$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: RCpnGcsIz+2oO3Fv1mOGcg5a6qEtZDJjBjcYrZLmIv4= Subject key identifier: 56:34:55:B0:4F:90:48:2D:A4:94:4E:2D:7B:05:F3:1C:9D:AF:78:0D Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 077F9047AF10DB89B05719B946A370F717F73675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 0203 Signing time: Sat 18 Oct 2025 09:20:00 +0000 Manifest this update: Sat 18 Oct 2025 09:15:00 +0000 Manifest next update: Tue 21 Oct 2025 18:23:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: tfqkX5xllKAr+qOZucuqsbDgqZUuM8ZYQu+lTx7gP/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7f:90:47:af:10:db:89:b0:57:19:b9:46:a3:70:f7:17:f7:36:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Oct 18 09:15:00 2025 GMT Not After : Oct 21 18:23:00 2025 GMT Subject: CN=563455B04F90482DA4944E2D7B05F31C9DAF780D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:20:04:f7:ad:39:33:91:09:e1:6c:59:69: 17:26:d1:4a:b3:c2:15:42:b6:56:aa:21:7e:6f:f0: 53:62:9a:e7:81:ba:3f:ae:2d:6e:09:a7:45:ae:ac: 9a:8b:3c:ec:66:68:f0:8e:1a:1b:3a:6a:63:5a:8f: a7:96:be:09:e7:89:fe:11:a4:59:e1:06:af:19:3e: 94:9c:e2:f2:93:5d:d9:69:93:b4:2f:a7:41:f8:57: 36:9a:a8:7a:19:78:55:e6:95:05:c3:f4:8b:fd:0f: ad:6f:0e:b9:e2:66:29:e8:cb:25:a9:bb:96:c7:37: 89:48:ea:f1:d4:c1:a8:47:31:ab:85:59:43:d1:ca: 52:fa:83:c4:ef:4f:5f:7d:99:ea:3e:1d:1a:06:87: a9:23:93:b4:1c:a5:b6:d8:27:ec:cc:12:ea:a5:10: c8:52:34:fd:8a:bf:09:8f:a8:2f:ae:11:1d:e0:03: ce:fd:63:6a:ca:a5:8d:28:dd:20:e7:b3:f7:77:b3: 85:ae:b7:ec:6c:40:e9:4c:45:28:70:d4:0f:ac:e4: d5:e9:f5:71:a7:cf:21:dd:59:ff:da:ef:88:29:75: 07:9f:7b:7f:ab:27:60:5a:5e:6c:22:99:5b:54:c1: 61:05:54:a2:f0:24:76:a1:5e:3d:65:14:ec:44:b1: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:34:55:B0:4F:90:48:2D:A4:94:4E:2D:7B:05:F3:1C:9D:AF:78:0D X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ed:69:28:7a:8b:b7:76:43:69:31:e4:2a:ac:11:eb:ca:e9: 38:73:90:c8:c2:b7:95:1a:4d:22:bc:fe:99:fd:69:5b:fd:6b: 7c:2c:db:ee:92:69:c7:ef:77:09:1b:bb:59:6f:bc:20:b8:0a: f5:41:6b:7b:ab:5e:fb:ed:43:ac:80:50:c3:cc:91:c6:d7:c1: 10:d6:be:2b:73:b9:37:fa:62:8f:db:fb:ec:19:c7:1c:ab:c5: ae:1b:cf:ac:7c:8b:92:ca:cf:20:4a:93:99:51:92:15:4b:32: 73:59:3e:ea:9f:bc:be:6f:37:c5:2b:56:c5:48:78:da:18:2a: e1:23:e2:2c:c8:a8:7c:42:af:75:5c:61:f3:2f:86:e6:47:54: fe:51:00:47:81:9e:12:10:41:68:ec:20:0c:3d:86:ce:27:a2: ee:14:6a:08:12:8e:c5:fa:d8:16:e4:47:52:ea:f8:5c:2a:c4: 3a:5d:df:3a:31:31:71:fe:0a:70:69:32:4e:e6:7a:9e:d2:f9: 55:5c:90:2d:c8:39:c3:fa:a1:a0:30:c6:0b:33:de:7c:71:ec: 38:e7:d3:22:4c:64:1a:f0:60:dd:c7:f1:3e:f6:06:33:96:47: ce:a0:fc:92:db:da:45:9f:c5:cd:e6:96:73:4f:41:c0:95:b3: 2c:30:5b:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3+QR68Q24mwVxm5RqNw9xf3NnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTEwMTgwOTE1MDBaFw0yNTEwMjExODIzMDBaMDMxMTAvBgNV BAMTKDU2MzQ1NUIwNEY5MDQ4MkRBNDk0NEUyRDdCMDVGMzFDOURBRjc4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOyAE9605M5EJ4WxZaRcm0Uqz whVCtlaqIX5v8FNimueBuj+uLW4Jp0WurJqLPOxmaPCOGhs6amNaj6eWvgnnif4R pFnhBq8ZPpSc4vKTXdlpk7Qvp0H4VzaaqHoZeFXmlQXD9Iv9D61vDrniZinoyyWp u5bHN4lI6vHUwahHMauFWUPRylL6g8TvT199meo+HRoGh6kjk7QcpbbYJ+zMEuql EMhSNP2KvwmPqC+uER3gA879Y2rKpY0o3SDns/d3s4Wut+xsQOlMRShw1A+s5NXp 9XGnzyHdWf/a74gpdQefe3+rJ2BaXmwimVtUwWEFVKLwJHahXj1lFOxEsejjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVjRVsE+QSC2klE4tewXzHJ2veA0wHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABntaSh6i7d2Q2kx5CqsEevK6ThzkMjCt5Ua TSK8/pn9aVv9a3ws2+6Sacfvdwkbu1lvvCC4CvVBa3urXvvtQ6yAUMPMkcbXwRDW vitzuTf6Yo/b++wZxxyrxa4bz6x8i5LKzyBKk5lRkhVLMnNZPuqfvL5vN8UrVsVI eNoYKuEj4izIqHxCr3VcYfMvhuZHVP5RAEeBnhIQQWjsIAw9hs4nou4UaggSjsX6 2BbkR1Lq+FwqxDpd3zoxMXH+CnBpMk7mep7S+VVckC3IOcP6oaAwxgsz3nxx7Djn 0yJMZBrwYN3H8T72BjOWR86g/JLb2kWfxc3mlnNPQcCVsywwW+g= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:15 2025 by rpki-client