$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: /8nDS7BSKkZzFAnxA9LtGEcz1BslYDeYp/6NMKKpOas= Subject key identifier: 5D:5A:2F:6C:87:1F:2E:CE:A7:E0:8A:74:32:63:2B:8D:B4:F9:76:E4 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 783154A60450C296E00DABAFDCB072752779FFD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 010D Signing time: Fri 05 Sep 2025 15:31:24 +0000 Manifest this update: Fri 05 Sep 2025 15:26:24 +0000 Manifest next update: Mon 08 Sep 2025 20:21:24 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: Nqi78Lo8PXhnbAy0DSjaT0G+XMEMvLQAun9LU4kkd+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:31:54:a6:04:50:c2:96:e0:0d:ab:af:dc:b0:72:75:27:79:ff:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Sep 5 15:26:24 2025 GMT Not After : Sep 8 20:21:24 2025 GMT Subject: CN=5D5A2F6C871F2ECEA7E08A7432632B8DB4F976E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:ba:d6:28:1e:82:21:f1:dd:f1:20:36:42: 77:85:ae:4b:9b:83:a8:93:3a:9a:5e:61:dc:06:4c: 1c:bb:14:cc:93:63:ca:ab:5a:dd:8b:3a:b6:1b:62: f7:10:fa:11:ed:89:4d:91:f6:a5:fb:77:11:8c:f8: aa:40:d3:31:e8:92:3d:9c:e9:96:99:ad:69:e6:73: eb:e0:ea:8d:f9:65:0b:b2:64:d3:1c:49:81:a4:36: a1:8d:8f:b8:b0:11:48:96:e8:5e:73:80:b1:52:97: ea:ca:db:5f:93:3e:6f:bb:7c:20:c2:4a:24:85:4c: 0a:9b:ca:94:d6:9f:b8:e4:c8:60:41:2b:c0:7f:ca: 7c:8e:ff:57:81:6b:72:c5:57:db:0f:e6:0a:e6:e1: bf:60:38:53:0e:56:79:2f:cc:f3:5f:fe:3f:b8:f7: 92:54:72:2a:6d:5c:c5:ba:7c:f2:4c:6e:d0:28:9d: 3b:53:74:44:f9:72:b0:bb:8e:83:e5:a7:50:a5:72: e7:40:97:3b:25:e5:32:5f:a4:86:2b:85:a1:93:78: a2:c4:87:77:29:c9:45:cc:66:42:9e:ad:9c:f7:67: 3a:4f:90:ba:47:9c:93:c0:fa:11:7b:87:af:4e:d3: 1a:5c:bd:d8:b0:cd:0c:4e:8e:84:90:bb:a3:c6:56: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5A:2F:6C:87:1F:2E:CE:A7:E0:8A:74:32:63:2B:8D:B4:F9:76:E4 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:32:16:8c:1c:fa:66:f7:d6:a8:71:cd:32:18:eb:25:54:1a: 3e:6c:57:eb:0a:8f:6a:46:c9:43:1f:bf:a1:c7:93:18:af:f6: 09:62:d9:1a:23:27:22:d3:f6:33:8e:87:fb:55:38:d7:5c:52: 0c:8b:cf:51:1b:3f:90:fc:f1:d1:92:78:56:48:e1:9e:2e:25: 29:b7:11:59:ca:cf:38:0a:9a:8a:42:bb:30:aa:05:a4:9e:99: 3a:61:e9:18:21:d6:48:6a:2b:15:9b:a6:8c:6a:78:8c:cc:47: 76:45:72:33:8a:f9:1a:ad:38:d3:49:3f:64:bf:3e:a3:87:06: 90:c6:86:8b:cc:af:93:c5:24:ee:9a:63:62:5c:4d:bf:91:8f: a3:08:24:b3:c1:2b:f1:00:c3:c0:55:6c:b8:97:2b:5d:a0:6b: 3e:62:b6:45:11:d3:a5:f9:ea:cb:ab:8c:ac:bc:e1:1c:80:09: 93:52:89:ea:15:40:aa:29:61:b5:78:c2:7b:82:d6:6e:ae:cc: 53:83:05:2b:b8:e4:9b:ca:a3:9b:16:ac:f3:07:85:e6:09:4a: e0:7c:43:aa:e8:96:42:93:89:98:ef:ea:bf:f1:6b:fa:fa:1c: 76:fa:05:6f:f7:ca:ed:71:0f:84:b4:3e:67:8f:35:17:a0:23: 4b:0a:b2:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeDFUpgRQwpbgDauv3LBydSd5/9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTA5MDUxNTI2MjRaFw0yNTA5MDgyMDIxMjRaMDMxMTAvBgNV BAMTKDVENUEyRjZDODcxRjJFQ0VBN0UwOEE3NDMyNjMyQjhEQjRGOTc2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGErrWKB6CIfHd8SA2QneFrkub g6iTOppeYdwGTBy7FMyTY8qrWt2LOrYbYvcQ+hHtiU2R9qX7dxGM+KpA0zHokj2c 6ZaZrWnmc+vg6o35ZQuyZNMcSYGkNqGNj7iwEUiW6F5zgLFSl+rK21+TPm+7fCDC SiSFTAqbypTWn7jkyGBBK8B/ynyO/1eBa3LFV9sP5grm4b9gOFMOVnkvzPNf/j+4 95JUciptXMW6fPJMbtAonTtTdET5crC7joPlp1ClcudAlzsl5TJfpIYrhaGTeKLE h3cpyUXMZkKerZz3ZzpPkLpHnJPA+hF7h69O0xpcvdiwzQxOjoSQu6PGVgN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVovbIcfLs6n4Ip0MmMrjbT5duQwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYyFowc+mb31qhxzTIY6yVUGj5sV+sKj2pG yUMfv6HHkxiv9gli2RojJyLT9jOOh/tVONdcUgyLz1EbP5D88dGSeFZI4Z4uJSm3 EVnKzzgKmopCuzCqBaSemTph6Rgh1khqKxWbpoxqeIzMR3ZFcjOK+RqtONNJP2S/ PqOHBpDGhovMr5PFJO6aY2JcTb+Rj6MIJLPBK/EAw8BVbLiXK12gaz5itkUR06X5 6surjKy84RyACZNSieoVQKopYbV4wnuC1m6uzFODBSu45JvKo5sWrPMHheYJSuB8 Q6rolkKTiZjv6r/xa/r6HHb6BW/3yu1xD4S0PmePNRegI0sKssg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:40 2025 by rpki-client