$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: kh3bEZdrpIEMTJo8Ta8ni//YAAogwVuRTiJFvZ0UW54= Subject key identifier: D7:1D:C7:B4:D0:9A:63:FE:8A:1D:6D:39:A8:11:2F:9D:DD:29:C2:72 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 09153EDD445825460C40B328378ED5622278B3F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: E9 Signing time: Mon 16 Jun 2025 10:21:24 +0000 Manifest this update: Mon 16 Jun 2025 10:16:24 +0000 Manifest next update: Thu 19 Jun 2025 11:27:24 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: vucEIAY3QgpCKofkfIS5bKBhtUfIc7aLciIBPkAkviI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:15:3e:dd:44:58:25:46:0c:40:b3:28:37:8e:d5:62:22:78:b3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Jun 16 10:16:24 2025 GMT Not After : Jun 19 11:27:24 2025 GMT Subject: CN=D71DC7B4D09A63FE8A1D6D39A8112F9DDD29C272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:3c:20:25:98:df:00:86:5a:4f:7a:32:bc: 49:99:86:2f:ff:47:0d:1b:22:1b:f4:41:51:27:cd: 60:59:00:34:f6:5f:c3:19:f5:d1:54:44:d2:69:4f: 9d:79:07:3d:e6:ac:18:57:8b:3f:7a:f9:2d:99:e5: 3a:1b:61:cc:12:5f:09:0e:5d:4c:7d:27:8f:0a:7a: 5d:06:cb:bb:b3:ee:03:cd:ed:37:e4:02:c6:1f:8e: 8e:e2:85:db:fa:c2:9a:a6:53:68:e1:59:83:86:85: c8:04:6e:96:13:cb:61:f8:47:9b:fd:50:44:84:6d: 96:20:be:3e:81:bd:6d:83:c0:63:f3:a0:44:fe:d8: 7e:2b:1f:a2:9b:90:c9:a2:b0:94:e2:41:f6:69:e6: 6e:44:40:be:09:a8:8a:0c:42:db:bc:8f:a4:a2:65: 0b:79:f2:36:0a:94:5a:b3:cb:98:72:be:5a:de:2b: 9b:a7:cc:e5:d2:cf:bf:a3:f2:87:50:4d:f6:3e:74: 6b:33:65:16:e0:1c:29:b3:62:5b:2b:ad:b9:7a:84: 6d:23:be:1d:84:13:f7:07:31:c9:65:70:10:91:fd: 52:e3:ec:b2:13:d0:0d:39:4c:52:a2:22:ac:47:b0: 7e:a3:21:f5:63:61:96:f1:33:ae:a0:79:39:86:2b: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:C7:B4:D0:9A:63:FE:8A:1D:6D:39:A8:11:2F:9D:DD:29:C2:72 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fe:b5:8b:bb:87:c8:50:2a:9b:80:04:a2:41:b5:2a:eb:5b: 80:88:83:6f:56:cb:c5:ec:c1:2a:8e:bb:9c:fe:09:ee:a9:35: de:2d:0c:10:a6:33:6a:27:b9:91:19:08:f7:de:ba:f8:e4:69: 3b:f0:77:21:40:0b:2b:ca:7d:11:b0:19:12:83:e9:00:d1:80: 99:c4:34:18:f4:a5:e3:4f:b8:4e:0a:2d:a1:d7:71:90:31:d8: d2:2d:3d:2f:23:19:e6:4f:0c:97:8c:e9:28:70:d0:53:88:3b: 24:38:00:ec:e7:ef:43:32:4e:c0:16:73:d8:27:a7:89:ef:d5: 5c:cb:45:1d:8a:4e:c6:35:86:4a:fb:cb:bf:df:66:9e:53:d1: 62:56:27:e0:77:f3:ba:bd:3b:6a:b2:c1:05:ad:22:5a:a4:b2: 68:c6:42:13:ef:a5:83:f5:85:0e:f6:ba:04:f3:d1:de:de:04: 8d:56:63:f1:40:58:d1:7a:71:9a:6c:c5:98:e9:c5:88:1a:83: 03:73:c0:2e:6c:fd:af:10:98:04:99:97:f9:ee:70:07:5e:a3: 8c:61:f1:ec:1b:c9:5c:7c:12:d3:f0:ee:c1:ad:48:e4:11:3e: 59:a5:4a:a5:87:b3:ce:ee:a1:3f:18:b6:74:53:22:ec:dd:29: dc:98:70:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRU+3URYJUYMQLMoN47VYiJ4s/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTA2MTYxMDE2MjRaFw0yNTA2MTkxMTI3MjRaMDMxMTAvBgNV BAMTKEQ3MURDN0I0RDA5QTYzRkU4QTFENkQzOUE4MTEyRjlEREQyOUMyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1jwgJZjfAIZaT3oyvEmZhi// Rw0bIhv0QVEnzWBZADT2X8MZ9dFURNJpT515Bz3mrBhXiz96+S2Z5TobYcwSXwkO XUx9J48Kel0Gy7uz7gPN7TfkAsYfjo7ihdv6wpqmU2jhWYOGhcgEbpYTy2H4R5v9 UESEbZYgvj6BvW2DwGPzoET+2H4rH6KbkMmisJTiQfZp5m5EQL4JqIoMQtu8j6Si ZQt58jYKlFqzy5hyvlreK5unzOXSz7+j8odQTfY+dGszZRbgHCmzYlsrrbl6hG0j vh2EE/cHMcllcBCR/VLj7LIT0A05TFKiIqxHsH6jIfVjYZbxM66geTmGK6bXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1x3HtNCaY/6KHW05qBEvnd0pwnIwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv+tYu7h8hQKpuABKJBtSrrW4CIg29Wy8Xs wSqOu5z+Ce6pNd4tDBCmM2onuZEZCPfeuvjkaTvwdyFACyvKfRGwGRKD6QDRgJnE NBj0peNPuE4KLaHXcZAx2NItPS8jGeZPDJeM6Shw0FOIOyQ4AOzn70MyTsAWc9gn p4nv1VzLRR2KTsY1hkr7y7/fZp5T0WJWJ+B387q9O2qywQWtIlqksmjGQhPvpYP1 hQ72ugTz0d7eBI1WY/FAWNF6cZpsxZjpxYgagwNzwC5s/a8QmASZl/nucAdeo4xh 8ewbyVx8EtPw7sGtSOQRPlmlSqWHs87uoT8YtnRTIuzdKdyYcEo= -----END CERTIFICATE-----Generated at Mon Jun 16 20:29:55 2025 by rpki-client