$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: 4yPFuffa2AmK82+DrNvozIdG975+AkV4Q29eTRAafyA= Subject key identifier: E9:FF:EF:61:59:7D:EC:B2:E9:C4:C6:13:7C:B9:BA:1B:7F:9B:ED:CA Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 2668381867F2CB5493042C243CAEAAF4AE9C7CF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 0495 Signing time: Mon 16 Jun 2025 08:41:01 +0000 Manifest this update: Mon 16 Jun 2025 08:36:01 +0000 Manifest next update: Thu 19 Jun 2025 17:07:01 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: Imaog0eYrN9fPtK38MiqO36HfvgfKPz9neVsOT9g8UU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:68:38:18:67:f2:cb:54:93:04:2c:24:3c:ae:aa:f4:ae:9c:7c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Jun 16 08:36:01 2025 GMT Not After : Jun 19 17:07:01 2025 GMT Subject: CN=E9FFEF61597DECB2E9C4C6137CB9BA1B7F9BEDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:f4:e5:dc:02:33:0c:fa:9b:52:5b:f0:dc: d7:f0:31:71:5b:8c:d3:fb:17:d4:51:d5:49:ff:7a: d4:49:75:bd:10:74:9f:a8:79:12:04:69:09:74:33: 16:39:c7:48:9b:0c:30:7f:67:b0:3b:8b:9e:c3:57: c7:b9:28:cd:9a:7e:7b:4f:c4:6a:36:66:78:e6:75: e8:dc:4e:40:76:48:dd:eb:ce:a6:73:6f:e1:8f:d6: e0:c7:0d:97:56:02:3a:ad:7e:3a:15:6f:44:f2:06: 40:45:40:e3:72:ed:c5:88:62:0a:15:39:23:fe:c6: f7:5d:7c:c8:26:90:6b:4b:d3:b7:40:a1:b4:1f:a8: c5:35:f1:18:95:22:71:cb:1d:65:10:72:73:59:0f: 50:ef:b4:d5:e4:80:8e:48:78:25:8a:7e:fd:34:e2: 00:7d:2d:2b:2e:35:b6:b3:d9:f3:9c:c0:b0:6b:6e: fa:78:b4:13:28:66:83:94:50:ff:94:b0:61:09:6c: 87:5c:aa:17:81:a4:34:3e:42:be:4e:2a:16:6f:eb: 93:8f:1a:dd:16:13:3c:42:72:82:b7:f9:c9:3f:4d: 29:2e:55:89:7d:11:a8:c0:91:6b:82:c3:1d:46:d3: 2d:6d:fb:a8:e0:d1:98:4b:b0:c6:c6:19:08:07:15: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FF:EF:61:59:7D:EC:B2:E9:C4:C6:13:7C:B9:BA:1B:7F:9B:ED:CA X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e2:53:d3:02:3c:be:a1:e7:3a:1d:bc:22:85:c3:2d:8b:5f: 9a:f9:77:77:c6:2a:2c:1f:96:f9:20:53:5a:76:b2:f3:74:f8: 87:24:24:9a:3c:a2:99:56:50:a2:b9:e9:34:f8:a9:18:c1:73: 0f:3c:32:b0:f0:43:da:3a:3a:69:8d:fb:a2:37:60:c1:e8:43: e0:de:91:6e:40:bf:b0:b3:a4:2e:bc:b3:02:e5:e8:0d:76:32: 18:5a:15:30:c1:b3:b7:f8:0f:be:7e:fd:bb:0b:de:7a:f4:e0: 37:5d:a8:b5:d6:42:2d:3c:4d:31:7d:6d:7a:a5:4d:8c:27:6f: f8:a2:d4:48:37:c4:b4:e2:07:62:38:45:2d:01:9e:06:03:49: d5:15:95:94:ca:0b:70:75:1d:6c:92:97:df:b8:3b:96:cf:e0: f2:1b:e3:10:fc:e8:ea:cd:d5:d5:c9:8c:c8:f2:6f:e8:b1:37: 29:12:b9:23:e1:ef:f4:11:fb:90:7a:4f:1d:1c:2c:c6:a7:85: 29:20:66:3b:e2:d2:75:ca:cb:c6:df:c9:77:f1:10:d2:ac:80: 72:fc:78:9b:db:3a:2c:6c:cd:7c:bd:b8:f9:ee:ff:6d:6c:b5: c2:66:68:7f:14:b7:66:77:4b:2d:db:30:88:da:ea:14:b3:ff: dc:1f:11:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmg4GGfyy1STBCwkPK6q9K6cfPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA2MTYwODM2MDFaFw0yNTA2MTkxNzA3MDFaMDMxMTAvBgNV BAMTKEU5RkZFRjYxNTk3REVDQjJFOUM0QzYxMzdDQjlCQTFCN0Y5QkVEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVfTl3AIzDPqbUlvw3NfwMXFb jNP7F9RR1Un/etRJdb0QdJ+oeRIEaQl0MxY5x0ibDDB/Z7A7i57DV8e5KM2afntP xGo2ZnjmdejcTkB2SN3rzqZzb+GP1uDHDZdWAjqtfjoVb0TyBkBFQONy7cWIYgoV OSP+xvddfMgmkGtL07dAobQfqMU18RiVInHLHWUQcnNZD1DvtNXkgI5IeCWKfv00 4gB9LSsuNbaz2fOcwLBrbvp4tBMoZoOUUP+UsGEJbIdcqheBpDQ+Qr5OKhZv65OP Gt0WEzxCcoK3+ck/TSkuVYl9EajAkWuCwx1G0y1t+6jg0ZhLsMbGGQgHFbChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6f/vYVl97LLpxMYTfLm6G3+b7cowHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJviU9MCPL6h5zodvCKFwy2LX5r5d3fGKiwf lvkgU1p2svN0+IckJJo8oplWUKK56TT4qRjBcw88MrDwQ9o6OmmN+6I3YMHoQ+De kW5Av7CzpC68swLl6A12MhhaFTDBs7f4D75+/bsL3nr04DddqLXWQi08TTF9bXql TYwnb/ii1Eg3xLTiB2I4RS0BngYDSdUVlZTKC3B1HWySl9+4O5bP4PIb4xD86OrN 1dXJjMjyb+ixNykSuSPh7/QR+5B6Tx0cLManhSkgZjvi0nXKy8bfyXfxENKsgHL8 eJvbOixszXy9uPnu/21stcJmaH8Ut2Z3Sy3bMIja6hSz/9wfEaM= -----END CERTIFICATE-----Generated at Tue Jun 17 13:04:33 2025 by rpki-client