$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: 14FOjH8kipz3bAyOtDE4uTyS1QHt/eTyt5vzt0lZwbM= Subject key identifier: 9E:DB:5C:A5:C1:28:FB:D7:46:74:F6:81:E1:65:20:C9:90:22:F0:27 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 2FA113B1E89E6125C170C5A5F4D9566857C74722 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: A6 Signing time: Wed 06 Aug 2025 08:21:55 +0000 Manifest this update: Wed 06 Aug 2025 08:16:55 +0000 Manifest next update: Sat 09 Aug 2025 14:18:55 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: S6jgv41Ninl7V2qRqDxl5AiydPGndIdCggzqyOmEc9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a1:13:b1:e8:9e:61:25:c1:70:c5:a5:f4:d9:56:68:57:c7:47:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Aug 6 08:16:55 2025 GMT Not After : Aug 9 14:18:55 2025 GMT Subject: CN=9EDB5CA5C128FBD74674F681E16520C99022F027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:f9:df:d5:d5:d2:4d:12:7a:da:6b:8c:2c: ee:a4:59:4a:16:92:30:d8:8f:5c:15:23:02:1f:5c: 8e:83:14:3e:c0:29:e2:05:f0:52:e2:70:4c:0c:d8: 0d:e9:3c:a3:91:3f:48:85:53:f2:a2:72:b4:78:d6: 45:cb:32:96:b2:a7:20:31:80:b0:a8:d9:26:8a:0e: 0e:05:3c:f1:ed:8c:55:1e:fc:58:93:d2:5b:07:ac: 34:77:e5:d3:31:b0:ad:3f:b1:80:fd:51:b5:18:cb: 64:c1:4b:88:23:e2:62:39:e2:0a:60:00:f9:83:ed: 67:5d:e0:a7:f5:6e:72:5e:78:fd:ec:1e:48:63:57: 0f:5a:7f:1d:8a:cd:ab:45:56:9b:21:dd:96:73:8a: 6b:f1:75:98:38:15:1b:8f:89:d6:21:30:a9:1c:6d: e1:9d:03:e6:e1:27:6e:8c:0a:3d:a1:28:06:a1:74: 97:49:87:ed:d5:a3:f3:86:33:f0:fe:01:4a:5d:c9: 02:02:14:05:b8:fe:eb:d4:f3:1a:2e:44:74:fa:80: 1c:34:34:f8:15:c3:c0:e4:77:9d:61:1a:63:23:a7: 5e:f8:b5:cd:cd:9e:b6:de:51:d9:28:e5:fa:2d:5e: 2a:42:14:e3:97:20:d2:0e:d4:92:9e:26:a0:33:77: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:5C:A5:C1:28:FB:D7:46:74:F6:81:E1:65:20:C9:90:22:F0:27 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:94:e5:fe:07:39:33:78:ff:cf:a5:a7:b7:c1:a5:45:b1:cc: 36:26:2e:f8:c5:b7:58:5d:8f:34:d5:6c:8a:c1:8b:8c:eb:16: 62:33:71:25:92:28:d2:c6:ec:64:d6:bf:49:f5:6d:7f:f5:eb: 6e:20:8e:ed:1e:4b:54:8d:e6:0b:11:91:e0:29:4d:54:7e:59: 11:8b:c9:21:d4:e4:35:13:d2:d2:aa:ee:73:84:e5:5b:29:6c: e8:68:76:28:12:31:7a:0d:ad:6a:91:78:6a:1c:b5:aa:04:89: 86:e6:95:bc:7a:bb:fc:97:92:0c:98:0d:75:80:00:39:d0:c8: 16:31:42:0f:9b:35:f9:af:33:84:c1:b4:2b:dd:0f:be:7d:3d: ae:dc:2f:a1:2b:18:41:5b:b7:6a:93:1e:9b:99:b9:c1:39:34: 62:3a:d5:63:fc:e4:4c:28:fd:b7:68:37:cf:de:9b:b1:91:ac: e1:67:fa:5c:1b:82:06:96:e8:69:b9:a8:af:6d:6b:61:5f:d5: 1b:8f:8c:36:e8:c5:8a:00:30:61:41:ee:59:24:8c:43:dd:01: 1d:d1:e8:83:65:9b:01:85:e8:93:87:d5:98:27:61:5e:41:f3: be:ac:37:64:1d:73:9c:dd:8e:d2:00:4e:1a:ad:b2:36:3d:6a: 14:db:b8:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6ETseieYSXBcMWl9NlWaFfHRyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA4MDYwODE2NTVaFw0yNTA4MDkxNDE4NTVaMDMxMTAvBgNV BAMTKDlFREI1Q0E1QzEyOEZCRDc0Njc0RjY4MUUxNjUyMEM5OTAyMkYwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5Pnf1dXSTRJ62muMLO6kWUoW kjDYj1wVIwIfXI6DFD7AKeIF8FLicEwM2A3pPKORP0iFU/KicrR41kXLMpaypyAx gLCo2SaKDg4FPPHtjFUe/FiT0lsHrDR35dMxsK0/sYD9UbUYy2TBS4gj4mI54gpg APmD7Wdd4Kf1bnJeeP3sHkhjVw9afx2KzatFVpsh3ZZzimvxdZg4FRuPidYhMKkc beGdA+bhJ26MCj2hKAahdJdJh+3Vo/OGM/D+AUpdyQICFAW4/uvU8xouRHT6gBw0 NPgVw8Dkd51hGmMjp174tc3NnrbeUdko5fotXipCFOOXINIO1JKeJqAzd+lvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnttcpcEo+9dGdPaB4WUgyZAi8CcwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmU5f4HOTN4/8+lp7fBpUWxzDYmLvjFt1hd jzTVbIrBi4zrFmIzcSWSKNLG7GTWv0n1bX/1624gju0eS1SN5gsRkeApTVR+WRGL ySHU5DUT0tKq7nOE5VspbOhodigSMXoNrWqReGoctaoEiYbmlbx6u/yXkgyYDXWA ADnQyBYxQg+bNfmvM4TBtCvdD759Pa7cL6ErGEFbt2qTHpuZucE5NGI61WP85Ewo /bdoN8/em7GRrOFn+lwbggaW6Gm5qK9ta2Ff1RuPjDboxYoAMGFB7lkkjEPdAR3R 6INlmwGF6JOH1ZgnYV5B876sN2Qdc5zdjtIAThqtsjY9ahTbuII= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:42 2025 by rpki-client