$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: uGW4WgHP91nOPQpnkrLPQeQHNSbmIMerbzI8JymIFLs= Subject key identifier: 94:B6:94:D1:7C:F5:C1:56:6F:DD:53:73:BA:75:CA:86:D2:D0:B3:58 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 7BC1DFCF05A1946C5F68508BB626A218F7049519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 013C Signing time: Sat 18 Oct 2025 14:50:57 +0000 Manifest this update: Sat 18 Oct 2025 14:45:57 +0000 Manifest next update: Tue 21 Oct 2025 16:40:57 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: WnfG5Zxrxntan+BrZVfCbnWAQQXoge+MjacXv49gbFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c1:df:cf:05:a1:94:6c:5f:68:50:8b:b6:26:a2:18:f7:04:95:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Oct 18 14:45:57 2025 GMT Not After : Oct 21 16:40:57 2025 GMT Subject: CN=94B694D17CF5C1566FDD5373BA75CA86D2D0B358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9c:f4:b5:30:d0:97:ea:22:aa:40:59:4b:ce: d0:b5:6a:5d:ee:78:1c:49:f3:20:56:90:cd:d3:39: ca:cf:c6:a5:c8:79:ed:77:15:9b:9e:0e:a5:1c:92: 56:ad:60:c7:79:d5:4a:99:ca:15:c0:9f:27:8d:a6: 94:b1:6b:4d:c2:37:55:10:39:67:b2:35:2c:8b:95: 96:92:52:99:3f:66:78:59:a3:7f:11:2a:bd:ca:37: da:60:07:be:86:65:6f:06:bd:2c:11:8f:9a:5f:b5: 41:c8:9a:f6:01:f8:0b:5a:7d:7f:67:ab:3a:98:8b: 5a:c1:2b:d2:d8:bb:69:1b:3f:c6:07:dd:4c:88:f7: 0f:ae:af:0d:a7:9b:40:2a:7d:15:1d:55:86:a3:39: 3b:9e:d5:21:72:39:3d:bf:b8:53:4c:b9:e6:8c:f2: 95:30:33:d6:66:34:75:91:03:1c:09:c2:e0:e6:c6: 3b:d5:cd:b6:2f:b3:47:3b:de:c0:d5:c4:a5:e2:61: a6:12:19:c7:c4:0b:f6:2e:b8:4b:e5:18:e0:64:a0: a8:9e:e8:f0:c0:27:bc:fd:fc:ad:7c:0d:c6:de:2f: 70:fb:4b:47:ae:23:d9:fb:08:b2:52:de:31:eb:a8: 24:92:64:65:0b:f0:1a:0e:35:30:24:05:8f:52:52: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:94:D1:7C:F5:C1:56:6F:DD:53:73:BA:75:CA:86:D2:D0:B3:58 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4a:1d:b5:d0:b5:18:a5:25:27:da:3c:03:d7:ed:8e:71:a9: 48:9b:ea:43:69:e9:cd:02:18:8b:74:81:64:52:b5:1b:87:ce: 73:94:60:22:4c:40:47:44:35:06:d6:e7:90:b4:cf:c0:8a:85: 31:1e:ca:25:34:67:b6:51:b4:20:54:f0:5f:57:1b:9b:4e:f7: 02:8a:4c:22:cd:60:c3:82:b2:1f:8f:98:dd:11:73:6b:b0:77: 24:00:e7:04:01:2a:ce:cc:c7:c4:08:32:bd:9c:c2:d4:82:6b: bc:d4:fb:b9:96:85:9c:7e:d6:f8:a3:5f:68:a2:ad:f1:77:98: 16:c5:6b:4a:8e:bf:1e:23:31:b8:d9:1f:5f:6c:0b:ca:5a:a7: bc:4f:70:68:94:c4:b3:ca:19:bb:3b:be:e1:89:0e:6d:ad:54: 3a:bf:9b:71:4a:a9:60:35:f9:34:df:2b:e1:0f:43:5a:39:e1: 4c:8f:d6:2a:4c:45:1b:f8:e0:0d:2d:be:86:ee:80:f6:4d:ec: ad:cd:97:6c:26:0d:b8:eb:08:e8:7e:01:83:11:b0:63:1e:2b: c6:56:5c:f5:a1:49:81:b6:1d:11:cd:a6:89:3d:38:86:ac:78: d4:72:b8:d9:b2:84:0f:32:50:d0:0d:19:81:2e:48:14:9b:64: b2:8b:23:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8HfzwWhlGxfaFCLtiaiGPcElRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTEwMTgxNDQ1NTdaFw0yNTEwMjExNjQwNTdaMDMxMTAvBgNV BAMTKDk0QjY5NEQxN0NGNUMxNTY2RkRENTM3M0JBNzVDQTg2RDJEMEIzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0nPS1MNCX6iKqQFlLztC1al3u eBxJ8yBWkM3TOcrPxqXIee13FZueDqUcklatYMd51UqZyhXAnyeNppSxa03CN1UQ OWeyNSyLlZaSUpk/ZnhZo38RKr3KN9pgB76GZW8GvSwRj5pftUHImvYB+AtafX9n qzqYi1rBK9LYu2kbP8YH3UyI9w+urw2nm0AqfRUdVYajOTue1SFyOT2/uFNMueaM 8pUwM9ZmNHWRAxwJwuDmxjvVzbYvs0c73sDVxKXiYaYSGcfEC/YuuEvlGOBkoKie 6PDAJ7z9/K18DcbeL3D7S0euI9n7CLJS3jHrqCSSZGUL8BoONTAkBY9SUravAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLaU0Xz1wVZv3VNzunXKhtLQs1gwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxKHbXQtRilJSfaPAPX7Y5xqUib6kNp6c0C GIt0gWRStRuHznOUYCJMQEdENQbW55C0z8CKhTEeyiU0Z7ZRtCBU8F9XG5tO9wKK TCLNYMOCsh+PmN0Rc2uwdyQA5wQBKs7Mx8QIMr2cwtSCa7zU+7mWhZx+1vijX2ii rfF3mBbFa0qOvx4jMbjZH19sC8pap7xPcGiUxLPKGbs7vuGJDm2tVDq/m3FKqWA1 +TTfK+EPQ1o54UyP1ipMRRv44A0tvobugPZN7K3Nl2wmDbjrCOh+AYMRsGMeK8ZW XPWhSYG2HRHNpok9OIaseNRyuNmyhA8yUNANGYEuSBSbZLKLI9c= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:27 2025 by rpki-client