$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: C+6N8HH1OAkKThAV43TkM3e0KF1V9JYI4vt3wgoPfMk= Subject key identifier: 58:B2:A4:92:49:7F:3D:D4:8B:DB:FD:8B:BF:F3:2B:6D:2E:4C:39:24 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 48F14389CFE505D06A048479CB26D267B9451F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0163 Signing time: Thu 05 Jun 2025 03:51:57 +0000 Manifest this update: Thu 05 Jun 2025 03:46:57 +0000 Manifest next update: Sun 08 Jun 2025 09:10:57 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: WrelryosQ5oxBj2I/dup2XGDK8GPczUCC2AqsmxNgWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f1:43:89:cf:e5:05:d0:6a:04:84:79:cb:26:d2:67:b9:45:1f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Jun 5 03:46:57 2025 GMT Not After : Jun 8 09:10:57 2025 GMT Subject: CN=58B2A492497F3DD48BDBFD8BBFF32B6D2E4C3924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:90:9d:b9:7d:f0:c3:09:21:eb:5e:f9:e4: 93:ba:8c:04:dc:8e:8c:80:49:fc:fa:4e:e7:4a:ac: bf:07:dd:3c:57:72:eb:59:f4:4e:4e:77:26:a5:1f: 0e:ce:c4:dc:3b:fd:7d:11:f8:ff:39:5b:50:fd:07: a6:90:a2:d5:ff:52:6b:0b:2b:f2:5e:6a:4b:35:e2: 49:b6:8d:49:9d:e7:6c:cf:c8:ce:75:da:7a:16:d5: 1f:89:4b:11:8c:23:a0:9e:59:fe:f8:e7:9c:54:0d: 43:f1:e8:64:f1:45:fd:9c:b0:af:14:b5:33:f0:82: 39:92:0b:18:a4:66:f7:52:c1:91:e9:d6:af:5f:18: f1:bf:39:4c:e0:57:a8:6a:54:a5:01:ae:b2:d6:3b: 03:ec:cc:ec:12:3c:2e:98:48:26:d3:01:d4:cb:c7: a6:bb:3d:a0:16:b1:d7:f0:84:6f:ee:f1:48:02:80: 7a:5b:d1:d6:b4:53:e3:b9:5e:e3:e0:3c:07:6c:53: c5:c0:5d:df:d5:40:b4:73:be:86:45:6e:42:a6:2b: c5:1a:79:b4:e6:e5:34:75:59:88:d6:fb:d3:ec:bc: a8:2c:e1:29:4e:45:d2:f0:36:02:e6:a8:03:28:9c: 26:27:19:39:c6:26:8d:44:be:0c:61:e9:6e:aa:57: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:A4:92:49:7F:3D:D4:8B:DB:FD:8B:BF:F3:2B:6D:2E:4C:39:24 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:f1:6d:cc:85:80:33:23:da:b1:5c:8a:c1:0e:08:04:dc: 1e:ef:9b:b4:7e:1d:02:0f:e7:38:1d:58:c6:db:10:e4:d7:f7: 6e:91:b4:4d:2b:8f:64:d0:98:39:74:27:ed:4e:f9:91:7e:ca: 54:08:60:c1:2f:5b:c6:a6:d3:7d:ec:92:88:c1:5f:0b:88:34: d5:f2:7f:87:07:f2:d8:3f:07:9d:64:5f:77:5d:d0:cd:2b:5e: fe:19:2f:68:fa:71:6b:50:80:02:fa:99:e3:49:c2:0e:49:92: c5:4d:98:3c:0b:2f:94:44:c3:7e:39:40:52:70:68:44:e8:60: 90:a9:36:63:46:e3:62:58:4f:8a:79:4b:04:79:59:08:94:6f: 68:18:d8:3e:32:33:54:ad:c7:62:94:6c:b7:19:a0:7b:82:33: 09:29:f9:40:bf:fd:ef:d2:fa:a8:c1:61:a6:1b:61:a6:e3:48: db:8c:6e:0a:59:b2:28:b4:47:fd:fa:b9:f6:5b:f4:ad:f2:48: c9:7c:62:c9:58:b8:34:3e:55:ba:1d:95:47:e8:39:e6:fd:9b: 4b:b6:04:a7:b6:30:b8:6b:02:e9:77:26:16:c2:4d:10:b7:44: 5a:01:0b:c5:a3:56:80:db:ad:0a:73:c8:be:0b:e3:d6:1c:a6: 72:a8:dd:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPFDic/lBdBqBIR5yybSZ7lFH1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA2MDUwMzQ2NTdaFw0yNTA2MDgwOTEwNTdaMDMxMTAvBgNV BAMTKDU4QjJBNDkyNDk3RjNERDQ4QkRCRkQ4QkJGRjMyQjZEMkU0QzM5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIZCduX3wwwkh61755JO6jATc joyASfz6TudKrL8H3TxXcutZ9E5OdyalHw7OxNw7/X0R+P85W1D9B6aQotX/UmsL K/Jeaks14km2jUmd52zPyM512noW1R+JSxGMI6CeWf7455xUDUPx6GTxRf2csK8U tTPwgjmSCxikZvdSwZHp1q9fGPG/OUzgV6hqVKUBrrLWOwPszOwSPC6YSCbTAdTL x6a7PaAWsdfwhG/u8UgCgHpb0da0U+O5XuPgPAdsU8XAXd/VQLRzvoZFbkKmK8Ua ebTm5TR1WYjW+9PsvKgs4SlORdLwNgLmqAMonCYnGTnGJo1Evgxh6W6qVwlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLKkkkl/PdSL2/2Lv/MrbS5MOSQwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcW8W3MhYAzI9qxXIrBDggE3B7vm7R+HQIP 5zgdWMbbEOTX926RtE0rj2TQmDl0J+1O+ZF+ylQIYMEvW8am033skojBXwuINNXy f4cH8tg/B51kX3dd0M0rXv4ZL2j6cWtQgAL6meNJwg5JksVNmDwLL5REw345QFJw aEToYJCpNmNG42JYT4p5SwR5WQiUb2gY2D4yM1Stx2KUbLcZoHuCMwkp+UC//e/S +qjBYaYbYabjSNuMbgpZsii0R/36ufZb9K3ySMl8YslYuDQ+VbodlUfoOeb9m0u2 BKe2MLhrAul3JhbCTRC3RFoBC8WjVoDbrQpzyL4L49YcpnKo3bc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:20 2025 by rpki-client