$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: J8CBQOEc1pP5VsS8rZ2AqrgKZT3avxne5ePdmCO6NFQ= Subject key identifier: 8E:A6:F5:8E:82:89:51:F4:3E:C5:AB:C2:E3:BE:14:3F:97:BC:51:71 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 4D408C8BE8EFAD017AF44ACB07B5CD3FE8E9C105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 04AB Signing time: Tue 05 Aug 2025 20:11:03 +0000 Manifest this update: Tue 05 Aug 2025 20:06:03 +0000 Manifest next update: Fri 08 Aug 2025 20:21:03 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: UoZ6djCbgkYA6u3wLBUEIs9gideddeQIlkbmU/UDdLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:40:8c:8b:e8:ef:ad:01:7a:f4:4a:cb:07:b5:cd:3f:e8:e9:c1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Aug 5 20:06:03 2025 GMT Not After : Aug 8 20:21:03 2025 GMT Subject: CN=8EA6F58E828951F43EC5ABC2E3BE143F97BC5171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:c1:67:18:c8:4f:0b:a1:ce:06:c0:aa:b6: 2e:a1:09:d7:f4:16:ff:17:be:cd:71:dd:54:11:0c: f6:30:1e:89:fd:60:12:3c:94:7a:c7:57:2e:e6:bd: 6f:d8:4f:e4:1b:23:83:fe:0a:41:24:be:4b:85:1b: cb:61:a1:5b:ba:0a:d2:8f:54:f3:54:54:02:ff:bf: 49:b7:0c:be:82:43:fd:e6:0b:20:56:ef:05:96:49: 50:8a:fe:93:3f:fa:d7:78:9c:67:53:6a:6b:fb:cf: 17:18:21:b0:ac:78:49:98:98:13:3d:c2:d0:0e:82: 1b:0b:80:02:af:51:cf:9a:b8:fc:4f:ac:f1:e9:07: 41:8c:7c:75:8a:33:aa:42:c3:c9:c5:e0:59:6d:a0: 91:1c:63:1d:7b:d9:3e:b1:31:84:29:eb:c1:3e:17: e9:8f:78:b9:47:6c:80:e4:70:e5:fd:d0:e7:f8:03: 12:e4:dc:a6:94:a4:44:4b:22:fc:58:8f:f8:02:6b: 70:86:84:29:69:e9:bb:2c:7b:89:5a:25:2e:92:07: af:d9:92:1a:82:da:bd:2c:7a:27:4d:99:a3:7c:dd: da:4c:bb:8e:87:c6:7e:13:c1:06:2a:51:23:d2:b6: 59:20:c0:a9:9e:63:dc:10:e8:2b:db:9c:47:70:66: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:F5:8E:82:89:51:F4:3E:C5:AB:C2:E3:BE:14:3F:97:BC:51:71 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ff:50:52:e9:7b:27:e2:a4:10:63:f0:ab:74:aa:00:af:d1: 67:2b:f8:71:05:a7:2a:48:55:83:67:84:85:9e:8c:35:f6:09: b3:ce:3b:27:ba:5b:76:8b:55:c5:02:95:b3:0c:4d:a3:b4:69: 50:81:0d:90:6b:06:32:90:ab:af:33:06:b9:99:ad:e2:48:b9: 93:4e:33:ea:dd:e2:39:8f:f0:37:e3:07:6a:d9:73:e5:6d:99: b3:ed:d3:3d:cf:4e:7e:32:6c:4a:3c:00:30:27:11:37:bc:35: 6d:e7:9b:f2:87:76:7e:93:bc:0d:e4:3a:8c:e4:f3:bb:2f:50: 1b:b0:9e:66:3e:8a:9f:e4:59:ae:94:ea:06:53:dc:47:64:5b: 61:10:d0:11:16:7f:ce:87:8d:6e:fb:fb:93:5d:53:03:db:67: 3a:66:0e:a2:55:63:97:95:53:8c:f5:71:2c:7b:10:06:4e:f5: 97:41:0d:ec:9d:62:c7:5a:23:d5:30:9f:a8:b7:39:6e:b4:22: fd:d0:27:85:04:12:29:08:07:26:cd:63:e4:3d:91:9f:32:9a: 72:43:90:d8:89:ef:34:8a:dd:1b:85:9a:c7:c3:94:30:05:15: 5d:63:2d:89:91:db:49:33:98:04:a2:7e:de:61:3e:b3:a7:54: c9:79:cc:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUCMi+jvrQF69ErLB7XNP+jpwQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA4MDUyMDA2MDNaFw0yNTA4MDgyMDIxMDNaMDMxMTAvBgNV BAMTKDhFQTZGNThFODI4OTUxRjQzRUM1QUJDMkUzQkUxNDNGOTdCQzUxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNMFnGMhPC6HOBsCqti6hCdf0 Fv8Xvs1x3VQRDPYwHon9YBI8lHrHVy7mvW/YT+QbI4P+CkEkvkuFG8thoVu6CtKP VPNUVAL/v0m3DL6CQ/3mCyBW7wWWSVCK/pM/+td4nGdTamv7zxcYIbCseEmYmBM9 wtAOghsLgAKvUc+auPxPrPHpB0GMfHWKM6pCw8nF4FltoJEcYx172T6xMYQp68E+ F+mPeLlHbIDkcOX90Of4AxLk3KaUpERLIvxYj/gCa3CGhClp6bsse4laJS6SB6/Z khqC2r0seidNmaN83dpMu46Hxn4TwQYqUSPStlkgwKmeY9wQ6CvbnEdwZjwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjqb1joKJUfQ+xavC474UP5e8UXEwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEr/UFLpeyfipBBj8Kt0qgCv0Wcr+HEFpypI VYNnhIWejDX2CbPOOye6W3aLVcUClbMMTaO0aVCBDZBrBjKQq68zBrmZreJIuZNO M+rd4jmP8DfjB2rZc+VtmbPt0z3PTn4ybEo8ADAnETe8NW3nm/KHdn6TvA3kOozk 87svUBuwnmY+ip/kWa6U6gZT3EdkW2EQ0BEWf86HjW77+5NdUwPbZzpmDqJVY5eV U4z1cSx7EAZO9ZdBDeydYsdaI9Uwn6i3OW60Iv3QJ4UEEikIBybNY+Q9kZ8ymnJD kNiJ7zSK3RuFmsfDlDAFFV1jLYmR20kzmASift5hPrOnVMl5zE4= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:40 2025 by rpki-client