$ rpki-client -vvf repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft File: F2B9762E29FC128E7A5553319EB45533550D5C93.mft (raw, json) Hash identifier: A42diuJMser8ExVNYG5P6S+LeDfxUee6Xxcf1vj47Hw= Subject key identifier: 0C:FB:99:E0:B1:B5:7F:E6:9D:52:EE:0B:F2:CD:F9:0C:F2:C2:8A:88 Authority key identifier: F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93 Certificate issuer: /CN=F2B9762E29FC128E7A5553319EB45533550D5C93 Certificate serial: 53E55B777B87C710592C03E47BE35A94B9855213 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft Manifest number: 03B2 Signing time: Tue 05 Aug 2025 03:20:54 +0000 Manifest this update: Tue 05 Aug 2025 03:15:54 +0000 Manifest next update: Fri 08 Aug 2025 09:48:54 +0000 Files and hashes: 1: F2B9762E29FC128E7A5553319EB45533550D5C93.crl (hash: ywP+qnLL1YVtJ50gVT6Vn7XrxX2Y+3gBPyB3jJUdE/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e5:5b:77:7b:87:c7:10:59:2c:03:e4:7b:e3:5a:94:b9:85:52:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B9762E29FC128E7A5553319EB45533550D5C93 Validity Not Before: Aug 5 03:15:54 2025 GMT Not After : Aug 8 09:48:54 2025 GMT Subject: CN=0CFB99E0B1B57FE69D52EE0BF2CDF90CF2C28A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:ad:12:a1:38:eb:fe:5f:10:bc:50:c7:e2: da:d2:2d:1d:57:10:38:d4:54:c1:92:09:45:08:b9: 0b:c7:8b:55:56:24:3a:0a:16:61:34:69:81:cc:69: c6:04:3d:30:f8:10:7d:25:29:b4:6a:c7:15:00:ae: 3a:5c:3f:f9:5c:16:72:f6:f5:4e:8e:96:1d:c3:f0: 8c:45:48:b1:a1:a3:b1:52:6e:c6:27:1c:db:8a:0b: c9:a5:f0:1f:fe:13:3f:30:b6:1a:4c:46:4b:45:bf: 64:97:86:47:b0:76:a3:76:3e:6d:60:65:52:b5:19: cf:ee:e1:58:5e:ff:6f:ab:01:9c:27:ec:bc:04:e6: 57:4c:5a:c3:7c:94:07:8a:69:42:01:3a:b2:61:65: 06:61:20:e3:5c:fc:e4:11:8d:8e:bd:a7:08:51:a1: ac:5b:7b:c4:d7:03:77:a8:50:b2:ce:7b:02:7e:df: 33:68:a6:39:34:08:20:d2:59:c1:9a:6d:e2:87:24: bd:3d:2f:08:a7:0f:96:5b:2e:4b:37:14:06:7b:28: 4c:1a:5d:dd:28:95:b7:f5:49:8e:51:c9:6d:32:60: 11:85:1d:05:70:e3:4c:ac:e8:1f:d4:5d:11:e7:45: 08:59:1c:72:2d:5e:6d:d4:1d:95:a5:67:60:db:a5: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FB:99:E0:B1:B5:7F:E6:9D:52:EE:0B:F2:CD:F9:0C:F2:C2:8A:88 X509v3 Authority Key Identifier: keyid:F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f1:b0:86:16:25:84:0d:04:8f:e0:e1:65:97:86:f1:a5:33: 6a:1e:ff:98:66:76:1b:3f:b4:10:46:92:80:43:5f:d6:78:5a: 39:ef:ac:68:86:c7:a2:fb:90:bb:fe:01:90:d2:7a:82:2c:cf: 49:07:d9:b2:23:10:2d:a9:32:8d:ba:99:57:10:a9:4c:c0:01: ac:80:c8:ac:1c:06:3c:95:73:08:19:17:77:8a:b0:6c:a5:a0: 5f:29:23:cb:b3:12:8e:a8:eb:2c:a9:fb:38:31:82:db:70:e9: b5:08:8f:84:f0:e3:c6:0e:a4:6a:38:fa:80:2f:2f:36:6c:c4: 0b:cf:1a:1c:01:a3:f6:42:78:67:39:cf:a5:31:da:0f:a2:ea: 7d:36:3d:8c:1b:e0:e9:bc:08:50:03:aa:1a:88:56:97:2b:b6: b1:a1:8f:d4:d3:e6:c1:50:9b:4a:5b:59:03:f7:6e:c7:15:12: 12:ac:66:9f:f0:0a:3c:36:07:0d:24:00:26:fa:5b:bb:fc:74: 18:b0:3a:18:4f:4d:e9:1d:45:77:1d:68:88:72:32:d3:58:15: e6:4f:3e:5c:98:39:e2:37:d8:2a:9a:bf:44:75:4b:d1:44:09: fa:d9:f1:cf:be:fd:88:74:07:96:00:57:07:5c:ee:62:d7:e3: c5:83:1d:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+Vbd3uHxxBZLAPke+NalLmFUhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCOTc2MkUyOUZDMTI4RTdBNTU1MzMxOUVCNDU1MzM1 NTBENUM5MzAeFw0yNTA4MDUwMzE1NTRaFw0yNTA4MDgwOTQ4NTRaMDMxMTAvBgNV BAMTKDBDRkI5OUUwQjFCNTdGRTY5RDUyRUUwQkYyQ0RGOTBDRjJDMjhBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0K0SoTjr/l8QvFDH4trSLR1X EDjUVMGSCUUIuQvHi1VWJDoKFmE0aYHMacYEPTD4EH0lKbRqxxUArjpcP/lcFnL2 9U6Olh3D8IxFSLGho7FSbsYnHNuKC8ml8B/+Ez8wthpMRktFv2SXhkewdqN2Pm1g ZVK1Gc/u4Vhe/2+rAZwn7LwE5ldMWsN8lAeKaUIBOrJhZQZhIONc/OQRjY69pwhR oaxbe8TXA3eoULLOewJ+3zNopjk0CCDSWcGabeKHJL09LwinD5ZbLks3FAZ7KEwa Xd0olbf1SY5RyW0yYBGFHQVw40ys6B/UXRHnRQhZHHItXm3UHZWlZ2DbpYIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPuZ4LG1f+adUu4L8s35DPLCiogwHwYDVR0j BBgwFoAU8rl2Lin8Eo56VVMxnrRVM1UNXJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3OTdiNS03MzBhLTQ4NDEtYTc1Ni04MzNlMjZiMWNhMGMvMC9GMkI5NzYyRTI5 RkMxMjhFN0E1NTUzMzE5RUI0NTUzMzU1MEQ1QzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCOTc2MkUyOUZDMTI4RTdBNTU1MzMxOUVCNDU1MzM1NTBE NUM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjNzk3YjUtNzMwYS00ODQxLWE3 NTYtODMzZTI2YjFjYTBjLzAvRjJCOTc2MkUyOUZDMTI4RTdBNTU1MzMxOUVCNDU1 MzM1NTBENUM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7xsIYWJYQNBI/g4WWXhvGlM2oe/5hmdhs/ tBBGkoBDX9Z4WjnvrGiGx6L7kLv+AZDSeoIsz0kH2bIjEC2pMo26mVcQqUzAAayA yKwcBjyVcwgZF3eKsGyloF8pI8uzEo6o6yyp+zgxgttw6bUIj4Tw48YOpGo4+oAv LzZsxAvPGhwBo/ZCeGc5z6Ux2g+i6n02PYwb4Om8CFADqhqIVpcrtrGhj9TT5sFQ m0pbWQP3bscVEhKsZp/wCjw2Bw0kACb6W7v8dBiwOhhPTekdRXcdaIhyMtNYFeZP PlyYOeI32Cqav0R1S9FECfrZ8c++/Yh0B5YAVwdc7mLX48WDHfE= -----END CERTIFICATE-----Generated at Thu Aug 7 04:27:04 2025 by rpki-client