$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: tQ8OJ1joAIQV2036BNBE/gpgl1gJGBcS1/sRmbEH+gA= Subject key identifier: 29:03:2F:38:A6:DC:AE:13:2E:0E:6C:EE:8E:67:8A:1A:D3:C2:74:12 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 63C011F6BF1C489EB8FA8F42271CCDE331B9AFAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0120 Signing time: Sun 19 Oct 2025 09:21:26 +0000 Manifest this update: Sun 19 Oct 2025 09:16:26 +0000 Manifest next update: Wed 22 Oct 2025 19:39:26 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: IvPc8ish8uAlxtDe03fdN4a1379eiLmUgjvNOIOt94w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c0:11:f6:bf:1c:48:9e:b8:fa:8f:42:27:1c:cd:e3:31:b9:af:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Oct 19 09:16:26 2025 GMT Not After : Oct 22 19:39:26 2025 GMT Subject: CN=29032F38A6DCAE132E0E6CEE8E678A1AD3C27412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a6:cd:3d:cd:94:ba:d2:78:44:21:5e:a0:be: d0:d0:f2:9e:fd:da:7e:ac:82:2c:4c:9d:01:1b:99: 98:ec:88:02:6e:7e:6e:72:7b:32:ef:ee:7f:a7:88: 93:f0:f0:89:1e:4b:f9:f7:40:5d:b9:f5:a0:67:eb: 2b:4e:41:27:22:08:e1:e8:e9:e7:57:48:c6:da:99: 70:29:3e:62:82:ec:4c:ff:4f:dd:34:2e:df:a8:c8: 67:8c:a6:87:0d:c0:b5:db:a3:a1:49:cd:ea:3e:59: 95:8e:ba:bc:d7:87:02:c8:12:7c:0a:5a:79:d7:4a: 1a:1c:10:89:97:42:3e:d3:0b:ad:ea:19:ba:62:b7: a1:f0:34:bf:f8:33:a5:6b:06:54:3e:1e:5e:9d:36: 43:dd:1e:34:05:9a:01:7c:4a:7c:c8:5c:9e:1d:3b: 0a:6a:ea:d6:4e:17:9c:40:9b:98:7e:c6:56:6b:99: a1:ee:4e:84:6c:b9:6b:a6:4a:46:f6:d9:ed:07:68: 03:3e:06:43:12:1f:b3:7a:95:37:0e:b8:4c:f7:23: bb:81:c7:a6:6b:50:ff:1d:b1:76:8d:f2:86:4e:8f: 56:4f:0e:b0:fc:5c:c7:e4:c1:f1:b5:67:50:19:13: e3:2a:a0:d0:b7:20:a5:6b:9a:87:ec:98:ab:90:fb: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:2F:38:A6:DC:AE:13:2E:0E:6C:EE:8E:67:8A:1A:D3:C2:74:12 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a6:9a:71:0e:7a:fb:cc:f4:4e:7c:0c:c1:7b:25:c5:0f:61: b3:c9:d0:81:ec:71:69:d4:3b:e6:9a:9e:9d:d7:6b:db:55:ed: 3e:21:89:09:d8:44:76:71:1c:c7:2c:9f:3b:3b:9c:32:d1:27: ff:12:80:9d:4b:d1:c0:8b:c7:88:5f:0d:35:61:7c:3e:ae:bf: da:f3:9e:fa:62:88:99:a2:08:49:15:ba:4a:6c:23:63:a1:79: 78:ed:bb:d7:64:be:06:0b:06:e2:ec:62:95:a2:b1:b7:32:cd: 57:33:01:e7:3d:e2:70:66:f1:15:95:c1:a5:17:b7:22:58:e2: 0e:e7:b8:de:39:87:03:29:3c:10:5f:30:b7:e8:93:c1:71:51: b7:c9:97:38:5b:48:60:27:3a:6b:81:7b:ce:9b:b4:20:0b:92: 72:5e:da:fa:37:b7:8e:8b:1c:44:c3:01:dc:8b:e7:3d:6a:81: a7:d4:65:11:65:fb:25:40:87:0a:ad:80:11:32:e5:de:bc:82: 1d:9b:85:9a:9f:59:0c:b5:7b:bc:60:61:b7:c4:5f:53:a0:04: 91:f7:f5:d7:a4:b8:1c:30:12:d5:32:91:a2:df:af:2c:65:b4: 97:1d:d8:e9:a9:fa:4d:0e:5b:09:60:32:35:d2:cd:0e:6b:d0: 48:03:1b:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8AR9r8cSJ64+o9CJxzN4zG5r60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTEwMTkwOTE2MjZaFw0yNTEwMjIxOTM5MjZaMDMxMTAvBgNV BAMTKDI5MDMyRjM4QTZEQ0FFMTMyRTBFNkNFRThFNjc4QTFBRDNDMjc0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaps09zZS60nhEIV6gvtDQ8p79 2n6sgixMnQEbmZjsiAJufm5yezLv7n+niJPw8IkeS/n3QF259aBn6ytOQSciCOHo 6edXSMbamXApPmKC7Ez/T900Lt+oyGeMpocNwLXbo6FJzeo+WZWOurzXhwLIEnwK WnnXShocEImXQj7TC63qGbpit6HwNL/4M6VrBlQ+Hl6dNkPdHjQFmgF8SnzIXJ4d Owpq6tZOF5xAm5h+xlZrmaHuToRsuWumSkb22e0HaAM+BkMSH7N6lTcOuEz3I7uB x6ZrUP8dsXaN8oZOj1ZPDrD8XMfkwfG1Z1AZE+MqoNC3IKVrmofsmKuQ+ylfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQMvOKbcrhMuDmzujmeKGtPCdBIwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCmmnEOevvM9E58DMF7JcUPYbPJ0IHscWnU O+aanp3Xa9tV7T4hiQnYRHZxHMcsnzs7nDLRJ/8SgJ1L0cCLx4hfDTVhfD6uv9rz nvpiiJmiCEkVukpsI2OheXjtu9dkvgYLBuLsYpWisbcyzVczAec94nBm8RWVwaUX tyJY4g7nuN45hwMpPBBfMLfok8FxUbfJlzhbSGAnOmuBe86btCALknJe2vo3t46L HETDAdyL5z1qgafUZRFl+yVAhwqtgBEy5d68gh2bhZqfWQy1e7xgYbfEX1OgBJH3 9dekuBwwEtUykaLfryxltJcd2Omp+k0OWwlgMjXSzQ5r0EgDG9s= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:24 2025 by rpki-client