$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: MRK2TeyWIT/WmFllO/gWxCvW6BUH8gsxGSzW2/t05XI= Subject key identifier: D1:66:29:74:13:41:39:F8:9A:14:9F:34:3D:9C:3D:63:95:F5:7D:74 Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 1D2490FD879D989A0D29FCE3AA8498DE9921230D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 020A Signing time: Mon 03 Nov 2025 03:30:00 +0000 Manifest this update: Mon 03 Nov 2025 03:25:00 +0000 Manifest next update: Thu 06 Nov 2025 12:49:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: vcJYNmEayGP+26EYAEaq5j3ZIi5uMWqDIVTuxzZOXzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:24:90:fd:87:9d:98:9a:0d:29:fc:e3:aa:84:98:de:99:21:23:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Nov 3 03:25:00 2025 GMT Not After : Nov 6 12:49:00 2025 GMT Subject: CN=D1662974134139F89A149F343D9C3D6395F57D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:d1:95:f6:b1:d5:cc:41:13:f5:d7:d6:bc: 43:1b:e6:8c:0d:de:93:47:48:08:3a:70:5f:f1:cc: 9e:6f:b1:97:93:46:61:1b:fc:4d:97:9b:44:39:41: 73:72:38:72:6f:3d:16:00:cc:7e:8d:d4:d4:11:89: 3a:fe:fc:dc:f8:bf:34:8c:95:42:ba:fe:4d:b0:01: 94:ca:25:ff:49:32:80:bd:45:6c:cf:86:0b:fc:5c: e3:5a:15:ab:cd:f2:10:ce:a2:4a:80:f6:9d:0a:e2: ce:3e:2d:fa:20:27:64:4e:e0:ec:4e:08:44:eb:88: 9e:dc:c1:8b:9c:21:7f:ce:3b:f1:58:5c:87:ef:02: b7:54:ca:02:bd:6c:8f:34:c1:39:ce:db:ac:23:dd: f1:61:ea:15:3c:49:78:27:c1:8b:36:25:8e:09:d6: e0:77:20:61:03:5a:82:85:51:c2:0d:34:4f:ec:ab: aa:31:05:8a:3e:27:f8:32:65:c0:b6:6e:f7:52:34: b0:86:d7:7e:5a:b6:10:15:dc:dc:90:cb:d8:f8:87: dd:d7:6e:74:04:d9:94:49:e4:64:41:25:22:d5:b1: fb:34:4c:a9:cb:74:f2:a5:ce:b6:f3:a4:d4:69:66: 59:17:fa:1f:9f:64:56:c4:27:91:f1:30:27:d4:c4: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:66:29:74:13:41:39:F8:9A:14:9F:34:3D:9C:3D:63:95:F5:7D:74 X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e0:82:a3:d9:31:24:60:a7:a3:45:22:e4:d9:8c:fe:f3:c6: 65:f7:c8:b0:44:a7:fb:98:9e:21:f1:dc:7f:b7:55:96:cc:ab: 58:a0:05:b8:c2:64:bd:1c:fe:19:95:50:a3:c9:3b:a9:45:01: 47:71:d3:f4:ff:5b:7f:20:b5:85:dd:f1:79:1c:b1:92:97:b9: 00:41:03:94:50:e5:48:fd:ad:df:82:59:6b:ad:cc:36:15:99: 14:ec:b0:4b:a3:48:9a:24:5f:fe:fd:a0:59:c3:76:8d:38:a9: bb:f4:0a:6f:64:f8:b2:f9:3d:ac:03:61:da:d7:d7:90:1f:23: 7a:0c:ac:3e:f4:05:c3:00:53:18:22:b2:8f:1f:36:7a:00:6c: 07:e9:1e:68:f6:7b:fb:4d:ae:a8:34:55:90:6a:20:e9:8e:9f: ed:30:a1:91:68:29:38:f9:7e:cb:fb:2f:88:35:f1:9d:42:f0: 95:86:71:3c:31:5a:1b:68:fd:1d:eb:40:8c:1e:88:09:cb:9f: d2:c5:45:e3:c9:62:4d:27:e4:43:de:17:10:7e:e6:85:31:36: 71:01:ff:4d:4f:78:90:44:22:3c:5e:4e:fd:3a:40:c2:73:28: 72:33:57:f1:c9:d2:39:c7:5f:cb:e3:27:99:55:39:83:11:81: d4:0e:49:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSSQ/YedmJoNKfzjqoSY3pkhIw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTExMDMwMzI1MDBaFw0yNTExMDYxMjQ5MDBaMDMxMTAvBgNV BAMTKEQxNjYyOTc0MTM0MTM5Rjg5QTE0OUYzNDNEOUMzRDYzOTVGNTdENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyV9GV9rHVzEET9dfWvEMb5owN 3pNHSAg6cF/xzJ5vsZeTRmEb/E2Xm0Q5QXNyOHJvPRYAzH6N1NQRiTr+/Nz4vzSM lUK6/k2wAZTKJf9JMoC9RWzPhgv8XONaFavN8hDOokqA9p0K4s4+LfogJ2RO4OxO CETriJ7cwYucIX/OO/FYXIfvArdUygK9bI80wTnO26wj3fFh6hU8SXgnwYs2JY4J 1uB3IGEDWoKFUcINNE/sq6oxBYo+J/gyZcC2bvdSNLCG135athAV3NyQy9j4h93X bnQE2ZRJ5GRBJSLVsfs0TKnLdPKlzrbzpNRpZlkX+h+fZFbEJ5HxMCfUxPT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0WYpdBNBOfiaFJ80PZw9Y5X1fXQwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzggqPZMSRgp6NFIuTZjP7zxmX3yLBEp/uY niHx3H+3VZbMq1igBbjCZL0c/hmVUKPJO6lFAUdx0/T/W38gtYXd8XkcsZKXuQBB A5RQ5Uj9rd+CWWutzDYVmRTssEujSJokX/79oFnDdo04qbv0Cm9k+LL5PawDYdrX 15AfI3oMrD70BcMAUxgiso8fNnoAbAfpHmj2e/tNrqg0VZBqIOmOn+0woZFoKTj5 fsv7L4g18Z1C8JWGcTwxWhto/R3rQIweiAnLn9LFRePJYk0n5EPeFxB+5oUxNnEB /01PeJBEIjxeTv06QMJzKHIzV/HJ0jnHX8vjJ5lVOYMRgdQOSfc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:28 2025 by rpki-client