$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: 8dBMDvFl4ESoYCXaf+xa/L0mw0mgRi1c+VN9iAELWkI= Subject key identifier: 1A:6B:1A:59:48:F8:8E:59:E8:C1:8B:A8:E9:F9:8F:C2:F5:0A:E8:BC Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 4E3C4F3FE939894E1874AEE0E09532864550D80F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 80 Signing time: Mon 20 Oct 2025 01:42:00 +0000 Manifest this update: Mon 20 Oct 2025 01:37:00 +0000 Manifest next update: Thu 23 Oct 2025 12:02:00 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: OXiUZ9agX7CQdJbZFFmnhaDmUml8ry/+QtRP89LE1m8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3c:4f:3f:e9:39:89:4e:18:74:ae:e0:e0:95:32:86:45:50:d8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Oct 20 01:37:00 2025 GMT Not After : Oct 23 12:02:00 2025 GMT Subject: CN=1A6B1A5948F88E59E8C18BA8E9F98FC2F50AE8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6c:34:05:21:93:00:b2:03:5a:24:ed:b0:54: 53:c9:b7:67:2e:de:c3:aa:59:68:98:3d:19:a3:26: f3:e6:81:dc:45:ba:85:30:42:19:49:77:25:06:a1: 41:55:b7:10:58:a5:48:bd:73:ef:ff:59:6e:08:05: cd:21:d6:69:27:0c:92:a2:0c:be:6d:f5:8f:eb:68: cc:fe:e0:0e:d6:7a:f5:9b:07:1b:9b:45:39:d6:bd: 59:78:2d:ef:85:58:35:e7:bb:62:ac:2e:33:91:91: cb:24:7e:db:ca:9a:14:7e:3c:c5:a0:ec:2f:f6:30: d0:04:f0:d8:39:c3:c7:c6:2f:c8:cd:3d:e5:a9:8d: 19:c5:0c:72:2b:d6:ef:f0:84:05:93:19:2f:c6:2e: 2c:00:d3:30:c2:56:13:54:40:89:7e:d5:6e:41:bd: aa:ca:fc:ec:bc:2b:f6:77:7c:f7:a5:c1:51:3b:f7: e6:fe:2c:b2:17:44:98:03:8b:d6:a6:c2:7f:ce:20: 8f:c7:98:a6:b5:ba:1d:45:84:ec:31:37:ff:f3:5c: 4a:f2:5a:8e:06:4c:38:2b:19:f8:4e:81:c6:fd:ff: ee:94:71:39:f7:7e:b1:9d:6f:aa:ff:2e:e9:e3:a4: 93:6f:ff:dd:bb:d4:07:67:0b:8c:b2:5c:4e:20:8a: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6B:1A:59:48:F8:8E:59:E8:C1:8B:A8:E9:F9:8F:C2:F5:0A:E8:BC X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ee:f1:31:33:2c:86:a2:34:e8:84:2b:48:1e:96:7e:2e:3a: a7:10:41:33:c8:d4:5b:1e:0e:ab:73:9c:1e:74:23:a3:54:30: 33:ab:6c:65:b5:12:13:90:a7:72:2b:fc:4f:4f:1d:6d:6c:2a: 28:b2:7b:f4:16:5e:c9:a4:68:90:c1:16:76:ed:9d:ee:61:e1: 41:13:57:77:c3:35:4b:1e:4b:13:bc:c4:4e:de:21:23:82:f4: 8d:90:21:23:e0:90:3e:f6:fb:58:1a:22:6d:1a:8e:0c:67:b9: b3:c3:83:f7:84:31:ec:aa:9e:6e:9b:da:4f:10:e4:42:e2:ba: 8b:c0:be:70:d5:50:ca:c7:3d:ed:4b:dd:3e:25:ee:37:37:29: 99:fe:e1:c2:03:fd:2a:76:20:da:f2:e8:8a:f0:95:58:b0:12: a5:53:32:7a:d8:60:9d:0e:5b:bf:18:90:43:8d:ff:d0:c9:1e: ff:94:ec:fb:46:ec:8a:0b:2a:58:7d:35:1c:17:50:73:f4:0d: 43:20:3f:b0:4a:30:d4:a4:40:63:be:6c:45:74:ee:23:a4:22: 93:cb:8c:f9:d7:5f:a5:6b:af:25:4a:e7:97:30:eb:88:ef:91: c4:d7:ea:59:78:3e:c7:ff:1d:7f:a6:eb:b9:28:7a:8e:b5:0b: 17:62:22:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjxPP+k5iU4YdK7g4JUyhkVQ2A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTEwMjAwMTM3MDBaFw0yNTEwMjMxMjAyMDBaMDMxMTAvBgNV BAMTKDFBNkIxQTU5NDhGODhFNTlFOEMxOEJBOEU5Rjk4RkMyRjUwQUU4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbDQFIZMAsgNaJO2wVFPJt2cu 3sOqWWiYPRmjJvPmgdxFuoUwQhlJdyUGoUFVtxBYpUi9c+//WW4IBc0h1mknDJKi DL5t9Y/raMz+4A7WevWbBxubRTnWvVl4Le+FWDXnu2KsLjORkcskftvKmhR+PMWg 7C/2MNAE8Ng5w8fGL8jNPeWpjRnFDHIr1u/whAWTGS/GLiwA0zDCVhNUQIl+1W5B varK/Oy8K/Z3fPelwVE79+b+LLIXRJgDi9amwn/OII/HmKa1uh1FhOwxN//zXEry Wo4GTDgrGfhOgcb9/+6UcTn3frGdb6r/LunjpJNv/9271AdnC4yyXE4girAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmsaWUj4jlnowYuo6fmPwvUK6LwwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDu8TEzLIaiNOiEK0geln4uOqcQQTPI1Fse DqtznB50I6NUMDOrbGW1EhOQp3Ir/E9PHW1sKiiye/QWXsmkaJDBFnbtne5h4UET V3fDNUseSxO8xE7eISOC9I2QISPgkD72+1gaIm0ajgxnubPDg/eEMeyqnm6b2k8Q 5ELiuovAvnDVUMrHPe1L3T4l7jc3KZn+4cID/Sp2INry6IrwlViwEqVTMnrYYJ0O W78YkEON/9DJHv+U7PtG7IoLKlh9NRwXUHP0DUMgP7BKMNSkQGO+bEV07iOkIpPL jPnXX6VrryVK55cw64jvkcTX6ll4Psf/HX+m67koeo61CxdiInc= -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:51 2025 by rpki-client