$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: o1VnrzAzfwFdIqeIZdE9QEeJEhu8vQF5zi5cLXGHbxg= Subject key identifier: 3A:C0:8A:88:DD:C3:24:B9:20:75:F8:12:6E:FE:F4:4E:F3:47:1F:84 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 01F97DDD976B7819B3168625664AC19BD80B820F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: FF Signing time: Tue 05 Aug 2025 21:21:25 +0000 Manifest this update: Tue 05 Aug 2025 21:16:25 +0000 Manifest next update: Fri 08 Aug 2025 22:19:25 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: vnHeNH3Nhn3dKuI25RiEx6iLVgptHZX+xiKMQj16IIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:7d:dd:97:6b:78:19:b3:16:86:25:66:4a:c1:9b:d8:0b:82:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Aug 5 21:16:25 2025 GMT Not After : Aug 8 22:19:25 2025 GMT Subject: CN=3AC08A88DDC324B92075F8126EFEF44EF3471F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:b8:4c:a5:fd:2e:40:25:63:a8:b9:c8:45: e2:a9:cd:9a:8f:65:1e:e9:87:2f:5a:83:3a:59:93: 34:87:c5:93:3a:b5:6c:96:15:ee:25:9d:fa:90:d1: ac:53:e5:7f:29:9f:95:19:74:32:a8:a3:1e:ac:08: 41:6c:7a:49:88:e5:39:c0:77:37:e3:51:73:25:96: 85:70:9b:d9:2c:28:03:63:3c:3a:da:11:ac:2f:d7: 7f:5b:fd:4a:cc:47:91:31:95:2d:44:32:9d:aa:de: 79:62:7c:24:64:63:28:fa:54:0a:e6:dc:3d:43:96: 91:9c:84:c6:fc:f7:0a:b3:07:ee:47:2b:fc:0e:f3: 34:1e:9d:5b:0e:c4:fd:55:d5:a3:38:e8:8e:93:d8: fa:02:27:38:84:da:70:bd:80:59:34:3c:fd:67:d7: 8b:a2:83:55:7a:e3:9b:67:08:24:c9:33:08:fc:91: 9a:2e:cb:1d:49:02:21:c0:4a:e9:bd:f8:fd:73:53: 20:6d:8d:bf:65:0b:25:0c:40:3d:c8:de:45:89:ea: 96:d9:10:30:7a:23:e4:db:f3:e6:03:e4:17:e1:c1: 1b:e7:e4:91:55:27:8f:bb:70:c9:52:ee:4e:8c:cd: c9:07:46:ca:db:ee:cd:2c:63:bf:b3:32:6e:3d:20: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C0:8A:88:DD:C3:24:B9:20:75:F8:12:6E:FE:F4:4E:F3:47:1F:84 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:34:c4:b6:7c:0a:6d:e5:b4:e5:b0:5c:33:82:6b:b0:89: af:67:6d:f6:7e:b6:31:21:0e:4a:51:f4:93:39:e9:ee:82:14: ee:0e:52:8e:b1:c8:33:df:8e:67:be:83:fb:d1:6e:ec:83:66: 81:26:f3:22:ee:b8:5d:7f:43:78:8e:a5:7c:e4:d4:17:13:69: 56:93:5e:dc:94:40:91:01:79:e3:7d:d9:37:e0:f6:22:92:5d: 2f:84:f0:76:d3:d8:28:e7:bc:f7:24:cb:49:0f:17:9e:6a:9f: e6:01:b8:18:28:89:a6:00:f7:35:b2:f6:a9:97:9f:a7:10:d5: 99:82:0f:55:b5:20:c8:cb:83:91:fb:45:02:c3:b7:2a:b6:8e: 67:57:f9:8a:b5:8a:62:d3:b6:2b:09:da:85:8e:b3:1f:da:1e: 14:33:d8:5a:c6:04:b2:70:24:4a:e7:70:72:86:6e:64:24:42: 59:33:ab:65:aa:ea:db:ed:33:74:40:da:93:94:38:3b:05:52: 7e:94:f6:39:57:31:f6:6d:7f:af:98:9d:2b:ff:69:1a:19:e9: 9a:ab:2f:07:c1:04:62:5b:db:8a:83:ae:93:f2:d3:38:b9:79: 71:93:91:35:b9:f3:02:ce:b5:44:1a:0f:ed:8e:80:6d:11:ce: 46:84:03:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfl93ZdreBmzFoYlZkrBm9gLgg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTA4MDUyMTE2MjVaFw0yNTA4MDgyMjE5MjVaMDMxMTAvBgNV BAMTKDNBQzA4QTg4RERDMzI0QjkyMDc1RjgxMjZFRkVGNDRFRjM0NzFGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGbhMpf0uQCVjqLnIReKpzZqP ZR7phy9agzpZkzSHxZM6tWyWFe4lnfqQ0axT5X8pn5UZdDKoox6sCEFsekmI5TnA dzfjUXMlloVwm9ksKANjPDraEawv139b/UrMR5ExlS1EMp2q3nlifCRkYyj6VArm 3D1DlpGchMb89wqzB+5HK/wO8zQenVsOxP1V1aM46I6T2PoCJziE2nC9gFk0PP1n 14uig1V645tnCCTJMwj8kZouyx1JAiHASum9+P1zUyBtjb9lCyUMQD3I3kWJ6pbZ EDB6I+Tb8+YD5BfhwRvn5JFVJ4+7cMlS7k6MzckHRsrb7s0sY7+zMm49ILinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOsCKiN3DJLkgdfgSbv70TvNHH4QwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmoNMS2fApt5bTlsFwzgmuwia9nbfZ+tjEh DkpR9JM56e6CFO4OUo6xyDPfjme+g/vRbuyDZoEm8yLuuF1/Q3iOpXzk1BcTaVaT XtyUQJEBeeN92Tfg9iKSXS+E8HbT2CjnvPcky0kPF55qn+YBuBgoiaYA9zWy9qmX n6cQ1ZmCD1W1IMjLg5H7RQLDtyq2jmdX+Yq1imLTtisJ2oWOsx/aHhQz2FrGBLJw JErncHKGbmQkQlkzq2Wq6tvtM3RA2pOUODsFUn6U9jlXMfZtf6+YnSv/aRoZ6Zqr LwfBBGJb24qDrpPy0zi5eXGTkTW58wLOtUQaD+2OgG0RzkaEAwM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:05:35 2025 by rpki-client