$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: AyHgNa5TERmRc1QIuBPP3QWLxMVTnRwHmMULtynSTqw= Subject key identifier: 42:03:8E:EA:B2:80:4A:70:03:3D:13:7C:6B:64:F5:D6:67:7D:CD:0F Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 5E9C2ABC5B3C1B8C2E2D3368FC8AA628BA7ADD04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 01F8 Signing time: Fri 22 Aug 2025 03:22:08 +0000 Manifest this update: Fri 22 Aug 2025 03:17:08 +0000 Manifest next update: Mon 25 Aug 2025 04:01:08 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: vwp0Ai0icDKNgRthtfKjC5Bm7JCE9Yf4hxbp3zXxZKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9c:2a:bc:5b:3c:1b:8c:2e:2d:33:68:fc:8a:a6:28:ba:7a:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Aug 22 03:17:08 2025 GMT Not After : Aug 25 04:01:08 2025 GMT Subject: CN=42038EEAB2804A70033D137C6B64F5D6677DCD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:93:e6:c8:74:4f:68:86:f1:53:42:42:4c: e7:55:68:6e:51:17:2d:ff:68:4b:c2:2e:9f:ca:5f: cb:49:4d:76:50:50:45:6d:d5:2c:98:bd:fa:8f:a4: dc:4f:d0:63:ca:4b:c9:e6:3e:fc:c3:4c:2a:26:e3: e8:78:0b:32:14:0d:84:27:ff:4d:d3:3c:a0:a5:b7: 50:a2:38:9a:6a:0d:b3:3f:d8:64:89:4c:77:48:08: 63:9a:d1:a9:4a:d0:f9:a7:cf:b7:df:0b:bf:65:3b: e2:a4:06:7a:d5:11:7e:87:5d:30:23:9f:a7:5e:d2: fb:5d:ab:c8:70:7e:ce:3b:50:49:03:3d:23:ed:83: 12:cc:6c:67:e5:ff:02:89:3b:47:88:c6:85:e7:7e: 53:6b:6f:0c:d2:0a:c8:78:b1:2d:28:0a:36:4d:07: 74:c4:63:02:47:7b:de:07:41:54:22:5f:09:00:f0: 84:c9:ad:ef:70:05:6e:e2:dd:3b:e8:61:26:8c:08: 63:3d:ec:c6:75:47:29:79:de:4a:b9:b5:cb:67:53: 94:57:54:07:e5:45:2a:cc:e4:61:da:e0:81:45:e3: 8c:bd:b6:49:cb:75:58:a3:8d:33:d6:7d:fb:b0:d3: 51:c8:cf:16:da:49:2c:ab:97:a9:88:9e:1f:68:d6: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:8E:EA:B2:80:4A:70:03:3D:13:7C:6B:64:F5:D6:67:7D:CD:0F X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1f:27:7b:74:e7:30:5b:a0:39:ee:81:db:f5:70:8a:aa:78: 70:fa:33:1f:7d:50:cb:91:e1:53:69:1c:3c:8a:12:19:0e:f6: a8:15:6d:81:33:e3:ce:72:14:28:6d:50:6c:ac:6a:fc:63:2f: 99:15:48:f1:25:c9:03:49:4c:23:c3:ab:df:5d:88:15:1f:2d: 2e:f6:bb:a7:9b:e0:0c:27:7c:22:50:20:33:2b:53:56:53:77: ea:80:2f:d4:a3:b7:f9:af:a4:c2:37:c9:24:47:f5:87:e6:ae: c4:93:92:86:09:ad:6a:69:48:92:b0:41:9e:e9:4f:1a:a3:46: 1b:ed:78:b7:ea:4f:69:17:f1:8c:be:ba:66:ab:b0:7f:df:ba: e4:86:ea:ad:61:85:64:fe:e6:9c:40:f6:b2:72:90:7c:9a:5e: b5:c1:88:92:18:7b:b0:9d:b0:ff:f4:4b:41:7a:c1:e5:58:9d: 0a:06:9a:2c:c2:6f:23:d6:45:d7:61:47:cf:29:f0:e4:23:79: 19:97:ea:4b:d7:22:0f:8e:e8:fb:33:4c:5f:fa:a0:6e:a4:b2: 74:ac:24:4a:0f:67:72:4e:bb:66:21:a2:5f:e2:d1:2d:f5:f5: 42:9f:2e:3b:9f:63:51:29:95:75:6d:ca:64:b6:60:a7:d0:f8: df:dd:4e:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpwqvFs8G4wuLTNo/IqmKLp63QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTA4MjIwMzE3MDhaFw0yNTA4MjUwNDAxMDhaMDMxMTAvBgNV BAMTKDQyMDM4RUVBQjI4MDRBNzAwMzNEMTM3QzZCNjRGNUQ2Njc3RENEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMZPmyHRPaIbxU0JCTOdVaG5R Fy3/aEvCLp/KX8tJTXZQUEVt1SyYvfqPpNxP0GPKS8nmPvzDTCom4+h4CzIUDYQn /03TPKClt1CiOJpqDbM/2GSJTHdICGOa0alK0Pmnz7ffC79lO+KkBnrVEX6HXTAj n6de0vtdq8hwfs47UEkDPSPtgxLMbGfl/wKJO0eIxoXnflNrbwzSCsh4sS0oCjZN B3TEYwJHe94HQVQiXwkA8ITJre9wBW7i3TvoYSaMCGM97MZ1Ryl53kq5tctnU5RX VAflRSrM5GHa4IFF44y9tknLdVijjTPWffuw01HIzxbaSSyrl6mInh9o1vEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgOO6rKASnADPRN8a2T11md9zQ8wHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkfJ3t05zBboDnugdv1cIqqeHD6Mx99UMuR 4VNpHDyKEhkO9qgVbYEz485yFChtUGysavxjL5kVSPElyQNJTCPDq99diBUfLS72 u6eb4AwnfCJQIDMrU1ZTd+qAL9Sjt/mvpMI3ySRH9YfmrsSTkoYJrWppSJKwQZ7p TxqjRhvteLfqT2kX8Yy+umarsH/fuuSG6q1hhWT+5pxA9rJykHyaXrXBiJIYe7Cd sP/0S0F6weVYnQoGmizCbyPWRddhR88p8OQjeRmX6kvXIg+O6PszTF/6oG6ksnSs JEoPZ3JOu2Yhol/i0S319UKfLjufY1EplXVtymS2YKfQ+N/dTiY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:29 2025 by rpki-client