$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: jgmST8EJmtu/o7rEuLq79P94FkVT29XCQRoSl1HM5nM= Subject key identifier: 6D:AF:38:FA:69:EB:4B:E1:79:11:83:51:7A:77:3F:1C:6F:00:D2:95 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 1B5D6FE5BA994F40CCAB540B54D11E08DB467874 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 04D2 Signing time: Thu 08 May 2025 11:20:33 +0000 Manifest this update: Thu 08 May 2025 11:15:33 +0000 Manifest next update: Sun 11 May 2025 19:12:33 +0000 Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: zsesejcFFyP62LeF02Um0DzzHwP7S2tFrMVRRgxJ++Q=) 2: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: ARnel1BgMav+uK5Lnkh7YaQOQPe2Xf72kfna8ONOXfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5d:6f:e5:ba:99:4f:40:cc:ab:54:0b:54:d1:1e:08:db:46:78:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: May 8 11:15:33 2025 GMT Not After : May 11 19:12:33 2025 GMT Subject: CN=6DAF38FA69EB4BE1791183517A773F1C6F00D295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:ae:a3:83:90:1b:bf:34:6a:53:22:ff:f6: de:86:47:49:92:0e:43:4b:5e:e5:41:ae:50:aa:27: bd:55:89:99:e9:d7:60:46:99:7a:21:c9:46:b4:70: d6:86:0f:5a:5c:11:e0:50:ff:f6:78:f5:6e:fa:4b: 0c:a4:5f:8d:eb:2e:ad:21:67:0d:99:2a:bf:5d:68: 34:a1:10:e0:c0:bc:a6:39:fe:37:ab:11:0a:e4:38: 7b:f7:ae:60:b7:df:03:bf:03:f0:42:c5:0c:ba:6d: 1a:a7:72:3c:55:5b:be:12:11:8b:07:09:aa:27:69: 11:d1:81:d4:c8:d3:93:55:d0:7d:5a:84:b5:c1:36: 3a:4c:99:60:63:b5:d8:a5:3b:5d:f4:c7:66:a1:9a: 7a:20:c2:48:66:2b:4f:99:1d:4e:c6:db:ba:5e:be: f2:7a:a7:21:6e:75:bd:5b:f7:4a:cf:4e:0e:61:f4: 48:cd:2b:21:1f:a4:42:85:43:94:c3:5d:ab:2f:53: a8:4f:43:0d:e2:d8:a2:56:8a:76:41:14:a3:1a:25: b3:f9:13:45:23:67:58:fe:a0:5a:ab:0c:93:e6:3a: d1:78:d2:18:60:8c:f3:42:03:28:f7:92:a4:09:d6: 38:22:92:9b:65:e4:5f:5f:7f:7c:44:38:99:4d:7d: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:38:FA:69:EB:4B:E1:79:11:83:51:7A:77:3F:1C:6F:00:D2:95 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:5e:a4:f6:44:f2:e3:d3:d1:20:dd:d8:88:9e:34:b6:ee: 3c:00:b6:f3:96:3a:90:96:b7:80:7d:7b:f8:25:90:9d:a1:dc: 2a:c7:32:6d:bc:2e:ee:84:6c:0d:0d:0c:f1:54:b9:82:c9:00: 56:3e:72:25:92:ab:14:b5:a4:01:d6:2c:e0:e6:c5:4c:f1:f9: b6:9b:00:b5:a8:64:d7:a2:98:4f:6f:03:28:7e:dc:c0:a3:ae: 0f:54:86:6d:46:6b:36:1c:56:38:0b:cf:9f:9a:93:73:d5:b4: ed:2d:a1:78:1f:bd:6a:5d:59:32:18:c6:b2:82:a1:07:f7:62: 57:d8:ad:64:60:c6:a5:37:af:72:82:65:31:9f:ac:e2:dc:e8: a1:32:1c:d7:3c:64:c1:76:ce:f1:55:b3:1c:27:16:c4:f7:85: 66:35:89:63:79:1d:81:27:7f:13:d3:35:eb:28:a5:a9:37:1b: 7d:79:95:12:11:09:a0:67:de:72:cd:2f:61:34:83:12:66:74: 80:68:ce:8a:52:57:94:f2:f1:1e:33:76:7d:f1:07:93:65:95: c5:b1:1b:02:0c:1a:a9:a7:62:3a:1c:a3:aa:9c:ec:f8:d8:96: cf:b4:8c:40:c0:53:ea:88:ac:8d:99:8a:66:b9:24:aa:9e:45: 1e:16:20:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUG11v5bqZT0DMq1QLVNEeCNtGeHQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDUwODExMTUzM1oX DTI1MDUxMTE5MTIzM1owMzExMC8GA1UEAxMoNkRBRjM4RkE2OUVCNEJFMTc5MTE4 MzUxN0E3NzNGMUM2RjAwRDI5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGtrqODkBu/NGpTIv/23oZHSZIOQ0te5UGuUKonvVWJmenXYEaZeiHJRrRw 1oYPWlwR4FD/9nj1bvpLDKRfjesurSFnDZkqv11oNKEQ4MC8pjn+N6sRCuQ4e/eu YLffA78D8ELFDLptGqdyPFVbvhIRiwcJqidpEdGB1MjTk1XQfVqEtcE2OkyZYGO1 2KU7XfTHZqGaeiDCSGYrT5kdTsbbul6+8nqnIW51vVv3Ss9ODmH0SM0rIR+kQoVD lMNdqy9TqE9DDeLYolaKdkEUoxols/kTRSNnWP6gWqsMk+Y60XjSGGCM80IDKPeS pAnWOCKSm2XkX19/fEQ4mU19AscCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBRtrzj6 aetL4XkRg1F6dz8cbwDSlTAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj85epPZE 8uPT0SDd2IieNLbuPAC285Y6kJa3gH17+CWQnaHcKscybbwu7oRsDQ0M8VS5gskA Vj5yJZKrFLWkAdYs4ObFTPH5tpsAtahk16KYT28DKH7cwKOuD1SGbUZrNhxWOAvP n5qTc9W07S2heB+9al1ZMhjGsoKhB/diV9itZGDGpTevcoJlMZ+s4tzooTIc1zxk wXbO8VWzHCcWxPeFZjWJY3kdgSd/E9M16yilqTcbfXmVEhEJoGfecs0vYTSDEmZ0 gGjOilJXlPLxHjN2ffEHk2WVxbEbAgwaqadiOhyjqpzs+NiWz7SMQMBT6oisjZmK Zrkkqp5FHhYg5w== -----END CERTIFICATE-----Generated at Fri May 9 23:51:57 2025 by rpki-client