$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: 5q6fbXlCtWFLmB4RL8QrmWVmbrVIrhGhAlPlUSXaRdw= Subject key identifier: 60:B2:99:AF:B5:65:A6:F7:96:A1:14:F6:60:88:8A:EF:58:CF:55:1F Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 78723D1F11C9D82762C961C4E49C2AA9FE60FE6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0114 Signing time: Sat 19 Jul 2025 23:40:55 +0000 Manifest this update: Sat 19 Jul 2025 23:35:55 +0000 Manifest next update: Wed 23 Jul 2025 07:13:55 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: ekb19lAOfcu4TQlx105d7AEPH8jm4eqz9/n1hkIfzIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:72:3d:1f:11:c9:d8:27:62:c9:61:c4:e4:9c:2a:a9:fe:60:fe:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Jul 19 23:35:55 2025 GMT Not After : Jul 23 07:13:55 2025 GMT Subject: CN=60B299AFB565A6F796A114F660888AEF58CF551F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:1f:c1:29:28:4b:a3:a2:4d:b6:a3:a3:4d: 49:15:2e:91:03:81:fb:c4:f1:fa:f4:55:ce:10:95: f3:b9:95:e7:2e:21:7a:9f:14:31:ef:52:c0:2b:06: 5f:0b:c5:11:9a:82:09:f0:46:e2:7d:c6:38:df:64: dd:f1:7f:dc:46:4b:45:fa:52:d2:4a:e2:fb:5b:34: 5c:ab:cf:c3:05:48:d7:fa:ba:d1:e9:94:de:7b:57: 59:f4:32:df:6d:30:e5:0c:0a:db:60:08:16:c6:ec: b8:f7:7c:08:dd:cb:ba:e2:e4:22:66:b5:1a:52:93: 83:46:de:67:04:3d:eb:6a:73:c9:c8:dd:77:63:bf: 25:6f:81:95:84:64:6d:ec:51:08:1d:be:b7:17:53: c6:bf:c3:ff:e9:53:02:0d:62:1c:96:86:73:36:5d: 63:ee:25:7c:4a:0e:51:30:e4:e3:12:56:26:fa:14: 4f:f2:ba:d6:c6:0f:1e:1f:05:3f:4e:f2:5e:47:88: cd:4a:5d:9f:d2:de:36:bf:b0:18:d6:df:8b:39:e5: 5d:93:dc:a1:83:de:70:21:35:56:65:70:2b:ca:af: 24:2a:3d:5a:09:56:51:86:79:31:de:fa:fb:10:a9: 15:fd:49:39:37:3b:48:81:3f:35:4a:c9:c2:1f:28: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B2:99:AF:B5:65:A6:F7:96:A1:14:F6:60:88:8A:EF:58:CF:55:1F X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:58:d7:f5:07:2b:89:20:cc:fd:ce:fd:24:fe:bc:c5:da:6f: a1:85:6a:83:fc:62:10:eb:a4:d2:27:32:65:b8:d2:72:b6:c0: 1f:36:e9:16:71:46:51:36:06:d5:8a:8f:1b:46:8a:8c:0a:33: b4:11:1c:38:8e:cf:83:87:0e:82:7e:20:d0:24:87:80:0e:4b: 43:89:6c:bf:e6:86:df:64:72:78:e8:d0:02:44:2b:b8:ba:bc: 0e:c4:d5:61:3f:d6:2d:c2:1f:65:2f:85:59:34:cc:4a:3c:8b: 18:a0:95:08:21:f1:b6:e9:47:17:c0:e0:33:06:2e:62:3f:30: 52:6a:de:37:88:74:95:03:f4:1c:fb:4b:fd:52:6a:9d:51:c8: da:4c:08:bf:d8:6a:67:31:24:dc:af:7c:43:fc:37:25:5c:c7: 8e:19:dd:b3:65:f8:d0:f4:4b:1f:0c:ee:b0:a3:7e:f8:ba:22: 04:14:a4:80:11:19:60:e1:25:b2:ae:49:82:3a:eb:7e:1c:32: 18:c5:2e:b5:be:60:3d:ac:a9:e2:0d:9c:11:02:20:21:c0:63: e9:c5:24:71:ef:16:69:e6:bd:7e:24:2f:84:ed:40:63:14:7c: ac:79:b4:1d:0d:89:02:34:89:c9:08:a5:93:33:d6:13:29:5a: 13:be:b1:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHI9HxHJ2CdiyWHE5Jwqqf5g/mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA3MTkyMzM1NTVaFw0yNTA3MjMwNzEzNTVaMDMxMTAvBgNV BAMTKDYwQjI5OUFGQjU2NUE2Rjc5NkExMTRGNjYwODg4QUVGNThDRjU1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyh/BKShLo6JNtqOjTUkVLpED gfvE8fr0Vc4QlfO5lecuIXqfFDHvUsArBl8LxRGaggnwRuJ9xjjfZN3xf9xGS0X6 UtJK4vtbNFyrz8MFSNf6utHplN57V1n0Mt9tMOUMCttgCBbG7Lj3fAjdy7ri5CJm tRpSk4NG3mcEPetqc8nI3XdjvyVvgZWEZG3sUQgdvrcXU8a/w//pUwINYhyWhnM2 XWPuJXxKDlEw5OMSVib6FE/yutbGDx4fBT9O8l5HiM1KXZ/S3ja/sBjW34s55V2T 3KGD3nAhNVZlcCvKryQqPVoJVlGGeTHe+vsQqRX9STk3O0iBPzVKycIfKEZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYLKZr7VlpveWoRT2YIiK71jPVR8wHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1Y1/UHK4kgzP3O/ST+vMXab6GFaoP8YhDr pNInMmW40nK2wB826RZxRlE2BtWKjxtGiowKM7QRHDiOz4OHDoJ+INAkh4AOS0OJ bL/mht9kcnjo0AJEK7i6vA7E1WE/1i3CH2UvhVk0zEo8ixiglQgh8bbpRxfA4DMG LmI/MFJq3jeIdJUD9Bz7S/1Sap1RyNpMCL/YamcxJNyvfEP8NyVcx44Z3bNl+ND0 Sx8M7rCjfvi6IgQUpIARGWDhJbKuSYI6634cMhjFLrW+YD2sqeINnBECICHAY+nF JHHvFmnmvX4kL4TtQGMUfKx5tB0NiQI0ickIpZMz1hMpWhO+sWw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:32 2025 by rpki-client