$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: VEFEuPDEf1Aul7gVUyYe4g/LYHIlaOJkmDFCsvFxBWg= Subject key identifier: F9:B4:75:50:CE:98:10:3C:05:D9:A6:FA:DA:07:DB:C2:37:2A:CD:78 Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 6FBEB581782ED04C670D4CB023631115109FA6A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01C5 Signing time: Thu 21 Aug 2025 14:51:45 +0000 Manifest this update: Thu 21 Aug 2025 14:46:45 +0000 Manifest next update: Sun 24 Aug 2025 15:55:45 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: l8N61wVB7lWIc1R5YLpBLo4tN+xz2F3p/fblwb1aLkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:be:b5:81:78:2e:d0:4c:67:0d:4c:b0:23:63:11:15:10:9f:a6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Aug 21 14:46:45 2025 GMT Not After : Aug 24 15:55:45 2025 GMT Subject: CN=F9B47550CE98103C05D9A6FADA07DBC2372ACD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:23:88:d6:34:8a:0c:58:48:79:c7:43:8d: 39:83:04:d1:91:57:ba:98:c8:37:14:8e:35:ef:c0: 78:1a:b6:94:2f:5f:0a:5c:35:56:b6:80:29:13:06: 46:b0:c1:9e:fb:ce:59:02:50:2c:61:74:9e:f0:75: b9:f5:00:dd:99:d0:b4:d3:0b:25:99:6b:de:89:72: 63:3e:00:31:7f:14:aa:36:8b:d7:8a:7e:8f:40:3b: 1d:8f:d0:f1:cd:9e:eb:55:59:89:ea:ff:e3:18:52: 24:28:c9:ee:ae:62:5a:e0:55:de:d1:09:b2:33:c1: ad:c5:20:e9:6d:24:ee:57:1b:95:f4:c2:5d:06:b3: 67:eb:40:ed:4c:cc:2b:aa:e7:5d:3c:cc:45:6e:09: 02:95:fa:4f:4a:e4:65:23:db:4d:1f:79:b1:b8:b4: 99:dc:03:67:d6:df:05:8a:3f:f8:2b:ee:bb:6e:36: f7:da:c8:04:84:db:47:ec:a3:c2:0e:66:5f:0d:c6: 98:15:d5:3a:e4:f3:53:19:4c:5c:53:a8:e5:49:9d: 3f:f5:25:c4:78:23:35:a7:32:5c:16:1f:b6:91:cc: 40:9c:db:b3:bd:74:e4:31:c9:17:df:92:ce:ff:8b: 2d:d0:5b:c3:79:22:18:5a:8d:31:fa:75:9b:8a:36: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B4:75:50:CE:98:10:3C:05:D9:A6:FA:DA:07:DB:C2:37:2A:CD:78 X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:45:c9:17:1b:96:d6:a3:60:b0:2d:9c:e7:d9:9e:0c:1d:f6: b1:d6:34:83:e2:6f:09:e9:8a:29:4b:67:fd:cc:f6:63:5b:ed: 0d:1d:3e:3a:f0:19:b2:67:53:50:53:4b:fc:f9:54:62:b6:54: ea:ce:1b:04:03:11:f5:b2:46:42:30:12:79:db:5f:a7:d3:a7: 4a:5d:56:6f:52:ff:1e:8e:11:2c:92:84:f1:ad:7b:3b:6f:2e: 26:8d:5d:09:d3:82:22:b6:b0:2b:5d:50:f2:c4:57:f7:f0:00: 34:8d:05:02:fe:99:76:62:e4:f4:38:0c:d1:38:8c:7f:7f:9c: 45:42:29:31:63:bc:3e:5d:ad:7b:47:40:20:db:b7:4f:1c:b5: 5d:f8:10:ea:4d:4b:43:4f:29:0e:a0:45:c5:6c:72:48:b3:ce: c0:b5:66:03:d7:6b:56:93:27:b3:fd:7b:ae:50:57:0f:ee:10: 39:54:e2:9b:11:d0:55:55:e0:9e:b2:d7:11:71:8b:92:41:23: cb:16:95:c9:19:7b:3f:42:33:41:d3:f8:7a:81:fb:15:a8:f6: 34:c7:d7:5b:e2:1b:71:f7:36:bf:ce:49:83:05:55:f7:94:52: e7:88:33:80:c5:fa:b7:4a:0a:8d:67:57:b7:c2:dd:5a:4e:6d: 27:dd:f3:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb761gXgu0ExnDUywI2MRFRCfpqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA4MjExNDQ2NDVaFw0yNTA4MjQxNTU1NDVaMDMxMTAvBgNV BAMTKEY5QjQ3NTUwQ0U5ODEwM0MwNUQ5QTZGQURBMDdEQkMyMzcyQUNENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDSOI1jSKDFhIecdDjTmDBNGR V7qYyDcUjjXvwHgatpQvXwpcNVa2gCkTBkawwZ77zlkCUCxhdJ7wdbn1AN2Z0LTT CyWZa96JcmM+ADF/FKo2i9eKfo9AOx2P0PHNnutVWYnq/+MYUiQoye6uYlrgVd7R CbIzwa3FIOltJO5XG5X0wl0Gs2frQO1MzCuq5108zEVuCQKV+k9K5GUj200febG4 tJncA2fW3wWKP/gr7rtuNvfayASE20fso8IOZl8NxpgV1Trk81MZTFxTqOVJnT/1 JcR4IzWnMlwWH7aRzECc27O9dOQxyRffks7/iy3QW8N5IhhajTH6dZuKNqnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+bR1UM6YEDwF2ab62gfbwjcqzXgwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdFyRcbltajYLAtnOfZngwd9rHWNIPibwnp iilLZ/3M9mNb7Q0dPjrwGbJnU1BTS/z5VGK2VOrOGwQDEfWyRkIwEnnbX6fTp0pd Vm9S/x6OESyShPGteztvLiaNXQnTgiK2sCtdUPLEV/fwADSNBQL+mXZi5PQ4DNE4 jH9/nEVCKTFjvD5drXtHQCDbt08ctV34EOpNS0NPKQ6gRcVsckizzsC1ZgPXa1aT J7P9e65QVw/uEDlU4psR0FVV4J6y1xFxi5JBI8sWlckZez9CM0HT+HqB+xWo9jTH 11viG3H3Nr/OSYMFVfeUUueIM4DF+rdKCo1nV7fC3VpObSfd81Y= -----END CERTIFICATE-----Generated at Sat Aug 23 12:31:53 2025 by rpki-client