$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: vT+YXWUXOdpE5BPa87h/FS/p2aVNk823wWhgFcx5xsk= Subject key identifier: F2:C0:C4:75:9B:9C:16:12:A2:0A:83:96:43:72:17:57:13:FC:DB:99 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 176DE5B438B8804111A1BD3A4509C1D0AD74B971 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 95 Signing time: Sat 28 Jun 2025 12:41:42 +0000 Manifest this update: Sat 28 Jun 2025 12:36:42 +0000 Manifest next update: Tue 01 Jul 2025 18:37:42 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: cWQxcQ+o6dAM7bGOQQw+KYZI1Gb5Jw30sl4gZytE0Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6d:e5:b4:38:b8:80:41:11:a1:bd:3a:45:09:c1:d0:ad:74:b9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Jun 28 12:36:42 2025 GMT Not After : Jul 1 18:37:42 2025 GMT Subject: CN=F2C0C4759B9C1612A20A83964372175713FCDB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:1d:d4:07:35:f3:1b:d9:55:23:82:cb:03: 57:be:f8:3f:e5:9f:a4:21:ef:2c:0c:86:3a:7e:b8: a7:6e:b6:0f:5a:77:3f:e5:cd:5b:4b:49:d2:98:61: 9e:5a:14:ac:fd:20:b7:64:e9:4e:27:36:c9:a9:ad: ba:f9:55:49:39:48:e2:31:a7:d5:11:ee:9e:35:2d: 93:6c:4d:21:d4:cf:2c:c7:c9:8a:12:89:99:21:6c: 65:04:a0:51:9b:8d:33:e7:6a:07:d8:f1:1b:39:63: 65:7b:52:81:6f:17:5d:fb:46:5d:bf:0a:4a:50:12: d0:fe:ea:5a:e7:ee:75:d6:91:1b:69:91:30:05:5b: 44:cb:a8:21:2b:59:b3:9e:c1:16:03:40:42:b1:1b: 01:f3:70:ed:62:da:46:db:25:32:2e:5c:d2:0d:8c: 14:80:89:80:39:52:f6:c9:ee:8c:37:3d:12:08:62: 3f:af:6e:ee:a6:d5:1e:e7:cb:b2:bc:16:b4:0e:a8: 28:ab:96:35:35:93:b8:f9:eb:bc:98:6c:10:75:a8: fb:94:f1:c2:d3:ff:9f:55:a5:dc:f7:bc:12:a7:1d: fa:ad:39:71:7f:df:c7:27:b0:71:69:88:1d:00:12: 74:b6:97:6f:4b:c0:d3:0d:b4:36:26:90:63:13:c5: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C0:C4:75:9B:9C:16:12:A2:0A:83:96:43:72:17:57:13:FC:DB:99 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:87:ea:2a:be:77:4d:cf:74:93:35:2c:7c:cc:77:05:e5:a8: ab:5a:d1:86:c8:76:4f:8e:0d:08:1f:e3:7f:d9:8e:81:da:a0: 8c:a9:d8:13:75:b6:c4:e8:19:dc:0c:46:17:2c:3a:26:b5:7f: b4:d5:92:4a:6f:18:23:34:28:07:92:63:37:d7:30:2b:f6:69: 2e:56:a5:d1:38:51:9b:b9:83:fd:22:57:cf:b7:1e:06:14:eb: b1:84:a4:1f:5f:12:d9:07:5f:5d:8e:cb:14:3b:4c:a4:a8:2f: 5d:a2:71:22:b3:0e:f0:19:32:f8:e9:54:de:e6:76:36:a0:ba: fe:e4:6f:a0:a8:b2:47:d1:76:a5:28:cf:69:90:02:f0:59:ef: ae:ed:3a:88:c2:21:1b:b6:7e:42:6f:b4:b0:26:e9:47:9a:93: 0e:fa:2f:1b:38:1d:54:08:22:f6:a1:37:aa:89:14:84:a3:ac: 46:dc:38:ba:79:cb:18:67:62:5c:eb:f7:ca:17:1a:d9:03:f6: 7e:d3:c3:92:49:07:4a:a7:4a:78:99:fc:9f:12:95:42:a6:c0: a2:21:06:f3:b1:d7:74:5a:e0:8a:e8:8f:33:96:60:ec:0b:5b: 4f:d6:76:e0:b1:24:10:c9:60:78:9b:1b:9c:5b:b9:07:c5:c9: 94:f8:44:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF23ltDi4gEERob06RQnB0K10uXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA2MjgxMjM2NDJaFw0yNTA3MDExODM3NDJaMDMxMTAvBgNV BAMTKEYyQzBDNDc1OUI5QzE2MTJBMjBBODM5NjQzNzIxNzU3MTNGQ0RCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsph3UBzXzG9lVI4LLA1e++D/l n6Qh7ywMhjp+uKdutg9adz/lzVtLSdKYYZ5aFKz9ILdk6U4nNsmprbr5VUk5SOIx p9UR7p41LZNsTSHUzyzHyYoSiZkhbGUEoFGbjTPnagfY8Rs5Y2V7UoFvF137Rl2/ CkpQEtD+6lrn7nXWkRtpkTAFW0TLqCErWbOewRYDQEKxGwHzcO1i2kbbJTIuXNIN jBSAiYA5UvbJ7ow3PRIIYj+vbu6m1R7ny7K8FrQOqCirljU1k7j567yYbBB1qPuU 8cLT/59Vpdz3vBKnHfqtOXF/38cnsHFpiB0AEnS2l29LwNMNtDYmkGMTxZEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8sDEdZucFhKiCoOWQ3IXVxP825kwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiH6iq+d03PdJM1LHzMdwXlqKta0YbIdk+O DQgf43/ZjoHaoIyp2BN1tsToGdwMRhcsOia1f7TVkkpvGCM0KAeSYzfXMCv2aS5W pdE4UZu5g/0iV8+3HgYU67GEpB9fEtkHX12OyxQ7TKSoL12icSKzDvAZMvjpVN7m djaguv7kb6CoskfRdqUoz2mQAvBZ767tOojCIRu2fkJvtLAm6Ueakw76Lxs4HVQI IvahN6qJFISjrEbcOLp5yxhnYlzr98oXGtkD9n7Tw5JJB0qnSniZ/J8SlUKmwKIh BvOx13Ra4IrojzOWYOwLW0/WduCxJBDJYHibG5xbuQfFyZT4REw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:35 2025 by rpki-client