$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: EFoV6CsmUyCVlfxGB3LzNweTVvY7ICqyYGCqlpdzH98= Subject key identifier: C4:F3:D4:70:03:36:30:A2:2D:00:79:F0:63:2E:1B:4B:C8:7F:CC:52 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 59ED014FBA3546BB67AFBDAF1DDCB97B4F970641 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03B6 Signing time: Thu 21 Aug 2025 02:01:05 +0000 Manifest this update: Thu 21 Aug 2025 01:56:05 +0000 Manifest next update: Sun 24 Aug 2025 11:51:05 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: OLThA9qqvpbQeI3xbDazRgeQDwZHqrlF0rclPJttOrY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ed:01:4f:ba:35:46:bb:67:af:bd:af:1d:dc:b9:7b:4f:97:06:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Aug 21 01:56:05 2025 GMT Not After : Aug 24 11:51:05 2025 GMT Subject: CN=C4F3D470033630A22D0079F0632E1B4BC87FCC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:71:f7:d1:4f:3b:2a:6b:a1:88:91:1b:9f: e9:cb:de:4a:1e:16:0b:e1:db:4e:9b:9a:3a:d7:98: fb:13:43:c6:97:66:0d:7d:8b:ae:72:02:65:7a:4e: 03:ab:f4:53:55:3e:55:f1:2b:fc:e8:37:65:ae:bf: c6:82:8d:8e:91:4e:59:9d:fc:aa:47:b5:97:c4:58: 62:3d:b2:df:0c:2e:fb:8e:05:00:96:c7:53:0d:f3: 64:e8:69:f9:4d:e9:86:d2:75:57:04:a6:03:05:8d: 75:b8:64:06:45:15:a0:1d:c3:cb:fc:ae:69:54:19: 21:ab:c2:7b:ef:5f:56:93:49:fc:98:ed:5f:9b:50: 63:77:af:be:46:8c:63:b3:6a:ad:6f:c9:a3:f6:75: 5b:85:1a:90:e5:d4:59:0b:f8:fa:71:8d:fa:df:10: 23:52:ff:93:dd:84:13:5a:8e:6c:4c:a1:09:c9:ec: 32:53:a6:81:9b:82:50:a0:8a:06:95:2c:17:9a:a1: bc:4f:f2:4e:20:dd:71:13:4e:d1:18:6f:f2:96:78: 73:5e:e4:dc:12:99:b3:92:b6:d4:ae:4b:d4:d6:07: b3:73:43:3b:6b:53:6b:1d:fd:f6:8d:4b:89:60:18: 18:e8:ed:0e:b6:91:83:2a:d0:1b:7d:6c:79:41:41: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:D4:70:03:36:30:A2:2D:00:79:F0:63:2E:1B:4B:C8:7F:CC:52 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9c:a7:55:ac:92:09:fa:90:3c:81:0e:f4:f4:83:a0:39:ca: 5f:7f:08:40:7f:a1:0c:dc:29:25:10:26:aa:38:1d:12:ab:55: 69:53:66:78:0b:9e:07:32:f9:03:3a:ed:8a:f0:fc:44:65:3c: e5:3b:79:ca:de:35:47:0b:e8:f7:99:97:77:e2:6c:6e:5d:44: ae:03:9c:94:59:0d:76:bf:a3:f2:a3:12:37:63:80:da:57:3d: 31:ee:6a:27:77:e0:28:11:b4:67:e0:e0:9c:74:e1:34:23:43: fa:e6:9b:b4:20:ef:de:38:62:26:57:a4:15:96:d9:6b:94:5b: df:37:e7:8e:df:a5:a8:18:a6:c3:92:88:e4:f5:79:97:77:78: e5:30:fb:0c:11:98:52:b5:34:15:7d:e6:ae:51:a3:f7:31:a3: a0:40:c6:d5:8b:56:e9:bd:6a:bc:2d:3f:d9:8a:0d:69:c4:99: eb:b5:44:47:9b:48:02:f0:00:cf:ef:c8:a1:89:be:bd:33:01: 4e:98:1b:fc:c6:f0:12:d0:50:85:e8:e5:a8:e9:49:a8:ea:d8: c5:71:86:9f:38:ca:e3:41:df:38:f4:0f:23:c9:7b:fa:de:2f: 33:5e:c5:4d:56:08:ad:fa:e0:18:7f:03:63:28:7c:f2:30:df: 72:d3:ed:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWe0BT7o1Rrtnr72vHdy5e0+XBkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTA4MjEwMTU2MDVaFw0yNTA4MjQxMTUxMDVaMDMxMTAvBgNV BAMTKEM0RjNENDcwMDMzNjMwQTIyRDAwNzlGMDYzMkUxQjRCQzg3RkNDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITnH30U87KmuhiJEbn+nL3koe Fgvh206bmjrXmPsTQ8aXZg19i65yAmV6TgOr9FNVPlXxK/zoN2Wuv8aCjY6RTlmd /KpHtZfEWGI9st8MLvuOBQCWx1MN82ToaflN6YbSdVcEpgMFjXW4ZAZFFaAdw8v8 rmlUGSGrwnvvX1aTSfyY7V+bUGN3r75GjGOzaq1vyaP2dVuFGpDl1FkL+Ppxjfrf ECNS/5PdhBNajmxMoQnJ7DJTpoGbglCgigaVLBeaobxP8k4g3XETTtEYb/KWeHNe 5NwSmbOSttSuS9TWB7NzQztrU2sd/faNS4lgGBjo7Q62kYMq0Bt9bHlBQa+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxPPUcAM2MKItAHnwYy4bS8h/zFIwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2cp1Wskgn6kDyBDvT0g6A5yl9/CEB/oQzc KSUQJqo4HRKrVWlTZngLngcy+QM67Yrw/ERlPOU7ecreNUcL6PeZl3fibG5dRK4D nJRZDXa/o/KjEjdjgNpXPTHuaid34CgRtGfg4Jx04TQjQ/rmm7Qg7944YiZXpBWW 2WuUW983547fpagYpsOSiOT1eZd3eOUw+wwRmFK1NBV95q5Ro/cxo6BAxtWLVum9 arwtP9mKDWnEmeu1REebSALwAM/vyKGJvr0zAU6YG/zG8BLQUIXo5ajpSajq2MVx hp84yuNB3zj0DyPJe/reLzNexU1WCK364Bh/A2MofPIw33LT7eg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:07 2025 by rpki-client