a:f1:18:98:4d:dc:71:5f:93:5c:1b:a1:6b: 14:fd:35:3a:40:8f:44:08:10:6e:28:53:c4:40:d8:1c:c8:d9: c2:c2:6d:67:7e:ee:1b:64:ea:ca:94:16:0f:ac:56:bc:1a:d7: de:61:dd:01:1b:b5:c7:f6:32:97:8d:37:9e:4a:e4:e5:25:27: e7:34:e8:1d:62:9b:a4:87:b6:51:ae:34:f1:8f:e7:c0:38:91: e4:9f:a5:3f:1e:03:87:f6:e9:e6:36:81:d7:d7:a2:ea:d9:17: 2a:7b:17:6c:fe:21:3b:97:c7:03:24:b2:24:00:ac:d2:3c:ca: ba:6a:0f:0d:47:30:2b:b0:42:b7:c8:df:56:24:44:61:65:bc: db:83:5a:b8:07:24:da:29:38:75:2f:41:0e:ba:ed:d9:f0:04: b8:11:a4:9e:55:2b:1b:8e:13:05:96:1e:9d:a5:86:8a:02:cf: 9f:68:80:0a:e5:5d:49:e2:88:0b:3d:49:ef:93:00:ce:10:8c: e8:dd:88:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItU3U8an11gWMzvTGjdwEKzFx3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3 NjY4MEFFRjAeFw0yNTA4MjIyMDI3MzFaFw0yNTA4MjUyMjQ0MzFaMDMxMTAvBgNV BAMTKDczMjg0NzY1REQyQTFBMzlGODJCRjk4NzZCMjBDMzA5Q0U4QUI2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwR9AsNoejE9TmJ/OwLxgIbW8f eOnvBHCgftHe3y+4nOJxHKiKh+vkcAA+eXnq6p64xaR7nN63L3KkVKMz9OERjkpK 4ziv+cZqI7JINisCRdwlW1oVhIpKNZ3vhmSbLQ6ZxodBQXDw4KaxTUZnhmevfR/K RveSzm8+rBxwdK5iKljeJMqYZkFnCM5PyUfqCotufdJv82ZInQTXyREhKEYT1HHU Yl3oTAJKDn3c7LRdP4tCrx/Q+cu8I7K/wyTbk3+s84EWyMfV7PPc5+ws1+FqWha7 /D6P57TcmioROFv9q7hP0ZRotVK9lLUGfT2JRTmHHWgrff9EL/iW28W8cs8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcyhHZd0qGjn4K/mHayDDCc6KthcwHwYDVR0j BBgwFoAU9pS8nPW1cMxiAU64uHdEinZoCu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTcyNTdiYi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC9GNjk0QkM5Q0Y1 QjU3MENDNjIwMTRFQjhCODc3NDQ4QTc2NjgwQUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3NjY4 MEFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0 OEE3NjY4MEFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH+AeqPyD9dZhAckF0gy8slkJRUlw1ON+Gs fAVItzBS2C2K0gmmaASV377/tFzcRgi4eHulQL2O3fv1GvEYmE3ccV+TXBuhaxT9 NTpAj0QIEG4oU8RA2BzI2cLCbWd+7htk6sqUFg+sVrwa195h3QEbtcf2MpeNN55K 5OUlJ+c06B1im6SHtlGuNPGP58A4keSfpT8eA4f26eY2gdfXourZFyp7F2z+ITuX xwMksiQArNI8yrpqDw1HMCuwQrfI31YkRGFlvNuDWrgHJNopOHUvQQ667dnwBLgR pJ5VKxuOEwWWHp2lhooCz59ogArlXUniiAs9Se+TAM4QjOjdiEo= -----END CERTIFICATE-----Generated at Sun Aug 24 07:22:20 2025 by rpki-client