$ rpki-client -vvf repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft File: F2B9762E29FC128E7A5553319EB45533550D5C93.mft (raw, json) Hash identifier: sX8csqO4RXdylw6iwfsjQjBFeU04SWGNZSPTCkdzJ4A= Subject key identifier: D5:87:B1:92:83:77:6C:67:91:6E:0F:06:1B:8A:89:36:96:65:EA:05 Authority key identifier: F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93 Certificate issuer: /CN=F2B9762E29FC128E7A5553319EB45533550D5C93 Certificate serial: 558361EB86336A429FE25873203FC95FAFF301CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft Manifest number: 03C0 Signing time: Sat 06 Sep 2025 03:10:54 +0000 Manifest this update: Sat 06 Sep 2025 03:05:54 +0000 Manifest next update: Tue 09 Sep 2025 07:45:54 +0000 Files and hashes: 1: F2B9762E29FC128E7A5553319EB45533550D5C93.crl (hash: dDfbh3jg9pe94ufhhNmHcqG/KBy7UKDDBnCFHGUfsFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:61:eb:86:33:6a:42:9f:e2:58:73:20:3f:c9:5f:af:f3:01:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B9762E29FC128E7A5553319EB45533550D5C93 Validity Not Before: Sep 6 03:05:54 2025 GMT Not After : Sep 9 07:45:54 2025 GMT Subject: CN=D587B19283776C67916E0F061B8A89369665EA05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:8f:b2:91:55:f5:5e:90:cf:e9:c6:7a:8b: 40:02:dd:aa:a7:39:33:ec:46:6f:30:92:30:1e:16: d5:d5:29:df:be:ab:1d:9a:16:d1:c6:17:7e:91:a6: ac:af:cb:1d:d3:22:e5:68:ea:36:4f:27:75:98:a4: dd:48:38:4a:f4:ee:fe:c1:c2:2e:57:a9:cd:3d:06: 92:bc:2a:7b:7a:42:c3:83:63:1c:63:3b:a4:f7:83: 7c:b2:7e:95:82:90:b8:81:f7:3b:30:b2:15:fb:9c: 23:20:1f:8a:39:45:f2:ca:86:96:02:e9:39:a0:c1: ab:a6:70:02:61:99:68:69:97:64:ba:58:b0:d5:d3: 0a:27:f2:6f:9d:75:e2:b3:22:66:eb:39:31:7d:71: 59:7d:1d:e0:3f:5d:85:44:4d:15:1e:78:5d:2a:73: 4f:59:ad:02:e1:20:97:fd:ef:95:2e:b7:0b:29:d5: 1e:29:78:d7:be:09:29:8a:a2:1f:82:8e:bf:ee:f8: db:32:c0:e0:e9:7d:96:18:18:01:16:2b:c3:29:78: fe:bb:7c:5c:f7:ff:71:af:86:79:df:8a:ed:74:df: 67:16:0a:9a:50:76:69:0a:26:46:5d:88:19:cc:c7: 62:d3:5a:97:a3:0a:39:9c:79:64:0c:94:1d:84:7a: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:B1:92:83:77:6C:67:91:6E:0F:06:1B:8A:89:36:96:65:EA:05 X509v3 Authority Key Identifier: keyid:F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ed:5e:fe:91:da:6b:86:ad:6b:17:da:57:b0:40:3b:15:7b: 0a:cd:8b:1f:0e:af:12:b4:df:64:c1:b0:34:60:f2:ae:0a:90: 74:f2:e7:75:ea:36:5c:f3:92:88:c0:93:3b:88:93:af:c7:73: 18:57:03:ba:50:b6:bc:e3:22:64:b7:f8:b8:cb:fd:d0:d8:52: c6:8d:63:2e:61:da:1a:0c:97:82:f4:b4:28:ca:7e:3a:d4:5b: 58:e0:1e:d7:a5:8c:57:16:e0:2e:8e:4f:f5:58:0a:80:88:b5: 31:3d:88:e8:a6:54:e9:4f:fc:29:a5:b5:a0:8e:50:ea:92:aa: 3c:9d:58:0a:9c:45:ed:e0:9c:37:21:1e:e0:78:91:5b:0e:97: 34:36:49:a5:ff:0a:18:d9:81:60:51:a7:fb:af:0f:ec:98:a3: aa:1c:93:25:00:e1:97:a1:39:af:be:ff:4f:6c:50:f7:b8:e5: 17:48:3f:6d:8a:2a:d2:d7:65:f4:21:78:6a:cd:cf:4e:e8:49: 7e:c4:54:83:84:15:58:16:28:9a:16:f4:65:19:42:08:a5:22: 16:b8:68:18:81:5e:58:a2:dc:53:c7:6d:e0:c2:b2:c1:55:06: c5:dd:fb:c9:7c:5c:3b:62:e4:bd:b1:0f:9f:e4:2a:9d:3e:46: d3:84:d2:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYNh64YzakKf4lhzID/JX6/zAc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCOTc2MkUyOUZDMTI4RTdBNTU1MzMxOUVCNDU1MzM1 NTBENUM5MzAeFw0yNTA5MDYwMzA1NTRaFw0yNTA5MDkwNzQ1NTRaMDMxMTAvBgNV BAMTKEQ1ODdCMTkyODM3NzZDNjc5MTZFMEYwNjFCOEE4OTM2OTY2NUVBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlo+ykVX1XpDP6cZ6i0AC3aqn OTPsRm8wkjAeFtXVKd++qx2aFtHGF36Rpqyvyx3TIuVo6jZPJ3WYpN1IOEr07v7B wi5Xqc09BpK8Knt6QsODYxxjO6T3g3yyfpWCkLiB9zswshX7nCMgH4o5RfLKhpYC 6TmgwaumcAJhmWhpl2S6WLDV0won8m+ddeKzImbrOTF9cVl9HeA/XYVETRUeeF0q c09ZrQLhIJf975Uutwsp1R4peNe+CSmKoh+Cjr/u+NsywODpfZYYGAEWK8MpeP67 fFz3/3Gvhnnfiu1032cWCppQdmkKJkZdiBnMx2LTWpejCjmceWQMlB2EenaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YexkoN3bGeRbg8GG4qJNpZl6gUwHwYDVR0j BBgwFoAU8rl2Lin8Eo56VVMxnrRVM1UNXJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3OTdiNS03MzBhLTQ4NDEtYTc1Ni04MzNlMjZiMWNhMGMvMC9GMkI5NzYyRTI5 RkMxMjhFN0E1NTUzMzE5RUI0NTUzMzU1MEQ1QzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCOTc2MkUyOUZDMTI4RTdBNTU1MzMxOUVCNDU1MzM1NTBE NUM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjNzk3YjUtNzMwYS00ODQxLWE3 NTYtODMzZTI2YjFjYTBjLzAvRjJCOTc2MkUyOUZDMTI4RTdBNTU1MzMxOUVCNDU1 MzM1NTBENUM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAntXv6R2muGrWsX2lewQDsVewrNix8OrxK0 32TBsDRg8q4KkHTy53XqNlzzkojAkzuIk6/HcxhXA7pQtrzjImS3+LjL/dDYUsaN Yy5h2hoMl4L0tCjKfjrUW1jgHteljFcW4C6OT/VYCoCItTE9iOimVOlP/CmltaCO UOqSqjydWAqcRe3gnDchHuB4kVsOlzQ2SaX/ChjZgWBRp/uvD+yYo6ockyUA4Zeh Oa++/09sUPe45RdIP22KKtLXZfQheGrNz07oSX7EVIOEFVgWKJoW9GUZQgilIha4 aBiBXlii3FPHbeDCssFVBsXd+8l8XDti5L2xD5/kKp0+RtOE0jQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:11 2025 by rpki-client