$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: BnTQPg2TbDX1PsNafl5qiahdTNRdY5jEDRNnoWAH2DY= Subject key identifier: BA:40:A0:A1:5B:46:B9:44:C4:11:5D:94:81:EB:48:EC:48:18:67:1A Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 49E90224F673BFD8C446D34E218F35CCADD3D8FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 5E Signing time: Tue 05 Aug 2025 06:51:58 +0000 Manifest this update: Tue 05 Aug 2025 06:46:58 +0000 Manifest next update: Fri 08 Aug 2025 08:44:58 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: Cj+wEgSTda6l5/JYMCZKKQCvVeYidhsbm6pi6D08iDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e9:02:24:f6:73:bf:d8:c4:46:d3:4e:21:8f:35:cc:ad:d3:d8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Aug 5 06:46:58 2025 GMT Not After : Aug 8 08:44:58 2025 GMT Subject: CN=BA40A0A15B46B944C4115D9481EB48EC4818671A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:70:f0:6b:ca:38:43:d2:fc:63:f2:28:c6: 9c:2c:e6:5a:b4:9b:d8:b3:8d:26:70:87:3a:3a:38: 87:5c:ec:7a:6c:dc:af:a8:a3:5b:b9:e9:f1:4a:4c: f5:33:e1:c7:6d:79:ef:2f:10:6f:3b:bb:4f:5f:a0: e9:d7:60:a9:b1:8e:d3:c9:53:e6:9f:0c:e2:63:ff: 11:3e:55:78:05:1d:d5:16:4b:04:8e:39:13:60:0c: f5:a6:84:34:e3:9b:74:75:4f:9f:b1:d4:c6:47:02: bf:07:7b:7d:ff:d2:1f:43:d1:3d:e8:e3:9c:96:48: 53:57:e7:3c:1c:a2:eb:50:60:94:0e:db:2d:52:ed: 1e:0f:68:b5:ed:c7:68:5f:27:81:99:11:60:7c:67: cc:da:e7:01:1a:1f:f2:bb:ea:b0:c0:b4:45:cf:ba: 1a:1b:43:e6:2b:26:2b:0d:da:2c:1d:59:59:fc:c2: 63:50:fb:d1:3c:bd:24:43:36:12:f8:79:39:ee:a0: ee:53:dc:e1:08:c0:30:ff:5f:b2:8e:72:5d:12:7d: 60:c7:e9:d4:c9:7c:4a:35:99:9d:4a:67:99:81:63: 34:ac:98:c7:55:6f:28:ae:cf:ba:93:05:d2:c2:a4: 2b:89:39:61:d8:88:78:64:fe:a3:b1:b5:d0:ad:ab: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:A0:A1:5B:46:B9:44:C4:11:5D:94:81:EB:48:EC:48:18:67:1A X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:17:65:6a:82:48:67:12:71:60:d2:81:4e:4c:a6:af:69:7a: 24:1a:ce:a2:54:82:39:6c:e4:02:a4:69:cb:c6:ce:b8:16:ce: 25:39:0b:a4:54:9f:d2:2a:35:a2:e7:f4:c1:88:76:1e:0e:1e: 81:bd:27:73:41:92:39:4e:1e:89:0c:f8:fb:6b:df:d9:e3:c1: 17:01:09:49:f6:05:32:8c:7a:3d:0d:48:99:5d:e0:a8:95:23: 86:8a:ab:ba:6f:ee:fd:34:aa:f8:c4:fa:48:3a:cc:d0:79:97: d0:3a:1d:bb:2f:a7:7a:59:1b:de:d0:9c:fd:63:eb:95:11:0a: 95:81:33:47:eb:25:22:27:dd:10:58:fc:9d:73:2d:7a:21:c2: 70:31:f8:2b:0b:36:45:14:09:b8:15:f3:93:5e:ff:99:8e:ad: b3:d7:94:e8:01:7d:b1:0d:80:c1:9c:d4:ac:ac:a2:15:ea:e5: ba:42:34:a6:5c:38:92:c5:bf:91:4e:14:c1:b7:1c:b8:d6:be: 49:fe:21:a9:61:6e:c6:72:f3:03:88:ff:4b:83:87:3c:e4:a3: 44:6d:51:df:7e:1b:0d:fe:04:99:07:95:3b:98:30:a6:10:45: 52:bd:35:11:57:11:3a:fd:ca:1e:f3:82:29:b1:a8:e9:c6:35: 9c:3e:60:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSekCJPZzv9jERtNOIY81zK3T2P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA4MDUwNjQ2NThaFw0yNTA4MDgwODQ0NThaMDMxMTAvBgNV BAMTKEJBNDBBMEExNUI0NkI5NDRDNDExNUQ5NDgxRUI0OEVDNDgxODY3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzL3Dwa8o4Q9L8Y/Ioxpws5lq0 m9izjSZwhzo6OIdc7Hps3K+oo1u56fFKTPUz4cdtee8vEG87u09foOnXYKmxjtPJ U+afDOJj/xE+VXgFHdUWSwSOORNgDPWmhDTjm3R1T5+x1MZHAr8He33/0h9D0T3o 45yWSFNX5zwcoutQYJQO2y1S7R4PaLXtx2hfJ4GZEWB8Z8za5wEaH/K76rDAtEXP uhobQ+YrJisN2iwdWVn8wmNQ+9E8vSRDNhL4eTnuoO5T3OEIwDD/X7KOcl0SfWDH 6dTJfEo1mZ1KZ5mBYzSsmMdVbyiuz7qTBdLCpCuJOWHYiHhk/qOxtdCtq6JXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukCgoVtGuUTEEV2UgetI7EgYZxowHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcXZWqCSGcScWDSgU5Mpq9peiQazqJUgjls 5AKkacvGzrgWziU5C6RUn9IqNaLn9MGIdh4OHoG9J3NBkjlOHokM+Ptr39njwRcB CUn2BTKMej0NSJld4KiVI4aKq7pv7v00qvjE+kg6zNB5l9A6Hbsvp3pZG97QnP1j 65URCpWBM0frJSIn3RBY/J1zLXohwnAx+CsLNkUUCbgV85Ne/5mOrbPXlOgBfbEN gMGc1KysohXq5bpCNKZcOJLFv5FOFMG3HLjWvkn+IalhbsZy8wOI/0uDhzzko0Rt Ud9+Gw3+BJkHlTuYMKYQRVK9NRFXETr9yh7zgimxqOnGNZw+YJs= -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:32 2025 by rpki-client