$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: mEIjewJ7TwhzIBy86/91RnderyBc0paoGbn0hfDXk4U= Subject key identifier: 72:D3:E9:D2:2B:4D:52:06:A1:37:3B:DE:E2:7E:19:7D:1D:58:D7:D9 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 09B39F98822B623A43F5DF01C1A33A8D5EB44DB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 016D Signing time: Sat 28 Jun 2025 09:01:58 +0000 Manifest this update: Sat 28 Jun 2025 08:56:58 +0000 Manifest next update: Tue 01 Jul 2025 12:47:58 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: 5FBA+7cOSrIk8fkg7GsQ2LzmuR+k8AGkgYjUo/VSPl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b3:9f:98:82:2b:62:3a:43:f5:df:01:c1:a3:3a:8d:5e:b4:4d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Jun 28 08:56:58 2025 GMT Not After : Jul 1 12:47:58 2025 GMT Subject: CN=72D3E9D22B4D5206A1373BDEE27E197D1D58D7D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:a2:36:ab:91:2e:d2:33:00:5a:52:bf:01: 26:31:c8:e6:2c:8c:24:41:bf:1b:8d:65:47:90:fc: 8f:1e:b3:e9:12:a7:9e:2c:97:1e:af:33:ee:90:43: 2a:9f:55:23:04:77:1f:cb:fb:39:dd:d3:1d:24:18: 4c:b1:41:24:af:a4:77:74:fc:e5:33:17:14:81:be: 6b:36:3c:c1:2d:a6:a8:32:f1:8b:03:9f:e8:c8:86: a5:38:cf:be:2c:17:1a:51:b6:94:93:75:ed:65:9c: 2e:7b:d4:42:47:84:50:ce:ff:18:22:f0:b5:3c:9a: 43:a4:70:e9:2f:52:0c:bb:71:2a:03:98:8f:b1:9d: 23:0d:06:62:92:35:c9:03:2c:60:2e:7d:92:1a:2c: d7:67:52:15:b7:cf:68:a3:bc:96:4e:72:a8:fa:38: 73:2a:14:61:87:4e:9b:dc:7e:cb:53:eb:83:e8:b0: 10:24:ce:25:90:4b:9e:cf:ce:4e:89:73:0d:e6:7e: 34:d4:80:10:95:d3:6f:43:48:70:fa:bb:b9:6c:38: de:57:f4:57:49:31:07:82:94:32:ee:65:ad:54:6e: 25:03:7e:54:8d:ed:a2:1f:01:e8:9e:79:d4:cc:7a: d0:42:cb:fc:83:bd:a9:0a:d8:c9:98:ad:aa:c2:ee: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:E9:D2:2B:4D:52:06:A1:37:3B:DE:E2:7E:19:7D:1D:58:D7:D9 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:43:9c:43:43:c0:61:67:ae:c4:88:ee:4b:ae:16:94:66:13: 9b:20:99:f3:a5:ca:c5:e8:c9:0e:99:1c:41:8b:63:7b:39:de: 71:50:2a:3b:dc:7a:60:8a:25:7a:94:0d:c5:54:ca:02:54:98: 66:2f:b9:6d:95:8a:29:3c:95:e2:6d:be:51:f6:9e:55:e2:58: 2a:ed:02:9f:dd:13:8d:ca:38:f5:83:e2:9f:dd:d6:94:03:60: 10:0f:25:fb:f0:21:4a:d0:eb:1a:1b:d4:d8:da:49:1d:df:27: ab:5e:9f:e3:ec:ed:6a:eb:37:7e:82:60:16:09:28:d4:84:63: 57:d3:e7:62:6a:08:e1:e7:5e:7e:60:65:e1:fe:2d:d0:b6:91: f6:59:d5:4f:fe:2a:d2:5a:5a:9c:2f:74:8a:df:38:6a:ed:2f: 50:7a:c4:2d:0c:97:66:45:3a:94:96:21:d0:dc:b5:52:26:a1: ad:9e:53:e9:06:c1:3b:37:2a:c6:69:44:58:3c:8a:94:65:bf: 9e:c5:5b:bc:6a:42:40:ce:00:0c:40:7a:b3:01:ed:09:54:7b: b9:80:ad:15:f4:d3:26:68:12:0e:31:c4:40:4c:97:a1:e0:b2: d8:31:5e:71:20:89:e7:2b:d6:b1:bb:09:9a:49:d0:d7:21:f4: a4:f4:b5:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbOfmIIrYjpD9d8BwaM6jV60TbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA2MjgwODU2NThaFw0yNTA3MDExMjQ3NThaMDMxMTAvBgNV BAMTKDcyRDNFOUQyMkI0RDUyMDZBMTM3M0JERUUyN0UxOTdEMUQ1OEQ3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq56I2q5Eu0jMAWlK/ASYxyOYs jCRBvxuNZUeQ/I8es+kSp54slx6vM+6QQyqfVSMEdx/L+znd0x0kGEyxQSSvpHd0 /OUzFxSBvms2PMEtpqgy8YsDn+jIhqU4z74sFxpRtpSTde1lnC571EJHhFDO/xgi 8LU8mkOkcOkvUgy7cSoDmI+xnSMNBmKSNckDLGAufZIaLNdnUhW3z2ijvJZOcqj6 OHMqFGGHTpvcfstT64PosBAkziWQS57Pzk6Jcw3mfjTUgBCV029DSHD6u7lsON5X 9FdJMQeClDLuZa1UbiUDflSN7aIfAeieedTMetBCy/yDvakK2MmYrarC7pEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctPp0itNUgahNzve4n4ZfR1Y19kwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxDnENDwGFnrsSI7kuuFpRmE5sgmfOlysXo yQ6ZHEGLY3s53nFQKjvcemCKJXqUDcVUygJUmGYvuW2Viik8leJtvlH2nlXiWCrt Ap/dE43KOPWD4p/d1pQDYBAPJfvwIUrQ6xob1NjaSR3fJ6ten+Ps7WrrN36CYBYJ KNSEY1fT52JqCOHnXn5gZeH+LdC2kfZZ1U/+KtJaWpwvdIrfOGrtL1B6xC0Ml2ZF OpSWIdDctVImoa2eU+kGwTs3KsZpRFg8ipRlv57FW7xqQkDOAAxAerMB7QlUe7mA rRX00yZoEg4xxEBMl6HgstgxXnEgiecr1rG7CZpJ0Nch9KT0tYE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:35:57 2025 by rpki-client