$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: 0C+jUJ4Ul6PsF4t5IGAhJBavcxTTv/dVIj0fxyZ+JT4= Subject key identifier: F1:0E:23:6F:E7:9C:BD:F9:13:98:4A:CD:31:A3:A4:AA:6E:7C:B7:EC Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 15B7A250E322E33E8FCAF4336895F327D21D8EE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01E2 Signing time: Wed 06 Aug 2025 10:20:00 +0000 Manifest this update: Wed 06 Aug 2025 10:15:00 +0000 Manifest next update: Sat 09 Aug 2025 19:07:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: 3OyMSQDHUJNOtv2ocpwHlCmL6OQZhY7bg19w5p3xcXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b7:a2:50:e3:22:e3:3e:8f:ca:f4:33:68:95:f3:27:d2:1d:8e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Aug 6 10:15:00 2025 GMT Not After : Aug 9 19:07:00 2025 GMT Subject: CN=F10E236FE79CBDF913984ACD31A3A4AA6E7CB7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:2b:b3:9e:20:ad:3a:e9:20:34:a7:fd:26: f8:1c:61:19:1d:10:e4:41:c0:1a:2a:45:a7:7b:a1: 96:b7:7c:ee:96:6b:20:14:c7:1e:ae:fe:70:19:48: a8:26:cc:40:75:15:e0:02:fa:f2:09:7c:96:8f:b7: 42:7b:64:5a:89:c3:a4:8e:59:bb:41:0c:3d:a0:25: 3b:d8:ef:b0:95:bc:0d:21:9f:b9:d4:42:c4:76:d3: db:1d:4b:0f:00:17:6f:ff:7b:f0:ac:43:d1:1d:06: 7c:66:14:90:b4:88:8a:11:0c:7d:9e:39:36:05:43: c1:11:90:7e:aa:6b:56:19:7a:73:39:d1:4c:f3:23: d7:58:76:1f:39:8d:f6:ae:16:03:9d:97:c2:61:ff: 0a:eb:4c:a3:32:57:a7:71:98:44:dd:d9:31:63:eb: 85:44:c1:29:46:2f:bb:f2:a6:78:26:86:0b:61:ff: 2d:33:99:60:0a:e9:b4:a7:7f:f0:33:02:ef:a3:d2: fa:ee:5f:40:d6:56:f9:76:1f:19:8b:28:08:60:b4: 0a:27:52:b9:60:37:51:8f:08:bc:99:b1:61:84:3f: 4e:ae:4d:43:dc:3c:8d:8a:68:69:61:fc:a3:0b:25: 8f:84:20:c7:fd:f6:5b:fb:f4:95:d8:66:ed:05:90: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:23:6F:E7:9C:BD:F9:13:98:4A:CD:31:A3:A4:AA:6E:7C:B7:EC X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:88:df:b5:e0:02:0a:8b:36:6a:9c:cb:fb:79:c6:e1:4e:f6: 08:99:1c:6d:7a:2b:67:cf:e8:60:86:0b:80:a8:86:1a:ec:e5: 99:06:46:ac:59:f1:46:6e:b5:dd:2a:be:c9:0c:34:64:68:ca: 17:8c:48:db:53:eb:f7:6f:77:03:57:6a:df:fc:fd:ca:cc:da: 76:9b:2c:4c:4f:13:7f:6d:91:94:f4:4d:58:de:61:2f:3b:6d: 9f:b3:4a:b6:4f:c8:e0:64:54:3e:c8:ff:84:a1:86:fd:7b:b9: 09:89:f8:6e:1c:8b:c1:d8:e1:38:bd:ae:7d:e2:37:3a:1c:8a: 91:d2:bb:eb:e9:70:0c:9f:35:ea:32:39:e2:d4:cf:ce:9c:cf: bf:f7:e9:a7:71:55:ae:d8:11:21:42:16:d2:72:c8:80:b6:d4: c4:f3:bf:ad:0c:f2:b6:dd:75:b0:21:cc:0a:a3:78:08:e6:8d: 56:9f:bf:cf:0e:bb:07:30:3d:1c:9f:c7:6a:39:56:d4:b9:bd: ff:55:fc:cc:50:4c:0b:33:d5:bc:d2:7e:70:46:f6:41:72:bd: c7:2c:54:17:b2:d9:92:7f:2f:a7:ba:de:d2:8b:7e:fb:20:07: de:dc:f3:ea:f4:18:72:02:31:b1:bd:19:0e:1d:5e:27:dd:cc: bf:b1:c2:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbeiUOMi4z6PyvQzaJXzJ9IdjuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA4MDYxMDE1MDBaFw0yNTA4MDkxOTA3MDBaMDMxMTAvBgNV BAMTKEYxMEUyMzZGRTc5Q0JERjkxMzk4NEFDRDMxQTNBNEFBNkU3Q0I3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7SuzniCtOukgNKf9JvgcYRkd EORBwBoqRad7oZa3fO6WayAUxx6u/nAZSKgmzEB1FeAC+vIJfJaPt0J7ZFqJw6SO WbtBDD2gJTvY77CVvA0hn7nUQsR209sdSw8AF2//e/CsQ9EdBnxmFJC0iIoRDH2e OTYFQ8ERkH6qa1YZenM50UzzI9dYdh85jfauFgOdl8Jh/wrrTKMyV6dxmETd2TFj 64VEwSlGL7vypngmhgth/y0zmWAK6bSnf/AzAu+j0vruX0DWVvl2HxmLKAhgtAon UrlgN1GPCLyZsWGEP06uTUPcPI2KaGlh/KMLJY+EIMf99lv79JXYZu0FkNt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Q4jb+ecvfkTmErNMaOkqm58t+wwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+I37XgAgqLNmqcy/t5xuFO9giZHG16K2fP 6GCGC4Cohhrs5ZkGRqxZ8UZutd0qvskMNGRoyheMSNtT6/dvdwNXat/8/crM2nab LExPE39tkZT0TVjeYS87bZ+zSrZPyOBkVD7I/4Shhv17uQmJ+G4ci8HY4Ti9rn3i NzocipHSu+vpcAyfNeoyOeLUz86cz7/36adxVa7YESFCFtJyyIC21MTzv60M8rbd dbAhzAqjeAjmjVafv88OuwcwPRyfx2o5VtS5vf9V/MxQTAsz1bzSfnBG9kFyvccs VBey2ZJ/L6e63tKLfvsgB97c8+r0GHICMbG9GQ4dXifdzL+xwuo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:22:30 2025 by rpki-client