$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: sKttjG11xyuR3qAABLoaGhcRLGeBOMwrCBhUgpt2kRo= Subject key identifier: E7:5F:C7:6B:FB:8C:06:6C:3F:7B:8C:5A:79:51:7C:B1:DE:EA:8B:3E Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 5EF5B678F79943C42882F7CBE47CA6B58E94FE5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 017E Signing time: Wed 06 Aug 2025 21:02:04 +0000 Manifest this update: Wed 06 Aug 2025 20:57:04 +0000 Manifest next update: Sat 09 Aug 2025 22:21:04 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: akfPHjdhHg35JOoNhC2yBOEBmeTfbk3EJ3TDMX83qGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f5:b6:78:f7:99:43:c4:28:82:f7:cb:e4:7c:a6:b5:8e:94:fe:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Aug 6 20:57:04 2025 GMT Not After : Aug 9 22:21:04 2025 GMT Subject: CN=E75FC76BFB8C066C3F7B8C5A79517CB1DEEA8B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:34:10:1e:87:39:6f:a1:46:67:a0:35:f9: 59:68:f0:23:a8:4b:2f:e6:aa:78:82:46:6f:d8:7a: c7:eb:e9:a9:f6:cb:e3:3f:6c:fa:21:e3:c6:51:ea: 9e:c4:86:df:b0:37:d4:a7:26:4b:83:ca:60:94:6e: 1c:50:9d:d2:ff:77:d5:7c:f3:5e:46:14:74:de:2a: fa:f5:12:3b:60:76:9c:ca:f3:4a:75:ec:c5:6b:fe: 82:35:98:b1:3c:9f:98:24:86:13:ce:ff:7d:16:f4: d4:5f:1e:5f:2e:5e:f2:40:b0:5f:e6:80:51:a7:59: b9:6b:82:b5:f0:e3:8b:96:ce:c6:bd:10:98:fd:f3: 9e:9f:85:8d:43:8f:b3:46:eb:8c:2d:57:c4:ac:ee: e7:3c:48:d8:b4:a4:29:cf:22:bc:37:e8:f0:24:17: b8:15:a9:0d:3a:f2:a0:ce:60:62:1e:f4:a0:0a:71: a7:e5:5b:a0:c9:28:bc:24:73:50:91:ab:84:cb:d6: 44:c3:48:a9:83:29:83:a1:8d:56:2b:49:14:db:7b: 3d:04:66:03:04:07:71:44:04:80:f1:78:f7:76:b9: 65:9b:1d:9b:98:5d:06:f2:c6:72:cc:56:7b:bc:37: b6:aa:7d:06:31:59:a5:5b:0c:06:ee:82:40:34:c3: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:C7:6B:FB:8C:06:6C:3F:7B:8C:5A:79:51:7C:B1:DE:EA:8B:3E X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cc:0c:94:df:2d:e6:24:8c:a2:7e:11:13:2b:0d:8b:95:cc: 01:e0:06:c7:69:5c:57:48:50:50:b1:c7:cb:ea:d3:e4:34:b4: 13:c4:38:d9:de:32:ab:59:c0:59:c7:64:5c:e7:60:83:50:0e: b9:83:aa:30:90:d0:04:05:0b:ef:b7:4e:c6:28:9f:b5:09:2d: 5f:74:3a:ad:25:9c:c6:3e:0a:18:27:0e:29:28:48:9a:86:61: 36:4f:ed:16:8a:44:13:e6:e7:a5:3d:bf:73:71:e8:e5:06:60: 71:6e:29:7a:36:f1:49:64:75:7c:07:a1:b4:bb:61:48:5f:08: a7:2e:04:77:d3:ad:e8:30:dc:34:08:71:f7:61:58:79:aa:33: 54:81:98:ba:77:91:93:97:88:43:40:36:e2:f2:db:73:cf:aa: 5c:87:ca:c7:23:e2:5e:3b:3e:ea:0a:fb:c9:fd:dd:69:c4:53: 00:a5:1f:d6:2c:4b:e6:84:91:b3:51:ea:ac:fe:e2:ef:f4:9e: 55:a2:1a:58:63:66:5f:0b:94:b6:4d:83:17:79:5f:0e:a2:3e: 3b:73:8f:1b:9f:74:c4:3e:e5:3f:44:98:4e:8f:2d:41:05:c3: c1:42:13:93:3e:e2:f8:f5:35:0a:be:02:01:64:fc:9b:00:2e: 8a:eb:f4:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvW2ePeZQ8QogvfL5HymtY6U/l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA4MDYyMDU3MDRaFw0yNTA4MDkyMjIxMDRaMDMxMTAvBgNV BAMTKEU3NUZDNzZCRkI4QzA2NkMzRjdCOEM1QTc5NTE3Q0IxREVFQThCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82TQQHoc5b6FGZ6A1+Vlo8COo Sy/mqniCRm/Yesfr6an2y+M/bPoh48ZR6p7Eht+wN9SnJkuDymCUbhxQndL/d9V8 815GFHTeKvr1EjtgdpzK80p17MVr/oI1mLE8n5gkhhPO/30W9NRfHl8uXvJAsF/m gFGnWblrgrXw44uWzsa9EJj9856fhY1Dj7NG64wtV8Ss7uc8SNi0pCnPIrw36PAk F7gVqQ068qDOYGIe9KAKcaflW6DJKLwkc1CRq4TL1kTDSKmDKYOhjVYrSRTbez0E ZgMEB3FEBIDxePd2uWWbHZuYXQbyxnLMVnu8N7aqfQYxWaVbDAbugkA0wx2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU51/Ha/uMBmw/e4xaeVF8sd7qiz4wHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbMDJTfLeYkjKJ+ERMrDYuVzAHgBsdpXFdI UFCxx8vq0+Q0tBPEONneMqtZwFnHZFznYINQDrmDqjCQ0AQFC++3TsYon7UJLV90 Oq0lnMY+ChgnDikoSJqGYTZP7RaKRBPm56U9v3Nx6OUGYHFuKXo28UlkdXwHobS7 YUhfCKcuBHfTregw3DQIcfdhWHmqM1SBmLp3kZOXiENANuLy23PPqlyHyscj4l47 PuoK+8n93WnEUwClH9YsS+aEkbNR6qz+4u/0nlWiGlhjZl8LlLZNgxd5Xw6iPjtz jxufdMQ+5T9EmE6PLUEFw8FCE5M+4vj1NQq+AgFk/JsALorr9KY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:48 2025 by rpki-client