$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: E7l6XkM9+sIjAqasOk2I0tfOAJ7wmx9XM8shs6w0l38= Subject key identifier: A0:39:19:D8:FF:08:5C:E9:34:B5:FC:F3:ED:E1:05:38:6C:97:FE:A7 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 24E70539BA90A2D03D87EAF45B307FC1CE695AC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 019F Signing time: Sun 19 Oct 2025 16:02:01 +0000 Manifest this update: Sun 19 Oct 2025 15:57:01 +0000 Manifest next update: Wed 22 Oct 2025 23:51:01 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: qmaVsbHaIurvXG9EQeEBLX54iiR8AkpAT9l5zA680Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e7:05:39:ba:90:a2:d0:3d:87:ea:f4:5b:30:7f:c1:ce:69:5a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Oct 19 15:57:01 2025 GMT Not After : Oct 22 23:51:01 2025 GMT Subject: CN=A03919D8FF085CE934B5FCF3EDE105386C97FEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:4f:ec:1c:0b:03:3c:9a:82:58:65:b7:5e: 0a:93:5a:a2:b8:4a:b5:f6:16:6c:09:42:ff:96:0d: ea:44:52:f4:68:12:f5:02:b9:90:d9:d8:c1:52:b4: 56:c2:5e:4c:9b:8a:17:fa:ad:9e:ac:1d:ae:4b:4d: ec:45:ce:04:e2:1d:f5:bf:58:03:57:42:5f:05:32: f5:1f:e5:43:2d:4c:91:0d:f6:e6:1b:7c:db:6a:b9: f8:e8:b2:75:d7:e7:9d:81:df:ea:b4:a2:36:ab:f6: 0b:8a:65:ad:b5:85:a9:da:8c:6c:2a:17:f2:32:b1: 6a:4a:ae:16:11:c1:cf:5d:4a:a9:2b:40:ee:b2:11: 65:ca:bc:de:dc:ec:88:0b:99:54:77:aa:ca:fe:ef: be:cf:d4:16:6b:fb:e2:b7:6b:d9:6b:6f:f2:a0:cb: 47:fb:01:5a:7b:d1:22:02:1b:e0:7d:1a:a9:f6:51: 3d:45:99:75:75:43:51:19:0d:99:4f:78:b1:1e:0a: ee:9f:83:a0:3e:ce:1e:fd:b7:62:35:51:32:a8:9b: 0e:9e:82:34:12:95:da:56:1a:54:79:cc:19:0e:17: a0:b8:df:e1:42:d1:46:d7:95:48:ae:c2:58:99:fd: f9:3a:a1:2d:ed:2d:d1:f8:c3:10:9e:30:cd:9b:62: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:39:19:D8:FF:08:5C:E9:34:B5:FC:F3:ED:E1:05:38:6C:97:FE:A7 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:42:a0:83:65:01:ce:dc:d9:c6:cd:c0:d4:47:cd:d9:1f:9c: 9e:c5:77:a3:da:3a:ae:23:84:dc:3b:5a:df:54:7f:30:02:e7: 69:52:ca:8b:e7:4d:eb:6f:1f:b9:99:58:67:85:1b:0b:21:6a: e4:22:09:5f:f3:eb:cf:c2:77:f2:e8:db:19:3e:50:05:68:4e: ae:8f:6f:67:95:69:65:6b:39:70:cc:45:20:5c:7f:e7:ca:eb: 24:2b:7f:ee:1d:62:d5:31:86:b3:87:c1:10:41:8f:7a:6a:07: 7f:8f:c9:18:3c:9a:ce:20:ab:04:31:bd:9b:d6:c2:b4:8a:31: d1:0d:2f:84:a2:9f:05:0d:78:e1:05:7f:ae:2e:e6:6e:38:7a: 94:42:c9:c3:b8:78:15:c0:6a:a4:01:09:a7:4e:e8:04:51:54: 42:8d:6e:02:40:32:e7:51:72:6e:f2:a8:4d:e3:15:d7:84:33: 82:72:65:0a:87:4c:43:73:07:4b:69:d3:3b:31:0d:43:6c:63: cc:c2:75:5c:f5:9c:e5:a9:ff:3a:53:a4:18:99:c6:78:9b:db: 51:f3:ad:79:a0:f6:dc:5f:e1:f6:5e:df:ad:13:d0:7f:a3:27: 3b:85:e7:23:48:68:60:02:ba:91:a1:aa:8d:ea:9b:8e:fd:42: ff:a2:47:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOcFObqQotA9h+r0WzB/wc5pWskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTEwMTkxNTU3MDFaFw0yNTEwMjIyMzUxMDFaMDMxMTAvBgNV BAMTKEEwMzkxOUQ4RkYwODVDRTkzNEI1RkNGM0VERTEwNTM4NkM5N0ZFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JE/sHAsDPJqCWGW3XgqTWqK4 SrX2FmwJQv+WDepEUvRoEvUCuZDZ2MFStFbCXkybihf6rZ6sHa5LTexFzgTiHfW/ WANXQl8FMvUf5UMtTJEN9uYbfNtqufjosnXX552B3+q0ojar9guKZa21hanajGwq F/IysWpKrhYRwc9dSqkrQO6yEWXKvN7c7IgLmVR3qsr+777P1BZr++K3a9lrb/Kg y0f7AVp70SICG+B9Gqn2UT1FmXV1Q1EZDZlPeLEeCu6fg6A+zh79t2I1UTKomw6e gjQSldpWGlR5zBkOF6C43+FC0UbXlUiuwliZ/fk6oS3tLdH4wxCeMM2bYlRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDkZ2P8IXOk0tfzz7eEFOGyX/qcwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtCoINlAc7c2cbNwNRHzdkfnJ7Fd6PaOq4j hNw7Wt9UfzAC52lSyovnTetvH7mZWGeFGwshauQiCV/z68/Cd/Lo2xk+UAVoTq6P b2eVaWVrOXDMRSBcf+fK6yQrf+4dYtUxhrOHwRBBj3pqB3+PyRg8ms4gqwQxvZvW wrSKMdENL4SinwUNeOEFf64u5m44epRCycO4eBXAaqQBCadO6ARRVEKNbgJAMudR cm7yqE3jFdeEM4JyZQqHTENzB0tp0zsxDUNsY8zCdVz1nOWp/zpTpBiZxnib21Hz rXmg9txf4fZe360T0H+jJzuF5yNIaGACupGhqo3qm479Qv+iRwg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:00 2025 by rpki-client