$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: OPn6ZRB3eGrf8RJryRGd/gBgwRiqkukZ6TwCleAhoWc= Subject key identifier: E4:A7:5F:3F:C2:99:BD:10:EE:36:E1:77:1D:C8:58:F0:CF:0C:68:27 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 74549EF8A968FB711BC13D95472177AA887FE555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: EE Signing time: Sat 28 Jun 2025 01:31:25 +0000 Manifest this update: Sat 28 Jun 2025 01:26:25 +0000 Manifest next update: Tue 01 Jul 2025 12:12:25 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: Ah/mdZU4fop1USB7rAT0u0e76ihXfHafwC3duv34vEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:54:9e:f8:a9:68:fb:71:1b:c1:3d:95:47:21:77:aa:88:7f:e5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Jun 28 01:26:25 2025 GMT Not After : Jul 1 12:12:25 2025 GMT Subject: CN=E4A75F3FC299BD10EE36E1771DC858F0CF0C6827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:82:90:f7:95:a8:9a:c4:e3:6e:ab:56:31: 26:cf:cb:47:1c:c1:08:0f:74:29:f3:40:ba:21:37: 13:b1:85:c1:2e:60:37:44:a5:f3:1a:61:77:92:14: 19:39:73:18:66:d1:ef:21:c9:ba:70:24:b6:31:16: 7c:30:15:ec:ea:12:3c:a4:30:f0:45:a7:6d:80:40: e2:03:12:f1:d8:7b:2b:7f:5a:da:94:b1:bb:7e:98: d4:2b:5f:38:a0:ea:62:33:9e:01:14:40:11:4d:5c: b2:a1:85:2e:d6:b1:0e:aa:63:e5:79:46:f7:0a:9d: 5c:63:a2:56:ea:bc:fd:fd:ce:9b:db:48:c6:34:16: b7:5c:26:13:4b:db:e3:62:27:fa:bc:56:1a:2d:76: ca:ce:97:b1:39:d5:e2:35:af:0c:2e:df:d0:ca:60: 2e:7d:fd:b8:f3:b1:85:c5:26:fb:37:fa:ee:0a:dd: 82:02:74:9e:4a:49:16:c7:c1:f5:cc:41:7b:72:83: 85:9c:d4:7f:44:8b:13:96:13:7e:d6:1e:f6:37:65: 14:c0:3c:1e:2c:8c:9b:f6:9d:38:94:f0:6e:6c:91: 06:3d:53:37:7a:fb:7e:da:16:5b:ba:77:a6:88:a7: c9:d1:72:5e:d2:a7:a1:a0:24:09:14:49:3e:4b:12: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:5F:3F:C2:99:BD:10:EE:36:E1:77:1D:C8:58:F0:CF:0C:68:27 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a1:24:85:0d:46:0d:1e:da:09:81:1b:f0:d3:2b:e4:8e:d6: e8:c4:5d:a6:5a:6c:5b:65:be:d2:10:f9:cb:28:22:a4:33:77: 85:11:3d:0c:b0:5d:a1:b1:52:e5:05:5d:7f:22:78:c2:cc:6b: ec:b8:6b:76:5f:2f:84:c0:2d:e9:ae:71:79:71:7b:2d:de:8a: cd:01:1b:50:01:42:b2:c8:4a:a1:2c:f7:f4:e4:2d:f0:f2:2c: 0d:fe:40:8b:cc:3c:f2:60:1c:7a:ab:fa:ef:fd:9e:e7:45:81: e4:f9:9f:f4:06:55:11:20:3d:63:ee:73:0b:1e:a7:61:98:f7: 98:2b:1a:47:b2:ba:b7:23:ab:09:29:60:7f:51:06:4f:24:f9: c2:a1:af:7f:7a:84:ca:63:f4:68:7c:b1:04:7d:25:79:43:a9: ab:4d:81:bd:bb:9e:5a:c3:23:4f:54:6e:b5:3f:76:ba:09:07: c3:cc:31:77:59:99:63:26:9c:fb:16:e9:60:ca:0a:f0:00:59: 37:51:7f:fb:73:12:46:60:72:6e:49:36:19:70:25:a4:2a:36: 64:03:a6:b9:70:6b:7f:a7:fd:da:18:52:84:d2:23:73:75:5f: 8b:7b:b6:0a:46:20:3f:d0:f6:6c:d7:e8:cd:91:8d:04:c5:67: 2c:e3:37:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFSe+Klo+3EbwT2VRyF3qoh/5VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTA2MjgwMTI2MjVaFw0yNTA3MDExMjEyMjVaMDMxMTAvBgNV BAMTKEU0QTc1RjNGQzI5OUJEMTBFRTM2RTE3NzFEQzg1OEYwQ0YwQzY4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzioKQ95WomsTjbqtWMSbPy0cc wQgPdCnzQLohNxOxhcEuYDdEpfMaYXeSFBk5cxhm0e8hybpwJLYxFnwwFezqEjyk MPBFp22AQOIDEvHYeyt/WtqUsbt+mNQrXzig6mIzngEUQBFNXLKhhS7WsQ6qY+V5 RvcKnVxjolbqvP39zpvbSMY0FrdcJhNL2+NiJ/q8VhotdsrOl7E51eI1rwwu39DK YC59/bjzsYXFJvs3+u4K3YICdJ5KSRbHwfXMQXtyg4Wc1H9EixOWE37WHvY3ZRTA PB4sjJv2nTiU8G5skQY9Uzd6+37aFlu6d6aIp8nRcl7Sp6GgJAkUST5LEoFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KdfP8KZvRDuNuF3HchY8M8MaCcwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuhJIUNRg0e2gmBG/DTK+SO1ujEXaZabFtl vtIQ+csoIqQzd4URPQywXaGxUuUFXX8ieMLMa+y4a3ZfL4TALemucXlxey3eis0B G1ABQrLISqEs9/TkLfDyLA3+QIvMPPJgHHqr+u/9nudFgeT5n/QGVREgPWPucwse p2GY95grGkeyurcjqwkpYH9RBk8k+cKhr396hMpj9Gh8sQR9JXlDqatNgb27nlrD I09UbrU/droJB8PMMXdZmWMmnPsW6WDKCvAAWTdRf/tzEkZgcm5JNhlwJaQqNmQD prlwa3+n/doYUoTSI3N1X4t7tgpGID/Q9mzX6M2RjQTFZyzjN3o= -----END CERTIFICATE-----Generated at Sun Jun 29 21:45:48 2025 by rpki-client