$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: Y/vzr0Hl6X1f+qyNpCAEmR3VV6VGQQefX6IUyIzHGFQ= Subject key identifier: 69:B3:20:8F:F1:E1:9E:84:34:96:5A:35:6F:51:66:4C:15:2B:F1:FC Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 56F6C68A4B25EEE506847E6D01140AF7EA346F99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01AE Signing time: Mon 30 Jun 2025 02:01:43 +0000 Manifest this update: Mon 30 Jun 2025 01:56:43 +0000 Manifest next update: Thu 03 Jul 2025 08:36:43 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: kwZzZyHDEnutd1swWGgS+1owISnNiyQjD74C7vUv+6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f6:c6:8a:4b:25:ee:e5:06:84:7e:6d:01:14:0a:f7:ea:34:6f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Jun 30 01:56:43 2025 GMT Not After : Jul 3 08:36:43 2025 GMT Subject: CN=69B3208FF1E19E8434965A356F51664C152BF1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:55:27:b1:69:a7:66:bf:70:e9:30:52:2f: dc:f2:bb:17:36:88:e7:a3:39:00:f6:db:5b:2c:8b: c1:fa:7b:22:ba:84:5a:ef:3c:98:72:e2:98:53:80: cb:12:f4:dd:3d:57:cc:4c:b9:4e:0b:3b:fe:e8:e4: cd:80:a6:e4:6a:da:90:f6:41:33:40:03:2e:4e:41: 0b:f1:29:0c:85:0a:7e:9e:a7:40:b7:1b:27:59:43: f2:56:a6:fb:eb:3c:b4:7d:4f:9e:65:17:09:99:c4: 3a:c5:46:f3:0e:c7:31:56:b0:be:13:83:e5:28:de: 69:21:8c:51:4d:ed:2f:18:e5:a5:d2:44:68:14:d0: 92:14:bb:6a:78:1e:4d:42:19:af:41:ce:cb:8a:96: 85:6a:66:73:b2:a0:ad:6e:4d:30:50:c6:9d:eb:d5: 59:0d:d1:c0:0e:50:41:d9:63:fa:8e:cc:82:d6:e8: 3b:2a:e1:31:4f:99:8b:1c:d7:65:8e:c9:6c:9c:54: 44:8f:ae:44:b4:de:df:69:64:e0:33:57:3b:a1:16: 9b:4b:80:79:c9:59:3f:67:23:2a:5a:a5:bc:ce:60: 3f:3c:0c:c1:d5:e2:8c:ba:e5:2e:66:9a:2b:06:97: 1b:b1:59:86:a7:66:cc:ad:aa:02:f4:9a:b4:65:5a: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B3:20:8F:F1:E1:9E:84:34:96:5A:35:6F:51:66:4C:15:2B:F1:FC X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3c:56:1f:aa:36:46:db:71:4b:24:12:d0:4f:37:33:2b:4a: 83:3a:2c:7f:e2:37:cb:6b:7c:dd:7f:90:10:d5:46:59:b7:6c: ca:0a:bf:40:36:3f:66:de:e9:30:84:37:e7:b8:21:24:dd:fa: 20:01:18:ae:e8:5a:85:0b:63:c5:a4:cf:a4:e8:33:35:1a:cf: dc:4b:fa:e5:1c:ff:25:8a:ae:65:af:da:a9:23:13:59:0e:09: ae:58:a3:38:6a:f7:8f:04:23:b5:7e:e6:f8:c8:ab:6e:a8:b7: 11:45:7e:5d:ff:4a:13:04:47:7f:cd:ff:36:90:8f:15:d7:e3: af:35:59:b2:5f:5b:2c:6c:37:f7:4c:c3:1f:65:6a:05:19:23: 41:88:83:3d:86:dd:b5:f6:12:af:b9:93:5e:9a:9b:b1:f9:c6: cc:39:80:59:08:5b:6d:39:a8:b9:dd:10:e3:f0:1d:d4:01:26: 0c:fd:cc:21:d6:b5:80:2e:77:25:3a:81:c9:33:18:19:46:ad: 09:5d:eb:bd:28:cb:7b:ee:f2:74:ae:68:cb:36:ba:cc:28:ac: e0:be:e5:a0:05:db:b6:38:16:7e:22:b8:49:4a:d5:0f:e9:5e: 90:59:b3:a2:ac:b4:74:2e:9b:c8:1a:5b:6f:e4:e0:b2:05:a0: cb:b5:09:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvbGiksl7uUGhH5tARQK9+o0b5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA2MzAwMTU2NDNaFw0yNTA3MDMwODM2NDNaMDMxMTAvBgNV BAMTKDY5QjMyMDhGRjFFMTlFODQzNDk2NUEzNTZGNTE2NjRDMTUyQkYxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvlUnsWmnZr9w6TBSL9zyuxc2 iOejOQD221ssi8H6eyK6hFrvPJhy4phTgMsS9N09V8xMuU4LO/7o5M2ApuRq2pD2 QTNAAy5OQQvxKQyFCn6ep0C3GydZQ/JWpvvrPLR9T55lFwmZxDrFRvMOxzFWsL4T g+Uo3mkhjFFN7S8Y5aXSRGgU0JIUu2p4Hk1CGa9BzsuKloVqZnOyoK1uTTBQxp3r 1VkN0cAOUEHZY/qOzILW6Dsq4TFPmYsc12WOyWycVESPrkS03t9pZOAzVzuhFptL gHnJWT9nIypapbzOYD88DMHV4oy65S5mmisGlxuxWYanZsytqgL0mrRlWk8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUabMgj/HhnoQ0llo1b1FmTBUr8fwwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc8Vh+qNkbbcUskEtBPNzMrSoM6LH/iN8tr fN1/kBDVRlm3bMoKv0A2P2be6TCEN+e4ISTd+iABGK7oWoULY8Wkz6ToMzUaz9xL +uUc/yWKrmWv2qkjE1kOCa5Yozhq948EI7V+5vjIq26otxFFfl3/ShMER3/N/zaQ jxXX4681WbJfWyxsN/dMwx9lagUZI0GIgz2G3bX2Eq+5k16am7H5xsw5gFkIW205 qLndEOPwHdQBJgz9zCHWtYAudyU6gckzGBlGrQld670oy3vu8nSuaMs2usworOC+ 5aAF27Y4Fn4iuElK1Q/pXpBZs6KstHQum8gaW2/k4LIFoMu1CT8= -----END CERTIFICATE-----Generated at Tue Jul 1 20:55:59 2025 by rpki-client