$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: O08WEmOeHXR3N9Lt+qIMfzagXKIbyl7djTBlAz+p9d0= Subject key identifier: A0:F4:34:B8:F3:0E:CC:4C:EB:67:05:65:A3:83:EA:E1:E3:E1:75:0B Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 337C7500036E66F040B6814DD313E31D8B4796BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: F4 Signing time: Thu 08 May 2025 18:10:56 +0000 Manifest this update: Thu 08 May 2025 18:05:56 +0000 Manifest next update: Mon 12 May 2025 05:37:56 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: pPBItxcWrl9nDczp71Y7LVUKLMjyVJbspYYotBO6PfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7c:75:00:03:6e:66:f0:40:b6:81:4d:d3:13:e3:1d:8b:47:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: May 8 18:05:56 2025 GMT Not After : May 12 05:37:56 2025 GMT Subject: CN=A0F434B8F30ECC4CEB670565A383EAE1E3E1750B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:f0:31:03:bf:21:ef:da:36:07:ee:9f:73: 71:31:8e:2b:49:18:83:0b:fd:f5:7a:29:af:f0:8b: 00:56:16:48:c3:95:c1:df:72:77:d6:b4:73:cc:1f: 30:94:34:b7:38:49:d5:23:1d:47:84:07:8f:ae:6e: 8d:ea:70:01:24:47:69:71:6c:be:8c:97:79:d5:d6: 9e:89:f5:52:89:b8:54:04:c4:f4:14:0f:e1:23:fd: e4:ca:c6:65:b9:90:25:40:9a:5d:c1:1d:e3:2b:7e: f4:c2:7d:70:22:05:83:1f:25:02:00:f7:ca:ab:b1: ce:af:db:d2:05:b8:f8:11:ab:0c:40:7e:db:3f:8e: d2:c7:ff:de:f6:5e:92:1c:33:d0:06:b8:2f:23:11: 31:0e:be:43:cc:68:2c:f7:9b:3c:8c:62:75:3f:8e: bd:c2:16:9f:5d:36:34:2e:d7:d8:90:96:f7:e4:66: f0:1a:10:1e:52:bc:9a:53:48:9f:9f:f0:78:bd:c5: b5:11:1f:95:da:33:44:03:fd:d5:46:82:80:68:a0: 2d:09:4a:6a:14:8e:8c:9a:c4:eb:7b:cb:75:57:2e: f1:b2:02:83:9a:59:a0:1e:90:32:4e:49:04:ae:8b: 3c:23:9a:54:06:ab:bb:e3:15:fe:90:e3:89:31:24: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F4:34:B8:F3:0E:CC:4C:EB:67:05:65:A3:83:EA:E1:E3:E1:75:0B X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a9:0d:d5:7f:69:81:ea:9c:af:2a:45:b4:46:ec:42:5b:a2: 61:ba:af:72:ed:a0:17:ca:5c:68:fe:9e:be:a9:1b:5f:3b:11: c7:87:75:9a:c7:29:0f:64:9a:59:5d:7f:45:77:53:8a:ce:dc: 85:87:f1:50:f8:b7:db:2b:d0:c6:84:26:b0:6c:54:8a:75:15: 75:81:5e:8f:02:bd:eb:7d:8d:3b:9d:1f:86:c4:d9:64:de:94: bf:5b:d8:e2:f6:da:3b:a4:0a:86:9a:0e:80:65:47:11:07:04: 49:e1:18:86:c0:bf:bd:14:2a:57:e7:94:9d:7c:51:44:7e:7d: 36:85:b8:92:7c:6d:53:5f:34:d8:5d:4e:29:80:26:e2:31:c2: 47:96:73:c8:b8:94:47:4f:e4:03:03:83:8c:91:ba:ab:69:45: 53:a2:28:5c:82:9e:20:50:17:c6:cb:92:c3:7c:4d:92:67:2b: d6:dc:05:74:dc:b0:34:94:7c:53:b8:6a:df:d9:fe:84:78:d7: c8:50:91:ae:06:e1:ee:8a:23:13:4b:39:a8:6d:d6:e9:64:a3: c3:b3:77:ce:52:80:58:a7:f1:23:16:46:a4:3c:78:cc:0f:56: c6:64:c7:4b:14:2f:6f:19:59:65:0a:b3:7d:7e:76:51:49:dd: 89:e6:88:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3x1AANuZvBAtoFN0xPjHYtHlr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA1MDgxODA1NTZaFw0yNTA1MTIwNTM3NTZaMDMxMTAvBgNV BAMTKEEwRjQzNEI4RjMwRUNDNENFQjY3MDU2NUEzODNFQUUxRTNFMTc1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbfAxA78h79o2B+6fc3ExjitJ GIML/fV6Ka/wiwBWFkjDlcHfcnfWtHPMHzCUNLc4SdUjHUeEB4+ubo3qcAEkR2lx bL6Ml3nV1p6J9VKJuFQExPQUD+Ej/eTKxmW5kCVAml3BHeMrfvTCfXAiBYMfJQIA 98qrsc6v29IFuPgRqwxAfts/jtLH/972XpIcM9AGuC8jETEOvkPMaCz3mzyMYnU/ jr3CFp9dNjQu19iQlvfkZvAaEB5SvJpTSJ+f8Hi9xbURH5XaM0QD/dVGgoBooC0J SmoUjoyaxOt7y3VXLvGyAoOaWaAekDJOSQSuizwjmlQGq7vjFf6Q44kxJBNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPQ0uPMOzEzrZwVlo4Pq4ePhdQswHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6pDdV/aYHqnK8qRbRG7EJbomG6r3LtoBfK XGj+nr6pG187EceHdZrHKQ9kmlldf0V3U4rO3IWH8VD4t9sr0MaEJrBsVIp1FXWB Xo8Cvet9jTudH4bE2WTelL9b2OL22jukCoaaDoBlRxEHBEnhGIbAv70UKlfnlJ18 UUR+fTaFuJJ8bVNfNNhdTimAJuIxwkeWc8i4lEdP5AMDg4yRuqtpRVOiKFyCniBQ F8bLksN8TZJnK9bcBXTcsDSUfFO4at/Z/oR418hQka4G4e6KIxNLOaht1ulko8Oz d85SgFin8SMWRqQ8eMwPVsZkx0sUL28ZWWUKs31+dlFJ3YnmiGA= -----END CERTIFICATE-----Generated at Fri May 9 10:45:47 2025 by rpki-client