$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: 9V5leQr8VANaVcHEGEmuNGhBP+1I0Rv3BzOgG1N9x+c= Subject key identifier: DC:84:54:F2:B0:66:D0:60:21:BF:B8:F0:30:71:C9:19:A9:27:4F:00 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 55AACAD6DAECA7FDBED0EBBC87CE0266EA94C0E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 66 Signing time: Sat 23 Aug 2025 09:21:56 +0000 Manifest this update: Sat 23 Aug 2025 09:16:56 +0000 Manifest next update: Tue 26 Aug 2025 17:27:56 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: KtwSooslJQRyyy1iX6E47YN0BcbcUShTUivz7wkGIYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:aa:ca:d6:da:ec:a7:fd:be:d0:eb:bc:87:ce:02:66:ea:94:c0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Aug 23 09:16:56 2025 GMT Not After : Aug 26 17:27:56 2025 GMT Subject: CN=DC8454F2B066D06021BFB8F03071C919A9274F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:14:52:0e:c6:8b:4c:54:27:23:0f:3e:7a: db:17:9b:74:ec:79:2b:6e:bf:6b:4e:11:40:4d:b2: e3:19:b8:a6:f3:a6:dc:a2:1d:a6:83:5f:39:8d:2d: 7a:50:5c:9c:8e:ae:c1:28:77:63:56:aa:69:3b:8d: 37:da:eb:ec:42:69:7f:56:e0:75:12:9f:43:b4:86: 29:65:fb:ea:e5:ca:e3:b5:b0:b9:f1:d4:89:35:a6: f0:2e:5d:fb:60:b6:0e:cc:90:8d:36:0e:09:7a:70: 1e:db:cf:03:38:29:73:d5:a6:04:43:94:8d:93:93: 52:8d:f3:e3:71:4f:08:7c:79:12:f4:8d:f4:ad:5f: a4:ee:7b:fc:f6:26:68:05:a5:f3:17:50:2c:c6:f2: e4:c0:7b:36:46:e7:df:7f:2e:e4:ef:04:62:ed:0f: 86:30:48:61:24:bb:b8:8d:81:b9:8a:ea:00:91:c7: ea:86:63:d7:4d:5e:71:13:9a:71:51:3f:83:cc:41: 3e:e0:23:a6:a2:28:70:20:67:2c:44:0d:74:9f:34: 3c:8e:42:f7:43:9d:71:4a:82:27:c0:6d:3a:a3:b7: 2d:13:51:26:b1:51:bb:09:1e:00:b6:01:db:49:06: fd:4f:c4:e4:16:49:c6:71:8e:a2:bd:12:28:0f:0c: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:84:54:F2:B0:66:D0:60:21:BF:B8:F0:30:71:C9:19:A9:27:4F:00 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1c:b2:8c:c7:30:76:6f:33:ea:2f:0d:be:1d:5c:7f:04:9e: cb:b8:58:68:98:70:da:ae:2c:00:3e:f8:0f:f1:b4:b3:67:b0: e9:d9:91:d5:a0:df:ed:b8:3e:b4:ea:ba:a3:45:10:6b:5e:41: 42:11:ba:12:33:69:fa:82:87:cf:db:7c:fa:47:0c:91:f1:37: cb:aa:73:b2:02:cc:4f:28:e7:7e:82:49:e4:31:21:f3:98:6e: a5:30:97:b3:f1:6b:66:c0:16:80:d1:81:bb:6a:22:c4:8b:fa: 30:22:51:6d:45:53:9a:80:bf:24:03:a0:63:7b:cb:69:3b:f0: ff:9d:1c:8a:7e:0e:3f:51:0b:c7:82:15:f7:d9:9e:5e:05:42: ae:76:6c:f9:e0:90:04:88:ec:d7:65:81:ab:e5:df:4c:80:ff: ac:9d:d4:fe:eb:77:c4:7b:4c:cb:50:f1:6b:ba:15:23:f2:7d: 9a:c8:dc:fe:93:f2:71:e9:16:28:64:14:b8:fd:71:5e:96:a7: 68:b3:8c:92:56:87:56:62:76:81:ad:8b:8e:e4:35:2c:b4:51: 8a:57:20:00:9b:30:ab:fd:4a:4e:32:99:36:ad:5f:eb:0d:49: fc:e0:a1:f7:e4:74:bc:4c:66:d9:8a:ae:a2:56:7b:81:73:0e: ba:fa:22:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVarK1trsp/2+0Ou8h84CZuqUwOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA4MjMwOTE2NTZaFw0yNTA4MjYxNzI3NTZaMDMxMTAvBgNV BAMTKERDODQ1NEYyQjA2NkQwNjAyMUJGQjhGMDMwNzFDOTE5QTkyNzRGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRxRSDsaLTFQnIw8+etsXm3Ts eStuv2tOEUBNsuMZuKbzptyiHaaDXzmNLXpQXJyOrsEod2NWqmk7jTfa6+xCaX9W 4HUSn0O0hill++rlyuO1sLnx1Ik1pvAuXftgtg7MkI02Dgl6cB7bzwM4KXPVpgRD lI2Tk1KN8+NxTwh8eRL0jfStX6Tue/z2JmgFpfMXUCzG8uTAezZG599/LuTvBGLt D4YwSGEku7iNgbmK6gCRx+qGY9dNXnETmnFRP4PMQT7gI6aiKHAgZyxEDXSfNDyO QvdDnXFKgifAbTqjty0TUSaxUbsJHgC2AdtJBv1PxOQWScZxjqK9EigPDGi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IRU8rBm0GAhv7jwMHHJGaknTwAwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4csozHMHZvM+ovDb4dXH8Ensu4WGiYcNqu LAA++A/xtLNnsOnZkdWg3+24PrTquqNFEGteQUIRuhIzafqCh8/bfPpHDJHxN8uq c7ICzE8o536CSeQxIfOYbqUwl7Pxa2bAFoDRgbtqIsSL+jAiUW1FU5qAvyQDoGN7 y2k78P+dHIp+Dj9RC8eCFffZnl4FQq52bPngkASI7Ndlgavl30yA/6yd1P7rd8R7 TMtQ8Wu6FSPyfZrI3P6T8nHpFihkFLj9cV6Wp2izjJJWh1ZidoGti47kNSy0UYpX IACbMKv9Sk4ymTatX+sNSfzgoffkdLxMZtmKrqJWe4FzDrr6Im4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:35 2025 by rpki-client