$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: 67LgE4E0HOoaWFlUDfit/0qe3V8R8mJGwpW5p66wNYs= Subject key identifier: B8:76:F0:67:83:D3:16:D6:E0:FD:2F:BF:43:7D:ED:7A:B2:15:48:D2 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 76424EF9D01EA9C01C8B3269F389B4B00BEFEA71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: B4 Signing time: Sat 06 Sep 2025 18:21:42 +0000 Manifest this update: Sat 06 Sep 2025 18:16:42 +0000 Manifest next update: Tue 09 Sep 2025 20:48:42 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: xcVqDkzgP4bI0jgdX0mE7Zh/KZJ8OQ4zzYo7fJIIgak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:42:4e:f9:d0:1e:a9:c0:1c:8b:32:69:f3:89:b4:b0:0b:ef:ea:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Sep 6 18:16:42 2025 GMT Not After : Sep 9 20:48:42 2025 GMT Subject: CN=B876F06783D316D6E0FD2FBF437DED7AB21548D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:4e:d6:12:d9:01:f9:5c:4a:c1:83:fe:d4: 64:a0:e3:11:ce:34:be:ca:18:e5:eb:dc:9e:67:6a: b8:96:c4:1e:94:84:fa:58:9c:4e:a4:ad:c0:a4:15: cf:f8:b3:da:88:ea:b7:99:2d:15:9f:8e:13:f8:55: 3e:29:ba:3a:16:15:02:55:f3:c5:82:78:07:d8:8f: 17:1c:37:9c:12:84:9f:1a:ba:e1:3c:9d:6a:95:ca: 29:e5:c7:78:d0:e0:e6:91:96:c6:ce:5c:4b:61:bc: d4:e1:e4:45:37:93:f3:23:a2:b8:fe:a3:d5:82:50: d6:c9:61:6d:43:cb:27:12:58:68:f7:4f:a4:f6:ed: 9e:f8:97:7e:b2:85:ea:a1:4e:03:11:c6:f7:f7:5c: 9b:cb:99:4e:80:cf:2a:19:c3:1e:d3:bf:da:e9:77: 70:7d:c7:65:24:36:24:94:2f:9f:99:5e:e4:46:63: 80:4a:82:8b:da:bf:78:ed:e8:28:d4:07:0b:44:fa: a3:c1:0b:6c:e1:81:aa:f6:49:56:bb:68:e1:de:aa: c8:4d:e6:33:bf:b5:18:f2:88:cc:cc:45:f9:45:47: d8:db:87:2a:4d:d9:e6:7a:95:40:ab:35:55:cc:f5: 64:13:64:57:3c:a6:23:6c:06:5d:29:1b:b1:7e:04: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:76:F0:67:83:D3:16:D6:E0:FD:2F:BF:43:7D:ED:7A:B2:15:48:D2 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:47:ff:cd:fc:4a:7e:45:57:fa:24:a5:07:c2:48:c2:a6:a8: 55:99:eb:12:a0:07:eb:aa:3a:3a:f6:dd:20:0e:57:ad:ac:d0: 32:69:f6:73:3d:6e:7a:80:ed:e9:f6:7a:c9:90:3d:87:97:e6: f3:14:33:ce:56:79:e4:d4:39:be:c0:8f:a1:c3:00:8d:64:9b: 39:d1:84:ab:96:52:64:7e:ab:20:aa:80:35:9f:e6:63:e5:cb: 4a:1e:14:78:49:62:06:aa:71:47:e3:72:a7:ef:3a:ea:c2:7c: 5e:c5:bb:67:d1:7a:08:5c:bb:ac:ce:ae:3b:66:b2:3b:3c:e3: da:29:0f:40:c4:dc:ec:f4:14:f4:4c:c2:3c:50:cf:be:80:72: 05:e4:84:0d:b3:0c:5a:d4:8b:0b:7b:08:10:12:7e:8a:29:6d: 70:8e:b2:9e:aa:34:e8:ac:a9:64:96:62:25:1f:00:2c:81:19: 14:17:f4:34:6a:c6:c3:75:8b:6e:26:38:59:cc:90:07:6f:00: 69:d7:47:7c:65:e8:3c:38:37:e8:a8:3b:e1:03:0d:bd:d6:2f: 18:26:3f:15:66:90:57:58:e6:7c:f1:5c:e3:f2:09:3c:54:f7: 0f:7b:db:7c:5f:c5:69:90:e9:6c:df:db:0a:2a:ac:82:97:fd: 60:45:fd:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkJO+dAeqcAcizJp84m0sAvv6nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA5MDYxODE2NDJaFw0yNTA5MDkyMDQ4NDJaMDMxMTAvBgNV BAMTKEI4NzZGMDY3ODNEMzE2RDZFMEZEMkZCRjQzN0RFRDdBQjIxNTQ4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uk7WEtkB+VxKwYP+1GSg4xHO NL7KGOXr3J5nariWxB6UhPpYnE6krcCkFc/4s9qI6reZLRWfjhP4VT4pujoWFQJV 88WCeAfYjxccN5wShJ8auuE8nWqVyinlx3jQ4OaRlsbOXEthvNTh5EU3k/Mjorj+ o9WCUNbJYW1DyycSWGj3T6T27Z74l36yheqhTgMRxvf3XJvLmU6AzyoZwx7Tv9rp d3B9x2UkNiSUL5+ZXuRGY4BKgovav3jt6CjUBwtE+qPBC2zhgar2SVa7aOHeqshN 5jO/tRjyiMzMRflFR9jbhypN2eZ6lUCrNVXM9WQTZFc8piNsBl0pG7F+BEkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuHbwZ4PTFtbg/S+/Q33terIVSNIwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhH/838Sn5FV/okpQfCSMKmqFWZ6xKgB+uq Ojr23SAOV62s0DJp9nM9bnqA7en2esmQPYeX5vMUM85WeeTUOb7Aj6HDAI1kmznR hKuWUmR+qyCqgDWf5mPly0oeFHhJYgaqcUfjcqfvOurCfF7Fu2fReghcu6zOrjtm sjs849opD0DE3Oz0FPRMwjxQz76AcgXkhA2zDFrUiwt7CBASfoopbXCOsp6qNOis qWSWYiUfACyBGRQX9DRqxsN1i24mOFnMkAdvAGnXR3xl6Dw4N+ioO+EDDb3WLxgm PxVmkFdY5nzxXOPyCTxU9w9723xfxWmQ6Wzf2woqrIKX/WBF/Yo= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:49 2025 by rpki-client