$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: DJ0aOwdzZ9lwzkhC0kmDeVnffyDelGEkk6HftLQGwb8= Subject key identifier: 3C:A5:A6:1E:21:27:6A:81:DC:EF:54:26:AF:AB:F2:A1:CF:5B:3E:EE Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 1EFCECA9197343D26A80EF8F1C729A65B2C201C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 04B2 Signing time: Thu 21 Aug 2025 16:31:03 +0000 Manifest this update: Thu 21 Aug 2025 16:26:03 +0000 Manifest next update: Sun 24 Aug 2025 22:39:03 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: WvICRGz91LZ1APaonrldY2HZC4Arw4iD2N15iimLl3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fc:ec:a9:19:73:43:d2:6a:80:ef:8f:1c:72:9a:65:b2:c2:01:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Aug 21 16:26:03 2025 GMT Not After : Aug 24 22:39:03 2025 GMT Subject: CN=3CA5A61E21276A81DCEF5426AFABF2A1CF5B3EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:df:c8:2f:46:12:93:96:2a:c4:95:10:18: ce:17:65:20:96:80:c0:b1:1a:79:65:f9:7a:5f:8e: f9:2c:68:0a:9e:3e:8a:fb:7d:3f:c5:e7:2f:08:71: e6:da:f2:2d:39:52:32:9c:68:49:21:07:63:28:b2: e2:ce:70:26:dc:0c:a2:a1:af:d7:4e:aa:db:ac:c9: a1:75:4a:82:8a:63:88:41:11:83:0d:1d:95:89:62: b1:53:89:4f:ab:43:9a:6c:0f:db:e0:f1:1d:d9:bd: 92:95:57:17:06:cb:ca:f9:b3:8b:b1:78:d2:a7:83: c9:1d:25:7c:1b:f2:4b:0f:8a:45:72:31:ea:d2:76: 5c:46:20:07:71:9b:1b:ea:29:d3:39:7b:db:31:5a: fd:aa:85:2f:b5:99:34:55:a8:7b:2d:72:f0:e8:26: 50:c2:f8:36:19:75:0e:40:28:2d:99:5f:95:6b:6d: 3f:f1:ad:71:87:09:9e:c5:79:dc:04:84:0c:cd:3c: 0e:66:ea:75:3a:4e:77:0a:80:26:fb:ae:a6:53:26: e2:5b:30:6c:d1:c6:45:43:c0:67:aa:0c:91:16:4e: 59:5d:f2:03:5c:81:1a:9b:e1:a5:3c:b4:e5:6c:ec: 47:ac:e4:6e:42:85:1f:a1:b6:36:4a:1c:c1:e3:e1: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:A6:1E:21:27:6A:81:DC:EF:54:26:AF:AB:F2:A1:CF:5B:3E:EE X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:71:66:d0:10:1d:11:99:21:ed:6e:d6:f2:e4:86:25:01:70: 20:7a:b8:c1:79:16:81:5e:1b:6e:e1:17:6e:43:3b:29:1c:44: 8a:66:da:7c:72:04:d7:e1:5a:01:f2:09:29:f2:ca:90:f2:1a: 89:00:b1:89:8e:08:04:a7:c1:00:a7:b0:91:11:7b:88:fd:4c: 73:8c:89:4d:24:96:22:a3:eb:a0:5e:12:1c:7a:d8:d8:09:e0: bd:9b:f2:f7:b2:6b:7b:b6:56:42:16:2b:3e:71:c9:67:ad:d0: b5:4c:88:f3:22:69:12:56:96:01:31:e2:16:9f:f2:7b:e1:94: 64:bc:43:a6:da:c1:ed:5f:6a:76:a5:01:3b:53:8c:cb:7a:c2: f0:39:95:75:33:2f:eb:c6:54:d6:f8:90:d7:16:28:4b:98:ab: 3a:30:c2:9b:35:c0:e8:f7:c9:e3:3c:95:88:d1:8c:ba:f8:2e: ab:21:9e:b0:bc:8d:97:43:1a:ae:a6:a9:71:40:56:78:9a:83: 08:d6:03:a1:27:a8:17:1c:a0:c8:59:41:e3:25:0f:b0:6a:44: 04:4b:dd:ed:eb:56:58:ec:bf:ba:5b:90:3c:35:a5:f4:c6:a4: 33:c7:bb:86:32:1a:d0:b6:a0:cb:15:c6:8b:7c:1e:70:d5:a4: 0b:fd:5b:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvzsqRlzQ9JqgO+PHHKaZbLCAcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA4MjExNjI2MDNaFw0yNTA4MjQyMjM5MDNaMDMxMTAvBgNV BAMTKDNDQTVBNjFFMjEyNzZBODFEQ0VGNTQyNkFGQUJGMkExQ0Y1QjNFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6N/IL0YSk5YqxJUQGM4XZSCW gMCxGnll+XpfjvksaAqePor7fT/F5y8Iceba8i05UjKcaEkhB2MosuLOcCbcDKKh r9dOqtusyaF1SoKKY4hBEYMNHZWJYrFTiU+rQ5psD9vg8R3ZvZKVVxcGy8r5s4ux eNKng8kdJXwb8ksPikVyMerSdlxGIAdxmxvqKdM5e9sxWv2qhS+1mTRVqHstcvDo JlDC+DYZdQ5AKC2ZX5VrbT/xrXGHCZ7FedwEhAzNPA5m6nU6TncKgCb7rqZTJuJb MGzRxkVDwGeqDJEWTlld8gNcgRqb4aU8tOVs7Ees5G5ChR+htjZKHMHj4WWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKWmHiEnaoHc71Qmr6vyoc9bPu4wHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVxZtAQHRGZIe1u1vLkhiUBcCB6uMF5FoFe G27hF25DOykcRIpm2nxyBNfhWgHyCSnyypDyGokAsYmOCASnwQCnsJERe4j9THOM iU0kliKj66BeEhx62NgJ4L2b8veya3u2VkIWKz5xyWet0LVMiPMiaRJWlgEx4haf 8nvhlGS8Q6bawe1fanalATtTjMt6wvA5lXUzL+vGVNb4kNcWKEuYqzowwps1wOj3 yeM8lYjRjLr4LqshnrC8jZdDGq6mqXFAVniagwjWA6EnqBccoMhZQeMlD7BqRARL 3e3rVljsv7pbkDw1pfTGpDPHu4YyGtC2oMsVxot8HnDVpAv9W3I= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:07 2025 by rpki-client