$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: kC05h3RozNPc8nikSIFxz1Z7OGQjCQ+F19sZEVfz2fU= Subject key identifier: 06:49:88:D4:92:19:4A:C4:C8:D8:0A:2E:76:54:2C:B1:97:26:AD:3E Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 31FA5C6FED5A4DA32D899B370FAC0B2639CD3D6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01E9 Signing time: Fri 22 Aug 2025 11:10:00 +0000 Manifest this update: Fri 22 Aug 2025 11:05:00 +0000 Manifest next update: Mon 25 Aug 2025 18:14:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: 2Dq4f9aWAXRPLRV6N/3CqMqJ3xWnspzUFJfKeUrY5lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fa:5c:6f:ed:5a:4d:a3:2d:89:9b:37:0f:ac:0b:26:39:cd:3d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Aug 22 11:05:00 2025 GMT Not After : Aug 25 18:14:00 2025 GMT Subject: CN=064988D492194AC4C8D80A2E76542CB19726AD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:8d:99:8f:5c:b1:eb:e4:28:ec:7e:9c:23: 62:95:dd:7f:05:e7:6d:ef:e5:28:c1:23:52:df:a9: 29:0f:f0:ac:6d:24:fd:29:d7:35:d1:ad:3a:62:c0: 41:6d:5b:bb:e7:77:15:e4:56:6b:e7:89:26:aa:34: 56:c9:05:0c:c7:93:56:e6:e2:bf:f9:5b:9f:5f:9b: f7:fb:a7:aa:3a:af:7f:2b:75:6a:38:94:37:dd:eb: d8:87:15:4a:9f:7b:18:6b:9e:17:07:5b:0e:b2:06: ae:28:20:df:40:ad:c3:12:6e:25:2e:47:d6:54:01: 8f:c4:99:5b:9b:fb:56:7d:81:53:9d:dc:0b:3e:47: 5d:ac:ca:ad:f9:7d:e5:fc:2c:1c:3a:5a:09:44:1f: ad:83:f9:85:44:21:05:40:70:a8:2d:e0:5e:d1:45: a4:54:4e:04:d9:2c:39:9d:31:c8:06:85:02:8b:59: 15:03:d9:7d:ca:7c:a0:2b:ee:d8:02:72:4e:05:0b: d0:53:0e:d3:56:e7:20:b0:7d:87:c8:40:d6:52:58: 2e:86:3d:3d:3d:0b:b6:9a:fd:e4:a2:92:4d:fb:71: 97:58:3b:ae:73:72:84:86:84:67:90:60:f5:b3:8a: 0e:65:18:f8:4a:e6:f1:9b:fa:d3:c6:88:88:1b:5e: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:88:D4:92:19:4A:C4:C8:D8:0A:2E:76:54:2C:B1:97:26:AD:3E X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:10:c6:06:74:39:2e:0d:8a:2c:09:6c:9e:73:0f:05:a9:0c: 15:60:24:c0:43:02:6b:d4:4e:dd:13:f2:a0:b0:32:6c:2b:0d: ec:10:30:c5:62:92:37:67:38:e4:11:61:34:90:d2:80:2e:83: 1b:15:f8:d8:33:46:b2:9a:f7:95:d8:89:b2:79:4a:ee:5f:44: 84:cc:8e:cc:72:7f:6a:50:fd:8a:e1:22:89:94:dd:5b:67:7f: cc:5a:2d:82:f7:72:84:1e:24:3d:c2:cb:56:c5:64:6b:d2:ff: d4:43:7f:50:d5:8a:dc:8e:f8:bd:90:50:be:19:93:f1:6b:e5: 36:29:2b:0e:e7:ea:7d:4f:aa:f3:84:05:88:c6:10:96:07:b7: 55:c2:61:d4:5c:ef:c5:e5:bf:af:cb:80:b1:39:56:47:1f:e5: c8:cb:1b:c2:9b:cc:bd:31:b0:f8:a5:30:95:cf:9a:7d:53:d6: ad:a6:24:ed:b7:93:36:4e:06:ab:c4:46:35:74:62:a0:22:e7: 0e:b4:e8:99:c9:09:c9:fd:d4:bf:7b:26:1c:1c:8a:6c:1b:85: 30:65:2f:23:67:f4:0b:30:93:2d:7f:4a:ad:60:4d:4c:ad:0d: d5:8c:d7:2e:3c:e3:5c:ec:df:10:8d:c1:55:82:8c:19:d1:51: 09:c9:60:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfpcb+1aTaMtiZs3D6wLJjnNPWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA4MjIxMTA1MDBaFw0yNTA4MjUxODE0MDBaMDMxMTAvBgNV BAMTKDA2NDk4OEQ0OTIxOTRBQzRDOEQ4MEEyRTc2NTQyQ0IxOTcyNkFEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbY2Zj1yx6+Qo7H6cI2KV3X8F 523v5SjBI1LfqSkP8KxtJP0p1zXRrTpiwEFtW7vndxXkVmvniSaqNFbJBQzHk1bm 4r/5W59fm/f7p6o6r38rdWo4lDfd69iHFUqfexhrnhcHWw6yBq4oIN9ArcMSbiUu R9ZUAY/EmVub+1Z9gVOd3As+R12syq35feX8LBw6WglEH62D+YVEIQVAcKgt4F7R RaRUTgTZLDmdMcgGhQKLWRUD2X3KfKAr7tgCck4FC9BTDtNW5yCwfYfIQNZSWC6G PT09C7aa/eSikk37cZdYO65zcoSGhGeQYPWzig5lGPhK5vGb+tPGiIgbXu2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkmI1JIZSsTI2AoudlQssZcmrT4wHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYQxgZ0OS4NiiwJbJ5zDwWpDBVgJMBDAmvU Tt0T8qCwMmwrDewQMMVikjdnOOQRYTSQ0oAugxsV+NgzRrKa95XYibJ5Su5fRITM jsxyf2pQ/YrhIomU3Vtnf8xaLYL3coQeJD3Cy1bFZGvS/9RDf1DVityO+L2QUL4Z k/Fr5TYpKw7n6n1PqvOEBYjGEJYHt1XCYdRc78Xlv6/LgLE5Vkcf5cjLG8KbzL0x sPilMJXPmn1T1q2mJO23kzZOBqvERjV0YqAi5w606JnJCcn91L97JhwcimwbhTBl LyNn9Aswky1/Sq1gTUytDdWM1y4841zs3xCNwVWCjBnRUQnJYF0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:48 2025 by rpki-client