$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: OrYkwXH/GAr2jRUutrycoTTrB7YA9uoYQ0jK91M2zAI= Subject key identifier: F5:69:5B:66:4F:3B:BC:A8:9E:2A:03:1D:5A:EE:FF:64:A6:63:A4:58 Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 15CB19BE93AC5035CF3EC92DB63289C296B0B4D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 01F0 Signing time: Sat 06 Sep 2025 17:10:00 +0000 Manifest this update: Sat 06 Sep 2025 17:05:00 +0000 Manifest next update: Tue 09 Sep 2025 19:19:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: 9EP9sLr7y2KCE4EVCvj5U1Dc000GYFS+qtubbKL4dDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:19:be:93:ac:50:35:cf:3e:c9:2d:b6:32:89:c2:96:b0:b4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Sep 6 17:05:00 2025 GMT Not After : Sep 9 19:19:00 2025 GMT Subject: CN=F5695B664F3BBCA89E2A031D5AEEFF64A663A458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:84:cc:b0:45:64:15:33:26:f5:91:19:6b: 71:6d:77:d7:ad:28:d5:e8:8f:67:ad:65:fa:cf:38: 72:52:19:54:99:54:f9:1f:63:87:94:ba:f9:56:e4: c0:f9:45:29:3b:e7:17:51:dd:bc:88:a1:49:5e:06: 21:4b:42:02:d9:ff:55:98:db:c5:e4:4a:72:60:fd: 64:b9:4f:ea:ae:98:13:96:08:e4:4b:ea:85:1f:14: 88:62:78:bd:b9:98:30:fb:10:aa:76:f3:ed:26:8e: e7:ac:d2:c1:81:b8:7b:b8:90:72:aa:93:1e:51:ad: 75:36:eb:f5:f7:ce:93:9e:b1:1f:25:d1:e7:35:ce: 7f:42:2e:f2:47:29:15:d1:4e:15:bc:62:3a:53:89: 87:7d:ec:d2:8b:8f:2a:35:cf:64:2e:33:6c:a2:24: e2:b8:e3:e0:bb:a9:f8:5c:5a:00:98:2d:f7:d9:5e: dd:a9:3d:80:01:4d:df:9d:6f:7e:f1:b4:fc:10:4d: ba:5b:9a:7c:39:14:bb:b8:a3:81:a5:9b:0f:3b:7c: e5:42:50:30:d9:c6:75:7a:e2:b7:11:3f:09:1b:3c: 5c:0d:9e:cd:d9:03:77:fc:04:3f:e5:bb:a1:58:eb: 71:07:15:a4:ef:60:83:af:69:ac:5d:07:d9:2a:a6: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:69:5B:66:4F:3B:BC:A8:9E:2A:03:1D:5A:EE:FF:64:A6:63:A4:58 X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:46:28:1a:e9:c9:2f:45:12:33:3b:2d:2c:e8:1c:cb:43:05: e5:02:79:ef:ca:44:fc:69:97:7c:f9:08:c7:8b:8f:bb:d5:2a: 85:4a:b9:52:19:88:61:f4:74:7a:b9:af:5f:c8:65:2a:d7:a9: 7a:34:79:3e:e5:6a:e4:be:d4:48:a1:22:1b:43:f4:c2:89:41: 72:fa:f9:2d:b6:81:b3:df:d0:01:36:06:00:de:9d:4b:06:94: 8f:cd:5c:76:e4:75:da:da:9a:d9:0b:87:73:00:c0:62:0d:f1: a3:f5:40:94:4a:82:cd:c4:dd:c5:49:a8:d4:b6:ce:2a:92:89: 33:6a:93:de:2a:38:28:e9:a4:62:45:13:84:1e:3f:59:40:30: 13:7e:b1:fd:69:ff:ab:77:05:e2:7d:bd:dd:cf:d8:b7:0a:1b: b9:96:f6:96:bd:a4:3f:4e:44:6a:74:1e:be:8b:ff:34:ac:e2: aa:40:74:8f:a4:40:40:28:f5:25:ce:67:cc:a7:35:6a:f6:b0: 86:a8:ba:57:be:ae:39:86:75:21:4f:07:51:ae:68:c2:d7:8f: 0e:f2:82:a3:e0:5a:9c:50:0d:5c:39:bf:94:65:d4:42:a1:52: 3f:ae:b8:43:ba:03:ad:2f:8b:17:00:57:13:af:44:7a:78:31: 61:c3:78:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcsZvpOsUDXPPskttjKJwpawtNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTA5MDYxNzA1MDBaFw0yNTA5MDkxOTE5MDBaMDMxMTAvBgNV BAMTKEY1Njk1QjY2NEYzQkJDQTg5RTJBMDMxRDVBRUVGRjY0QTY2M0E0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPITMsEVkFTMm9ZEZa3Ftd9et KNXoj2etZfrPOHJSGVSZVPkfY4eUuvlW5MD5RSk75xdR3byIoUleBiFLQgLZ/1WY 28XkSnJg/WS5T+qumBOWCORL6oUfFIhieL25mDD7EKp28+0mjues0sGBuHu4kHKq kx5RrXU26/X3zpOesR8l0ec1zn9CLvJHKRXRThW8YjpTiYd97NKLjyo1z2QuM2yi JOK44+C7qfhcWgCYLffZXt2pPYABTd+db37xtPwQTbpbmnw5FLu4o4Glmw87fOVC UDDZxnV64rcRPwkbPFwNns3ZA3f8BD/lu6FY63EHFaTvYIOvaaxdB9kqpihJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9WlbZk87vKieKgMdWu7/ZKZjpFgwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5GKBrpyS9FEjM7LSzoHMtDBeUCee/KRPxp l3z5CMeLj7vVKoVKuVIZiGH0dHq5r1/IZSrXqXo0eT7lauS+1EihIhtD9MKJQXL6 +S22gbPf0AE2BgDenUsGlI/NXHbkddramtkLh3MAwGIN8aP1QJRKgs3E3cVJqNS2 ziqSiTNqk94qOCjppGJFE4QeP1lAMBN+sf1p/6t3BeJ9vd3P2LcKG7mW9pa9pD9O RGp0Hr6L/zSs4qpAdI+kQEAo9SXOZ8ynNWr2sIaoule+rjmGdSFPB1GuaMLXjw7y gqPgWpxQDVw5v5Rl1EKhUj+uuEO6A60vixcAVxOvRHp4MWHDePU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:14 2025 by rpki-client