$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: IQ/ZYsWm+IE+nFAmkWdXvr3tvfxTlHW/0ZVy1SQ/QDY= Subject key identifier: 3F:04:DA:49:49:E1:DF:A1:35:5B:B1:D8:6A:26:63:A2:FD:7D:5E:54 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 7241F3C77BB6061AA2A42D4D82A17AAE985E97C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0143 Signing time: Mon 03 Nov 2025 18:30:59 +0000 Manifest this update: Mon 03 Nov 2025 18:25:59 +0000 Manifest next update: Fri 07 Nov 2025 03:58:59 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: r7ckX2BnvkEvcbb2TZSbxHx25VgMcapEyMfRJACAQvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:41:f3:c7:7b:b6:06:1a:a2:a4:2d:4d:82:a1:7a:ae:98:5e:97:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Nov 3 18:25:59 2025 GMT Not After : Nov 7 03:58:59 2025 GMT Subject: CN=3F04DA4949E1DFA1355BB1D86A2663A2FD7D5E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:6f:96:ce:6b:f1:ce:8b:ca:b8:f4:ac:11: 8d:3b:9b:94:01:4f:3f:6c:26:05:05:90:44:1f:d1: f4:2d:33:81:7f:b1:cb:59:d0:f5:24:25:a1:38:c3: bf:fe:7e:47:ce:ab:b0:c2:37:b3:b1:29:8b:d3:3f: 16:3a:7e:e1:b1:8d:9a:5d:50:7b:1d:89:87:11:38: 87:b2:59:cf:a7:c1:ac:5f:ee:54:b2:39:b0:a9:e2: 73:2e:90:0c:aa:a6:4c:6a:f0:f9:a2:1e:d2:3a:c3: 16:b7:6f:5a:4a:91:73:f3:c1:77:2d:8f:5d:46:3c: cb:a7:a9:aa:f3:6a:fe:43:f8:6a:38:73:d0:00:f8: 8b:e9:a0:c2:44:84:41:55:9f:cf:db:08:12:01:8f: 5f:c7:fd:df:08:ce:c0:cf:04:db:7a:d1:61:69:d5: 69:89:0f:b8:55:ca:05:e7:2e:e2:3d:98:ae:2a:06: 09:22:4f:63:68:68:91:ce:43:80:2e:9e:c1:97:80: e6:4d:26:ab:0c:5c:de:ea:62:54:dc:32:88:38:9e: 0f:bc:82:99:5c:0c:de:d3:1e:9c:6b:2e:a3:77:ee: 81:32:b0:b4:d2:65:bc:0d:73:42:1e:52:b1:20:3f: a6:82:94:83:da:0d:d8:a0:ae:1e:5e:47:23:0f:86: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:04:DA:49:49:E1:DF:A1:35:5B:B1:D8:6A:26:63:A2:FD:7D:5E:54 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e2:91:e2:96:db:69:99:29:65:2c:99:fd:27:8e:f9:b2:7e: ae:44:22:84:70:07:98:65:3d:88:e2:53:fb:6f:db:3c:44:20: 23:eb:dc:09:d1:76:42:44:09:f6:9c:af:71:0e:8a:c1:30:16: 8a:32:33:5f:6b:ef:3c:69:30:f3:c2:54:56:13:b8:ab:8c:bf: 8d:79:c8:a2:84:b0:ef:bc:11:13:05:ce:c2:74:fe:33:66:cc: 53:ea:bf:2f:6b:fc:96:69:49:fc:c8:19:a5:9c:92:bc:6d:7c: 08:98:2b:64:3a:f3:39:45:a0:ce:5f:ef:ff:de:16:bd:5b:70: f5:4e:64:71:63:5f:a9:27:58:e7:36:e4:cc:3a:ec:10:8a:51: 64:d5:81:07:46:05:e0:79:21:ca:1a:7c:a9:4e:c1:d0:6e:3f: d5:01:6d:ac:77:e0:55:67:91:6a:d1:4b:fd:e8:ea:3b:fb:71: 6c:71:75:07:d7:4a:a3:b5:64:dd:7f:f7:3d:64:bf:6c:d2:ad: d1:93:33:c8:53:0d:6c:36:1b:4d:08:f5:69:42:79:d7:8b:d4: 1b:e3:b4:79:28:d9:26:7a:28:f0:70:96:e1:7b:99:5c:74:a3: 78:a0:f2:b3:9f:4d:90:d2:fa:cc:d7:b9:ab:0c:05:01:73:c5: 73:8b:e4:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckHzx3u2BhqipC1NgqF6rphel8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTExMDMxODI1NTlaFw0yNTExMDcwMzU4NTlaMDMxMTAvBgNV BAMTKDNGMDREQTQ5NDlFMURGQTEzNTVCQjFEODZBMjY2M0EyRkQ3RDVFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYrm+WzmvxzovKuPSsEY07m5QB Tz9sJgUFkEQf0fQtM4F/sctZ0PUkJaE4w7/+fkfOq7DCN7OxKYvTPxY6fuGxjZpd UHsdiYcROIeyWc+nwaxf7lSyObCp4nMukAyqpkxq8PmiHtI6wxa3b1pKkXPzwXct j11GPMunqarzav5D+Go4c9AA+IvpoMJEhEFVn8/bCBIBj1/H/d8IzsDPBNt60WFp 1WmJD7hVygXnLuI9mK4qBgkiT2NoaJHOQ4AunsGXgOZNJqsMXN7qYlTcMog4ng+8 gplcDN7THpxrLqN37oEysLTSZbwNc0IeUrEgP6aClIPaDdigrh5eRyMPhvgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwTaSUnh36E1W7HYaiZjov19XlQwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7ikeKW22mZKWUsmf0njvmyfq5EIoRwB5hl PYjiU/tv2zxEICPr3AnRdkJECfacr3EOisEwFooyM19r7zxpMPPCVFYTuKuMv415 yKKEsO+8ERMFzsJ0/jNmzFPqvy9r/JZpSfzIGaWckrxtfAiYK2Q68zlFoM5f7//e Fr1bcPVOZHFjX6knWOc25Mw67BCKUWTVgQdGBeB5IcoafKlOwdBuP9UBbax34FVn kWrRS/3o6jv7cWxxdQfXSqO1ZN1/9z1kv2zSrdGTM8hTDWw2G00I9WlCedeL1Bvj tHko2SZ6KPBwluF7mVx0o3ig8rOfTZDS+szXuasMBQFzxXOL5C8= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:26 2025 by rpki-client