$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: 3AazvXXzvNM7zoEr8PWPS4HU4+sK8SSe/u1WB+F9R4M= Subject key identifier: 7E:55:70:33:67:10:1F:D3:DD:0F:42:AB:29:05:9A:0A:0E:DD:DC:50 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 52B0D0A8FCCD6E51C6368319783F5D53496C6892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 04A4 Signing time: Sun 20 Jul 2025 23:41:04 +0000 Manifest this update: Sun 20 Jul 2025 23:36:04 +0000 Manifest next update: Thu 24 Jul 2025 09:09:04 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: V4WbVv8uTNldANDipZiAUMiWvhEFfsWDkXKyYdH7BrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b0:d0:a8:fc:cd:6e:51:c6:36:83:19:78:3f:5d:53:49:6c:68:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Jul 20 23:36:04 2025 GMT Not After : Jul 24 09:09:04 2025 GMT Subject: CN=7E55703367101FD3DD0F42AB29059A0A0EDDDC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:eb:f5:09:59:b6:d8:44:bb:de:39:64:3c: df:39:68:00:59:02:9a:8f:94:04:ea:30:6a:38:cb: 8d:00:91:d7:b4:bb:23:42:14:cb:36:9f:48:3b:ee: 64:67:ef:96:e7:c9:81:b9:df:0f:bf:cb:4a:12:b0: 6d:e4:53:af:0c:26:f6:5f:19:39:55:1d:e2:c0:1b: 37:bb:b3:80:70:d4:74:56:8e:62:68:04:1f:98:20: 36:f2:54:c6:97:65:06:55:01:a6:f4:39:af:0b:1f: fd:3c:39:f9:8f:b2:ab:72:62:7c:69:39:21:00:dc: 91:c1:a2:88:8d:89:a2:a7:20:48:43:f2:93:e8:85: ca:05:39:cf:2a:0d:a7:84:c0:8c:b9:74:fd:bb:db: f8:63:da:80:09:c5:61:76:2c:f1:4b:b2:5f:f7:25: 6b:4c:19:3c:8b:3d:b7:06:08:c3:9d:10:81:31:ef: ee:64:34:60:40:8f:16:89:e9:bf:5a:61:b3:8e:09: 54:49:f6:8a:75:9f:f1:4b:d7:3d:6f:bc:30:8c:18: bd:66:b7:ba:87:83:05:ee:ff:4e:f7:fb:39:4c:7d: 68:03:e0:1d:77:e4:52:6d:f3:53:37:90:32:3f:85: 25:a6:fa:f5:7e:67:f8:44:2c:33:2f:93:41:8d:ce: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:70:33:67:10:1F:D3:DD:0F:42:AB:29:05:9A:0A:0E:DD:DC:50 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:26:57:44:9d:30:98:9f:5d:8d:81:6c:8c:13:51:f9:8b:23: c9:ca:a0:05:9d:91:43:b4:48:d2:55:5b:6a:1d:24:d1:ad:f9: 67:6a:c5:65:b7:f3:33:26:dc:63:a6:11:14:45:a6:58:be:65: 48:73:74:ca:69:19:23:21:ce:b2:82:6a:5e:49:f5:6e:b1:b5: 84:c2:2a:41:be:54:fd:6c:bd:6f:05:df:ef:2b:39:30:3e:41: d2:45:93:69:96:49:7f:e2:6d:bd:98:4d:4d:61:a4:c9:28:dc: ab:b7:39:89:0c:62:3e:7f:01:f6:b3:5c:bb:f2:1a:fa:a8:5f: cc:af:30:d2:f7:02:c0:fa:44:60:66:51:77:0c:12:58:08:57: 81:c1:ba:24:fd:aa:c8:67:77:6e:49:00:a5:a6:ff:34:e6:f4: d2:2b:13:3c:a9:fc:aa:0b:58:fa:8c:f5:e7:a6:9e:1a:1a:a7: b7:e1:a3:89:57:71:87:e4:4a:07:5e:df:cc:ad:ec:00:6d:91: 2b:86:ba:22:1f:f7:58:47:b6:2b:07:b9:25:16:91:7d:b9:63: da:45:0d:72:6e:2a:e3:1a:d4:66:68:23:da:3a:c0:fa:58:53: d6:59:08:1d:ca:b3:06:cf:34:98:d6:27:a3:0a:c9:d6:4e:d5: f7:f6:ec:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrDQqPzNblHGNoMZeD9dU0lsaJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA3MjAyMzM2MDRaFw0yNTA3MjQwOTA5MDRaMDMxMTAvBgNV BAMTKDdFNTU3MDMzNjcxMDFGRDNERDBGNDJBQjI5MDU5QTBBMEVERERDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPP+v1CVm22ES73jlkPN85aABZ ApqPlATqMGo4y40Akde0uyNCFMs2n0g77mRn75bnyYG53w+/y0oSsG3kU68MJvZf GTlVHeLAGze7s4Bw1HRWjmJoBB+YIDbyVMaXZQZVAab0Oa8LH/08OfmPsqtyYnxp OSEA3JHBooiNiaKnIEhD8pPohcoFOc8qDaeEwIy5dP272/hj2oAJxWF2LPFLsl/3 JWtMGTyLPbcGCMOdEIEx7+5kNGBAjxaJ6b9aYbOOCVRJ9op1n/FL1z1vvDCMGL1m t7qHgwXu/073+zlMfWgD4B135FJt81M3kDI/hSWm+vV+Z/hELDMvk0GNzpZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUflVwM2cQH9PdD0KrKQWaCg7d3FAwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQmV0SdMJifXY2BbIwTUfmLI8nKoAWdkUO0 SNJVW2odJNGt+WdqxWW38zMm3GOmERRFpli+ZUhzdMppGSMhzrKCal5J9W6xtYTC KkG+VP1svW8F3+8rOTA+QdJFk2mWSX/ibb2YTU1hpMko3Ku3OYkMYj5/AfazXLvy GvqoX8yvMNL3AsD6RGBmUXcMElgIV4HBuiT9qshnd25JAKWm/zTm9NIrEzyp/KoL WPqM9eemnhoap7fho4lXcYfkSgde38yt7ABtkSuGuiIf91hHtisHuSUWkX25Y9pF DXJuKuMa1GZoI9o6wPpYU9ZZCB3KswbPNJjWJ6MKydZO1ff27GA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:43 2025 by rpki-client