$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: oKWsxhdg7F7+kO+yxZCgdOb9NAcAYUDAcKotQkZGpEQ= Subject key identifier: BE:07:19:07:06:EB:1E:43:50:1F:1A:0C:6F:2E:23:07:99:FF:33:91 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 7BF3E50AC6A33A4B674CAF9216C34F4ABEEAD2E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0105 Signing time: Mon 16 Jun 2025 21:40:55 +0000 Manifest this update: Mon 16 Jun 2025 21:35:55 +0000 Manifest next update: Fri 20 Jun 2025 02:07:55 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: 1io1s5EQ6JMizBzxMchjkfuNzZMvnZg0BFYQjPNYRjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f3:e5:0a:c6:a3:3a:4b:67:4c:af:92:16:c3:4f:4a:be:ea:d2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Jun 16 21:35:55 2025 GMT Not After : Jun 20 02:07:55 2025 GMT Subject: CN=BE07190706EB1E43501F1A0C6F2E230799FF3391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:49:1a:bd:82:48:55:91:9b:8f:b4:0f:07: 1d:3a:4a:1b:23:0c:48:b6:b4:9b:41:b9:ac:e9:57: 9e:a6:fd:51:f3:de:ef:1a:21:46:19:3e:7d:40:57: 72:4c:c2:3e:db:6d:8c:04:c6:73:0a:df:10:ee:fb: 7a:bf:43:5c:75:50:c7:20:ba:3a:c8:f9:81:1c:b6: 8b:00:3e:37:67:3a:75:13:85:84:4a:5f:7f:7a:7b: 75:88:22:d9:4e:86:6d:ae:28:40:3e:bb:6c:fc:10: d3:b5:16:86:0f:7e:2a:8b:36:c8:a0:ea:a0:3b:d0: da:ce:89:f9:83:2f:0e:45:22:c4:53:d2:b8:4c:38: 43:a5:4d:de:78:c5:ba:bb:71:45:8b:59:aa:35:2a: 28:ef:49:9d:0b:0c:5a:c8:92:9c:d3:5b:cf:b1:db: e8:17:07:ea:72:3e:2d:d3:53:d9:41:b6:ba:0d:81: ff:ef:64:cd:cc:37:6c:79:e9:6c:40:47:d1:cb:9a: 9b:83:7d:95:6b:15:e2:c0:74:92:5e:f8:29:70:b4: 01:0d:d4:6f:71:f1:73:e0:2a:cd:df:82:5f:11:4b: c5:b4:22:92:27:52:e9:c1:f9:16:eb:d9:7d:63:9a: 8d:41:fd:cc:61:9c:01:6b:ed:69:6a:f1:4d:a4:6f: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:07:19:07:06:EB:1E:43:50:1F:1A:0C:6F:2E:23:07:99:FF:33:91 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bb:fe:f3:c6:52:16:95:90:d8:ab:b7:a6:83:fc:64:6e:3f: 23:9b:e2:b6:75:83:8e:8f:4f:e4:29:29:49:0e:8f:af:e1:5d: 03:f6:e6:25:53:07:9d:13:a4:c6:20:31:91:9a:d3:29:fc:9c: 26:1a:c8:9c:e5:d5:46:0b:69:64:af:1b:8e:f1:08:72:e8:56: 7f:d3:cb:76:5c:07:b4:dd:20:92:8f:72:ca:29:c9:78:87:72: 34:4a:4f:57:69:9a:df:57:b7:60:47:63:52:c0:8d:56:e8:9b: d8:ad:e6:4c:f8:30:f2:c4:13:68:4f:bf:83:5f:57:53:cb:a2: ad:f1:6c:a5:93:de:10:ba:f9:d8:86:fb:0f:0e:bc:e6:50:69: cf:a1:da:bb:17:b5:c2:7e:c0:1e:d4:ba:48:fe:46:40:0f:ef: af:40:8a:50:64:20:13:87:09:7e:db:0d:31:0e:63:07:c9:71: cf:67:71:45:a3:73:75:df:69:a9:db:bb:ee:f2:22:c7:6a:f3: 2c:5e:d1:c7:7b:76:19:e0:ed:7c:5c:5d:46:53:9c:5e:a3:a4: 4f:e9:b5:13:2c:93:13:e1:1c:dc:23:29:04:fb:f8:aa:c7:cb: 71:2a:eb:9d:0e:d7:99:83:95:8f:42:b4:fd:56:21:9b:0a:d2: 2e:0c:88:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/PlCsajOktnTK+SFsNPSr7q0uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA2MTYyMTM1NTVaFw0yNTA2MjAwMjA3NTVaMDMxMTAvBgNV BAMTKEJFMDcxOTA3MDZFQjFFNDM1MDFGMUEwQzZGMkUyMzA3OTlGRjMzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBA0kavYJIVZGbj7QPBx06Shsj DEi2tJtBuazpV56m/VHz3u8aIUYZPn1AV3JMwj7bbYwExnMK3xDu+3q/Q1x1UMcg ujrI+YEctosAPjdnOnUThYRKX396e3WIItlOhm2uKEA+u2z8ENO1FoYPfiqLNsig 6qA70NrOifmDLw5FIsRT0rhMOEOlTd54xbq7cUWLWao1KijvSZ0LDFrIkpzTW8+x 2+gXB+pyPi3TU9lBtroNgf/vZM3MN2x56WxAR9HLmpuDfZVrFeLAdJJe+ClwtAEN 1G9x8XPgKs3fgl8RS8W0IpInUunB+Rbr2X1jmo1B/cxhnAFr7Wlq8U2kb8FXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvgcZBwbrHkNQHxoMby4jB5n/M5EwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJS7/vPGUhaVkNirt6aD/GRuPyOb4rZ1g46P T+QpKUkOj6/hXQP25iVTB50TpMYgMZGa0yn8nCYayJzl1UYLaWSvG47xCHLoVn/T y3ZcB7TdIJKPcsopyXiHcjRKT1dpmt9Xt2BHY1LAjVbom9it5kz4MPLEE2hPv4Nf V1PLoq3xbKWT3hC6+diG+w8OvOZQac+h2rsXtcJ+wB7Uukj+RkAP769AilBkIBOH CX7bDTEOYwfJcc9ncUWjc3Xfaanbu+7yIsdq8yxe0cd7dhng7XxcXUZTnF6jpE/p tRMskxPhHNwjKQT7+KrHy3Eq650O15mDlY9CtP1WIZsK0i4MiJE= -----END CERTIFICATE-----Generated at Tue Jun 17 11:07:02 2025 by rpki-client