$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: TNAvW8AoxlF8nQeiXmHMCOT6VDdjqcrxrzutj9vj4ak= Subject key identifier: 96:7C:60:DD:9D:59:D8:12:04:17:5E:6E:31:6E:5C:F5:A0:65:66:36 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 3E5D7FBF3353C48FF753BE18E6E22A42126871AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0176 Signing time: Sat 19 Jul 2025 09:11:59 +0000 Manifest this update: Sat 19 Jul 2025 09:06:59 +0000 Manifest next update: Tue 22 Jul 2025 18:59:59 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: zvdCHmoOfL8vqKhOSXfQnNF+XxUj7v3urY9k/8cO/HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5d:7f:bf:33:53:c4:8f:f7:53:be:18:e6:e2:2a:42:12:68:71:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Jul 19 09:06:59 2025 GMT Not After : Jul 22 18:59:59 2025 GMT Subject: CN=967C60DD9D59D81204175E6E316E5CF5A0656636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:86:c6:8d:2f:ec:79:ac:25:90:2d:83:ed: 98:a6:20:15:b0:b5:ba:95:af:99:c9:28:07:94:f9: db:52:09:e5:2b:ea:db:0a:ab:25:3f:f8:45:0e:dc: 24:27:9d:d1:c0:06:60:34:03:be:9e:5f:0c:32:bf: 58:e1:f0:7c:8f:e6:30:49:1f:c1:55:bd:9c:28:95: a6:16:09:fa:40:de:d5:01:fd:bf:4a:2d:8b:fe:48: bd:51:94:86:a6:36:1b:d6:7f:cf:a2:07:0f:bb:f8: b5:20:cb:34:0a:c5:4f:8d:37:a3:a5:05:e6:58:25: 0d:ad:00:be:21:73:76:07:09:a8:11:e0:26:b2:20: 48:2c:c1:c8:f1:f7:11:87:7f:a2:e2:01:ae:e4:6b: cc:d7:29:11:8d:0e:f0:f0:26:54:fc:d5:57:0d:80: ec:00:cd:be:0a:8d:26:54:e6:78:16:7f:bc:12:61: 8e:b4:78:1c:10:0c:70:ed:7f:45:75:ae:89:bc:7f: 3e:82:ec:bc:5d:6c:a1:06:28:dd:de:17:6d:70:9e: 98:65:a1:bf:59:82:86:c5:45:8d:8d:19:3c:5a:50: b7:72:c9:ee:a6:4e:ec:e2:4c:e6:03:59:90:f5:2d: 25:a7:3a:20:ba:b8:28:7b:7a:71:8a:ae:96:f0:a5: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7C:60:DD:9D:59:D8:12:04:17:5E:6E:31:6E:5C:F5:A0:65:66:36 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:27:8e:12:87:9a:da:ae:df:25:fb:9d:1e:18:4a:6c:9e:41: 56:5e:02:f4:9c:33:54:b5:57:2e:2f:73:dc:6e:16:77:1c:45: c8:62:a2:f9:59:dd:ff:f1:8b:49:f3:23:0b:5c:d4:eb:00:d4: 1d:08:9d:7f:89:52:b2:c5:8e:4f:82:d4:72:db:1e:7f:9b:41: 9b:a4:ef:b0:42:12:32:da:a2:44:c9:8e:a8:cd:bf:80:fc:5b: 46:ef:c9:d7:46:51:7d:e0:da:9d:cb:ea:22:25:95:7e:13:f7: 3a:e5:ec:ca:2e:9c:13:81:8f:70:e4:2d:02:1f:23:0c:24:23: 52:65:b3:f5:6a:d0:ea:df:a1:a5:e3:2c:59:e9:de:c4:8b:f4: e4:97:ea:4e:5f:43:c0:40:c2:b1:0b:17:13:79:04:35:ee:c0: ef:1c:99:7d:d2:69:91:20:0e:6e:1d:d5:85:ff:6e:d9:f4:b8: c7:f6:7e:9f:fc:d2:91:03:55:1c:af:13:48:d4:05:a6:08:ae: 6e:5f:2e:5a:80:30:70:96:cb:64:a2:c8:73:0c:1c:75:f8:41: 6c:33:77:9f:62:3d:e2:83:36:7e:33:66:b2:49:b8:42:52:d5: c9:8e:6a:e9:e3:a4:b3:5a:82:d6:3b:1f:24:29:62:9b:34:78: c7:a2:d2:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPl1/vzNTxI/3U74Y5uIqQhJocaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA3MTkwOTA2NTlaFw0yNTA3MjIxODU5NTlaMDMxMTAvBgNV BAMTKDk2N0M2MEREOUQ1OUQ4MTIwNDE3NUU2RTMxNkU1Q0Y1QTA2NTY2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLYbGjS/seawlkC2D7ZimIBWw tbqVr5nJKAeU+dtSCeUr6tsKqyU/+EUO3CQnndHABmA0A76eXwwyv1jh8HyP5jBJ H8FVvZwolaYWCfpA3tUB/b9KLYv+SL1RlIamNhvWf8+iBw+7+LUgyzQKxU+NN6Ol BeZYJQ2tAL4hc3YHCagR4CayIEgswcjx9xGHf6LiAa7ka8zXKRGNDvDwJlT81VcN gOwAzb4KjSZU5ngWf7wSYY60eBwQDHDtf0V1rom8fz6C7LxdbKEGKN3eF21wnphl ob9ZgobFRY2NGTxaULdyye6mTuziTOYDWZD1LSWnOiC6uCh7enGKrpbwpXl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlnxg3Z1Z2BIEF15uMW5c9aBlZjYwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGInjhKHmtqu3yX7nR4YSmyeQVZeAvScM1S1 Vy4vc9xuFnccRchiovlZ3f/xi0nzIwtc1OsA1B0InX+JUrLFjk+C1HLbHn+bQZuk 77BCEjLaokTJjqjNv4D8W0bvyddGUX3g2p3L6iIllX4T9zrl7MounBOBj3DkLQIf IwwkI1Jls/Vq0OrfoaXjLFnp3sSL9OSX6k5fQ8BAwrELFxN5BDXuwO8cmX3SaZEg Dm4d1YX/btn0uMf2fp/80pEDVRyvE0jUBaYIrm5fLlqAMHCWy2SiyHMMHHX4QWwz d59iPeKDNn4zZrJJuEJS1cmOaunjpLNagtY7HyQpYps0eMei0hA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client