$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: urc9mZUstlWmXgVka2ainZe6gsroOFWmmBb/gu5WYug= Subject key identifier: 0E:5D:CE:B1:EF:CF:6E:09:F6:A6:B0:8A:88:01:03:47:98:F6:28:F6 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 7C942EBC99B1028CBFD407C1BB95B14F6E37EBD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 048F Signing time: Tue 03 Jun 2025 06:21:14 +0000 Manifest this update: Tue 03 Jun 2025 06:16:14 +0000 Manifest next update: Fri 06 Jun 2025 07:05:14 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: 3TM0KK6ORt2LfPbD5PPz3AaDGRQJJhb+77bf8ehb1NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 07:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:94:2e:bc:99:b1:02:8c:bf:d4:07:c1:bb:95:b1:4f:6e:37:eb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Jun 3 06:16:14 2025 GMT Not After : Jun 6 07:05:14 2025 GMT Subject: CN=0E5DCEB1EFCF6E09F6A6B08A8801034798F628F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:eb:5d:ae:05:13:9d:dc:9d:54:81:ea:c7: b5:40:af:dc:54:78:c4:bd:d2:cd:2e:58:ec:18:50: 38:21:cf:dd:16:5b:f8:2d:69:df:ce:60:01:10:39: 04:7a:fd:ad:a8:d8:14:8d:ce:b8:9b:f0:9b:af:b6: dd:cb:5b:99:48:a7:37:de:b9:bd:c0:86:ab:d3:35: 8a:27:09:1d:5b:53:b0:13:e8:6e:c2:58:22:48:38: 06:0f:59:1f:92:2d:66:9c:18:79:c5:ca:18:47:fb: 3b:79:f1:e7:c3:16:04:fc:f7:17:84:fc:f1:a4:b6: 8f:21:ab:1f:93:1b:69:2e:f4:ee:87:48:38:53:8c: 76:3f:dc:f6:af:90:0b:99:d2:91:52:f1:a0:8f:ae: 5f:86:5a:ed:41:8d:87:31:98:67:90:ff:ac:48:a8: 14:4c:ca:55:34:63:99:12:64:b3:4f:31:e7:b7:02: 16:01:93:b1:99:fd:c0:29:0c:c0:f9:46:27:00:c7: 3b:b6:25:af:0b:81:5d:9a:e3:4c:5f:36:fa:7b:fc: e5:19:a5:69:1c:be:72:a3:a3:73:05:89:68:5f:fd: e7:ac:4c:43:b7:c9:4b:2f:58:2f:f5:3d:1c:f7:1e: 34:a2:55:88:06:a8:27:e9:c2:cb:c7:b5:d1:f4:9c: 32:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:CE:B1:EF:CF:6E:09:F6:A6:B0:8A:88:01:03:47:98:F6:28:F6 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:aa:f9:aa:81:83:bc:91:a4:f4:94:c4:9d:46:32:db:00:7e: d2:33:83:2a:83:54:bf:f7:fc:92:e4:90:4c:d3:83:ab:2e:31: 78:28:ed:b3:f1:0b:13:42:86:f0:5f:0c:c0:98:f8:3e:cd:44: b4:3a:d8:50:e4:f5:f9:33:66:23:f0:d4:b1:8e:7e:95:d3:f5: c4:39:e4:ff:08:ec:85:71:03:1c:da:6f:4b:c3:6d:78:f2:34: cf:c1:98:c5:d6:f6:c8:a6:95:f5:98:9e:9f:55:4a:5c:1a:d0: 5d:bd:ff:ae:89:76:de:0d:c6:d7:79:61:69:da:5f:61:a0:f0: 88:c2:d8:35:be:04:04:5f:32:d1:5a:40:5d:d2:35:a6:1e:d1: 16:d1:9a:f9:bf:bc:ea:ea:3b:f4:ff:ef:32:af:41:6c:83:2f: b3:bd:60:17:7c:e2:0d:24:86:98:3e:55:03:e7:b1:09:35:f8: 4d:dd:f5:75:99:88:31:e6:de:1e:d5:33:27:92:20:58:71:33: a9:20:e2:35:4c:14:42:0b:bc:e0:cf:f6:93:58:29:c3:8c:9f: 6f:9e:90:bb:e1:e8:7b:87:e6:d5:6d:c2:d0:85:30:b0:6b:bd: bc:ac:c2:5a:c4:d0:d8:c0:7d:7e:98:0c:3c:7c:57:0a:eb:7e: aa:33:7c:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJQuvJmxAoy/1AfBu5WxT24369EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA2MDMwNjE2MTRaFw0yNTA2MDYwNzA1MTRaMDMxMTAvBgNV BAMTKDBFNURDRUIxRUZDRjZFMDlGNkE2QjA4QTg4MDEwMzQ3OThGNjI4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBetdrgUTndydVIHqx7VAr9xU eMS90s0uWOwYUDghz90WW/gtad/OYAEQOQR6/a2o2BSNzrib8Juvtt3LW5lIpzfe ub3AhqvTNYonCR1bU7AT6G7CWCJIOAYPWR+SLWacGHnFyhhH+zt58efDFgT89xeE /PGkto8hqx+TG2ku9O6HSDhTjHY/3PavkAuZ0pFS8aCPrl+GWu1BjYcxmGeQ/6xI qBRMylU0Y5kSZLNPMee3AhYBk7GZ/cApDMD5RicAxzu2Ja8LgV2a40xfNvp7/OUZ pWkcvnKjo3MFiWhf/eesTEO3yUsvWC/1PRz3HjSiVYgGqCfpwsvHtdH0nDLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDl3Ose/Pbgn2prCKiAEDR5j2KPYwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+q+aqBg7yRpPSUxJ1GMtsAftIzgyqDVL/3 /JLkkEzTg6suMXgo7bPxCxNChvBfDMCY+D7NRLQ62FDk9fkzZiPw1LGOfpXT9cQ5 5P8I7IVxAxzab0vDbXjyNM/BmMXW9simlfWYnp9VSlwa0F29/66Jdt4Nxtd5YWna X2Gg8IjC2DW+BARfMtFaQF3SNaYe0RbRmvm/vOrqO/T/7zKvQWyDL7O9YBd84g0k hpg+VQPnsQk1+E3d9XWZiDHm3h7VMyeSIFhxM6kg4jVMFEILvODP9pNYKcOMn2+e kLvh6HuH5tVtwtCFMLBrvbyswlrE0NjAfX6YDDx8VwrrfqozfCo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:16 2025 by rpki-client