$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: c+IZ5CM3Vi5bfJpAWhgOeedoYTQvpKqCErSFpqq7HXg= Subject key identifier: D3:51:BD:D2:B6:09:C6:43:7B:23:02:1D:1B:18:87:1F:B2:7D:80:4C Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 0F3D2550B7A48936D08DAFD00504312254DC03FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01D1 Signing time: Sat 28 Jun 2025 15:50:01 +0000 Manifest this update: Sat 28 Jun 2025 15:45:01 +0000 Manifest next update: Tue 01 Jul 2025 21:29:01 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: nX2e7DGmPzfmTb0t440WOXps5sUah1sbPdmJ8YbdVf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3d:25:50:b7:a4:89:36:d0:8d:af:d0:05:04:31:22:54:dc:03:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Jun 28 15:45:01 2025 GMT Not After : Jul 1 21:29:01 2025 GMT Subject: CN=D351BDD2B609C6437B23021D1B18871FB27D804C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:65:16:80:14:59:f6:6e:37:c3:5a:ff:77: d7:ec:bc:4d:7a:3c:c1:c8:74:1d:1a:f5:80:f5:08: db:f4:6f:c7:4d:cb:01:18:8d:1a:e3:1e:d5:0d:c6: 95:a8:3d:e9:ea:50:41:cd:e4:91:bd:2c:c3:a0:a9: 34:13:25:6a:79:20:cf:e4:4a:9b:88:f6:02:ab:b4: 4a:6d:ff:1f:a0:9c:4c:a8:ca:84:a8:da:9a:4e:d4: 6b:11:f5:38:42:cd:6d:13:64:9d:89:d0:d4:f7:5e: 9b:2d:19:90:c8:c2:5a:eb:51:a1:39:8d:5b:04:9d: ce:64:9d:40:e0:f1:f4:98:e9:64:dc:93:ac:f4:22: 0f:cc:98:54:ac:c0:97:ca:f4:42:99:ec:72:2e:30: 57:6b:b7:6f:6c:bd:f4:bc:49:06:22:c1:c4:2f:d0: 9f:f3:c8:19:8a:0b:09:b7:c0:c9:9b:10:68:76:3f: a5:f4:6b:87:34:16:d9:2c:16:61:e2:0f:5f:ae:0e: c4:b5:4b:25:a1:09:84:0c:09:5e:11:cc:e5:1f:6f: ed:e2:23:6b:c6:d6:04:5b:67:81:d7:b6:ef:95:8d: b2:0f:e1:65:85:4e:c6:2f:cf:ac:94:ea:16:a1:35: ba:53:16:c4:4f:78:48:c1:38:8b:6a:c5:92:d0:7f: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:51:BD:D2:B6:09:C6:43:7B:23:02:1D:1B:18:87:1F:B2:7D:80:4C X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a8:44:17:bc:3a:e6:ec:ab:9c:74:3b:33:bf:84:b7:0e:41: 85:9c:1b:de:2a:45:28:3a:86:d6:15:8f:8a:02:3a:d7:d4:3b: 24:f2:f0:b7:3f:a0:64:2d:30:e0:e6:c7:d0:43:92:ba:a5:e0: a3:1e:c8:9a:34:8f:cb:f8:09:ec:35:a8:29:ed:f6:12:4c:88: ca:87:6d:d8:97:d9:b9:a4:7b:53:13:67:40:9e:28:b1:33:28: 45:62:ec:ef:d4:92:2a:82:36:e9:78:4b:6f:a6:dc:a5:1e:27: 77:60:3a:b0:79:7d:f1:df:73:10:fd:ca:bb:bf:09:1d:c4:ca: 58:a5:b6:f1:e0:0f:4e:9f:4a:5e:39:ae:66:7d:38:86:7f:94: 23:73:68:76:e2:76:82:c8:41:49:35:df:a7:61:7a:34:3a:19: 8f:ec:54:8e:28:c3:33:e2:f3:ac:53:ee:be:46:38:07:19:80: ec:3c:b7:22:69:9d:dc:25:d5:f0:87:00:04:8d:72:76:13:af: a5:0c:05:c8:4f:a6:ce:4d:a2:f7:16:82:16:22:97:15:3b:2f: 50:01:02:25:60:2d:c7:23:ca:cb:fe:0a:a3:3b:26:65:b3:34: 39:a9:db:56:8d:24:14:4a:c2:91:35:0c:c8:e9:e6:33:a0:1f: c5:59:1d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDz0lULekiTbQja/QBQQxIlTcA/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA2MjgxNTQ1MDFaFw0yNTA3MDEyMTI5MDFaMDMxMTAvBgNV BAMTKEQzNTFCREQyQjYwOUM2NDM3QjIzMDIxRDFCMTg4NzFGQjI3RDgwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyT2UWgBRZ9m43w1r/d9fsvE16 PMHIdB0a9YD1CNv0b8dNywEYjRrjHtUNxpWoPenqUEHN5JG9LMOgqTQTJWp5IM/k SpuI9gKrtEpt/x+gnEyoyoSo2ppO1GsR9ThCzW0TZJ2J0NT3XpstGZDIwlrrUaE5 jVsEnc5knUDg8fSY6WTck6z0Ig/MmFSswJfK9EKZ7HIuMFdrt29svfS8SQYiwcQv 0J/zyBmKCwm3wMmbEGh2P6X0a4c0FtksFmHiD1+uDsS1SyWhCYQMCV4RzOUfb+3i I2vG1gRbZ4HXtu+VjbIP4WWFTsYvz6yU6hahNbpTFsRPeEjBOItqxZLQf3DXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU01G90rYJxkN7IwIdGxiHH7J9gEwwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+oRBe8Oubsq5x0OzO/hLcOQYWcG94qRSg6 htYVj4oCOtfUOyTy8Lc/oGQtMODmx9BDkrql4KMeyJo0j8v4Cew1qCnt9hJMiMqH bdiX2bmke1MTZ0CeKLEzKEVi7O/UkiqCNul4S2+m3KUeJ3dgOrB5ffHfcxD9yru/ CR3EyliltvHgD06fSl45rmZ9OIZ/lCNzaHbidoLIQUk136dhejQ6GY/sVI4owzPi 86xT7r5GOAcZgOw8tyJpndwl1fCHAASNcnYTr6UMBchPps5NovcWghYilxU7L1AB AiVgLccjysv+CqM7JmWzNDmp21aNJBRKwpE1DMjp5jOgH8VZHfc= -----END CERTIFICATE-----Generated at Sun Jun 29 20:14:36 2025 by rpki-client