$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: yAh32Fc9Feu4jDksT4FTQZ7WfIHzYrK8jNR9Xw9LhlI= Subject key identifier: B4:3C:F3:38:D9:16:5C:1E:87:78:88:64:3B:33:11:06:01:8D:D8:B5 Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 6BF6E17CA120EDF76A28364DCC96A888040C7487 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01C6 Signing time: Wed 04 Jun 2025 10:30:00 +0000 Manifest this update: Wed 04 Jun 2025 10:25:00 +0000 Manifest next update: Sat 07 Jun 2025 17:39:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: S1km0Tj1t9tzqFRNENLRrRb4BjUjKjIUcVqy8m99/g8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f6:e1:7c:a1:20:ed:f7:6a:28:36:4d:cc:96:a8:88:04:0c:74:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Jun 4 10:25:00 2025 GMT Not After : Jun 7 17:39:00 2025 GMT Subject: CN=B43CF338D9165C1E877888643B331106018DD8B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:d2:07:5d:76:df:ca:18:d6:42:b3:9d:40: 57:10:30:a8:60:78:06:1e:6e:6a:d2:e7:ee:78:b2: 5d:ef:07:5e:eb:cf:45:3a:65:a2:83:cb:77:72:52: b4:b5:9e:10:14:2e:17:14:c0:7e:86:66:7c:8b:0f: 2e:2c:b0:c3:d6:21:22:7e:b3:e5:ea:77:a6:42:67: a4:ea:24:24:aa:97:e3:c8:d6:32:b7:2e:2e:fa:44: 97:49:65:77:0d:a2:d1:4b:d7:3a:74:34:bc:45:13: f9:f3:c5:22:00:4a:5b:8d:70:73:86:1c:e5:43:f6: 04:61:5b:9e:df:8e:e7:5d:d0:b7:3e:32:1e:15:62: 2f:9f:5e:fc:66:b4:e3:07:ff:02:a9:a6:f4:54:a7: d9:7b:55:4c:6c:34:5c:62:0c:bc:b6:fe:96:0e:f9: 88:08:19:6e:5e:42:57:91:d6:14:be:d0:ef:ba:51: 45:c9:5a:9d:77:17:c8:cb:62:33:8a:ed:1e:e4:ad: a2:4a:e4:b2:8a:5b:98:aa:b2:8f:98:6b:02:65:bb: 3e:39:23:f7:51:ec:47:af:18:28:fa:c2:96:92:44: 3e:d3:b1:9b:07:5c:6e:72:73:31:49:78:d0:2c:34: 89:4d:f5:39:e7:38:9a:af:5b:a8:c2:cb:8e:33:a6: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:F3:38:D9:16:5C:1E:87:78:88:64:3B:33:11:06:01:8D:D8:B5 X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2c:dc:4a:8e:72:ab:01:bd:55:d3:76:ad:5f:05:37:c0:4a: 2a:90:ff:a4:f0:92:ae:f7:53:36:bb:98:0e:97:ff:fe:c3:c0: cd:58:9b:4d:1c:66:f4:4c:03:14:61:cd:cb:6e:08:e0:5e:0c: 15:2c:ba:b6:83:38:fc:b2:fd:33:45:7a:91:9e:4e:e5:d7:a5: 0e:73:c4:d4:26:cf:f9:6d:e2:51:c4:ee:3e:21:1c:c4:f1:31: e4:cf:89:cf:ba:44:a9:8c:74:b7:31:11:88:aa:ab:2f:20:aa: 69:2a:c2:ae:79:82:dc:da:5b:20:a1:76:7c:de:a4:6c:94:df: 3f:76:9f:1b:53:94:b4:c7:ca:0f:62:e2:24:7b:c2:c1:d6:ae: dd:b0:63:85:4e:7f:3d:ee:0a:36:b5:be:6c:3a:4f:58:66:0e: 91:4a:f7:60:87:08:e7:f2:7f:5c:4f:94:cb:78:89:53:fa:5d: ee:d2:f3:62:b0:93:e0:02:92:87:b1:cc:d4:dd:45:28:43:04: 64:55:03:8f:1f:29:28:91:9c:7f:a4:4e:3a:06:46:66:c1:02: 94:f0:81:cf:c3:e3:69:7c:52:3a:ab:60:4d:d5:89:71:f0:92: 19:3f:d2:df:4c:dd:f5:0b:f5:88:24:d9:58:a0:d2:af:5d:29: a4:09:16:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/bhfKEg7fdqKDZNzJaoiAQMdIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA2MDQxMDI1MDBaFw0yNTA2MDcxNzM5MDBaMDMxMTAvBgNV BAMTKEI0M0NGMzM4RDkxNjVDMUU4Nzc4ODg2NDNCMzMxMTA2MDE4REQ4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhDNIHXXbfyhjWQrOdQFcQMKhg eAYebmrS5+54sl3vB17rz0U6ZaKDy3dyUrS1nhAULhcUwH6GZnyLDy4ssMPWISJ+ s+Xqd6ZCZ6TqJCSql+PI1jK3Li76RJdJZXcNotFL1zp0NLxFE/nzxSIASluNcHOG HOVD9gRhW57fjudd0Lc+Mh4VYi+fXvxmtOMH/wKppvRUp9l7VUxsNFxiDLy2/pYO +YgIGW5eQleR1hS+0O+6UUXJWp13F8jLYjOK7R7kraJK5LKKW5iqso+YawJluz45 I/dR7EevGCj6wpaSRD7TsZsHXG5yczFJeNAsNIlN9TnnOJqvW6jCy44zpqLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDzzONkWXB6HeIhkOzMRBgGN2LUwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQs3EqOcqsBvVXTdq1fBTfASiqQ/6Twkq73 Uza7mA6X//7DwM1Ym00cZvRMAxRhzctuCOBeDBUsuraDOPyy/TNFepGeTuXXpQ5z xNQmz/lt4lHE7j4hHMTxMeTPic+6RKmMdLcxEYiqqy8gqmkqwq55gtzaWyChdnze pGyU3z92nxtTlLTHyg9i4iR7wsHWrt2wY4VOfz3uCja1vmw6T1hmDpFK92CHCOfy f1xPlMt4iVP6Xe7S82Kwk+ACkoexzNTdRShDBGRVA48fKSiRnH+kTjoGRmbBApTw gc/D42l8UjqrYE3ViXHwkhk/0t9M3fUL9Ygk2Vig0q9dKaQJFtU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:45:19 2025 by rpki-client