$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: ETtDxXahyLGRYxann7+O1Xxr6FY4+ssU8Hdsqu5h1sg= Subject key identifier: 45:7F:CE:0E:F3:B2:13:50:D4:3D:3C:C1:AD:A3:19:17:5C:1E:8C:31 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 64C75B30CCC951F3CD04CF73AEA241CD01A5C61F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03D0 Signing time: Sat 18 Oct 2025 17:01:06 +0000 Manifest this update: Sat 18 Oct 2025 16:56:06 +0000 Manifest next update: Tue 21 Oct 2025 22:23:06 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: g1nbYMwQG5KKrz8rcuUaTFJPdP0U9RLEqLb0jN1aQK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c7:5b:30:cc:c9:51:f3:cd:04:cf:73:ae:a2:41:cd:01:a5:c6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Oct 18 16:56:06 2025 GMT Not After : Oct 21 22:23:06 2025 GMT Subject: CN=457FCE0EF3B21350D43D3CC1ADA319175C1E8C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:1f:99:98:53:39:29:9d:e0:a5:e0:e8:a0: 43:1c:f5:2b:e4:78:1a:67:b8:73:d1:e4:3e:4e:4e: c6:df:e0:97:24:90:79:dc:ac:2e:f4:8a:d1:5e:02: dd:1f:ed:a3:b8:73:56:f8:f0:e2:e5:49:ef:8c:8e: 0f:e8:fd:c2:0d:f5:eb:3b:f4:c5:db:f8:7b:c3:3c: c7:08:2d:ab:96:b4:0d:b4:15:b4:7c:f5:6f:4e:81: a1:70:78:61:49:88:8b:36:61:da:56:e3:75:c6:3b: ca:5e:df:b7:5b:e6:2c:e1:a2:cf:53:61:f0:10:42: 93:81:06:ef:a9:1f:67:d9:be:2b:5c:82:28:49:a2: 02:be:a5:fe:4c:ae:0c:34:42:59:9d:e8:dc:4b:3b: a0:91:7a:b1:8e:93:b1:7e:79:86:6a:61:2b:6d:67: 98:36:e0:53:e6:38:70:fb:cb:3d:8b:0d:70:f2:fd: a4:3c:95:55:b4:89:bc:5c:07:31:73:27:e9:49:96: 53:7c:c7:97:c2:31:54:4d:c6:96:c1:03:a7:82:7b: ac:58:49:8b:eb:eb:06:94:99:1b:74:f8:ca:07:2a: ff:8e:f8:bb:b8:49:49:42:c3:ac:dd:af:ca:80:3f: 04:0f:0b:5b:37:33:9e:e8:5f:62:5d:0c:45:67:95: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:CE:0E:F3:B2:13:50:D4:3D:3C:C1:AD:A3:19:17:5C:1E:8C:31 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:65:d3:f3:06:ea:be:a5:c7:c3:6f:23:bb:e5:6b:dd:1b:ce: 12:c4:6b:b5:a1:63:86:ff:16:76:b3:c3:a9:38:ba:02:b4:7a: 32:07:15:ac:63:f0:dc:67:c7:75:45:70:78:bb:2b:35:a8:23: 76:ae:97:3b:10:ae:1d:e0:a6:3f:51:5b:e9:ad:01:89:e5:cc: 90:30:6e:6b:b4:f3:54:ed:46:3b:75:ee:8f:ab:06:5b:d1:62: 77:db:7c:9a:1c:f6:23:35:72:d5:da:6c:7b:df:af:66:3f:43: a5:ee:5c:12:ad:be:c3:ab:13:5d:0f:71:50:a6:28:7e:53:5c: 10:a3:a0:37:d4:ef:d2:df:b9:6f:23:90:9b:05:54:a9:4e:17: 8f:0d:1a:73:9e:89:66:d1:3b:91:04:55:8d:1e:d5:d4:8b:04: e3:24:60:45:f6:18:12:41:2a:7d:68:b3:d7:9a:1b:d4:d4:65: 4a:bc:27:8a:a1:35:09:c9:40:5b:28:17:9d:6d:b4:b4:7c:fc: 23:dd:6d:e2:33:0e:ac:72:72:b0:ed:b2:c2:3d:24:d2:6e:0f: 00:b2:87:b5:cb:9d:cc:a3:3b:92:58:12:de:01:a5:92:bb:66: bc:dc:d8:c4:17:3d:8d:cc:07:ff:61:c9:e2:bc:30:a5:c4:55: 25:91:97:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMdbMMzJUfPNBM9zrqJBzQGlxh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTEwMTgxNjU2MDZaFw0yNTEwMjEyMjIzMDZaMDMxMTAvBgNV BAMTKDQ1N0ZDRTBFRjNCMjEzNTBENDNEM0NDMUFEQTMxOTE3NUMxRThDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoR+ZmFM5KZ3gpeDooEMc9Svk eBpnuHPR5D5OTsbf4JckkHncrC70itFeAt0f7aO4c1b48OLlSe+Mjg/o/cIN9es7 9MXb+HvDPMcILauWtA20FbR89W9OgaFweGFJiIs2YdpW43XGO8pe37db5izhos9T YfAQQpOBBu+pH2fZvitcgihJogK+pf5Mrgw0Qlmd6NxLO6CRerGOk7F+eYZqYStt Z5g24FPmOHD7yz2LDXDy/aQ8lVW0ibxcBzFzJ+lJllN8x5fCMVRNxpbBA6eCe6xY SYvr6waUmRt0+MoHKv+O+Lu4SUlCw6zdr8qAPwQPC1s3M57oX2JdDEVnla4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURX/ODvOyE1DUPTzBraMZF1wejDEwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1l0/MG6r6lx8NvI7vla90bzhLEa7WhY4b/ Fnazw6k4ugK0ejIHFaxj8Nxnx3VFcHi7KzWoI3aulzsQrh3gpj9RW+mtAYnlzJAw bmu081TtRjt17o+rBlvRYnfbfJoc9iM1ctXabHvfr2Y/Q6XuXBKtvsOrE10PcVCm KH5TXBCjoDfU79LfuW8jkJsFVKlOF48NGnOeiWbRO5EEVY0e1dSLBOMkYEX2GBJB Kn1os9eaG9TUZUq8J4qhNQnJQFsoF51ttLR8/CPdbeIzDqxycrDtssI9JNJuDwCy h7XLncyjO5JYEt4BpZK7Zrzc2MQXPY3MB/9hyeK8MKXEVSWRl9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:54 2025 by rpki-client