$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: cKazl/ua8AowTqUIL9pjXi7w6t8LvEasxjt3jOJHLSg= Subject key identifier: 35:57:6B:03:19:51:89:53:14:6B:46:2E:C2:BF:19:F3:34:46:DF:3B Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 45FCD3AB6727BC84097FD1A30ACDF1333156D371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03BD Signing time: Sat 06 Sep 2025 03:41:06 +0000 Manifest this update: Sat 06 Sep 2025 03:36:06 +0000 Manifest next update: Tue 09 Sep 2025 11:49:06 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: E8humDi8+9rmNbbLMWFVRp9P+Y7FEq6AlYB09/+IIos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fc:d3:ab:67:27:bc:84:09:7f:d1:a3:0a:cd:f1:33:31:56:d3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Sep 6 03:36:06 2025 GMT Not After : Sep 9 11:49:06 2025 GMT Subject: CN=35576B0319518953146B462EC2BF19F33446DF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:84:77:cb:e3:ca:f7:6d:d8:71:49:35:77:63: 0d:b6:d0:31:25:eb:a6:20:80:82:ad:05:49:aa:7a: 6c:d7:68:9b:75:5e:bc:09:0d:33:50:75:b5:a2:ba: 32:fc:92:22:85:22:1a:16:56:15:15:cf:f1:7b:6b: d7:74:cf:8a:1e:04:f2:c7:fa:58:ac:d8:b8:83:5c: 86:ea:ca:f3:1f:07:3e:7f:55:80:a2:e8:09:40:b8: 3f:64:0b:0c:39:88:f8:46:c1:76:45:19:ea:94:3a: 2f:4e:65:1e:52:a9:5a:06:f1:7b:c6:64:61:25:79: 14:2c:31:54:25:62:7e:63:7a:d5:c6:b7:1c:ef:d4: 7e:2e:8b:92:41:ac:91:e8:a1:f1:83:a0:f1:9b:69: 9e:ff:07:f1:3c:97:d1:c2:8b:98:c0:59:38:26:e4: 3a:7e:25:94:fe:60:98:7e:5e:21:5c:b6:d4:11:26: bf:80:9d:0e:f6:9d:ec:0f:06:4d:66:02:4e:11:5f: 6f:df:f3:6d:42:9c:07:4e:40:45:7a:cf:fb:a3:7e: 18:9f:9d:4c:db:09:11:f6:6e:8a:5f:62:6b:bf:cd: d8:89:9f:35:63:d6:d0:fb:64:9e:11:b2:a4:d5:d1: 3f:b2:ba:79:15:43:ef:79:96:5d:a8:3f:8a:19:8c: 0b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:6B:03:19:51:89:53:14:6B:46:2E:C2:BF:19:F3:34:46:DF:3B X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:a2:f2:b0:c9:f3:c2:82:8e:fc:a9:65:a4:79:d5:a2:b5: 36:e8:4f:d9:69:ac:97:50:c1:bf:bc:54:5c:e6:cd:2f:9f:07: 00:5d:a3:10:4e:3e:00:83:a7:2a:08:09:4e:5a:a8:29:54:d9: b2:8a:29:18:b3:25:a4:04:82:6c:85:d6:21:d5:cc:5a:a3:24: 9e:2b:06:1d:09:e4:c1:fa:69:4d:ee:51:59:ed:c6:0b:b6:2f: 51:5d:7b:2b:0a:9b:ef:bd:02:17:49:a0:67:64:0a:f9:5d:da: 49:1f:b4:29:99:9a:2d:c1:cc:d6:f2:2d:b0:e7:b7:1c:36:13: 02:c5:2e:dd:83:2c:47:2b:65:37:b6:a1:7a:1e:b9:fd:8b:57: 84:31:5b:10:0f:5b:17:18:0f:46:2e:da:0e:4d:f3:d9:bc:e1: e2:00:90:1b:53:1b:c5:6e:db:4d:2a:a8:8c:8f:46:51:bf:51: 57:07:e7:31:eb:c7:9d:42:eb:60:66:d3:4d:55:c8:05:b8:e7: 7a:3a:cd:98:7b:40:8d:dd:3f:79:53:71:36:de:6e:ad:79:fe: 59:9e:e7:6c:1a:3c:d2:92:74:8a:6b:4f:0a:f5:be:a2:55:64: 0f:36:f5:dc:20:d1:22:de:f7:54:62:7b:19:24:9b:35:88:a0: 19:3e:44:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfzTq2cnvIQJf9GjCs3xMzFW03EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTA5MDYwMzM2MDZaFw0yNTA5MDkxMTQ5MDZaMDMxMTAvBgNV BAMTKDM1NTc2QjAzMTk1MTg5NTMxNDZCNDYyRUMyQkYxOUYzMzQ0NkRGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphHfL48r3bdhxSTV3Yw220DEl 66YggIKtBUmqemzXaJt1XrwJDTNQdbWiujL8kiKFIhoWVhUVz/F7a9d0z4oeBPLH +lis2LiDXIbqyvMfBz5/VYCi6AlAuD9kCww5iPhGwXZFGeqUOi9OZR5SqVoG8XvG ZGEleRQsMVQlYn5jetXGtxzv1H4ui5JBrJHoofGDoPGbaZ7/B/E8l9HCi5jAWTgm 5Dp+JZT+YJh+XiFcttQRJr+AnQ72newPBk1mAk4RX2/f821CnAdOQEV6z/ujfhif nUzbCRH2bopfYmu/zdiJnzVj1tD7ZJ4RsqTV0T+yunkVQ+95ll2oP4oZjAvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVdrAxlRiVMUa0Yuwr8Z8zRG3zswHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZXovKwyfPCgo78qWWkedWitTboT9lprJdQ wb+8VFzmzS+fBwBdoxBOPgCDpyoICU5aqClU2bKKKRizJaQEgmyF1iHVzFqjJJ4r Bh0J5MH6aU3uUVntxgu2L1FdeysKm++9AhdJoGdkCvld2kkftCmZmi3BzNbyLbDn txw2EwLFLt2DLEcrZTe2oXoeuf2LV4QxWxAPWxcYD0Yu2g5N89m84eIAkBtTG8Vu 200qqIyPRlG/UVcH5zHrx51C62Bm001VyAW453o6zZh7QI3dP3lTcTbebq15/lme 52waPNKSdIprTwr1vqJVZA829dwg0SLe91RiexkkmzWIoBk+RCc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:37 2025 by rpki-client