$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: LxzOEDv2NVOLHMaATQkKLPCvAK+VSMw7Wc3JO8tPODI= Subject key identifier: 43:8D:0F:83:BF:11:DF:65:F6:3C:9F:A0:36:6F:11:F0:8E:45:D2:33 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 6CD3D27186D0C746F5CDC8841321F47ABEEC49FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 8A Signing time: Tue 03 Jun 2025 20:12:43 +0000 Manifest this update: Tue 03 Jun 2025 20:07:43 +0000 Manifest next update: Fri 06 Jun 2025 20:41:43 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: 8GO69swKssMGYJLRi0ht70fis4xiOrUIQYeQkp6JwMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d3:d2:71:86:d0:c7:46:f5:cd:c8:84:13:21:f4:7a:be:ec:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Jun 3 20:07:43 2025 GMT Not After : Jun 6 20:41:43 2025 GMT Subject: CN=438D0F83BF11DF65F63C9FA0366F11F08E45D233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:f4:7c:01:c1:a2:65:ef:be:68:89:a8:46: eb:32:c9:15:ad:9c:7f:88:36:37:80:cb:0b:bb:27: bc:aa:f6:2e:73:34:97:93:97:e0:f0:d2:d3:7a:cb: 83:18:c0:50:18:38:c6:64:4f:42:00:93:35:a1:dc: be:f1:b6:3d:8c:26:70:72:62:54:75:a6:7f:23:14: f4:4e:2b:b6:6a:77:0d:07:25:3b:cb:46:0f:75:63: d0:fd:dc:7e:15:ee:c6:16:62:6d:ff:7e:d5:b2:98: 15:45:7c:42:77:d8:5c:3c:52:a4:c1:10:94:8c:f1: da:b9:52:e9:e6:99:5b:f7:02:d5:a9:ce:70:93:2a: d8:43:0a:f3:4e:1d:a2:1a:62:cc:18:c3:b4:eb:e9: 6c:cd:1f:14:74:db:54:13:57:e3:95:2f:93:24:cd: cd:04:6e:4c:a1:8c:f1:6d:39:80:dc:95:d9:38:95: d9:3b:f6:02:0e:03:cd:8b:c9:b5:3a:76:29:5b:a8: 19:4e:e6:cf:6f:ab:47:be:42:d3:d6:8d:47:c1:a5: d5:46:8a:3f:87:70:f5:da:88:dc:7c:e8:85:b2:23: 91:3f:71:c5:f2:8f:85:e4:30:fc:f1:00:13:8f:75: 5c:0a:e1:f3:c4:2b:1c:f8:7c:ed:fd:91:15:cd:a4: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:0F:83:BF:11:DF:65:F6:3C:9F:A0:36:6F:11:F0:8E:45:D2:33 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5f:fb:ce:07:e3:a2:9e:c9:d8:21:a0:54:3f:61:ec:1a:27: 86:ae:4d:e2:b5:97:eb:a1:ee:49:44:27:e0:b6:61:68:e4:01: b0:cf:68:94:be:7c:27:db:94:e4:da:ab:d4:53:83:e4:43:b3: fc:00:77:10:fd:bc:bb:f9:b3:e3:dc:23:2a:6e:51:43:6f:3c: ca:e2:65:33:18:10:10:b5:c0:38:22:6b:08:83:f3:53:0c:57: a6:0f:6f:d8:a2:04:5a:dd:1c:ee:46:01:d0:0e:f4:c2:e9:47: 1d:de:08:18:c0:8d:cd:99:74:10:69:69:06:9f:69:9a:f9:6d: d1:32:70:e0:a5:d4:4b:12:ee:42:f5:79:c1:fc:dd:14:11:de: 64:de:b6:46:89:33:54:40:16:87:5d:53:e7:8b:e0:74:57:66: cf:e2:49:3f:fa:7b:c2:55:61:af:4a:48:5a:40:37:03:33:7f: 09:e4:0b:9c:3d:c8:9c:d7:79:dd:11:df:2d:ab:0c:20:7c:47: b5:19:1f:40:8e:73:6a:a9:0b:3c:26:1e:c3:29:0e:48:7f:97: d3:ea:74:17:52:91:b3:99:d3:db:d2:77:6e:fb:e9:e3:90:e3: a2:4c:df:70:b2:4f:01:42:5a:cf:91:01:dd:51:29:8e:0d:12: 02:80:ab:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNPScYbQx0b1zciEEyH0er7sSf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA2MDMyMDA3NDNaFw0yNTA2MDYyMDQxNDNaMDMxMTAvBgNV BAMTKDQzOEQwRjgzQkYxMURGNjVGNjNDOUZBMDM2NkYxMUYwOEU0NUQyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgvR8AcGiZe++aImoRusyyRWt nH+INjeAywu7J7yq9i5zNJeTl+Dw0tN6y4MYwFAYOMZkT0IAkzWh3L7xtj2MJnBy YlR1pn8jFPROK7Zqdw0HJTvLRg91Y9D93H4V7sYWYm3/ftWymBVFfEJ32Fw8UqTB EJSM8dq5UunmmVv3AtWpznCTKthDCvNOHaIaYswYw7Tr6WzNHxR021QTV+OVL5Mk zc0EbkyhjPFtOYDcldk4ldk79gIOA82LybU6dilbqBlO5s9vq0e+QtPWjUfBpdVG ij+HcPXaiNx86IWyI5E/ccXyj4XkMPzxABOPdVwK4fPEKxz4fO39kRXNpOdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ40Pg78R32X2PJ+gNm8R8I5F0jMwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZf+84H46KeydghoFQ/YewaJ4auTeK1l+uh 7klEJ+C2YWjkAbDPaJS+fCfblOTaq9RTg+RDs/wAdxD9vLv5s+PcIypuUUNvPMri ZTMYEBC1wDgiawiD81MMV6YPb9iiBFrdHO5GAdAO9MLpRx3eCBjAjc2ZdBBpaQaf aZr5bdEycOCl1EsS7kL1ecH83RQR3mTetkaJM1RAFoddU+eL4HRXZs/iST/6e8JV Ya9KSFpANwMzfwnkC5w9yJzXed0R3y2rDCB8R7UZH0COc2qpCzwmHsMpDkh/l9Pq dBdSkbOZ09vSd2776eOQ46JM33CyTwFCWs+RAd1RKY4NEgKAq5w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:54 2025 by rpki-client