$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: +x84czv1T+2zUn2DyYuwRtROqyu50jUh/TnPmnzZgmA= Subject key identifier: 63:BA:C4:76:AA:44:5C:3F:1B:E5:19:48:15:83:CC:2F:32:8F:FA:2C Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: C419BD417F620C51768BF1FCA67D9DFCDC3147 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0106 Signing time: Thu 21 Aug 2025 20:31:33 +0000 Manifest this update: Thu 21 Aug 2025 20:26:33 +0000 Manifest next update: Mon 25 Aug 2025 00:21:33 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: DVDvNDrlj2Y5ITWihcKwBBviJY2wqIGQv5+a9zN9WhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c4:19:bd:41:7f:62:0c:51:76:8b:f1:fc:a6:7d:9d:fc:dc:31:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Aug 21 20:26:33 2025 GMT Not After : Aug 25 00:21:33 2025 GMT Subject: CN=63BAC476AA445C3F1BE519481583CC2F328FFA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:3d:d1:2d:96:f8:07:3c:36:f6:d8:c0:2f: 8d:bb:bb:31:63:dc:cf:71:a4:1c:ab:42:b7:4f:a4: 88:05:8e:85:64:31:6f:94:49:3f:2b:9b:6c:ec:4c: 61:c9:fd:1a:c4:1e:60:33:00:f3:bd:46:3f:d0:ad: 52:47:af:53:36:47:88:ad:97:55:16:d5:d5:21:aa: 8e:80:41:c8:82:06:d5:50:f8:fb:5b:41:50:18:1a: a9:d5:92:f8:6d:1d:fb:7e:a4:96:7b:80:67:77:8c: 53:34:6b:cf:f5:b5:7e:d4:f9:f8:b4:8d:df:33:95: a2:ab:82:ed:ab:46:51:3a:27:e2:f6:59:f8:db:28: 24:48:dd:3e:2d:52:c7:f3:20:b5:66:5c:8a:86:f7: 4d:ac:54:48:11:e6:c2:b3:46:b7:21:67:f2:47:ab: e1:f7:1b:7a:43:2e:5a:af:ed:8b:6d:6e:d4:44:d6: ad:7c:96:ba:e9:65:da:71:15:02:1d:16:c0:9a:08: 31:2f:d9:bb:de:e6:5b:e4:73:35:3c:07:29:d8:4e: ae:bf:23:c3:12:3c:6e:7c:4c:bc:98:c5:f2:47:33: 10:c1:16:c3:0b:36:62:2f:87:ea:f6:38:31:c3:56: 50:d2:7d:a1:41:5d:3b:71:15:b7:08:27:65:eb:1a: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BA:C4:76:AA:44:5C:3F:1B:E5:19:48:15:83:CC:2F:32:8F:FA:2C X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f8:c5:7b:e6:bf:60:6f:0d:8e:e8:7c:82:e0:cc:f8:f6:b8: 55:85:f1:32:1e:62:aa:75:56:24:11:d9:6a:84:7c:f1:6e:a9: d7:a6:2b:d5:f0:b2:d8:99:4b:52:24:70:9c:d6:f0:35:4c:c6: 76:c3:ae:31:64:69:53:1d:88:4d:71:51:9b:75:e3:d4:fb:fe: 3e:cf:64:66:45:e8:37:62:e2:90:2e:67:09:52:1d:06:45:f2: 10:6b:f0:f0:84:b9:54:8b:c2:70:1d:8e:ee:ff:34:a8:bc:a9: 7f:7e:ae:72:2f:eb:62:10:33:54:bc:58:25:30:f2:6d:1a:fb: 58:57:02:92:5e:2e:dd:fe:7b:18:8d:61:9b:5b:7f:6b:48:a7: e9:7a:9d:71:a8:17:af:35:99:31:1d:43:1b:c3:e7:2f:9e:5f: c2:b4:de:3e:78:1d:66:28:48:24:47:96:56:11:85:f2:a1:a0: 07:52:80:22:7c:13:46:9f:2c:83:d1:22:72:fa:57:a7:3a:4c: 35:ac:9b:9e:75:5d:f9:e9:b1:85:e8:2a:9c:69:96:06:06:f5: 00:71:b1:be:6f:97:78:52:3c:c9:13:39:a9:17:06:55:7b:80: 8e:72:e8:dc:31:2e:54:82:32:29:fc:d3:de:6e:06:2f:c2:6a: b1:71:70:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMQZvUF/YgxRdovx/KZ9nfzcMUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTA4MjEyMDI2MzNaFw0yNTA4MjUwMDIxMzNaMDMxMTAvBgNV BAMTKDYzQkFDNDc2QUE0NDVDM0YxQkU1MTk0ODE1ODNDQzJGMzI4RkZBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtKz3RLZb4Bzw29tjAL427uzFj 3M9xpByrQrdPpIgFjoVkMW+UST8rm2zsTGHJ/RrEHmAzAPO9Rj/QrVJHr1M2R4it l1UW1dUhqo6AQciCBtVQ+PtbQVAYGqnVkvhtHft+pJZ7gGd3jFM0a8/1tX7U+fi0 jd8zlaKrgu2rRlE6J+L2WfjbKCRI3T4tUsfzILVmXIqG902sVEgR5sKzRrchZ/JH q+H3G3pDLlqv7YttbtRE1q18lrrpZdpxFQIdFsCaCDEv2bve5lvkczU8BynYTq6/ I8MSPG58TLyYxfJHMxDBFsMLNmIvh+r2ODHDVlDSfaFBXTtxFbcIJ2XrGq1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7rEdqpEXD8b5RlIFYPMLzKP+iwwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK34xXvmv2BvDY7ofILgzPj2uFWF8TIeYqp1 ViQR2WqEfPFuqdemK9XwstiZS1IkcJzW8DVMxnbDrjFkaVMdiE1xUZt149T7/j7P ZGZF6Ddi4pAuZwlSHQZF8hBr8PCEuVSLwnAdju7/NKi8qX9+rnIv62IQM1S8WCUw 8m0a+1hXApJeLt3+exiNYZtbf2tIp+l6nXGoF681mTEdQxvD5y+eX8K03j54HWYo SCRHllYRhfKhoAdSgCJ8E0afLIPRInL6V6c6TDWsm551XfnpsYXoKpxplgYG9QBx sb5vl3hSPMkTOakXBlV7gI5y6NwxLlSCMin8095uBi/CarFxcMY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:41 2025 by rpki-client