$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: 0xDE1dJLHDegnxLa7JKfkh/NcE4Xpchp4bU0OjhVSBw= Subject key identifier: 32:E5:3A:6F:03:FB:EE:52:33:30:26:13:C0:FB:2F:FA:DC:B1:42:B2 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 22430F3E0F1525C01B8F38E5DEE24D8AA1A689D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 049A Signing time: Sat 28 Jun 2025 04:21:02 +0000 Manifest this update: Sat 28 Jun 2025 04:16:02 +0000 Manifest next update: Tue 01 Jul 2025 07:51:02 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: CL5CybQz+RT5bSwEzn1WC5flr5moG04GcXJNxlKbw+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 07:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:43:0f:3e:0f:15:25:c0:1b:8f:38:e5:de:e2:4d:8a:a1:a6:89:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Jun 28 04:16:02 2025 GMT Not After : Jul 1 07:51:02 2025 GMT Subject: CN=32E53A6F03FBEE5233302613C0FB2FFADCB142B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:29:5c:6d:6f:15:e4:ad:f7:9b:40:40:e7: 98:31:86:fb:66:24:2b:06:11:3b:16:2f:d3:a2:37: 1a:b0:ad:ef:45:4a:c6:cc:89:b9:4a:61:85:6a:c0: 4b:e7:c7:99:14:95:18:9d:4a:da:05:ff:19:64:8a: 31:51:f0:ba:6b:ea:87:95:23:8a:e3:34:4c:4e:d3: 34:7a:be:63:a4:bb:04:c3:f3:35:b0:ce:23:27:d3: aa:3a:7b:de:2e:89:86:5d:38:d0:eb:9d:e0:71:d6: ac:af:ac:61:03:0d:cd:82:55:26:5d:59:fa:cf:33: b1:93:e7:ec:03:ca:d1:b8:dc:3d:35:b9:f8:a4:a8: 09:d5:8b:6d:e2:5b:c8:5e:07:2f:4f:53:8d:f2:ca: 32:08:ab:5f:1b:78:be:24:b0:00:d3:5a:f0:76:0d: 77:45:40:0a:4d:7a:9d:b5:9f:ae:b4:34:20:22:fa: 5b:b8:4e:9d:17:4d:b7:d0:2f:34:7e:17:e7:3f:dd: 70:da:1b:66:25:18:7b:c2:35:cf:cc:d0:b5:02:b3: 63:32:e1:c7:26:71:1e:a8:90:c9:29:c2:0c:97:cb: c3:39:60:7a:16:72:f8:7f:e9:45:9a:70:40:b4:a8: 9d:dd:5a:fd:7b:98:9d:e3:f0:58:2d:fe:c4:50:fe: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E5:3A:6F:03:FB:EE:52:33:30:26:13:C0:FB:2F:FA:DC:B1:42:B2 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ec:a4:a1:f0:d8:16:05:2c:7c:5c:0c:c1:14:8c:10:21:15: a3:8a:25:62:ca:29:b2:f0:03:b8:dc:be:e5:97:5c:58:b8:f6: 32:cf:3e:27:6c:6c:b1:99:f4:e2:97:fe:ba:45:c3:ae:bc:e6: f1:6f:24:91:8b:a2:a0:da:44:3c:90:f3:95:eb:88:64:23:09: 6e:4d:dc:2d:67:52:33:f4:8f:a9:bc:fb:4b:2a:17:47:74:28: 9a:0a:b1:3b:ad:6a:9b:49:c4:28:27:ab:50:11:46:9b:b4:2b: 4e:c4:96:e3:0e:ad:2b:55:ee:81:14:43:b9:06:22:1b:8b:6a: 39:86:17:0a:cb:b0:a9:c5:04:90:d0:3d:df:91:d3:45:14:38: 93:60:a9:4a:59:bc:d5:2f:f4:c0:3b:5b:1e:3c:f0:89:05:ee: e6:09:4b:1f:85:08:18:c4:17:4e:db:bc:c1:29:74:f2:b9:fb: 1f:91:64:e0:6c:43:49:33:00:cf:65:0e:74:c9:a4:a1:5c:6e: 18:46:f1:76:7d:1a:f3:33:66:d0:38:a3:61:2c:7c:bc:c3:04: 34:53:9d:93:1c:04:c7:ae:a1:c0:2b:f3:24:e0:65:af:19:7e: fa:0b:0e:f1:da:b4:6f:a5:3f:7d:0a:1b:2f:e1:f5:f7:cc:b7: 16:d7:a9:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkMPPg8VJcAbjzjl3uJNiqGmidkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA2MjgwNDE2MDJaFw0yNTA3MDEwNzUxMDJaMDMxMTAvBgNV BAMTKDMyRTUzQTZGMDNGQkVFNTIzMzMwMjYxM0MwRkIyRkZBRENCMTQyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvilcbW8V5K33m0BA55gxhvtm JCsGETsWL9OiNxqwre9FSsbMiblKYYVqwEvnx5kUlRidStoF/xlkijFR8Lpr6oeV I4rjNExO0zR6vmOkuwTD8zWwziMn06o6e94uiYZdONDrneBx1qyvrGEDDc2CVSZd WfrPM7GT5+wDytG43D01ufikqAnVi23iW8heBy9PU43yyjIIq18beL4ksADTWvB2 DXdFQApNep21n660NCAi+lu4Tp0XTbfQLzR+F+c/3XDaG2YlGHvCNc/M0LUCs2My 4ccmcR6okMkpwgyXy8M5YHoWcvh/6UWacEC0qJ3dWv17mJ3j8Fgt/sRQ/uS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMuU6bwP77lIzMCYTwPsv+tyxQrIwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPspKHw2BYFLHxcDMEUjBAhFaOKJWLKKbLw A7jcvuWXXFi49jLPPidsbLGZ9OKX/rpFw6685vFvJJGLoqDaRDyQ85XriGQjCW5N 3C1nUjP0j6m8+0sqF0d0KJoKsTutaptJxCgnq1ARRpu0K07EluMOrStV7oEUQ7kG IhuLajmGFwrLsKnFBJDQPd+R00UUOJNgqUpZvNUv9MA7Wx488IkF7uYJSx+FCBjE F07bvMEpdPK5+x+RZOBsQ0kzAM9lDnTJpKFcbhhG8XZ9GvMzZtA4o2EsfLzDBDRT nZMcBMeuocAr8yTgZa8ZfvoLDvHatG+lP30KGy/h9ffMtxbXqXU= -----END CERTIFICATE-----Generated at Mon Jun 30 02:34:19 2025 by rpki-client