$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: lIgSvXmJTh8Bd61IRBCl/0goztsj5hqLgTqCBAA7cqs= Subject key identifier: F7:71:BC:77:58:F3:4E:5C:6D:E3:C4:B1:5A:16:A9:1A:B5:70:7E:C9 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 45AE13F95012525077478F577BE644B07941431E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0129 Signing time: Fri 05 Sep 2025 10:10:55 +0000 Manifest this update: Fri 05 Sep 2025 10:05:55 +0000 Manifest next update: Mon 08 Sep 2025 17:36:55 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: GG0J0ENzp1YUnFsEFnVh9CGdLMxaLgW8U5ez5xcuX6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ae:13:f9:50:12:52:50:77:47:8f:57:7b:e6:44:b0:79:41:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Sep 5 10:05:55 2025 GMT Not After : Sep 8 17:36:55 2025 GMT Subject: CN=F771BC7758F34E5C6DE3C4B15A16A91AB5707EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:80:8d:d3:bf:1e:33:41:8a:ef:0c:5b:0a: 3e:86:cd:d4:62:91:20:d3:f3:36:7d:bf:4c:4f:8f: 5a:79:b6:36:b1:6f:40:df:fe:f6:78:24:0d:71:39: a9:d8:c1:9b:8b:c6:e1:7f:37:0c:42:3c:8a:66:5e: 24:1e:3a:03:ae:63:b4:1c:50:df:ca:83:17:43:bc: 89:86:49:c7:cb:65:8a:15:3a:28:8d:81:79:e0:62: 27:5c:38:a1:45:12:a0:6d:f0:4d:4b:5d:18:84:f9: a2:13:62:a3:aa:05:71:c4:e5:5d:bd:9d:e2:65:57: fe:43:ad:0d:b6:7f:43:7d:10:0b:6d:5a:6f:02:bb: e6:d7:8a:e5:ef:0e:ba:5f:27:31:df:17:d6:a2:6c: 84:d9:dc:92:ca:37:b6:25:41:79:11:93:1e:d6:70: 51:be:9c:9f:28:c4:bf:b3:bf:17:75:8b:2e:fb:ef: f1:08:df:a5:0d:1b:92:b1:5f:57:35:27:73:b1:11: cb:d0:6d:91:09:03:8e:80:af:db:d3:c3:3d:b9:88: 96:de:24:15:5d:e9:b5:be:f7:cc:84:a0:d5:f9:3b: dd:2b:53:76:cb:89:4a:c6:e2:b3:6f:44:4d:c2:9a: 53:9d:de:5a:e1:72:2e:ea:44:34:b4:65:a6:76:34: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:BC:77:58:F3:4E:5C:6D:E3:C4:B1:5A:16:A9:1A:B5:70:7E:C9 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:73:df:40:11:6c:10:7d:18:d7:2c:ef:fc:01:bd:22:76:90: 57:f3:ac:8b:53:da:36:85:2b:08:4b:89:fa:52:59:60:26:c7: 25:9b:f6:a5:f0:9e:8b:d1:d3:44:6e:55:6c:48:40:f1:2b:7e: 76:32:d1:ac:04:70:a2:62:cd:8f:82:70:85:b4:b0:d1:23:71: 69:ef:50:85:dc:e5:96:99:71:39:a1:ca:3a:e0:97:07:03:88: a3:12:3c:00:c2:bc:02:5a:57:88:d7:0a:02:c7:75:22:45:9d: 3d:2e:ce:88:01:92:50:30:84:ba:12:04:90:8d:8a:a5:55:2f: 5a:13:ba:3b:f7:d5:42:3e:06:67:76:cb:2b:93:d3:54:6e:a2: 8e:24:05:5d:20:16:46:38:ff:bd:6a:ef:c4:c9:f8:33:8e:4d: f6:94:9e:a5:68:3a:6b:ea:9d:6a:37:4a:21:8d:de:0d:41:a3: 2b:84:a1:4e:3b:ae:2f:ad:fb:a8:f7:7d:7c:01:19:07:c0:df: 80:6a:f2:35:89:ac:50:d6:c1:53:be:f5:3a:db:2c:0d:7a:43: e4:e2:f2:1e:68:0e:a5:19:38:42:ad:c0:37:ec:55:b4:cc:ff: 4a:3e:c4:51:c5:42:c2:5e:7a:e5:35:34:21:bd:18:08:d6:2b: f8:37:19:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURa4T+VASUlB3R49Xe+ZEsHlBQx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA5MDUxMDA1NTVaFw0yNTA5MDgxNzM2NTVaMDMxMTAvBgNV BAMTKEY3NzFCQzc3NThGMzRFNUM2REUzQzRCMTVBMTZBOTFBQjU3MDdFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKYCN078eM0GK7wxbCj6GzdRi kSDT8zZ9v0xPj1p5tjaxb0Df/vZ4JA1xOanYwZuLxuF/NwxCPIpmXiQeOgOuY7Qc UN/KgxdDvImGScfLZYoVOiiNgXngYidcOKFFEqBt8E1LXRiE+aITYqOqBXHE5V29 neJlV/5DrQ22f0N9EAttWm8Cu+bXiuXvDrpfJzHfF9aibITZ3JLKN7YlQXkRkx7W cFG+nJ8oxL+zvxd1iy777/EI36UNG5KxX1c1J3OxEcvQbZEJA46Ar9vTwz25iJbe JBVd6bW+98yEoNX5O90rU3bLiUrG4rNvRE3CmlOd3lrhci7qRDS0ZaZ2NEJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93G8d1jzTlxt48SxWhapGrVwfskwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJz30ARbBB9GNcs7/wBvSJ2kFfzrItT2jaF KwhLifpSWWAmxyWb9qXwnovR00RuVWxIQPErfnYy0awEcKJizY+CcIW0sNEjcWnv UIXc5ZaZcTmhyjrglwcDiKMSPADCvAJaV4jXCgLHdSJFnT0uzogBklAwhLoSBJCN iqVVL1oTujv31UI+Bmd2yyuT01Ruoo4kBV0gFkY4/71q78TJ+DOOTfaUnqVoOmvq nWo3SiGN3g1BoyuEoU47ri+t+6j3fXwBGQfA34Bq8jWJrFDWwVO+9TrbLA16Q+Ti 8h5oDqUZOEKtwDfsVbTM/0o+xFHFQsJeeuU1NCG9GAjWK/g3GSA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:11 2025 by rpki-client