$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: vBh2uouuSOiVSEka4YWHKJMFGTHjhlxQ6I0jnE960vM= Subject key identifier: 13:CF:F2:F6:33:A8:DB:8B:82:58:E3:50:93:78:60:FB:A8:A8:3E:9E Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 63B1B6780D3F39495618B6645A8C1747B0AA1B4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 04CC Signing time: Sun 19 Oct 2025 02:21:03 +0000 Manifest this update: Sun 19 Oct 2025 02:16:03 +0000 Manifest next update: Wed 22 Oct 2025 09:02:03 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: HF/TJe1007KktNsz8ianGqm4AmAlq67376hXImfGPik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b1:b6:78:0d:3f:39:49:56:18:b6:64:5a:8c:17:47:b0:aa:1b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Oct 19 02:16:03 2025 GMT Not After : Oct 22 09:02:03 2025 GMT Subject: CN=13CFF2F633A8DB8B8258E350937860FBA8A83E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:12:3e:a0:41:5c:6d:f6:fb:c5:18:07:41: c3:63:d9:d3:b0:c8:72:11:e3:4b:15:a2:c3:59:54: 9e:28:34:da:0a:4d:fe:c2:c8:b1:f7:20:49:ac:5e: c5:8e:a8:86:95:91:9e:95:e3:ca:37:e5:01:2e:54: 8a:85:a2:69:cf:58:11:a7:f7:4f:af:ea:47:2c:36: 99:36:f2:2b:a6:94:a7:cc:ae:44:21:19:1c:44:b6: fa:17:87:29:66:ac:ea:02:a0:22:e1:9c:3e:16:a4: 40:cb:cb:3b:04:19:38:1e:fe:dd:a9:fd:a5:84:33: ce:48:b8:52:94:06:5f:cb:b6:f0:09:a8:e1:df:a6: 7d:02:45:22:57:34:70:5a:a7:80:d3:ea:09:81:53: 3d:8c:66:82:62:14:46:4b:38:2b:f8:bb:93:65:6f: 7c:67:3c:53:01:5f:99:9f:60:91:d8:07:89:54:7f: 44:c6:f7:77:d6:7a:7b:ad:48:0e:5b:32:56:fa:32: 92:48:73:ce:af:60:8f:96:0d:11:02:8f:4e:dc:4b: db:9d:85:e8:97:de:59:6b:c7:cd:29:15:a8:21:d3: 5c:5f:5a:a6:66:92:39:c6:bf:da:6c:29:7c:32:d7: c4:a1:b3:db:6a:17:5d:25:1f:77:91:d0:86:26:0c: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CF:F2:F6:33:A8:DB:8B:82:58:E3:50:93:78:60:FB:A8:A8:3E:9E X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:00:3b:79:13:2a:50:b1:ef:f2:89:d1:c3:f0:a2:66:f8:22: a7:46:06:08:d7:fb:80:f2:a2:bd:06:81:9e:f9:68:43:9a:28: 01:21:19:c1:a1:e1:a2:70:c2:79:71:9f:b2:8a:67:78:61:71: d8:1e:ba:28:fd:c1:d7:e6:e5:36:96:0c:cc:91:61:72:87:7d: 01:81:d0:6c:aa:df:c8:ac:00:00:8b:21:c0:ee:59:0b:9b:c3: 1c:9c:3c:7c:2a:a2:1e:5c:34:ab:27:17:e1:24:83:6f:8e:17: 12:81:63:6b:07:ee:dc:82:bc:11:2c:d6:23:35:11:1a:f2:73: 64:f8:bf:50:81:4e:7f:c2:d1:38:9e:95:78:8e:38:d0:c6:2e: 4e:51:b9:7c:0d:4f:91:59:1f:00:7b:6a:c5:83:87:ed:c4:42: 29:34:e5:c7:5b:a6:a9:3c:36:3a:e9:a5:21:eb:77:10:f5:a4: 0c:df:7b:d2:4a:8f:80:17:a3:b8:06:66:3a:bd:fe:4d:29:07: 35:f5:ba:19:3f:01:49:8a:30:f0:be:7f:58:3e:94:44:b1:61: 9b:b9:38:20:80:da:22:e2:f5:ba:79:fa:a8:ef:a0:f6:e2:55: 75:82:6a:60:cd:c0:9d:73:97:89:5f:46:da:92:e2:52:b4:82: 16:a5:d2:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7G2eA0/OUlWGLZkWowXR7CqG04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTEwMTkwMjE2MDNaFw0yNTEwMjIwOTAyMDNaMDMxMTAvBgNV BAMTKDEzQ0ZGMkY2MzNBOERCOEI4MjU4RTM1MDkzNzg2MEZCQThBODNFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8RI+oEFcbfb7xRgHQcNj2dOw yHIR40sVosNZVJ4oNNoKTf7CyLH3IEmsXsWOqIaVkZ6V48o35QEuVIqFomnPWBGn 90+v6kcsNpk28iumlKfMrkQhGRxEtvoXhylmrOoCoCLhnD4WpEDLyzsEGTge/t2p /aWEM85IuFKUBl/LtvAJqOHfpn0CRSJXNHBap4DT6gmBUz2MZoJiFEZLOCv4u5Nl b3xnPFMBX5mfYJHYB4lUf0TG93fWenutSA5bMlb6MpJIc86vYI+WDRECj07cS9ud heiX3llrx80pFagh01xfWqZmkjnGv9psKXwy18Shs9tqF10lH3eR0IYmDLA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8/y9jOo24uCWONQk3hg+6ioPp4wHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwAO3kTKlCx7/KJ0cPwomb4IqdGBgjX+4Dy or0GgZ75aEOaKAEhGcGh4aJwwnlxn7KKZ3hhcdgeuij9wdfm5TaWDMyRYXKHfQGB 0Gyq38isAACLIcDuWQubwxycPHwqoh5cNKsnF+Ekg2+OFxKBY2sH7tyCvBEs1iM1 ERryc2T4v1CBTn/C0TielXiOONDGLk5RuXwNT5FZHwB7asWDh+3EQik05cdbpqk8 NjrppSHrdxD1pAzfe9JKj4AXo7gGZjq9/k0pBzX1uhk/AUmKMPC+f1g+lESxYZu5 OCCA2iLi9bp5+qjvoPbiVXWCamDNwJ1zl4lfRtqS4lK0ghal0ks= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:13 2025 by rpki-client