$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: 6ZTroX6SP20WCL4sz0aMZ/SjboEwGQnJ/hKpAAuvb3A= Subject key identifier: DE:17:E0:9C:56:92:7B:37:05:08:BA:AA:C9:88:D6:64:D7:8C:1A:94 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 621E1F9B1C637AB6442E0EC1A43615A0273500F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 57 Signing time: Sun 20 Jul 2025 19:02:06 +0000 Manifest this update: Sun 20 Jul 2025 18:57:06 +0000 Manifest next update: Wed 23 Jul 2025 22:50:06 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: 8J076AV9QQFanGAxSYGMZBmGO6AyqkiSVeckaqz9yMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1e:1f:9b:1c:63:7a:b6:44:2e:0e:c1:a4:36:15:a0:27:35:00:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Jul 20 18:57:06 2025 GMT Not After : Jul 23 22:50:06 2025 GMT Subject: CN=DE17E09C56927B370508BAAAC988D664D78C1A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:32:de:da:4e:46:51:53:3a:95:e0:65:b0: 57:19:6a:40:aa:db:9f:d5:c0:df:7e:be:e2:26:c1: be:94:cb:9a:6c:50:11:2c:ad:9a:2c:1f:6e:21:13: c6:f3:60:64:f1:99:6b:be:ba:40:b5:39:f6:5d:95: 9b:b9:1e:f9:ca:9a:26:3e:12:b2:18:48:42:27:0d: 43:7a:3f:81:39:dc:a1:13:df:66:f5:16:53:d7:31: 0f:6d:a5:1d:12:eb:b7:2c:0d:e5:b0:93:2c:f1:48: 8a:42:17:c3:9e:cd:2d:43:99:2b:25:15:3f:e9:f3: 36:0a:ec:f6:79:dd:77:73:ec:2d:48:31:32:e8:48: d1:15:92:98:68:de:fd:3b:ff:21:a1:05:b4:11:ff: 83:d3:13:4a:38:21:c1:e0:e0:eb:bd:e4:a3:ca:56: 16:77:19:24:12:0a:17:51:d2:93:8b:3f:fe:84:ab: 73:7e:dc:dc:ed:87:52:59:3a:8d:1c:e9:53:55:98: b6:72:9f:50:92:5e:09:46:6c:b4:e1:a8:83:d1:9b: 92:48:a5:07:66:b0:80:c2:c2:3f:86:27:cf:71:9d: 90:e3:07:88:66:7e:24:a1:b8:20:c4:fe:70:32:eb: 1d:d6:fa:dd:b6:71:4e:c2:1c:45:7f:d9:be:79:dd: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:17:E0:9C:56:92:7B:37:05:08:BA:AA:C9:88:D6:64:D7:8C:1A:94 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:45:a2:72:f8:76:c2:1d:69:3d:fe:8f:79:94:5a:6b:5f:cb: 1b:bb:37:76:40:db:f1:6f:9d:0d:ae:42:04:d9:75:28:41:41: 9a:f3:85:40:fd:00:40:7b:40:47:10:5f:48:c9:87:ad:a0:5b: 2c:a3:d6:ca:bd:b5:af:16:08:22:c6:e6:f0:8c:72:be:d6:4a: 88:15:a9:46:b8:23:24:4d:3f:e0:e9:13:2d:db:fd:0e:10:fb: 7c:27:12:b1:43:98:92:bd:0f:16:e1:ee:80:46:91:66:98:80: a8:9e:42:2d:63:05:3c:ca:38:56:ff:f1:c7:4f:2e:c8:7b:45: 4d:3d:4d:36:d4:38:9f:99:76:25:44:dd:3b:f8:c1:70:bd:91: 72:a2:cd:b7:50:4b:af:fe:5b:41:b9:bd:d2:97:d0:74:a5:99: 65:7e:5a:85:8e:91:af:f5:bc:35:33:be:ad:c6:7c:8d:3d:6b: f7:f2:44:d3:a3:d8:ff:a0:71:68:e5:10:1f:e8:6e:f5:af:bd: 23:1f:9e:aa:d6:b1:25:24:31:57:b0:0a:15:ec:20:a2:f3:a8: 3d:c7:db:55:b3:0e:48:b9:b0:f6:16:01:02:98:db:02:1d:44: 39:6b:36:03:f0:d4:73:74:66:c4:96:2f:2c:ac:f7:15:69:72: 27:56:f3:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYh4fmxxjerZELg7BpDYVoCc1APEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA3MjAxODU3MDZaFw0yNTA3MjMyMjUwMDZaMDMxMTAvBgNV BAMTKERFMTdFMDlDNTY5MjdCMzcwNTA4QkFBQUM5ODhENjY0RDc4QzFBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeTLe2k5GUVM6leBlsFcZakCq 25/VwN9+vuImwb6Uy5psUBEsrZosH24hE8bzYGTxmWu+ukC1OfZdlZu5HvnKmiY+ ErIYSEInDUN6P4E53KET32b1FlPXMQ9tpR0S67csDeWwkyzxSIpCF8OezS1DmSsl FT/p8zYK7PZ53Xdz7C1IMTLoSNEVkpho3v07/yGhBbQR/4PTE0o4IcHg4Ou95KPK VhZ3GSQSChdR0pOLP/6Eq3N+3Nzth1JZOo0c6VNVmLZyn1CSXglGbLThqIPRm5JI pQdmsIDCwj+GJ89xnZDjB4hmfiShuCDE/nAy6x3W+t22cU7CHEV/2b553RArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hfgnFaSezcFCLqqyYjWZNeMGpQwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtFonL4dsIdaT3+j3mUWmtfyxu7N3ZA2/Fv nQ2uQgTZdShBQZrzhUD9AEB7QEcQX0jJh62gWyyj1sq9ta8WCCLG5vCMcr7WSogV qUa4IyRNP+DpEy3b/Q4Q+3wnErFDmJK9Dxbh7oBGkWaYgKieQi1jBTzKOFb/8cdP Lsh7RU09TTbUOJ+ZdiVE3Tv4wXC9kXKizbdQS6/+W0G5vdKX0HSlmWV+WoWOka/1 vDUzvq3GfI09a/fyRNOj2P+gcWjlEB/obvWvvSMfnqrWsSUkMVewChXsIKLzqD3H 21WzDki5sPYWAQKY2wIdRDlrNgPw1HN0ZsSWLyys9xVpcidW84Q= -----END CERTIFICATE-----Generated at Mon Jul 21 02:32:19 2025 by rpki-client