$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: g5BsW13XDWKcKbQVvlIIaX+2IvYfN13gJAfe/Qfkh5I= Subject key identifier: 95:6A:D3:44:2F:63:37:6A:02:66:8D:11:5C:83:35:66:DA:31:CA:07 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 508BA4D780F0C3ADBF693CFD3FF52A58E9A445B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 42 Signing time: Tue 03 Jun 2025 15:05:25 +0000 Manifest this update: Tue 03 Jun 2025 15:00:25 +0000 Manifest next update: Sat 07 Jun 2025 00:01:25 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: QQ6lt6d4xIaAXH3sjOXmjhE6eIQaJx9CD105Rdrh04g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8b:a4:d7:80:f0:c3:ad:bf:69:3c:fd:3f:f5:2a:58:e9:a4:45:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Jun 3 15:00:25 2025 GMT Not After : Jun 7 00:01:25 2025 GMT Subject: CN=956AD3442F63376A02668D115C833566DA31CA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:94:af:4f:07:20:80:63:fb:4d:6a:64:02: 6b:b4:9e:89:dd:68:c3:73:57:81:32:d5:ba:fa:60: 87:3b:0e:73:d2:70:d7:67:d5:17:2e:61:f6:6d:68: db:db:52:ba:98:24:ab:3d:67:15:2c:bc:1f:44:02: ab:b2:f3:13:b6:04:1c:34:c3:0c:7b:49:2b:24:8d: 37:b8:6a:06:8c:d4:de:91:27:ae:54:30:c4:47:9c: 53:4e:81:a3:19:44:e0:16:78:a0:04:4a:28:42:22: 30:69:f3:22:b3:70:bd:07:42:69:3f:39:10:ee:0a: 0b:7e:85:bc:8e:50:1f:91:09:82:56:95:19:49:2e: 69:54:b4:3e:ed:98:07:ab:53:0b:76:61:85:bc:0c: 15:ba:55:d1:c8:f8:c8:b3:62:55:0b:71:76:be:26: ee:dc:45:22:8a:1c:37:ea:ff:cb:a1:d3:99:60:06: 36:6f:e7:0b:33:d0:4c:71:4d:dc:f9:96:20:79:23: 50:84:ea:96:be:b4:ef:12:64:36:eb:17:1b:c9:ac: e0:71:d3:2e:ce:73:f8:ea:c2:d6:cd:7a:81:1d:fc: ba:47:45:3d:f7:df:be:67:53:d0:08:96:ea:b2:40: 45:cd:bd:cf:43:23:c0:20:a7:99:ea:4b:62:c5:a3: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6A:D3:44:2F:63:37:6A:02:66:8D:11:5C:83:35:66:DA:31:CA:07 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bd:81:2c:54:8f:66:d4:e4:4b:32:a8:15:63:b3:ab:05:84: 13:9c:bc:20:6b:b6:18:72:6c:e2:a7:8f:23:e3:a5:09:21:98: b5:f4:46:3c:47:e2:0c:90:0a:a4:8d:28:e9:c3:8e:4b:72:c1: 0d:57:cd:ea:55:3a:1b:e9:c7:0d:17:c1:fb:c9:6c:b1:90:ae: 77:51:47:9a:af:79:61:ba:76:05:c0:8e:1f:42:0b:b6:58:71: 9f:00:b8:a3:63:26:93:81:41:d9:b9:a0:5d:e3:79:74:8e:ef: 5e:7a:9f:e3:14:c5:bc:6e:02:e0:33:29:28:85:c1:85:fa:49: bb:48:d1:33:9f:5d:53:8b:eb:e0:61:7c:5b:ff:a9:8d:2c:03: 91:8a:e6:18:d7:e5:e4:e6:bc:c3:88:37:1b:89:09:f1:8f:0c: 14:e6:57:26:f1:e3:8c:34:a0:8d:2d:25:fa:58:0d:2b:50:a7: 11:77:7b:ee:dc:0e:60:68:1d:63:80:2d:2c:fe:2a:9b:e9:d3: c9:06:30:44:8e:44:8b:d1:bf:33:29:2d:1b:9c:31:9d:55:d6: 7e:f8:64:d3:3d:1d:2a:40:f6:3d:64:35:4d:eb:78:af:72:d1: a0:9a:d5:7d:e0:05:98:d4:ca:11:84:7a:31:6f:f6:1e:e7:dd: a6:63:4e:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIuk14Dww62/aTz9P/UqWOmkRbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA2MDMxNTAwMjVaFw0yNTA2MDcwMDAxMjVaMDMxMTAvBgNV BAMTKDk1NkFEMzQ0MkY2MzM3NkEwMjY2OEQxMTVDODMzNTY2REEzMUNBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrpSvTwcggGP7TWpkAmu0nond aMNzV4Ey1br6YIc7DnPScNdn1RcuYfZtaNvbUrqYJKs9ZxUsvB9EAquy8xO2BBw0 wwx7SSskjTe4agaM1N6RJ65UMMRHnFNOgaMZROAWeKAESihCIjBp8yKzcL0HQmk/ ORDuCgt+hbyOUB+RCYJWlRlJLmlUtD7tmAerUwt2YYW8DBW6VdHI+MizYlULcXa+ Ju7cRSKKHDfq/8uh05lgBjZv5wsz0ExxTdz5liB5I1CE6pa+tO8SZDbrFxvJrOBx 0y7Oc/jqwtbNeoEd/LpHRT33375nU9AIluqyQEXNvc9DI8Agp5nqS2LFo1zpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWrTRC9jN2oCZo0RXIM1ZtoxygcwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu9gSxUj2bU5EsyqBVjs6sFhBOcvCBrthhy bOKnjyPjpQkhmLX0RjxH4gyQCqSNKOnDjktywQ1XzepVOhvpxw0XwfvJbLGQrndR R5qveWG6dgXAjh9CC7ZYcZ8AuKNjJpOBQdm5oF3jeXSO7156n+MUxbxuAuAzKSiF wYX6SbtI0TOfXVOL6+BhfFv/qY0sA5GK5hjX5eTmvMOINxuJCfGPDBTmVybx44w0 oI0tJfpYDStQpxF3e+7cDmBoHWOALSz+Kpvp08kGMESORIvRvzMpLRucMZ1V1n74 ZNM9HSpA9j1kNU3reK9y0aCa1X3gBZjUyhGEejFv9h7n3aZjTtw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:53 2025 by rpki-client