$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: aPf0rYAC8HN+lK2FQ6EYkHnakIEOt3uf+Bh7qgKz2C4= Subject key identifier: 76:2C:85:F5:7B:2C:C4:E2:F0:36:9C:8F:62:30:27:2F:1E:94:59:F4 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 677161454D7D35954D1FA4AC3561AE95E59BF07D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 9F Signing time: Mon 21 Jul 2025 08:11:42 +0000 Manifest this update: Mon 21 Jul 2025 08:06:42 +0000 Manifest next update: Thu 24 Jul 2025 10:17:42 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: 4Tr9CrKVRuGLUCEVWOry7Lb5wafOZ03mPYXgO74rgsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:71:61:45:4d:7d:35:95:4d:1f:a4:ac:35:61:ae:95:e5:9b:f0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Jul 21 08:06:42 2025 GMT Not After : Jul 24 10:17:42 2025 GMT Subject: CN=762C85F57B2CC4E2F0369C8F6230272F1E9459F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:84:c9:d8:29:1d:70:29:a4:e4:76:e8:fb: 6e:1a:3b:ef:89:56:6f:19:f4:1e:14:28:75:c8:65: 00:1a:22:bf:f3:bf:3d:b3:8d:2a:aa:04:0d:42:7b: 0c:68:a5:e4:db:d9:0a:dd:fa:a6:3d:c3:0b:29:6b: 41:f8:b8:cd:39:08:9a:56:20:5b:5f:af:81:2d:95: 05:16:62:c3:ec:34:18:34:76:bc:fb:f2:bb:47:70: 7a:71:0d:c4:f0:8b:19:26:76:d1:7b:2d:56:fb:a3: 98:46:c7:07:f4:6f:48:8f:20:5d:6b:d4:3a:2b:e8: 1a:f6:eb:b9:1f:9e:1a:33:4d:ac:7f:98:ee:ad:02: 54:2d:d8:8c:17:12:d5:92:d7:84:5b:25:00:b3:68: 60:c9:16:26:cc:ae:ee:76:d3:43:f7:99:3d:40:9b: b7:54:ad:9d:88:e8:d3:7b:4b:ff:f9:63:ff:5d:de: dc:b4:4d:80:e8:72:57:26:55:13:35:f0:7c:d4:bf: 7a:16:42:74:3e:af:e4:ea:9c:24:fb:30:db:09:14: c5:cc:79:d2:35:0f:c4:49:3c:40:af:c6:54:b5:5d: 51:12:5e:89:da:9e:55:e8:d4:02:ad:17:b2:5d:59: 05:2a:66:12:e4:97:f5:e8:50:7a:a4:61:20:e8:65: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2C:85:F5:7B:2C:C4:E2:F0:36:9C:8F:62:30:27:2F:1E:94:59:F4 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4c:96:79:42:0e:e3:b2:62:6f:d9:36:b8:5e:0e:e1:da:6e: 38:16:5c:28:ef:20:3f:36:70:d0:dd:58:c8:19:c2:30:c4:0a: e2:18:5b:ce:ed:e3:56:2c:50:70:29:91:92:37:85:ca:f6:76: 07:1d:55:62:17:b3:e1:a1:c3:52:2c:7a:dc:08:64:d5:d6:24: 1d:d3:35:cd:93:7d:11:ec:93:0e:3f:9f:42:d1:a4:13:0e:3e: e6:f8:13:32:ec:48:6d:e5:d8:5b:ce:28:65:fe:94:fc:5e:ce: 56:5f:b0:b7:70:a9:cc:09:72:0a:aa:b6:a3:3d:a4:07:9a:30: 3a:67:cf:b2:e6:d7:e0:4f:e7:ce:55:47:24:88:01:78:eb:a5: d9:79:0e:f2:bc:c7:57:48:b4:74:3d:70:d7:ac:84:19:d1:25: 99:39:58:32:33:7b:e6:41:aa:36:52:c5:85:59:e5:f9:fb:5a: b5:0e:86:56:17:09:27:88:f5:ff:a7:f4:57:51:11:47:65:21: 88:e2:cc:38:a7:33:eb:8e:10:61:36:e9:7b:f7:ff:36:ba:0e: e7:ce:c7:2b:ce:07:75:39:89:87:bc:38:68:cd:13:b9:12:48: ba:2c:94:2b:7e:a0:97:b1:2a:f5:50:9c:d8:b5:de:2c:94:77: 75:6c:2d:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3FhRU19NZVNH6SsNWGuleWb8H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA3MjEwODA2NDJaFw0yNTA3MjQxMDE3NDJaMDMxMTAvBgNV BAMTKDc2MkM4NUY1N0IyQ0M0RTJGMDM2OUM4RjYyMzAyNzJGMUU5NDU5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCYTJ2CkdcCmk5Hbo+24aO++J Vm8Z9B4UKHXIZQAaIr/zvz2zjSqqBA1CewxopeTb2Qrd+qY9wwspa0H4uM05CJpW IFtfr4EtlQUWYsPsNBg0drz78rtHcHpxDcTwixkmdtF7LVb7o5hGxwf0b0iPIF1r 1Dor6Br267kfnhozTax/mO6tAlQt2IwXEtWS14RbJQCzaGDJFibMru5200P3mT1A m7dUrZ2I6NN7S//5Y/9d3ty0TYDoclcmVRM18HzUv3oWQnQ+r+TqnCT7MNsJFMXM edI1D8RJPECvxlS1XVESXonanlXo1AKtF7JdWQUqZhLkl/XoUHqkYSDoZYB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdiyF9XssxOLwNpyPYjAnLx6UWfQwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJMlnlCDuOyYm/ZNrheDuHabjgWXCjvID82 cNDdWMgZwjDECuIYW87t41YsUHApkZI3hcr2dgcdVWIXs+Ghw1IsetwIZNXWJB3T Nc2TfRHskw4/n0LRpBMOPub4EzLsSG3l2FvOKGX+lPxezlZfsLdwqcwJcgqqtqM9 pAeaMDpnz7Lm1+BP585VRySIAXjrpdl5DvK8x1dItHQ9cNeshBnRJZk5WDIze+ZB qjZSxYVZ5fn7WrUOhlYXCSeI9f+n9FdREUdlIYjizDinM+uOEGE26Xv3/za6DufO xyvOB3U5iYe8OGjNE7kSSLoslCt+oJexKvVQnNi13iyUd3VsLbM= -----END CERTIFICATE-----Generated at Mon Jul 21 10:35:33 2025 by rpki-client