$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: 5K4QNTGJUFLy2knwJwXd/JDD6pcwqbTf67kR3Gv1i9k= Subject key identifier: AE:E3:59:92:D9:B9:45:11:F4:C8:75:2D:92:28:2E:0E:8D:C0:46:45 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 6AD97A20921665FF3F8257BE2A044A6EB086BF6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 018C Signing time: Sat 06 Sep 2025 19:22:08 +0000 Manifest this update: Sat 06 Sep 2025 19:17:08 +0000 Manifest next update: Tue 09 Sep 2025 23:56:08 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: MZ5VLdH+QMdptXQxtruvLKxZDFP4bZb2PRoBlVr5dls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d9:7a:20:92:16:65:ff:3f:82:57:be:2a:04:4a:6e:b0:86:bf:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Sep 6 19:17:08 2025 GMT Not After : Sep 9 23:56:08 2025 GMT Subject: CN=AEE35992D9B94511F4C8752D92282E0E8DC04645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:09:73:18:12:09:19:52:0b:66:2a:15:40: 7f:d7:8a:8e:a9:e1:35:fe:87:f2:0b:a1:d1:3b:49: 13:05:aa:d4:70:58:e6:b4:31:a2:7f:a1:3e:9f:ba: 3c:b9:c2:ef:3c:1a:8c:ba:44:e3:2c:ba:41:6f:cd: fd:25:3f:66:6b:80:f2:03:8c:9c:88:e1:52:d4:50: 1e:80:c9:ec:40:7b:bd:4f:d4:06:20:2e:64:d0:ff: 5b:37:32:6d:2f:4a:da:b7:d8:02:a9:c1:87:18:4b: d1:88:e8:8c:da:b7:16:e8:ca:05:56:73:91:ec:f6: 35:e8:78:06:19:98:d5:87:74:cc:c3:a2:28:34:77: e3:8c:96:e5:7f:0c:fe:39:0c:c7:0f:42:69:1b:76: 86:73:2f:cf:7b:08:f8:ff:d5:c7:4a:25:16:83:b5: 00:db:6b:d1:13:9f:cf:f6:b4:bd:f4:b4:0b:b0:64: 38:b9:21:50:d7:84:9b:2a:94:c4:59:b9:53:22:6a: b4:5d:da:e7:d4:a2:85:57:32:96:ca:d3:5a:3b:31: e1:77:b1:48:3a:5c:35:a4:76:81:43:12:44:4d:66: 61:86:e1:37:fb:9d:26:5d:44:93:6b:ca:58:8f:8d: 75:c9:ca:d2:ba:4a:6e:d4:d9:19:49:0c:5d:56:a0: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E3:59:92:D9:B9:45:11:F4:C8:75:2D:92:28:2E:0E:8D:C0:46:45 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:45:57:5e:ea:0c:b5:80:d8:81:03:5d:c5:b1:f9:3d:bb:c4: 98:83:8e:43:ce:bd:1d:fd:e0:8e:fa:78:0f:d3:1c:2d:02:15: 15:76:e9:0a:31:75:a6:f2:96:3f:f5:cf:48:20:b8:59:2a:5b: e5:f9:a7:fb:35:37:85:4b:a0:1c:39:27:6c:2e:54:50:68:a5: c0:1a:e9:a2:dc:60:64:72:bd:ac:e2:ed:7e:d2:31:79:02:da: e6:35:a7:f2:0f:1b:b1:29:4c:dd:b0:c7:33:20:6f:6f:5d:1d: 6e:2a:f5:3d:6d:b2:20:71:2f:eb:8f:e6:98:82:88:4d:99:ab: 75:0f:f1:a8:8d:de:ee:d7:82:fb:fd:63:ab:9a:eb:c4:be:62: 6e:d7:bf:36:cd:5d:0e:e8:d8:eb:59:87:cf:87:08:a4:55:21: 20:c6:d7:aa:fd:99:b5:42:00:74:4b:e6:c5:52:85:3d:07:26: b3:6d:30:3b:53:6b:5e:1a:4f:82:e6:da:c6:2a:95:40:6c:03: 7e:aa:68:d2:28:a3:43:fa:66:1e:2d:8f:fc:62:cb:b0:df:10: 06:38:19:2f:b7:65:8b:8b:fa:f9:a7:34:16:bc:6d:18:87:66: 91:07:bf:4d:00:c8:22:f4:d7:84:4d:d2:82:d0:35:14:d1:4d: 02:ca:2b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatl6IJIWZf8/gle+KgRKbrCGv20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA5MDYxOTE3MDhaFw0yNTA5MDkyMzU2MDhaMDMxMTAvBgNV BAMTKEFFRTM1OTkyRDlCOTQ1MTFGNEM4NzUyRDkyMjgyRTBFOERDMDQ2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UQlzGBIJGVILZioVQH/Xio6p 4TX+h/ILodE7SRMFqtRwWOa0MaJ/oT6fujy5wu88Goy6ROMsukFvzf0lP2ZrgPID jJyI4VLUUB6AyexAe71P1AYgLmTQ/1s3Mm0vStq32AKpwYcYS9GI6IzatxboygVW c5Hs9jXoeAYZmNWHdMzDoig0d+OMluV/DP45DMcPQmkbdoZzL897CPj/1cdKJRaD tQDba9ETn8/2tL30tAuwZDi5IVDXhJsqlMRZuVMiarRd2ufUooVXMpbK01o7MeF3 sUg6XDWkdoFDEkRNZmGG4Tf7nSZdRJNryliPjXXJytK6Sm7U2RlJDF1WoBh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruNZktm5RRH0yHUtkiguDo3ARkUwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5FV17qDLWA2IEDXcWx+T27xJiDjkPOvR39 4I76eA/THC0CFRV26Qoxdabylj/1z0gguFkqW+X5p/s1N4VLoBw5J2wuVFBopcAa 6aLcYGRyvazi7X7SMXkC2uY1p/IPG7EpTN2wxzMgb29dHW4q9T1tsiBxL+uP5piC iE2Zq3UP8aiN3u7Xgvv9Y6ua68S+Ym7XvzbNXQ7o2OtZh8+HCKRVISDG16r9mbVC AHRL5sVShT0HJrNtMDtTa14aT4Lm2sYqlUBsA36qaNIoo0P6Zh4tj/xiy7DfEAY4 GS+3ZYuL+vmnNBa8bRiHZpEHv00AyCL014RN0oLQNRTRTQLKK7g= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:12 2025 by rpki-client