$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: FAcw7DHe9OPFsJMnD8mV+WV3383c2GEPEnk62AVIQgg= Subject key identifier: 98:FE:F8:8F:89:86:6D:22:F3:EF:AE:63:0C:62:9A:B8:D1:6F:73:0B Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 7287E6A6ECE59579B84F1F48DD55BD8E12899A89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0185 Signing time: Fri 22 Aug 2025 05:11:58 +0000 Manifest this update: Fri 22 Aug 2025 05:06:58 +0000 Manifest next update: Mon 25 Aug 2025 11:31:58 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: GVH9i9vX6QWSvG3FuM11Q3JoHFRPTIDCwsCEA7HIXHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:87:e6:a6:ec:e5:95:79:b8:4f:1f:48:dd:55:bd:8e:12:89:9a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Aug 22 05:06:58 2025 GMT Not After : Aug 25 11:31:58 2025 GMT Subject: CN=98FEF88F89866D22F3EFAE630C629AB8D16F730B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:a2:86:ed:f7:11:43:c7:9e:dc:a9:cd:29: 96:4b:d5:f6:87:b3:a8:64:03:45:ac:3b:4b:5e:a3: ec:d1:33:b6:15:35:34:b2:32:79:63:21:56:40:ff: 98:32:0c:91:f1:ec:a7:c9:8a:0e:af:b3:62:43:96: 5e:a1:b0:86:00:f8:70:28:e6:80:ee:ba:95:ed:04: 94:d7:73:4d:23:fb:43:92:f0:d5:41:d0:61:eb:8e: 11:01:7c:99:b7:75:d6:7f:48:3b:61:6d:e7:dc:5b: e8:fe:85:71:be:7c:cd:14:8a:00:b0:91:f0:26:60: e0:63:e9:2a:f7:36:06:52:e3:51:2a:91:9e:d4:dd: 01:b8:b2:fb:88:b0:9b:d3:cb:45:0b:cf:6e:7c:b0: 7c:34:15:6b:31:0a:fb:d8:ea:29:75:7b:76:91:be: e3:e5:44:36:db:83:7e:49:21:6c:98:29:51:3d:0a: d5:7e:65:40:78:17:7c:72:4d:f5:3d:96:6d:bb:10: 78:93:59:58:d6:04:18:92:d2:70:72:45:38:e8:97: 19:bd:a4:93:9f:1c:d6:f5:b4:a6:a1:2b:ae:bb:d0: 05:2d:eb:87:b0:3a:4f:2e:e2:b1:48:cc:14:39:b9: 67:29:fa:2f:f8:b0:ac:18:2d:77:31:91:8f:09:ff: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FE:F8:8F:89:86:6D:22:F3:EF:AE:63:0C:62:9A:B8:D1:6F:73:0B X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a9:4e:3b:53:90:56:1b:ac:69:dd:9e:a1:b4:41:1a:fd:62: ce:92:2a:a6:64:ea:f6:38:89:84:c6:23:b9:c3:3e:65:f2:67: ba:2b:ce:f6:21:47:8f:0d:59:24:76:84:22:bf:b1:25:ef:ea: ed:d7:4e:9a:92:93:83:b9:05:da:77:04:42:bf:5f:2b:ad:41: 94:fe:e5:ee:94:56:4c:3f:df:a8:8f:9d:7f:2c:2a:51:ec:7e: 09:12:c0:ea:93:c4:fc:e0:a4:f3:16:96:fd:e4:5e:49:75:ff: 5f:57:8d:91:2e:3b:4e:fd:0a:ec:a3:5e:cd:1e:7b:f8:ad:17: 60:8e:96:38:af:26:47:f1:a7:8a:e4:c6:1a:5e:e1:b5:5a:41: 59:e1:bf:07:52:ac:79:59:75:49:c9:bd:93:1e:c4:c3:23:87: 3b:bd:4e:c3:04:51:54:f3:7c:a4:66:61:43:1d:9c:0e:21:1a: 8c:c0:ea:98:62:c0:91:26:60:f6:f7:62:c7:86:2a:11:98:99: 71:15:66:66:3b:b5:33:5d:22:ea:6d:5f:e2:b4:5e:0f:b8:bc: 21:a4:30:f6:9f:9a:90:e8:85:50:94:ef:a0:6f:e5:cd:18:d8: d8:44:a5:f8:57:cb:7e:4c:f5:06:d2:b3:98:31:7a:5a:f2:55: 49:66:2d:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcofmpuzllXm4Tx9I3VW9jhKJmokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA4MjIwNTA2NThaFw0yNTA4MjUxMTMxNThaMDMxMTAvBgNV BAMTKDk4RkVGODhGODk4NjZEMjJGM0VGQUU2MzBDNjI5QUI4RDE2RjczMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiaKG7fcRQ8ee3KnNKZZL1faH s6hkA0WsO0teo+zRM7YVNTSyMnljIVZA/5gyDJHx7KfJig6vs2JDll6hsIYA+HAo 5oDuupXtBJTXc00j+0OS8NVB0GHrjhEBfJm3ddZ/SDthbefcW+j+hXG+fM0UigCw kfAmYOBj6Sr3NgZS41EqkZ7U3QG4svuIsJvTy0ULz258sHw0FWsxCvvY6il1e3aR vuPlRDbbg35JIWyYKVE9CtV+ZUB4F3xyTfU9lm27EHiTWVjWBBiS0nByRTjolxm9 pJOfHNb1tKahK6670AUt64ewOk8u4rFIzBQ5uWcp+i/4sKwYLXcxkY8J/9kRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmP74j4mGbSLz765jDGKauNFvcwswHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqpTjtTkFYbrGndnqG0QRr9Ys6SKqZk6vY4 iYTGI7nDPmXyZ7orzvYhR48NWSR2hCK/sSXv6u3XTpqSk4O5Bdp3BEK/XyutQZT+ 5e6UVkw/36iPnX8sKlHsfgkSwOqTxPzgpPMWlv3kXkl1/19XjZEuO079CuyjXs0e e/itF2COljivJkfxp4rkxhpe4bVaQVnhvwdSrHlZdUnJvZMexMMjhzu9TsMEUVTz fKRmYUMdnA4hGozA6phiwJEmYPb3YseGKhGYmXEVZmY7tTNdIuptX+K0Xg+4vCGk MPafmpDohVCU76Bv5c0Y2NhEpfhXy35M9QbSs5gxelryVUlmLZk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:27:24 2025 by rpki-client