$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: uzdPE5SUV1qUrqpuqJMxmY8Sg3lJHrvB+vP+giKuz7c= Subject key identifier: 74:40:4C:0D:C0:F3:2E:B7:06:F1:10:4B:CE:41:B0:E6:9F:B5:60:E6 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 4434B5CD9F658F5D0E3D04F14893D087521376FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 010B Signing time: Mon 30 Jun 2025 07:50:55 +0000 Manifest this update: Mon 30 Jun 2025 07:45:55 +0000 Manifest next update: Thu 03 Jul 2025 08:42:55 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: Em6F9twpJUawCHd9qJvC+O88MObfJO4SFPQEdCCNunE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:34:b5:cd:9f:65:8f:5d:0e:3d:04:f1:48:93:d0:87:52:13:76:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Jun 30 07:45:55 2025 GMT Not After : Jul 3 08:42:55 2025 GMT Subject: CN=74404C0DC0F32EB706F1104BCE41B0E69FB560E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:50:9f:17:4b:10:37:c3:c5:a1:6e:7b:42: 27:40:40:2d:f3:b4:bf:b6:e0:5f:c1:27:e7:a1:3a: 12:f4:5c:7e:cd:83:b9:46:7a:33:19:58:ba:96:08: 76:0a:ab:06:48:ef:4b:ab:ef:9e:be:b9:0d:f7:9a: 10:82:6a:06:75:c7:c9:74:43:40:58:a1:b8:a2:01: 0b:aa:46:c9:2f:08:26:91:a7:9c:32:3c:3c:eb:b0: 08:07:43:9c:4a:f4:a1:cc:e2:63:b2:37:4a:ca:f9: e1:52:3a:c0:db:08:54:bf:22:86:16:19:22:03:28: b6:a7:4d:ed:df:13:f7:d0:f1:bc:ca:5f:b9:24:4c: 96:b4:45:43:f7:9e:14:19:b1:db:8f:f4:da:bd:d8: 21:38:cc:04:65:75:2e:27:45:58:05:b2:99:85:18: 81:83:d4:25:b4:31:72:3e:fb:8d:1f:16:99:3c:60: 23:8c:cc:fe:a8:e7:4f:9e:7a:20:27:e3:71:9b:17: 9e:bf:26:5a:4a:90:1e:f6:d2:af:0a:67:0f:b3:9d: ea:c2:c0:6d:a9:12:23:3e:c9:24:ca:7a:42:2e:22: 93:98:38:e3:c3:1f:05:62:02:a8:f2:3c:72:98:56: 9b:b8:ca:55:91:d4:08:ec:2a:43:8e:fe:04:a3:92: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:40:4C:0D:C0:F3:2E:B7:06:F1:10:4B:CE:41:B0:E6:9F:B5:60:E6 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cc:05:75:2f:8c:b0:9f:31:bb:08:a0:50:3b:01:ed:01:d7: a1:e6:de:9e:44:00:f5:1a:1e:51:12:9d:03:84:ee:a5:49:56: b7:67:80:d8:89:79:07:15:ed:fd:36:b8:b3:ae:d0:c3:60:6b: fc:38:c7:18:24:ba:93:43:7b:8e:e6:f4:3c:c5:93:1e:e2:81: d5:db:60:23:98:49:91:0f:fc:d7:ed:6d:ba:94:99:b5:0f:33: 2f:41:01:a7:06:9a:ab:b0:1a:8a:09:66:1f:e7:bb:33:5a:55: e6:c6:9b:aa:32:b4:f3:38:6d:4d:03:4b:1b:5b:cc:75:7d:cd: 0c:20:26:e6:1a:8c:9e:6e:cb:b1:95:34:33:90:cb:8e:bd:59: 79:f1:9f:b8:20:65:74:52:ec:5a:80:42:2a:3e:32:38:16:3e: bd:e3:ba:17:e1:1a:48:7a:81:9b:ef:51:13:48:04:0e:56:a6: 1b:1d:ec:e8:0c:a6:8b:ce:38:2a:17:4d:c3:3c:b2:70:b5:49: 06:78:cd:4f:21:49:a6:76:a5:7a:fa:a3:a3:ba:3a:cd:b7:ca: 0c:ca:4c:3c:0c:ae:48:61:89:e8:ed:b5:d5:c1:fb:01:9d:e7: 5f:e1:08:9a:70:55:88:db:b6:b1:92:25:02:34:79:7c:98:b6: b5:fd:32:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDS1zZ9lj10OPQTxSJPQh1ITdv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA2MzAwNzQ1NTVaFw0yNTA3MDMwODQyNTVaMDMxMTAvBgNV BAMTKDc0NDA0QzBEQzBGMzJFQjcwNkYxMTA0QkNFNDFCMEU2OUZCNTYwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrVCfF0sQN8PFoW57QidAQC3z tL+24F/BJ+ehOhL0XH7Ng7lGejMZWLqWCHYKqwZI70ur756+uQ33mhCCagZ1x8l0 Q0BYobiiAQuqRskvCCaRp5wyPDzrsAgHQ5xK9KHM4mOyN0rK+eFSOsDbCFS/IoYW GSIDKLanTe3fE/fQ8bzKX7kkTJa0RUP3nhQZsduP9Nq92CE4zARldS4nRVgFspmF GIGD1CW0MXI++40fFpk8YCOMzP6o50+eeiAn43GbF56/JlpKkB720q8KZw+znerC wG2pEiM+ySTKekIuIpOYOOPDHwViAqjyPHKYVpu4ylWR1AjsKkOO/gSjkojjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEBMDcDzLrcG8RBLzkGw5p+1YOYwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTMBXUvjLCfMbsIoFA7Ae0B16Hm3p5EAPUa HlESnQOE7qVJVrdngNiJeQcV7f02uLOu0MNga/w4xxgkupNDe47m9DzFkx7igdXb YCOYSZEP/NftbbqUmbUPMy9BAacGmquwGooJZh/nuzNaVebGm6oytPM4bU0DSxtb zHV9zQwgJuYajJ5uy7GVNDOQy469WXnxn7ggZXRS7FqAQio+MjgWPr3juhfhGkh6 gZvvURNIBA5Wphsd7OgMpovOOCoXTcM8snC1SQZ4zU8hSaZ2pXr6o6O6Os23ygzK TDwMrkhhiejttdXB+wGd51/hCJpwVYjbtrGSJQI0eXyYtrX9Mvc= -----END CERTIFICATE-----Generated at Mon Jun 30 12:51:00 2025 by rpki-client