$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: ujwKn829oz3RURy44ide2hpbXoNr+eBMn/iohPnqRZk= Subject key identifier: B2:96:B0:A8:96:E2:25:D6:44:7D:C1:D0:32:8D:53:89:79:0E:92:A4 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 43710B9D52B316F29F293132393E7CFF3B7F946C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 011C Signing time: Thu 07 Aug 2025 01:51:42 +0000 Manifest this update: Thu 07 Aug 2025 01:46:42 +0000 Manifest next update: Sun 10 Aug 2025 05:06:42 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: j+85l8d+Ey80iJfit49R2QqSj8RpE3VzLn2u0qxF1m8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:71:0b:9d:52:b3:16:f2:9f:29:31:32:39:3e:7c:ff:3b:7f:94:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Aug 7 01:46:42 2025 GMT Not After : Aug 10 05:06:42 2025 GMT Subject: CN=B296B0A896E225D6447DC1D0328D5389790E92A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:d2:20:7f:75:6f:0a:a9:56:d7:3e:3f:66: 1d:30:de:88:b4:f7:51:fb:1b:57:c0:db:a3:a5:80: 81:eb:a7:5f:95:47:36:98:86:c2:2e:9c:82:a5:d3: 9e:f7:80:bf:f2:4f:7b:8a:35:7b:44:50:3f:2a:77: d1:42:70:58:83:66:19:6c:8e:71:e9:46:96:76:04: 88:ee:6b:2f:d4:30:fe:e8:99:17:36:94:c6:10:f1: f7:f7:ef:f7:42:ea:6f:a1:05:50:8e:be:95:86:43: 77:61:ec:74:a0:5c:4a:ea:32:e8:d6:ea:a4:f6:04: ba:cd:67:e0:2c:8c:b3:72:18:56:f0:16:77:de:84: 60:97:fa:aa:46:ec:8c:68:55:2d:05:a5:86:67:1d: 7d:f3:34:61:d7:11:1c:ae:8f:8b:3a:aa:01:33:ae: 67:15:fd:45:c7:ff:35:59:cf:8b:32:e0:1a:cf:05: 3c:80:86:f4:8d:77:bb:ef:05:02:3c:11:33:83:58: d2:78:91:0e:90:b7:97:69:dc:da:fa:b7:c5:3e:23: 94:a9:26:c8:e1:f1:d8:3c:fd:a5:a9:97:a8:74:f7: b1:95:2f:67:da:0e:9e:64:f5:2a:b6:36:a3:0a:85: a4:19:29:57:bf:b4:88:e6:ba:9b:3b:6d:20:f2:b4: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:96:B0:A8:96:E2:25:D6:44:7D:C1:D0:32:8D:53:89:79:0E:92:A4 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:60:b1:24:f6:b0:be:7f:2b:7d:02:3c:e6:0f:b5:9b:9a:6a: d6:09:2e:e7:58:5e:82:3c:0e:7e:93:6e:7f:1b:0b:4e:11:aa: e8:3d:43:41:59:2e:31:4a:1e:d0:2b:65:4f:0e:2a:5d:e4:42: fb:1a:0b:1c:6c:89:0a:7c:04:36:fa:6a:70:6b:42:b5:1d:71: 8b:0b:a3:19:e6:b9:e6:7a:97:3a:8b:69:59:ef:f5:15:31:0b: 46:25:95:80:72:31:f8:7d:fd:8c:05:b7:a7:01:c6:52:a8:4e: 99:45:45:a7:15:05:5e:0f:cb:f1:e8:1e:84:0c:c5:db:f8:b3: 3c:d3:13:37:4d:79:1f:c0:1a:9a:b1:1d:b5:08:a8:17:a5:75: c0:80:69:3d:f2:7d:da:5c:2f:43:21:6a:95:13:a6:fc:1b:72: c4:ef:40:74:02:39:c7:d5:de:d2:b6:c0:e1:21:93:a9:99:95: 86:1f:f4:6d:b5:6e:91:79:4e:21:45:dc:0a:4d:98:40:98:e6: 23:82:21:8a:69:49:0c:87:bc:b8:13:ad:65:b6:cb:94:f8:4c: d9:93:5b:ed:c3:3e:6e:97:9c:40:31:17:a9:f7:34:e3:f6:2e: ec:e7:c9:db:45:cd:28:17:d5:81:88:38:05:a4:ab:1e:7a:ed: be:e7:a1:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3ELnVKzFvKfKTEyOT58/zt/lGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA4MDcwMTQ2NDJaFw0yNTA4MTAwNTA2NDJaMDMxMTAvBgNV BAMTKEIyOTZCMEE4OTZFMjI1RDY0NDdEQzFEMDMyOEQ1Mzg5NzkwRTkyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+dIgf3VvCqlW1z4/Zh0w3oi0 91H7G1fA26OlgIHrp1+VRzaYhsIunIKl0573gL/yT3uKNXtEUD8qd9FCcFiDZhls jnHpRpZ2BIjuay/UMP7omRc2lMYQ8ff37/dC6m+hBVCOvpWGQ3dh7HSgXErqMujW 6qT2BLrNZ+AsjLNyGFbwFnfehGCX+qpG7IxoVS0FpYZnHX3zNGHXERyuj4s6qgEz rmcV/UXH/zVZz4sy4BrPBTyAhvSNd7vvBQI8ETODWNJ4kQ6Qt5dp3Nr6t8U+I5Sp Jsjh8dg8/aWpl6h097GVL2faDp5k9Sq2NqMKhaQZKVe/tIjmups7bSDytHz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUspawqJbiJdZEfcHQMo1TiXkOkqQwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVgsST2sL5/K30CPOYPtZuaatYJLudYXoI8 Dn6Tbn8bC04Rqug9Q0FZLjFKHtArZU8OKl3kQvsaCxxsiQp8BDb6anBrQrUdcYsL oxnmueZ6lzqLaVnv9RUxC0YllYByMfh9/YwFt6cBxlKoTplFRacVBV4Py/HoHoQM xdv4szzTEzdNeR/AGpqxHbUIqBeldcCAaT3yfdpcL0MhapUTpvwbcsTvQHQCOcfV 3tK2wOEhk6mZlYYf9G21bpF5TiFF3ApNmECY5iOCIYppSQyHvLgTrWW2y5T4TNmT W+3DPm6XnEAxF6n3NOP2LuznydtFzSgX1YGIOAWkqx567b7nofw= -----END CERTIFICATE-----Generated at Thu Aug 7 04:26:56 2025 by rpki-client