$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: ag+bJQSGmh+Vy9EwEG6xGgJBOOfUUJYBktHqKK2nwzA= Subject key identifier: B3:88:3A:2E:8A:75:C9:09:4A:B3:CD:72:F4:1C:DE:00:2F:6C:79:3C Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 3E4F6A694E17F4DD2E3407C58EA063E9206A6081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 4D Signing time: Sun 29 Jun 2025 04:41:53 +0000 Manifest this update: Sun 29 Jun 2025 04:36:53 +0000 Manifest next update: Wed 02 Jul 2025 05:16:53 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: JRMM//Braq+OH5LAplkUE3tPJNoq90q1yzHLOnHpK7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4f:6a:69:4e:17:f4:dd:2e:34:07:c5:8e:a0:63:e9:20:6a:60:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Jun 29 04:36:53 2025 GMT Not After : Jul 2 05:16:53 2025 GMT Subject: CN=B3883A2E8A75C9094AB3CD72F41CDE002F6C793C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:85:ef:d0:74:f3:34:17:b4:5d:e9:e9:06: 46:45:c7:ea:aa:b9:4d:98:da:26:ac:27:ac:ab:10: 5b:84:ec:fe:24:b1:40:dd:10:2f:60:aa:19:66:a3: 5d:ec:fb:4f:bc:fe:05:18:db:f6:25:04:04:b2:0d: ce:b5:75:26:61:b6:80:73:cc:f5:18:3e:62:3e:30: b3:59:bd:2e:19:1a:5a:06:4e:55:00:55:33:45:b2: c3:4e:65:c5:87:71:66:17:a7:e8:56:91:d1:bc:83: ed:76:de:3f:ef:c7:bb:c6:e6:d1:0b:30:41:4b:20: a4:4c:d1:bc:ef:dc:07:ae:79:19:ef:16:b8:de:f7: 07:2f:12:53:38:55:75:7c:6a:b0:70:11:e1:89:49: 6c:e9:fe:e4:d4:a0:eb:5e:c7:42:0c:51:cd:5c:b9: 02:b4:8d:6e:06:33:2d:e8:79:4c:9a:e2:2e:0e:9a: 67:4b:26:93:45:67:08:a6:90:1a:b0:df:37:03:a5: 69:c2:25:78:55:fe:14:a7:ca:1f:67:75:c8:8c:d2: 64:4d:c7:57:d4:2b:f6:21:d2:e1:00:6f:e4:ba:cc: a1:01:1e:6a:35:a3:c4:cf:ff:89:c0:37:0c:c3:13: e1:c0:6f:08:d9:35:33:52:ef:80:eb:20:bc:81:2a: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:3A:2E:8A:75:C9:09:4A:B3:CD:72:F4:1C:DE:00:2F:6C:79:3C X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8e:62:9c:7e:5a:44:a5:65:e3:2c:38:f0:00:ba:3e:7e:9c: ed:ea:3c:fe:a8:3a:d3:54:86:3b:37:45:86:7d:1f:8d:ff:f2: 7d:d8:f9:41:b3:3a:7f:7c:30:d8:ab:d7:61:eb:36:7a:11:1b: 01:79:8e:f9:4d:77:88:d4:f6:e6:90:fa:34:80:85:ca:1e:3b: 92:32:12:bb:87:12:a7:95:3f:96:1a:b6:25:83:d5:86:f1:11: b5:ad:c5:03:1a:f4:c9:0d:6b:16:b1:6b:ad:64:89:37:42:2d: 46:20:87:a2:8f:19:87:d3:08:1a:61:8c:1f:f1:b9:df:6b:c3: f2:9a:82:e1:20:16:ab:b4:f2:b6:bf:46:23:ce:59:1e:44:f5: 43:67:1b:76:f5:4f:68:e8:af:33:0c:fc:b3:ab:06:7a:49:0b: bb:e3:36:22:ab:ff:d9:f7:60:5d:15:88:b2:cb:f9:eb:35:8c: cc:e7:d8:08:ac:e9:77:e4:0d:96:ab:c3:b2:e8:bd:e6:61:eb: e7:69:2a:1c:dd:3e:47:03:ce:58:a1:a9:97:b6:11:5b:8b:9f: a1:01:dd:0f:bc:5a:f7:4d:bc:12:44:4e:04:9c:ce:7a:31:6f: 52:53:07:7d:89:28:0d:8f:dd:e7:df:c3:3f:d5:6d:9f:22:17: 65:c0:5b:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPk9qaU4X9N0uNAfFjqBj6SBqYIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA2MjkwNDM2NTNaFw0yNTA3MDIwNTE2NTNaMDMxMTAvBgNV BAMTKEIzODgzQTJFOEE3NUM5MDk0QUIzQ0Q3MkY0MUNERTAwMkY2Qzc5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLYXv0HTzNBe0XenpBkZFx+qq uU2Y2iasJ6yrEFuE7P4ksUDdEC9gqhlmo13s+0+8/gUY2/YlBASyDc61dSZhtoBz zPUYPmI+MLNZvS4ZGloGTlUAVTNFssNOZcWHcWYXp+hWkdG8g+123j/vx7vG5tEL MEFLIKRM0bzv3AeueRnvFrje9wcvElM4VXV8arBwEeGJSWzp/uTUoOtex0IMUc1c uQK0jW4GMy3oeUya4i4OmmdLJpNFZwimkBqw3zcDpWnCJXhV/hSnyh9ndciM0mRN x1fUK/Yh0uEAb+S6zKEBHmo1o8TP/4nANwzDE+HAbwjZNTNS74DrILyBKpCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4g6Lop1yQlKs81y9BzeAC9seTwwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+OYpx+WkSlZeMsOPAAuj5+nO3qPP6oOtNU hjs3RYZ9H43/8n3Y+UGzOn98MNir12HrNnoRGwF5jvlNd4jU9uaQ+jSAhcoeO5Iy EruHEqeVP5YatiWD1YbxEbWtxQMa9MkNaxaxa61kiTdCLUYgh6KPGYfTCBphjB/x ud9rw/KaguEgFqu08ra/RiPOWR5E9UNnG3b1T2jorzMM/LOrBnpJC7vjNiKr/9n3 YF0ViLLL+es1jMzn2Ais6XfkDZarw7LoveZh6+dpKhzdPkcDzlihqZe2EVuLn6EB 3Q+8WvdNvBJETgScznoxb1JTB32JKA2P3effwz/VbZ8iF2XAW6A= -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:24 2025 by rpki-client