$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: 0vCzXe36OEgtLtTXW0xtks2Pek471VjyTaHEFdIcImA= Subject key identifier: 3C:58:E0:39:FC:BF:B6:BE:9A:D1:8B:BB:A6:F5:75:8E:E2:58:E7:EC Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 13AEC556720D812249ABAB4BD58047A0DEF367AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: A3 Signing time: Fri 22 Aug 2025 20:31:08 +0000 Manifest this update: Fri 22 Aug 2025 20:26:08 +0000 Manifest next update: Tue 26 Aug 2025 07:17:08 +0000 Files and hashes: 1: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: rfzlAmuUbsxyxMBYWvGumRPbnmi/nNckVnG6BMYBMI8=) 2: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) 3: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ae:c5:56:72:0d:81:22:49:ab:ab:4b:d5:80:47:a0:de:f3:67:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Aug 22 20:26:08 2025 GMT Not After : Aug 26 07:17:08 2025 GMT Subject: CN=3C58E039FCBFB6BE9AD18BBBA6F5758EE258E7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:69:18:fa:ba:09:04:f8:94:4e:47:26:83: 76:4a:ee:70:d7:bb:dc:11:88:c1:e3:5e:18:8c:a1: 51:cd:ab:b6:22:31:1c:60:33:44:ca:b6:13:db:d4: da:a4:b6:1b:d5:53:0f:e0:35:1c:92:56:6f:75:86: c4:bc:eb:9a:ba:09:37:4c:f3:f6:14:3b:d6:02:30: 55:2e:1f:48:60:7a:82:73:cd:09:56:14:0c:a6:eb: d6:d6:29:e0:24:b2:af:cb:5c:5b:f6:6c:a2:cb:eb: bf:f2:0f:da:e2:3b:f6:86:95:ed:95:eb:37:6b:40: f6:33:41:0e:e6:48:f0:00:f9:7f:ef:91:17:8d:33: 53:a7:ba:2c:cf:24:df:f7:ac:2c:14:b1:fd:36:87: fd:bb:6b:4b:9c:67:69:35:a6:6f:04:fe:e4:1c:5e: 4f:7d:2e:5b:a0:78:01:d6:7f:3b:3c:fa:91:cc:dd: 3f:8f:3f:80:f9:80:f8:ed:d8:a0:4e:4a:e0:17:d7: 9a:2d:10:df:8d:e1:b1:59:a1:5d:02:1d:cb:df:ca: 68:e2:b9:0f:b2:d9:af:d0:c3:c7:bf:c4:8c:7b:e6: 3a:24:42:39:54:97:47:2e:38:61:c5:d6:4e:b7:af: a4:b4:cf:1b:de:38:c7:d1:68:7c:08:63:37:af:db: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:58:E0:39:FC:BF:B6:BE:9A:D1:8B:BB:A6:F5:75:8E:E2:58:E7:EC X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6e:d9:60:02:16:75:b3:4d:e8:9a:d2:4a:08:e8:8e:bf:2e: b5:c2:6a:be:ff:bc:ae:09:d3:22:7c:fe:48:c8:c7:a8:a9:0d: 9a:a6:fa:aa:0f:67:47:a5:0d:19:10:2e:21:ae:7f:d3:bf:8f: 63:cc:f6:f5:bb:79:98:2b:6d:d9:25:a4:8c:9a:8e:46:a7:f4: 55:bd:0d:d5:c7:75:37:a2:bf:bc:a0:a0:b1:65:25:63:ec:b6: 66:09:e0:ff:cd:30:a0:9c:f2:e6:0d:ec:98:f0:98:52:97:60: 06:db:a7:11:68:56:e3:13:db:25:d5:1e:95:83:f7:8b:a3:c6: 5d:65:f6:ba:ac:22:a4:9c:af:f6:f7:d0:e9:19:10:03:04:50: 69:e2:cf:ce:0b:5b:93:9f:e2:87:f3:9a:3b:30:03:cd:34:0d: 59:47:7e:1f:ef:85:b2:55:f4:85:af:6f:a3:5d:d8:41:d3:fe: 7a:12:5c:ce:70:b0:10:e7:0d:53:67:e4:87:71:9e:d1:a9:20: c6:9b:e5:ed:49:5f:8e:a4:ad:08:3c:77:28:af:24:c6:ee:b6: ed:d8:e8:95:7d:3e:64:ad:a3:8c:27:0f:22:af:2a:5b:99:a7: cf:05:ba:1d:c0:ea:89:26:2c:90:f7:e2:51:e7:2a:0b:06:ca: 9e:d6:6c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE67FVnINgSJJq6tL1YBHoN7zZ60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA4MjIyMDI2MDhaFw0yNTA4MjYwNzE3MDhaMDMxMTAvBgNV BAMTKDNDNThFMDM5RkNCRkI2QkU5QUQxOEJCQkE2RjU3NThFRTI1OEU3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiGkY+roJBPiUTkcmg3ZK7nDX u9wRiMHjXhiMoVHNq7YiMRxgM0TKthPb1NqkthvVUw/gNRySVm91hsS865q6CTdM 8/YUO9YCMFUuH0hgeoJzzQlWFAym69bWKeAksq/LXFv2bKLL67/yD9riO/aGle2V 6zdrQPYzQQ7mSPAA+X/vkReNM1OnuizPJN/3rCwUsf02h/27a0ucZ2k1pm8E/uQc Xk99LlugeAHWfzs8+pHM3T+PP4D5gPjt2KBOSuAX15otEN+N4bFZoV0CHcvfymji uQ+y2a/Qw8e/xIx75jokQjlUl0cuOGHF1k63r6S0zxveOMfRaHwIYzev2/ZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFjgOfy/tr6a0Yu7pvV1juJY5+wwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9u2WACFnWzTeia0koI6I6/LrXCar7/vK4J 0yJ8/kjIx6ipDZqm+qoPZ0elDRkQLiGuf9O/j2PM9vW7eZgrbdklpIyajkan9FW9 DdXHdTeiv7ygoLFlJWPstmYJ4P/NMKCc8uYN7JjwmFKXYAbbpxFoVuMT2yXVHpWD 94ujxl1l9rqsIqScr/b30OkZEAMEUGniz84LW5Of4ofzmjswA800DVlHfh/vhbJV 9IWvb6Nd2EHT/noSXM5wsBDnDVNn5IdxntGpIMab5e1JX46krQg8dyivJMbutu3Y 6JV9PmSto4wnDyKvKluZp88Fuh3A6okmLJD34lHnKgsGyp7WbOQ= -----END CERTIFICATE-----Generated at Sun Aug 24 01:25:35 2025 by rpki-client