$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: stgXU1HWJIVQyDO1Zgj59ndgkQbu0TYoZ904WFQf6WY= Subject key identifier: C8:DA:3A:6D:01:9B:E4:F4:E0:F9:2E:FF:C4:1C:03:BF:78:AD:E1:CE Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 2871CBF861E24BAAC198898CCB3CE180CD94565D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 7E Signing time: Thu 08 May 2025 06:11:40 +0000 Manifest this update: Thu 08 May 2025 06:06:40 +0000 Manifest next update: Sun 11 May 2025 12:02:40 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: 7WytUZfLBrCru0uXs6NMcrnJLxDWa6fUhVcdYWUPmKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 12:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:71:cb:f8:61:e2:4b:aa:c1:98:89:8c:cb:3c:e1:80:cd:94:56:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: May 8 06:06:40 2025 GMT Not After : May 11 12:02:40 2025 GMT Subject: CN=C8DA3A6D019BE4F4E0F92EFFC41C03BF78ADE1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:75:ec:cf:35:5f:d1:6c:aa:fa:d0:f7:fc: 13:ef:d4:9c:ae:41:22:05:15:52:84:32:12:e5:77: 6b:41:ec:ce:de:36:24:8f:66:9e:c5:47:f4:2a:dc: ce:6a:43:22:11:f2:b0:50:b7:26:ad:a6:13:e2:76: 1c:73:3e:9d:7a:a8:10:5f:cd:b1:30:f2:72:5d:be: fa:61:7a:92:52:76:08:ef:e0:2b:1e:a1:ff:c8:fa: 4d:c1:7a:a5:1d:ee:f1:89:0e:f2:71:ef:38:c1:0c: 14:e6:18:ed:6c:3a:cd:e9:5b:80:b9:4f:81:41:d7: 7b:11:da:dd:00:76:91:48:29:91:0d:36:77:84:37: 00:5d:0c:4c:fd:bd:5d:a1:46:5b:77:8e:b2:5a:bb: 21:b5:d4:f5:8e:3e:ad:0c:95:a7:5f:77:69:e6:ce: 3b:1c:08:76:4d:00:56:11:61:21:7c:cb:f3:0d:75: 8b:93:18:c4:af:38:3c:8f:e4:87:d7:07:be:dd:f1: 26:c7:6f:c8:04:28:06:60:b5:a0:b1:51:4f:4d:56: 17:65:1c:7f:86:b4:ea:bd:4a:36:99:b3:83:bd:67: ef:40:05:9d:d5:56:f0:08:2f:3e:b6:0b:5e:14:fb: be:91:c4:ee:3a:38:e5:63:0d:e1:8a:84:e0:8f:4d: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:3A:6D:01:9B:E4:F4:E0:F9:2E:FF:C4:1C:03:BF:78:AD:E1:CE X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:36:30:9e:14:b0:69:8f:71:f8:a2:0e:a5:80:a2:02:f6: f3:12:6a:29:36:7e:67:9e:38:6d:eb:74:da:07:e4:3e:f2:8a: a9:ef:53:4e:b8:9f:fc:56:6f:cf:70:01:d8:62:69:1c:84:4a: ad:06:da:f6:74:a2:aa:87:d8:99:ea:4f:65:cb:0c:7b:c4:5d: c7:19:a1:98:bb:8f:a0:b9:fb:2d:3f:34:db:c8:88:ea:47:93: a5:70:a6:15:58:9f:39:13:51:29:b0:d7:48:44:09:ca:9b:67: 8f:c0:c7:1c:07:44:c0:88:3d:ab:5e:cd:6c:d5:27:55:db:c1: 45:6e:19:5d:7c:de:d4:6c:be:68:14:38:6f:a5:ff:d4:7c:fa: 11:e9:d9:c6:ae:34:e0:f0:e9:21:25:b5:49:77:c4:44:34:fd: 5c:23:ad:c7:8d:9b:5b:2c:21:31:80:13:73:9d:5a:a9:b5:1a: fb:08:49:b4:4c:f9:8d:8a:ff:c4:a3:c7:cf:06:ff:e7:8b:b9: d3:c6:37:3b:88:65:61:05:33:f6:d1:46:74:c8:1e:54:91:3c: ef:ec:6d:ee:a2:cb:d5:9a:56:df:1f:16:b2:56:15:29:a3:62: 72:d3:7d:87:d9:46:f1:4e:09:ee:97:3a:da:82:e7:42:6a:88: 6f:ce:d1:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHHL+GHiS6rBmImMyzzhgM2UVl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA1MDgwNjA2NDBaFw0yNTA1MTExMjAyNDBaMDMxMTAvBgNV BAMTKEM4REEzQTZEMDE5QkU0RjRFMEY5MkVGRkM0MUMwM0JGNzhBREUxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jXXszzVf0Wyq+tD3/BPv1Jyu QSIFFVKEMhLld2tB7M7eNiSPZp7FR/Qq3M5qQyIR8rBQtyatphPidhxzPp16qBBf zbEw8nJdvvphepJSdgjv4Cseof/I+k3BeqUd7vGJDvJx7zjBDBTmGO1sOs3pW4C5 T4FB13sR2t0AdpFIKZENNneENwBdDEz9vV2hRlt3jrJauyG11PWOPq0Mladfd2nm zjscCHZNAFYRYSF8y/MNdYuTGMSvODyP5IfXB77d8SbHb8gEKAZgtaCxUU9NVhdl HH+GtOq9SjaZs4O9Z+9ABZ3VVvAILz62C14U+76RxO46OOVjDeGKhOCPTT8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyNo6bQGb5PTg+S7/xBwDv3it4c4wHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrnNjCeFLBpj3H4og6lgKIC9vMSaik2fmee OG3rdNoH5D7yiqnvU064n/xWb89wAdhiaRyESq0G2vZ0oqqH2JnqT2XLDHvEXccZ oZi7j6C5+y0/NNvIiOpHk6VwphVYnzkTUSmw10hECcqbZ4/AxxwHRMCIPatezWzV J1XbwUVuGV183tRsvmgUOG+l/9R8+hHp2cauNODw6SEltUl3xEQ0/VwjrceNm1ss ITGAE3OdWqm1GvsISbRM+Y2K/8Sjx88G/+eLudPGNzuIZWEFM/bRRnTIHlSRPO/s be6iy9WaVt8fFrJWFSmjYnLTfYfZRvFOCe6XOtqC50JqiG/O0To= -----END CERTIFICATE-----Generated at Fri May 9 08:38:32 2025 by rpki-client