$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: u0GGWIMO9YbYwVAlQvXsiVpBBd93uL0JqRFm/4+L9Yg= Subject key identifier: 07:80:52:EA:90:B2:9A:C3:16:04:A4:4B:69:63:FA:7F:3D:A3:D0:42 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 5DB563C7FB1FCF025E16DC6EB06EA47EF2395DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 0212 Signing time: Sun 19 Oct 2025 13:42:10 +0000 Manifest this update: Sun 19 Oct 2025 13:37:09 +0000 Manifest next update: Wed 22 Oct 2025 14:33:09 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: uEr+UOrcmhm0kCbrxEibC9XESWfFAC44+chGTwGaVy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b5:63:c7:fb:1f:cf:02:5e:16:dc:6e:b0:6e:a4:7e:f2:39:5d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Oct 19 13:37:09 2025 GMT Not After : Oct 22 14:33:09 2025 GMT Subject: CN=078052EA90B29AC31604A44B6963FA7F3DA3D042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:d3:0f:35:41:aa:2c:f4:89:26:a7:21:5f: 35:19:dc:61:13:36:94:74:aa:c5:51:51:e3:84:ac: 9f:36:41:60:0d:76:69:fb:f5:67:47:e1:ff:e8:95: 78:0f:1e:1f:0c:d1:97:f7:6a:72:81:05:cf:ff:80: c3:02:1f:12:4b:d3:42:7a:8b:cb:e0:c0:5a:60:da: 12:24:ef:9b:23:84:ee:51:5f:39:f8:09:bd:7f:0f: d6:81:35:d8:17:20:c2:19:1a:76:48:6a:a4:24:25: 24:a6:81:af:a7:43:94:02:44:38:14:9c:6d:af:f2: 54:bf:23:6c:5b:76:df:26:d8:d9:84:8c:19:7a:b7: f1:77:c9:fd:40:0f:aa:12:55:6f:07:2c:60:f1:60: 4f:db:3a:2c:3f:82:f1:da:e1:8c:99:a0:f2:df:ba: 2e:7e:c8:96:72:20:85:01:28:0c:df:8a:73:2c:65: bd:e9:ab:50:5d:32:8f:ec:68:d9:fa:ad:a0:58:83: e4:1b:95:10:56:ae:3d:a6:86:b0:38:63:03:a7:52: d0:9e:73:10:ce:e7:7a:27:45:29:47:d3:82:23:3c: e6:32:d0:e7:66:9f:5a:c6:a0:e1:73:6e:8b:31:d3: 4c:13:e8:16:22:e3:af:da:a0:33:34:ab:10:60:01: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:80:52:EA:90:B2:9A:C3:16:04:A4:4B:69:63:FA:7F:3D:A3:D0:42 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:00:8c:65:01:d8:d8:7d:8f:44:30:4f:1e:49:b3:83:e8: b2:d5:f6:f8:93:a6:1d:d1:96:6d:43:a5:f3:73:4f:9e:55:25: 47:b6:17:5a:b0:b1:56:c2:2b:72:09:73:77:03:d8:ad:bb:bc: 7f:59:69:6e:81:99:7b:4e:69:ec:b0:6f:20:9c:f5:e0:28:73: 84:85:ab:42:1c:00:e2:8d:29:52:f6:05:30:bb:65:25:61:c0: 05:b1:ee:a3:fb:75:8f:8b:fd:a9:de:c1:ed:2d:7f:1f:15:3d: c4:e4:33:e9:ae:2a:b7:6a:9c:20:5e:00:86:4d:50:36:7b:74: 3a:ea:2f:ba:e5:ea:f1:57:16:5d:7a:45:66:b0:70:6f:71:8c: c9:14:28:73:0d:41:21:0e:a5:c5:b4:c1:ff:bc:2f:95:b9:62: c3:83:f2:35:96:88:2b:2d:b0:29:7e:2d:8d:e0:74:df:50:10: 57:56:74:61:8a:17:a0:67:5f:2a:a4:1c:f8:a5:7f:5f:7b:67: 0e:41:ea:2e:3e:d7:31:19:1c:3c:0f:1c:47:e5:7f:32:8e:cb: 6a:98:24:09:5a:d6:f5:27:80:e4:62:12:bf:12:33:bf:e3:7a: e2:07:f5:35:be:8c:ac:22:6f:16:52:e0:e7:db:02:a3:e8:71: c4:89:d3:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbVjx/sfzwJeFtxusG6kfvI5XdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTEwMTkxMzM3MDlaFw0yNTEwMjIxNDMzMDlaMDMxMTAvBgNV BAMTKDA3ODA1MkVBOTBCMjlBQzMxNjA0QTQ0QjY5NjNGQTdGM0RBM0QwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+9MPNUGqLPSJJqchXzUZ3GET NpR0qsVRUeOErJ82QWANdmn79WdH4f/olXgPHh8M0Zf3anKBBc//gMMCHxJL00J6 i8vgwFpg2hIk75sjhO5RXzn4Cb1/D9aBNdgXIMIZGnZIaqQkJSSmga+nQ5QCRDgU nG2v8lS/I2xbdt8m2NmEjBl6t/F3yf1AD6oSVW8HLGDxYE/bOiw/gvHa4YyZoPLf ui5+yJZyIIUBKAzfinMsZb3pq1BdMo/saNn6raBYg+QblRBWrj2mhrA4YwOnUtCe cxDO53onRSlH04IjPOYy0Odmn1rGoOFzbosx00wT6BYi46/aoDM0qxBgAY1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4BS6pCymsMWBKRLaWP6fz2j0EIwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4XAIxlAdjYfY9EME8eSbOD6LLV9viTph3R lm1DpfNzT55VJUe2F1qwsVbCK3IJc3cD2K27vH9ZaW6BmXtOaeywbyCc9eAoc4SF q0IcAOKNKVL2BTC7ZSVhwAWx7qP7dY+L/anewe0tfx8VPcTkM+muKrdqnCBeAIZN UDZ7dDrqL7rl6vFXFl16RWawcG9xjMkUKHMNQSEOpcW0wf+8L5W5YsOD8jWWiCst sCl+LY3gdN9QEFdWdGGKF6BnXyqkHPilf197Zw5B6i4+1zEZHDwPHEflfzKOy2qY JAla1vUngORiEr8SM7/jeuIH9TW+jKwibxZS4OfbAqPoccSJ07g= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:59 2025 by rpki-client