$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: WUpc9m/Kn3AfReJaC4Owdal8Ih6WJh9UkyNdPrC2/F0= Subject key identifier: E3:7B:C7:78:B2:16:F4:1B:4E:DF:57:A2:53:6C:66:B6:7C:C7:88:57 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 2D65EBFA418CCEE224833259DA3303612A1EDC27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 8C Signing time: Wed 02 Jul 2025 01:21:01 +0000 Manifest this update: Wed 02 Jul 2025 01:16:01 +0000 Manifest next update: Sat 05 Jul 2025 08:20:01 +0000 Files and hashes: 1: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: RFhGHCb7fi7+5E4cFrD0wJlCJ5E75WvgEwQ51mKjbic=) 2: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: Ny3wqjqU4wZmZF8Id2PrnXjiWBubZRNTcTs91ozTMeM=) 3: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: fultIWORXzYh4z7Tj99DsR5+VVEJ/3JICqLt2KjOqGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:65:eb:fa:41:8c:ce:e2:24:83:32:59:da:33:03:61:2a:1e:dc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Jul 2 01:16:01 2025 GMT Not After : Jul 5 08:20:01 2025 GMT Subject: CN=E37BC778B216F41B4EDF57A2536C66B67CC78857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:c2:5b:a5:fe:4f:17:66:35:6c:a9:04:4b: e5:bf:c3:2b:aa:49:70:16:ed:c4:19:29:95:71:fb: ae:98:9f:6f:02:90:b1:3d:02:43:b8:71:2d:1d:6d: 81:4d:26:de:4b:36:5c:d1:97:a7:37:a1:aa:79:b8: e6:3b:8c:57:c7:a4:29:30:2e:27:13:55:32:92:d0: 3a:b3:7d:03:48:55:34:0d:05:cf:c0:74:92:70:60: d5:ea:c4:9c:17:e7:74:45:7c:57:bf:07:e5:74:ab: cd:32:84:0c:06:43:06:04:c0:a2:5f:78:4b:9b:f5: 58:1f:5b:ce:64:77:31:24:a7:a8:f1:da:13:51:f4: 92:96:ed:8a:8e:4d:34:5e:3f:ad:ae:9b:1f:11:a7: 85:1b:e9:21:59:34:0e:25:4c:27:45:f1:74:48:02: 13:75:28:6c:87:8e:c9:4d:cf:5e:2f:39:eb:89:f3: 0e:9f:dd:fc:9a:1e:82:45:ee:4a:4b:8a:7b:12:39: 1c:b3:0b:86:e9:a6:c6:30:0d:fe:ac:6d:ad:40:c4: f2:7b:08:8b:97:70:7a:2a:ca:50:72:8e:48:87:8a: ad:2b:eb:f3:81:b8:8d:48:c0:c9:5b:ec:15:a0:3c: f0:33:a9:80:94:e4:c9:df:5f:6f:73:91:4c:c5:42: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:C7:78:B2:16:F4:1B:4E:DF:57:A2:53:6C:66:B6:7C:C7:88:57 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:36:1f:a2:c0:10:6c:96:10:32:c1:0d:5b:ea:9d:82:58:00: 5b:16:6d:50:f2:7d:26:a0:52:2f:3b:bb:8d:ee:9d:ff:a0:39: 64:5d:ac:81:eb:b2:7e:5d:31:4f:1f:e4:a6:d0:83:aa:67:c2: 54:61:c7:77:ad:16:f2:1f:aa:61:75:5a:ba:13:22:a6:da:36: a3:b4:e4:de:4c:6a:15:d1:98:e2:2c:6f:32:3f:86:9c:ba:34: 27:c4:a2:5f:39:34:a9:af:39:27:d2:92:6f:6d:8c:1b:70:61: 5f:e2:06:20:7c:be:01:6b:30:9e:d7:d4:82:bb:41:f2:9b:88: 81:b3:21:fd:3c:92:d1:98:07:93:73:6b:61:e2:35:71:bf:e6: 30:96:c6:fc:85:a1:cc:85:d5:ac:2d:0b:8d:4e:76:05:1b:ec: a1:16:7e:ea:55:58:8d:7e:6c:20:3c:2a:58:6e:da:eb:03:a0: de:42:e5:a9:a2:2c:9d:62:9f:1d:fa:a0:f9:6f:04:63:93:d4: fe:ee:d2:54:00:83:da:35:8e:9a:3a:27:14:fc:87:e3:91:ce: 53:26:8b:00:b8:db:63:ba:d5:2c:81:0d:6d:e7:d9:cc:38:a2: c5:76:b0:c9:d1:a7:79:ef:ab:3c:34:41:e5:15:d1:39:61:9c: bc:51:d3:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWXr+kGMzuIkgzJZ2jMDYSoe3CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA3MDIwMTE2MDFaFw0yNTA3MDUwODIwMDFaMDMxMTAvBgNV BAMTKEUzN0JDNzc4QjIxNkY0MUI0RURGNTdBMjUzNkM2NkI2N0NDNzg4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6j8Jbpf5PF2Y1bKkES+W/wyuq SXAW7cQZKZVx+66Yn28CkLE9AkO4cS0dbYFNJt5LNlzRl6c3oap5uOY7jFfHpCkw LicTVTKS0DqzfQNIVTQNBc/AdJJwYNXqxJwX53RFfFe/B+V0q80yhAwGQwYEwKJf eEub9VgfW85kdzEkp6jx2hNR9JKW7YqOTTReP62umx8Rp4Ub6SFZNA4lTCdF8XRI AhN1KGyHjslNz14vOeuJ8w6f3fyaHoJF7kpLinsSORyzC4bppsYwDf6sba1AxPJ7 CIuXcHoqylByjkiHiq0r6/OBuI1IwMlb7BWgPPAzqYCU5MnfX29zkUzFQgw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43vHeLIW9BtO31eiU2xmtnzHiFcwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA82H6LAEGyWEDLBDVvqnYJYAFsWbVDyfSag Ui87u43unf+gOWRdrIHrsn5dMU8f5KbQg6pnwlRhx3etFvIfqmF1WroTIqbaNqO0 5N5MahXRmOIsbzI/hpy6NCfEol85NKmvOSfSkm9tjBtwYV/iBiB8vgFrMJ7X1IK7 QfKbiIGzIf08ktGYB5Nza2HiNXG/5jCWxvyFocyF1awtC41OdgUb7KEWfupVWI1+ bCA8Klhu2usDoN5C5amiLJ1inx36oPlvBGOT1P7u0lQAg9o1jpo6JxT8h+ORzlMm iwC422O61SyBDW3n2cw4osV2sMnRp3nvqzw0QeUV0TlhnLxR04Y= -----END CERTIFICATE-----Generated at Thu Jul 3 16:42:57 2025 by rpki-client