$ rpki-client -vvf repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft File: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft (raw, json) Hash identifier: vCDRtoDNhtBT0RN/ezlYYQe3qdrjtekg3sQ3p2zUbEo= Subject key identifier: 43:EE:5A:1A:6B:A1:18:F0:71:03:AE:0A:4D:81:7A:81:3A:7C:C0:88 Authority key identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F Certificate issuer: /CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Certificate serial: 353D687C8EFED28863AA41C3B6FB70077B232E68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft Manifest number: 017E Signing time: Sun 29 Jun 2025 20:12:20 +0000 Manifest this update: Sun 29 Jun 2025 20:07:20 +0000 Manifest next update: Wed 02 Jul 2025 22:53:20 +0000 Files and hashes: 1: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.crl (hash: UYeg2Sgq+4frU1u9Fwgfdb+djJ6O+CyAcu6DNhIkA9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.crl rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3d:68:7c:8e:fe:d2:88:63:aa:41:c3:b6:fb:70:07:7b:23:2e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Validity Not Before: Jun 29 20:07:20 2025 GMT Not After : Jul 2 22:53:20 2025 GMT Subject: CN=43EE5A1A6BA118F07103AE0A4D817A813A7CC088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:92:2a:ee:e8:ad:0d:f3:67:47:35:a4:6c: ee:a1:2e:13:c4:0b:bf:d9:a1:df:61:da:52:ee:95: 0c:1e:8e:25:b3:d3:d8:ba:06:8f:1c:e7:5b:ec:d8: 41:64:89:2e:75:3c:4b:2f:02:e2:03:c3:d3:cf:a9: af:ad:f7:90:73:ea:c9:50:e0:13:14:e7:a2:50:19: 3d:9c:ea:f5:c9:a8:6c:f4:08:51:1a:87:4b:38:03: 20:fb:f9:d9:4f:4a:67:91:41:5c:67:c9:59:36:3c: f5:6c:53:94:4d:a6:3c:52:be:9f:60:6f:d2:10:38: 54:d9:fd:bb:ad:24:1e:f5:98:c9:30:9c:ea:e6:44: ae:62:de:25:2d:da:06:dd:28:7e:96:0c:ef:4c:35: ff:fd:f8:86:da:c2:67:f5:fb:c5:b4:cb:1a:4e:01: 36:b9:5f:a0:c5:ce:77:70:3b:51:72:30:31:4c:22: c3:03:2a:28:52:ec:4d:66:32:46:b9:ac:91:80:f7: 20:43:83:9f:f1:f7:fd:d4:e6:e9:4f:b4:59:ec:22: fc:f8:96:17:90:6e:7d:5d:89:f5:15:f1:90:20:53: 17:2d:05:6f:cf:56:93:c7:dc:cf:5b:1d:36:30:f9: 4e:90:c6:89:17:ad:15:f4:23:cf:cc:cd:3b:1c:7c: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:5A:1A:6B:A1:18:F0:71:03:AE:0A:4D:81:7A:81:3A:7C:C0:88 X509v3 Authority Key Identifier: keyid:C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3b:b1:68:ca:db:fb:f1:f1:71:8f:f7:38:c3:73:ea:0d:b3: f9:c4:f8:79:16:8a:59:65:f1:9e:d9:9e:20:09:d9:7e:ab:82: d4:3b:73:91:ba:4c:df:7e:2c:88:58:e3:54:76:46:c0:41:af: 54:e4:66:69:60:b9:e8:3d:18:3f:d0:c1:c3:4d:27:5b:5e:87: e4:4f:75:c5:7a:6c:3e:06:28:f4:13:fd:0b:62:be:df:a9:c9: 04:1e:a6:de:06:89:51:df:21:22:ec:86:85:49:d5:2e:c5:f5: 41:8b:94:ee:b9:cd:5a:23:f4:bb:d3:1e:97:04:82:b0:2c:5b: a4:7a:7c:1c:e3:0e:a7:1e:8a:6c:5a:d8:1c:e6:71:22:9d:2b: a7:24:1c:74:6a:1f:46:d8:87:f3:d2:0c:9c:1e:d7:25:ba:23: 25:89:55:3a:a7:96:5e:d4:98:b0:3a:06:34:d2:2e:56:7d:f7: 82:67:92:b6:76:9a:1a:16:57:52:ec:69:be:31:61:31:25:7a: 33:14:80:2c:ee:93:95:48:ff:0e:43:af:7c:89:9c:6b:b3:e5: 1d:2e:eb:6e:34:4c:7b:a1:ee:0a:e0:1a:09:d2:9a:db:0a:9f: 99:98:f4:40:6a:9c:88:69:54:be:e6:ab:6f:d8:e9:a6:94:31: e8:45:6f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNT1ofI7+0ohjqkHDtvtwB3sjLmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVCOTJCNTlDNERGNjUxMEJBRTgzMDE3N0IzM0FBNjJC RkY0M0M4RjAeFw0yNTA2MjkyMDA3MjBaFw0yNTA3MDIyMjUzMjBaMDMxMTAvBgNV BAMTKDQzRUU1QTFBNkJBMTE4RjA3MTAzQUUwQTREODE3QTgxM0E3Q0MwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86JIq7uitDfNnRzWkbO6hLhPE C7/Zod9h2lLulQwejiWz09i6Bo8c51vs2EFkiS51PEsvAuIDw9PPqa+t95Bz6slQ 4BMU56JQGT2c6vXJqGz0CFEah0s4AyD7+dlPSmeRQVxnyVk2PPVsU5RNpjxSvp9g b9IQOFTZ/butJB71mMkwnOrmRK5i3iUt2gbdKH6WDO9MNf/9+Ibawmf1+8W0yxpO ATa5X6DFzndwO1FyMDFMIsMDKihS7E1mMka5rJGA9yBDg5/x9/3U5ulPtFnsIvz4 lheQbn1difUV8ZAgUxctBW/PVpPH3M9bHTYw+U6QxokXrRX0I8/MzTscfEpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+5aGmuhGPBxA64KTYF6gTp8wIgwHwYDVR0j BBgwFoAUxbkrWcTfZRC66DAXezOqYr/0PI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDc2NWYwNi1iNGM5LTQ3YzEtYWQ5YS0wNjEyYzdjMDJkMWMvMC9DNUI5MkI1OUM0 REY2NTEwQkFFODMwMTc3QjMzQUE2MkJGRjQzQzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVCOTJCNTlDNERGNjUxMEJBRTgzMDE3N0IzM0FBNjJCRkY0 M0M4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ3NjVmMDYtYjRjOS00N2MxLWFk OWEtMDYxMmM3YzAyZDFjLzAvQzVCOTJCNTlDNERGNjUxMEJBRTgzMDE3N0IzM0FB NjJCRkY0M0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI7sWjK2/vx8XGP9zjDc+oNs/nE+HkWilll 8Z7ZniAJ2X6rgtQ7c5G6TN9+LIhY41R2RsBBr1TkZmlgueg9GD/QwcNNJ1teh+RP dcV6bD4GKPQT/Qtivt+pyQQept4GiVHfISLshoVJ1S7F9UGLlO65zVoj9LvTHpcE grAsW6R6fBzjDqceimxa2BzmcSKdK6ckHHRqH0bYh/PSDJwe1yW6IyWJVTqnll7U mLA6BjTSLlZ994JnkrZ2mhoWV1Lsab4xYTElejMUgCzuk5VI/w5Dr3yJnGuz5R0u 6240THuh7grgGgnSmtsKn5mY9EBqnIhpVL7mq2/Y6aaUMehFb80= -----END CERTIFICATE-----Generated at Sun Jun 29 21:40:07 2025 by rpki-client