$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: ToUSH5IXTN/A7a4e5Z8tAkeDl2r4Qu2SOzx/mRmWqmI= Subject key identifier: 0E:31:00:AF:47:87:B6:CD:A6:63:F1:A1:CC:17:78:ED:94:A9:D6:E5 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 67E434FE8DD53328DAE411F743265BFD0512CB13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0167 Signing time: Sat 14 Jun 2025 03:21:58 +0000 Manifest this update: Sat 14 Jun 2025 03:16:58 +0000 Manifest next update: Tue 17 Jun 2025 15:01:58 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: 6kCjJ7oTYw9N9Clhm8nsOTQOIhNQy29W0+3tghTFcU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:34:fe:8d:d5:33:28:da:e4:11:f7:43:26:5b:fd:05:12:cb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Jun 14 03:16:58 2025 GMT Not After : Jun 17 15:01:58 2025 GMT Subject: CN=0E3100AF4787B6CDA663F1A1CC1778ED94A9D6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:49:15:8d:6d:e1:ab:da:d4:91:c4:e0:b8: 2d:3a:be:62:90:8c:7b:2d:a8:c9:3e:92:1e:a6:29: 64:25:be:f7:3e:56:37:0a:41:1e:9c:fd:b8:94:67: 52:5a:d5:29:60:ef:79:fe:2e:c2:5b:58:49:91:ad: 22:c8:40:2f:46:7e:f4:34:68:59:cd:39:4f:52:74: d9:c3:25:88:e9:21:9c:a5:e1:1c:66:b5:f5:f8:9e: 0d:99:e2:ac:40:d1:db:5a:08:b8:a3:92:ec:41:a0: 52:4d:8d:4d:91:1d:8b:98:68:69:44:bd:e8:5e:0a: 1a:9d:cb:ae:12:b8:4e:d9:23:27:8c:bf:28:7e:a8: 67:44:06:53:2e:a0:cd:78:db:d1:c5:0c:ad:e0:07: 9b:2f:cc:53:ed:ed:8c:4c:30:be:e2:9a:99:a9:6a: 1d:75:1e:dd:82:47:6e:e2:e7:22:10:31:fc:a5:51: 60:94:b2:37:8c:58:37:8d:22:d7:8c:6e:a1:bc:e2: 5e:9f:aa:bc:75:a5:97:46:dc:ba:27:09:71:33:7c: 23:a7:44:d1:80:0a:31:33:03:ee:ff:e3:b5:05:1c: 79:aa:96:9a:c2:95:c2:90:bd:ee:b5:a7:40:b6:97: 86:05:d1:7d:d4:6f:85:45:c7:2d:08:50:8c:fe:a9: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:00:AF:47:87:B6:CD:A6:63:F1:A1:CC:17:78:ED:94:A9:D6:E5 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:18:79:22:96:f1:ed:50:33:20:ea:63:0a:ce:47:54:3c:63: 30:39:27:c0:b9:8b:70:65:da:c9:ae:19:12:61:cb:5f:45:9e: 18:d8:10:30:81:9e:2a:1e:43:34:34:c3:59:06:b9:a3:5a:2f: 0c:54:24:a3:e2:5d:3b:43:03:4a:c6:e1:76:5d:3e:1f:b1:9e: 1f:75:40:a8:f7:18:2f:14:c3:ae:a3:41:f3:ed:f1:cd:f4:eb: b4:e6:a7:e5:48:7b:87:e1:fa:30:c8:be:ef:b6:ba:8e:dc:2c: 5a:5e:11:63:fc:f4:89:36:4c:be:b0:b5:a3:74:b2:d7:3c:0a: c5:35:eb:a5:a4:78:fb:5c:47:0d:db:6f:45:8e:f9:95:1f:49: 48:6b:9a:0e:eb:25:a5:cd:9a:49:97:d6:c4:61:d9:20:9f:f3: 09:31:1c:ad:21:61:3d:55:52:16:27:db:4a:74:81:fa:65:9b: d0:34:35:e7:71:c8:64:28:80:c6:d7:d4:82:35:36:02:ed:27: d0:f8:ca:dd:92:5f:86:3d:76:82:cc:27:f3:fd:2d:46:f6:2e: d4:36:5e:cf:c9:01:b1:15:77:0e:66:26:9c:ae:13:38:0b:8c: 04:9b:3f:61:ed:7f:99:0d:a2:b8:e0:9d:6a:75:9f:8e:2c:f8: 8c:a0:6a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+Q0/o3VMyja5BH3QyZb/QUSyxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA2MTQwMzE2NThaFw0yNTA2MTcxNTAxNThaMDMxMTAvBgNV BAMTKDBFMzEwMEFGNDc4N0I2Q0RBNjYzRjFBMUNDMTc3OEVEOTRBOUQ2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQ0kVjW3hq9rUkcTguC06vmKQ jHstqMk+kh6mKWQlvvc+VjcKQR6c/biUZ1Ja1Slg73n+LsJbWEmRrSLIQC9GfvQ0 aFnNOU9SdNnDJYjpIZyl4RxmtfX4ng2Z4qxA0dtaCLijkuxBoFJNjU2RHYuYaGlE veheChqdy64SuE7ZIyeMvyh+qGdEBlMuoM1429HFDK3gB5svzFPt7YxMML7impmp ah11Ht2CR27i5yIQMfylUWCUsjeMWDeNIteMbqG84l6fqrx1pZdG3LonCXEzfCOn RNGACjEzA+7/47UFHHmqlprClcKQve61p0C2l4YF0X3Ub4VFxy0IUIz+qUCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjEAr0eHts2mY/GhzBd47ZSp1uUwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYYeSKW8e1QMyDqYwrOR1Q8YzA5J8C5i3Bl 2smuGRJhy19FnhjYEDCBnioeQzQ0w1kGuaNaLwxUJKPiXTtDA0rG4XZdPh+xnh91 QKj3GC8Uw66jQfPt8c3067Tmp+VIe4fh+jDIvu+2uo7cLFpeEWP89Ik2TL6wtaN0 stc8CsU166WkePtcRw3bb0WO+ZUfSUhrmg7rJaXNmkmX1sRh2SCf8wkxHK0hYT1V UhYn20p0gfplm9A0NedxyGQogMbX1II1NgLtJ9D4yt2SX4Y9doLMJ/P9LUb2LtQ2 Xs/JAbEVdw5mJpyuEzgLjASbP2Htf5kNorjgnWp1n44s+IygauE= -----END CERTIFICATE-----Generated at Mon Jun 16 00:05:31 2025 by rpki-client