$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: D3zvh2zWsCd78tzQHry911HRN3oZptDQIaOaLNzQ+8E= Subject key identifier: 04:9E:0A:CD:37:D2:EE:C4:D5:F4:99:1A:33:27:B1:DD:23:CB:BC:7D Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 6850508914A3E41FA08ABAD6B4D49ABEE0BB79C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: AD Signing time: Thu 21 Aug 2025 18:21:44 +0000 Manifest this update: Thu 21 Aug 2025 18:16:44 +0000 Manifest next update: Mon 25 Aug 2025 04:18:44 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: wmI4T3L8iTWN4UAZTBErKr6P+uA3+fRR+gZRbSN8Cd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:50:50:89:14:a3:e4:1f:a0:8a:ba:d6:b4:d4:9a:be:e0:bb:79:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Aug 21 18:16:44 2025 GMT Not After : Aug 25 04:18:44 2025 GMT Subject: CN=049E0ACD37D2EEC4D5F4991A3327B1DD23CBBC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:d1:38:8f:7a:f5:ac:68:2d:99:1d:f7:41: f8:32:47:84:97:46:89:ee:66:6e:c8:6e:e2:2f:8d: 66:54:1a:3b:98:c6:fa:ee:de:0a:16:a8:b2:cf:9a: 49:71:dc:f2:e3:4c:c6:52:41:d7:fb:cc:19:7b:ae: 3c:4d:4b:dd:22:6e:10:39:e8:3d:b4:55:ea:75:fc: 86:92:37:42:d7:f1:7f:d5:80:e0:e8:0c:74:0a:97: 14:b2:11:75:49:aa:20:7d:7f:9b:34:9c:75:4e:a4: bf:60:b8:cb:21:78:27:57:65:08:7c:70:4d:c7:9a: 6b:59:b9:cb:e9:85:bb:b4:1c:9d:a4:ef:62:1b:28: 6d:88:40:de:6f:f6:a5:92:3f:ca:3d:b3:c6:f3:21: 2e:e8:d2:3a:bc:bc:4d:83:93:29:ec:28:9b:dd:f2: 71:38:a3:13:d0:5a:32:b1:c9:4a:98:64:78:b8:b3: ee:1d:2a:8f:23:0a:24:cc:20:8a:e2:ab:67:20:87: 46:d2:b8:67:84:26:b1:ea:39:23:c6:5c:e0:b9:5b: e1:e5:af:95:f4:3e:b9:6e:02:c5:fa:a5:aa:12:64: ec:35:b9:fc:ca:d8:4e:bb:7e:b8:34:eb:d9:c9:53: 3a:10:64:99:50:f8:66:9f:24:38:d9:b9:78:a7:f9: 31:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:0A:CD:37:D2:EE:C4:D5:F4:99:1A:33:27:B1:DD:23:CB:BC:7D X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:35:8a:74:fe:f3:7a:26:7f:1e:9e:fe:aa:f5:37:24:81:66: 60:ba:78:81:a6:ba:a4:4e:e6:db:d1:07:ab:fd:d4:1d:0e:60: f0:04:80:8c:12:a1:06:b7:03:45:4f:22:9f:67:95:8e:2d:23: 7f:5f:3b:9a:f6:cc:92:6a:2a:b9:1d:2a:3d:1b:04:0f:8f:9d: ca:64:86:62:75:3b:e0:d0:aa:9b:51:d0:7e:f2:93:3d:f5:11: d2:e5:ac:db:07:73:8d:eb:2d:f9:37:69:2f:ff:51:99:a1:af: 02:d1:c6:ed:70:e5:3a:56:78:17:33:29:f6:2b:c5:6b:52:08: 7a:d3:51:a9:9d:74:6b:b1:1b:2f:61:97:b0:b3:d9:45:65:fe: f3:82:ca:23:1c:4d:ff:66:27:25:f1:30:72:78:5e:50:cc:3a: e3:00:f5:ac:4a:35:d5:cd:5f:5d:88:0f:38:6a:9f:55:64:05: a4:19:b2:6e:fe:73:49:ee:b4:dd:97:eb:7e:bd:71:01:fe:e7: 2b:a1:76:cd:80:db:36:41:7d:d1:07:7c:f6:2f:6a:31:58:79: 83:9b:af:e0:45:3d:7d:d9:dc:f2:95:44:32:c1:b2:1c:f1:7e: 5d:4b:c0:61:79:d1:1a:f8:10:52:9c:53:b3:7a:a9:47:fb:0f: 27:83:07:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFBQiRSj5B+girrWtNSavuC7ecIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA4MjExODE2NDRaFw0yNTA4MjUwNDE4NDRaMDMxMTAvBgNV BAMTKDA0OUUwQUNEMzdEMkVFQzRENUY0OTkxQTMzMjdCMUREMjNDQkJDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXI9E4j3r1rGgtmR33QfgyR4SX RonuZm7IbuIvjWZUGjuYxvru3goWqLLPmklx3PLjTMZSQdf7zBl7rjxNS90ibhA5 6D20Vep1/IaSN0LX8X/VgODoDHQKlxSyEXVJqiB9f5s0nHVOpL9guMsheCdXZQh8 cE3HmmtZucvphbu0HJ2k72IbKG2IQN5v9qWSP8o9s8bzIS7o0jq8vE2DkynsKJvd 8nE4oxPQWjKxyUqYZHi4s+4dKo8jCiTMIIriq2cgh0bSuGeEJrHqOSPGXOC5W+Hl r5X0PrluAsX6paoSZOw1ufzK2E67frg069nJUzoQZJlQ+GafJDjZuXin+TEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJ4KzTfS7sTV9JkaMyex3SPLvH0wHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD81inT+83omfx6e/qr1NySBZmC6eIGmuqRO 5tvRB6v91B0OYPAEgIwSoQa3A0VPIp9nlY4tI39fO5r2zJJqKrkdKj0bBA+Pncpk hmJ1O+DQqptR0H7ykz31EdLlrNsHc43rLfk3aS//UZmhrwLRxu1w5TpWeBczKfYr xWtSCHrTUamddGuxGy9hl7Cz2UVl/vOCyiMcTf9mJyXxMHJ4XlDMOuMA9axKNdXN X12IDzhqn1VkBaQZsm7+c0nutN2X6369cQH+5yuhds2A2zZBfdEHfPYvajFYeYOb r+BFPX3Z3PKVRDLBshzxfl1LwGF50Rr4EFKcU7N6qUf7DyeDBwQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:09 2025 by rpki-client