$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: 9GftP0xLViCOXGY/AjxOzOTmdoxOa/LQEy3ALW9aTxE= Subject key identifier: 6F:B9:8C:22:43:8F:44:15:6A:8E:9D:F3:27:AA:86:45:27:ED:65:7E Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 039496CE6F98D1C2599A38F2D6CC470A737621AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01BB Signing time: Sat 10 May 2025 21:50:01 +0000 Manifest this update: Sat 10 May 2025 21:45:01 +0000 Manifest next update: Tue 13 May 2025 22:09:01 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: 0yfEMlCYoI3dxsWmgA16Ps0fgc7xiRpEeAL00RUVXlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:94:96:ce:6f:98:d1:c2:59:9a:38:f2:d6:cc:47:0a:73:76:21:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: May 10 21:45:01 2025 GMT Not After : May 13 22:09:01 2025 GMT Subject: CN=6FB98C22438F44156A8E9DF327AA864527ED657E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:d1:48:c4:9b:f7:bb:d4:b4:9f:53:d6:5d: 90:d7:40:d5:65:97:61:49:e6:11:51:84:86:e6:0f: 02:10:d8:34:a6:b2:3f:04:3b:6b:92:07:94:9f:25: 14:39:a1:9d:0c:1e:a0:52:46:28:eb:68:59:3b:30: 31:8c:ed:ed:fc:d7:7f:8f:71:f6:dc:4b:01:3d:96: 74:88:38:ec:fe:23:c1:a8:c7:0d:0b:1d:c6:51:0b: fe:f0:0c:ac:cc:0d:f9:da:2e:b9:3d:d9:e6:b1:58: 2c:1b:12:7f:5e:c3:89:4f:47:0e:f3:11:3b:32:2f: 75:b9:78:93:71:69:4b:ab:5a:d6:cd:2a:0f:e9:94: 04:b0:1d:3f:6d:66:1f:b9:18:a8:c9:ce:3a:9b:27: e1:3b:4a:4a:74:9c:3c:63:fd:c9:6f:d5:f1:8f:b0: bc:a6:20:ad:43:19:20:bd:6e:f2:2a:6f:86:b8:ba: fc:fe:df:ce:fc:30:fc:b3:38:62:79:07:ce:e7:ed: 46:d2:6d:32:f4:a9:55:03:c0:62:7d:5c:4e:53:be: d5:ff:97:12:2e:a7:ae:f1:26:9e:15:40:11:69:0f: 76:f4:ce:b8:3c:0e:cb:ef:0f:27:62:be:91:3c:81: e0:95:8f:a0:2b:bb:92:57:7d:8c:4c:65:c2:7f:09: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B9:8C:22:43:8F:44:15:6A:8E:9D:F3:27:AA:86:45:27:ED:65:7E X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0a:11:dc:43:8c:a7:cd:1c:31:a0:bf:e4:75:9d:d4:7c:c6: 1c:69:48:93:70:62:8a:f0:81:52:4d:74:58:39:4a:60:18:1b: 13:4f:6e:5d:7b:fb:c6:ed:48:c8:eb:08:c3:2e:a4:cd:73:75: 7b:0e:e8:12:b8:e1:0d:fb:a8:0d:3c:4d:97:f3:ff:99:1a:74: 1c:cb:1d:e3:ce:17:9b:68:f0:18:74:22:fc:0d:87:b5:5d:89: 7c:5e:c9:87:98:d5:ad:3f:84:e1:3b:dd:9e:40:59:35:aa:a4: 64:cf:4a:3b:e0:e0:5f:72:f1:87:63:39:0a:06:95:a6:ed:a0: 40:27:ef:0d:f5:0d:1b:36:04:1d:c1:67:e2:a7:16:70:d0:be: 1e:21:1e:8b:95:52:c1:5f:4f:35:25:c5:e1:a1:ae:36:89:54: 5d:92:89:42:52:32:c3:cc:01:9f:ab:42:3b:be:a3:fe:4e:f4: 08:28:34:96:6c:90:53:54:48:73:20:54:c0:b8:2b:50:ad:f2: e8:6f:f3:26:97:cd:91:ef:48:a6:41:f4:f8:19:f3:85:56:cc: 4c:6e:4c:e0:2a:85:4f:77:ed:80:0a:b4:50:0e:32:0a:f9:ff: 0b:b6:4c:43:e4:6f:42:a3:da:a7:90:33:cf:e3:26:72:00:1a: 85:61:da:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5SWzm+Y0cJZmjjy1sxHCnN2IawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA1MTAyMTQ1MDFaFw0yNTA1MTMyMjA5MDFaMDMxMTAvBgNV BAMTKDZGQjk4QzIyNDM4RjQ0MTU2QThFOURGMzI3QUE4NjQ1MjdFRDY1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsNFIxJv3u9S0n1PWXZDXQNVl l2FJ5hFRhIbmDwIQ2DSmsj8EO2uSB5SfJRQ5oZ0MHqBSRijraFk7MDGM7e3813+P cfbcSwE9lnSIOOz+I8Goxw0LHcZRC/7wDKzMDfnaLrk92eaxWCwbEn9ew4lPRw7z ETsyL3W5eJNxaUurWtbNKg/plASwHT9tZh+5GKjJzjqbJ+E7Skp0nDxj/clv1fGP sLymIK1DGSC9bvIqb4a4uvz+3878MPyzOGJ5B87n7UbSbTL0qVUDwGJ9XE5TvtX/ lxIup67xJp4VQBFpD3b0zrg8DsvvDydivpE8geCVj6Aru5JXfYxMZcJ/CeTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7mMIkOPRBVqjp3zJ6qGRSftZX4wHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIKEdxDjKfNHDGgv+R1ndR8xhxpSJNwYorw gVJNdFg5SmAYGxNPbl17+8btSMjrCMMupM1zdXsO6BK44Q37qA08TZfz/5kadBzL HePOF5to8Bh0IvwNh7VdiXxeyYeY1a0/hOE73Z5AWTWqpGTPSjvg4F9y8YdjOQoG labtoEAn7w31DRs2BB3BZ+KnFnDQvh4hHouVUsFfTzUlxeGhrjaJVF2SiUJSMsPM AZ+rQju+o/5O9AgoNJZskFNUSHMgVMC4K1Ct8uhv8yaXzZHvSKZB9PgZ84VWzExu TOAqhU937YAKtFAOMgr5/wu2TEPkb0Kj2qeQM8/jJnIAGoVh2tQ= -----END CERTIFICATE-----Generated at Sun May 11 08:45:19 2025 by rpki-client