$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: a2LA4R12osEsBNWcAMcCH48ONINTWKIWHbSPI+coDvE= Subject key identifier: 9C:8C:58:9D:1B:8D:99:EF:C4:85:BF:E8:D3:DB:AE:4C:20:C3:FE:19 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 188682BC9173CA0964E988361DE4081C7B2118CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 04B8 Signing time: Wed 03 Sep 2025 12:41:02 +0000 Manifest this update: Wed 03 Sep 2025 12:36:02 +0000 Manifest next update: Sat 06 Sep 2025 15:05:02 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: WsIm3b+xlyMBc+8SevGshQJ3VD+3QC+3KU7gk3qgFxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:86:82:bc:91:73:ca:09:64:e9:88:36:1d:e4:08:1c:7b:21:18:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Sep 3 12:36:02 2025 GMT Not After : Sep 6 15:05:02 2025 GMT Subject: CN=9C8C589D1B8D99EFC485BFE8D3DBAE4C20C3FE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:f0:68:2c:1f:8c:49:c7:cf:54:5a:e8:a1: 9f:99:3e:cc:6d:39:e3:48:0c:c3:9f:8e:cc:db:ab: 5e:0e:31:bd:cd:39:03:c2:53:bf:90:df:a6:d7:f8: 60:73:81:fb:6e:a3:50:c1:78:e9:50:b0:06:ae:c0: 3f:fe:ec:04:04:53:d8:f6:9b:6e:a2:6c:93:25:5c: 16:02:54:2f:c4:07:12:0e:2f:a8:4b:97:29:52:5e: 60:8a:09:97:d1:b6:3c:4a:81:6c:5d:85:15:54:a8: c8:89:b4:4f:0c:e5:76:21:f8:93:d5:3b:63:52:d0: a1:f0:72:42:f3:c0:eb:48:34:4d:01:f3:77:59:61: 5f:d0:a8:18:55:74:89:f0:46:d6:b0:1d:57:4f:ab: 25:4a:ba:63:aa:b2:46:eb:84:97:7d:0d:82:d9:46: 7a:05:df:8e:b8:d6:6c:04:a5:26:9b:5c:20:d8:9c: f2:00:22:2c:f7:7f:19:47:3d:b0:00:41:ff:83:03: c5:59:eb:7e:b2:76:7c:ab:ae:3d:df:23:cd:96:61: 96:1c:7f:7d:41:07:97:6f:70:04:3d:23:e9:0c:28: 4d:75:30:e6:72:b6:fa:cf:4d:d9:53:1d:5e:8f:b2: 3b:98:de:cb:b6:be:67:b1:2f:96:e3:e1:b2:d6:9d: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:58:9D:1B:8D:99:EF:C4:85:BF:E8:D3:DB:AE:4C:20:C3:FE:19 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8b:89:53:f0:43:01:b2:05:91:1b:a0:8c:85:2e:dd:4e:0d: ee:2e:59:07:46:eb:bd:97:22:5b:65:fc:88:3f:14:5e:85:a1: 77:99:71:1c:50:69:82:d2:0f:b9:83:15:fa:01:58:d5:53:c6: 72:e7:fa:f6:4d:8d:1d:a7:64:fe:0f:13:35:46:6b:c6:d5:a7: e6:c4:fd:4e:83:42:c9:3e:29:e9:e2:97:de:40:b2:6e:3c:3f: 9c:ab:ca:d5:13:9a:88:d4:5c:ec:3f:90:a6:a2:e4:b1:a8:29: 8a:f6:97:56:d0:51:3e:f7:24:2a:db:d4:ec:b5:42:f3:94:90: 60:87:d0:92:87:14:b5:eb:44:71:44:2e:a7:05:6c:2b:d6:ca: 89:e0:ee:47:dd:e7:47:fd:19:0f:1f:6e:68:e7:3e:7a:15:d1: 4b:a0:7f:cf:63:6f:a3:30:55:c7:ba:e2:1f:dd:05:42:7c:5e: d0:4a:1c:ae:e6:93:4d:44:05:a1:30:f1:66:a6:1e:41:09:ba: c9:34:9d:75:72:f7:98:e3:fb:30:df:71:4e:fa:65:b5:9c:38: 1e:30:ae:62:98:f5:4a:f8:56:3c:9e:ac:43:18:de:d1:39:c1: 47:40:93:20:61:8f:30:29:c2:06:ac:46:74:ed:bb:0c:d0:52: ce:0b:06:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIaCvJFzyglk6Yg2HeQIHHshGMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA5MDMxMjM2MDJaFw0yNTA5MDYxNTA1MDJaMDMxMTAvBgNV BAMTKDlDOEM1ODlEMUI4RDk5RUZDNDg1QkZFOEQzREJBRTRDMjBDM0ZFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iPBoLB+MScfPVFrooZ+ZPsxt OeNIDMOfjszbq14OMb3NOQPCU7+Q36bX+GBzgftuo1DBeOlQsAauwD/+7AQEU9j2 m26ibJMlXBYCVC/EBxIOL6hLlylSXmCKCZfRtjxKgWxdhRVUqMiJtE8M5XYh+JPV O2NS0KHwckLzwOtINE0B83dZYV/QqBhVdInwRtawHVdPqyVKumOqskbrhJd9DYLZ RnoF34641mwEpSabXCDYnPIAIiz3fxlHPbAAQf+DA8VZ636ydnyrrj3fI82WYZYc f31BB5dvcAQ9I+kMKE11MOZytvrPTdlTHV6PsjuY3su2vmexL5bj4bLWncXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnIxYnRuNme/Ehb/o09uuTCDD/hkwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGLiVPwQwGyBZEboIyFLt1ODe4uWQdG672X Iltl/Ig/FF6FoXeZcRxQaYLSD7mDFfoBWNVTxnLn+vZNjR2nZP4PEzVGa8bVp+bE /U6DQsk+Kenil95Asm48P5yrytUTmojUXOw/kKai5LGoKYr2l1bQUT73JCrb1Oy1 QvOUkGCH0JKHFLXrRHFELqcFbCvWyong7kfd50f9GQ8fbmjnPnoV0Uugf89jb6Mw Vce64h/dBUJ8XtBKHK7mk01EBaEw8WamHkEJusk0nXVy95jj+zDfcU76ZbWcOB4w rmKY9Ur4VjyerEMY3tE5wUdAkyBhjzApwgasRnTtuwzQUs4LBlU= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:53 2025 by rpki-client