$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: odqrHU/vHpsyo4F9ixSMnWW1xtVi1T1Z9T3BnmDygmE= Subject key identifier: 8C:91:4E:E9:74:DB:0D:3E:2B:57:70:A8:B6:E1:0D:11:F3:2D:37:7B Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 71D1662962216B7C2077BF9761F199F28318FB65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01CB Signing time: Sun 15 Jun 2025 07:20:00 +0000 Manifest this update: Sun 15 Jun 2025 07:15:00 +0000 Manifest next update: Wed 18 Jun 2025 17:36:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: NdVjpQ58pe2bGjiO4y1uC+D+fz7wyNx4d9S0V01S0/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d1:66:29:62:21:6b:7c:20:77:bf:97:61:f1:99:f2:83:18:fb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Jun 15 07:15:00 2025 GMT Not After : Jun 18 17:36:00 2025 GMT Subject: CN=8C914EE974DB0D3E2B5770A8B6E10D11F32D377B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:58:80:54:74:2d:97:09:ce:45:7d:14:79: 71:c6:38:88:87:6a:af:1e:a9:e5:fb:63:fd:3e:74: 37:d8:ef:06:0e:6c:97:5c:29:75:bc:6c:41:07:77: b9:3e:e7:34:39:44:9a:e3:2f:4b:04:87:02:25:98: ba:65:73:50:f6:14:a3:2a:63:63:f9:fa:6d:2b:57: b0:07:a6:0b:30:20:82:c0:25:37:af:44:79:d7:81: 25:33:89:ad:da:ac:9e:09:06:3f:36:8a:40:7a:d5: be:95:ba:94:a8:69:15:46:03:c7:ac:e6:ac:88:04: 4c:99:b2:8f:dd:a8:b8:ba:e2:32:56:ae:31:6f:f8: 77:72:54:ae:8d:66:51:0a:5b:8f:8b:47:3b:2f:1a: 3f:70:c5:29:e9:05:0e:1f:3d:8e:ed:c7:1c:7c:6f: de:f6:ea:df:50:10:48:02:ed:34:a7:ab:0a:6d:d0: 58:3d:f2:e0:69:37:26:e3:26:27:03:bf:23:dc:42: 72:2a:34:46:70:d9:0a:c9:67:8a:0a:62:26:5d:c7: 5d:69:c2:ae:43:94:47:66:63:08:e8:71:5f:35:b9: ac:99:73:d2:c5:45:ab:86:35:6a:42:81:ab:b9:51: 03:26:86:e0:45:d3:12:11:c0:ca:77:76:de:48:a3: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:4E:E9:74:DB:0D:3E:2B:57:70:A8:B6:E1:0D:11:F3:2D:37:7B X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d6:ad:1c:4e:d8:42:27:a1:d0:07:f2:f3:a0:eb:8c:48:00: 36:be:4c:7a:c1:5a:f1:a4:e1:f4:9e:73:d8:43:b0:81:6f:bf: 98:b8:1d:bd:4a:90:00:38:57:5b:72:ca:ed:c9:a5:81:e6:00: 29:e9:e1:1d:fa:3f:0b:e5:08:7d:8d:14:54:e5:0b:6b:fc:c9: 50:c7:20:c4:59:4d:96:94:4d:eb:b9:b6:8a:af:b0:36:ee:b0: 8c:e0:c5:32:5a:c0:62:74:f3:b0:03:ec:20:c6:be:6c:a8:71: bf:62:67:80:03:ae:26:69:24:eb:e8:a2:ca:8f:f5:fe:81:58: 1e:50:05:d5:cd:d8:d2:55:d2:96:b0:10:5c:22:0a:dd:3e:b4: 8b:94:d5:b6:10:1d:2a:1c:bb:21:0a:7d:09:40:50:7c:4c:49: 7a:b4:10:37:27:fc:72:7a:2b:e3:18:d5:ce:97:e6:49:2b:32: 49:0b:41:9a:30:aa:5d:9a:32:2a:33:a4:61:fd:1e:74:5e:ab: bb:0b:0f:f3:9b:9a:a3:b3:8f:01:c7:f8:99:a4:62:5f:ca:50: 30:ce:f1:27:7d:e4:f5:bf:ef:92:9e:ac:75:aa:f0:e8:35:4e: c8:e4:8d:da:a4:91:25:e6:4c:0e:71:48:06:1f:b2:46:a9:65: 80:6f:20:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdFmKWIha3wgd7+XYfGZ8oMY+2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA2MTUwNzE1MDBaFw0yNTA2MTgxNzM2MDBaMDMxMTAvBgNV BAMTKDhDOTE0RUU5NzREQjBEM0UyQjU3NzBBOEI2RTEwRDExRjMyRDM3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChH1iAVHQtlwnORX0UeXHGOIiH aq8eqeX7Y/0+dDfY7wYObJdcKXW8bEEHd7k+5zQ5RJrjL0sEhwIlmLplc1D2FKMq Y2P5+m0rV7AHpgswIILAJTevRHnXgSUzia3arJ4JBj82ikB61b6VupSoaRVGA8es 5qyIBEyZso/dqLi64jJWrjFv+HdyVK6NZlEKW4+LRzsvGj9wxSnpBQ4fPY7txxx8 b9726t9QEEgC7TSnqwpt0Fg98uBpNybjJicDvyPcQnIqNEZw2QrJZ4oKYiZdx11p wq5DlEdmYwjocV81uayZc9LFRauGNWpCgau5UQMmhuBF0xIRwMp3dt5Io/V7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJFO6XTbDT4rV3CotuENEfMtN3swHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/WrRxO2EInodAH8vOg64xIADa+THrBWvGk 4fSec9hDsIFvv5i4Hb1KkAA4V1tyyu3JpYHmACnp4R36PwvlCH2NFFTlC2v8yVDH IMRZTZaUTeu5toqvsDbusIzgxTJawGJ087AD7CDGvmyocb9iZ4ADriZpJOvoosqP 9f6BWB5QBdXN2NJV0pawEFwiCt0+tIuU1bYQHSocuyEKfQlAUHxMSXq0EDcn/HJ6 K+MY1c6X5kkrMkkLQZowql2aMiozpGH9HnReq7sLD/ObmqOzjwHH+JmkYl/KUDDO 8Sd95PW/75KerHWq8Og1TsjkjdqkkSXmTA5xSAYfskapZYBvIF0= -----END CERTIFICATE-----Generated at Sun Jun 15 21:56:21 2025 by rpki-client