$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: EoM4iF61b0mei493oLC3TGKNXRamjTrM7aDdUS20PBU= Subject key identifier: 42:C9:35:DF:7B:9F:75:A2:3A:64:A3:A6:D3:F4:C6:B0:40:6F:C6:F8 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 2C7D4306870AF8586C4E048B0D697CA32F58FD88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 01E0 Signing time: Sun 29 Jun 2025 07:32:06 +0000 Manifest this update: Sun 29 Jun 2025 07:27:06 +0000 Manifest next update: Wed 02 Jul 2025 08:37:06 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: pc2n36SRa3B5GnyYgCKLlrdTI+mYxq3FiNVOq2eLkl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7d:43:06:87:0a:f8:58:6c:4e:04:8b:0d:69:7c:a3:2f:58:fd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Jun 29 07:27:06 2025 GMT Not After : Jul 2 08:37:06 2025 GMT Subject: CN=42C935DF7B9F75A23A64A3A6D3F4C6B0406FC6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:14:fe:ff:30:51:7d:fd:df:ee:8b:e1:cb:a1: 8b:0d:2c:a5:8b:cf:58:c4:dd:8e:fa:e0:d4:0d:8c: 7f:8d:2e:f8:95:23:3b:1f:28:11:60:68:5d:a1:9c: 85:bb:1a:35:39:b8:b5:8a:98:50:d3:63:00:f6:a0: b4:23:66:be:ee:b4:62:b7:35:72:dc:b1:ee:18:b8: 06:e3:27:a3:18:5d:ba:3c:61:60:9f:ad:06:af:6d: 72:bc:28:5c:a9:a9:aa:4b:fe:6f:5a:57:d4:57:0f: 5c:8f:85:3e:0e:25:a3:c4:dc:77:15:6a:c9:74:ca: 89:ad:f5:07:d3:a5:7f:05:7c:19:eb:92:d7:0f:cb: be:ec:c2:8d:54:2a:70:c5:54:d4:61:d1:49:b6:03: 5b:65:df:ed:6c:3e:6b:13:f3:c1:27:42:4e:4b:b2: 63:90:f2:3e:38:f8:ca:81:e8:10:12:a6:54:0d:c7: 7d:98:05:8c:b9:af:e4:06:bb:83:76:6a:e8:63:fb: 6a:89:cc:8e:49:3f:f5:fc:89:e6:5b:1c:21:ed:83: d3:c9:f0:9c:34:ac:4e:d1:04:14:59:54:76:63:f5: 72:67:c2:2e:0e:95:8b:04:3c:c3:ca:ee:d5:76:7c: 10:a3:23:3c:38:36:80:0b:84:45:cd:55:dc:4b:21: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:35:DF:7B:9F:75:A2:3A:64:A3:A6:D3:F4:C6:B0:40:6F:C6:F8 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:3b:2a:ae:1f:8e:b1:07:38:b2:6e:a3:0f:30:71:d5:9e:34: c4:9e:f7:7a:71:a2:37:a6:b7:43:60:f5:78:67:f1:6c:69:33: 1e:80:49:6f:f9:ae:17:87:bc:13:59:a4:84:9b:33:9f:0d:ea: 1b:04:85:49:f2:4c:6b:23:e2:19:ca:09:68:17:47:4e:ed:1f: 3e:45:70:a0:15:06:a4:b4:f9:64:fd:0b:bf:ef:a8:4d:f9:ba: d3:8e:b4:e1:2e:1d:78:a5:a0:47:68:15:47:98:9a:cc:bb:b0: d2:ed:14:88:e2:ac:55:73:57:90:30:9e:69:6c:9d:ee:c2:f2: 89:59:c8:23:1f:3b:de:21:f2:a8:aa:44:cc:6c:20:b0:fe:c6: 0c:bb:18:5f:5b:c7:5f:b9:21:38:e5:9d:50:4e:9e:9d:66:d2: 28:d9:7a:16:70:42:da:0b:a5:74:9b:82:aa:f9:d1:8c:74:5a: 56:dd:a7:a9:a0:ff:dd:15:f4:94:6d:3a:21:33:85:10:de:63: c8:70:1c:2d:85:4f:18:56:39:70:fe:78:7b:0b:19:c9:34:f2: 04:4c:43:48:09:e4:72:34:bd:88:75:6f:66:0a:7e:b4:6d:a5: 2e:3a:9d:f8:bb:94:fc:c0:62:53:0a:a7:52:da:f9:d7:dc:20: 32:f7:7a:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULH1DBocK+FhsTgSLDWl8oy9Y/YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTA2MjkwNzI3MDZaFw0yNTA3MDIwODM3MDZaMDMxMTAvBgNV BAMTKDQyQzkzNURGN0I5Rjc1QTIzQTY0QTNBNkQzRjRDNkIwNDA2RkM2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFP7/MFF9/d/ui+HLoYsNLKWL z1jE3Y764NQNjH+NLviVIzsfKBFgaF2hnIW7GjU5uLWKmFDTYwD2oLQjZr7utGK3 NXLcse4YuAbjJ6MYXbo8YWCfrQavbXK8KFypqapL/m9aV9RXD1yPhT4OJaPE3HcV asl0yomt9QfTpX8FfBnrktcPy77swo1UKnDFVNRh0Um2A1tl3+1sPmsT88EnQk5L smOQ8j44+MqB6BASplQNx32YBYy5r+QGu4N2auhj+2qJzI5JP/X8ieZbHCHtg9PJ 8Jw0rE7RBBRZVHZj9XJnwi4OlYsEPMPK7tV2fBCjIzw4NoALhEXNVdxLIe0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsk133ufdaI6ZKOm0/TGsEBvxvgwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALk7Kq4fjrEHOLJuow8wcdWeNMSe93pxojem t0Ng9Xhn8WxpMx6ASW/5rheHvBNZpISbM58N6hsEhUnyTGsj4hnKCWgXR07tHz5F cKAVBqS0+WT9C7/vqE35utOOtOEuHXiloEdoFUeYmsy7sNLtFIjirFVzV5Awnmls ne7C8olZyCMfO94h8qiqRMxsILD+xgy7GF9bx1+5ITjlnVBOnp1m0ijZehZwQtoL pXSbgqr50Yx0Wlbdp6mg/90V9JRtOiEzhRDeY8hwHC2FTxhWOXD+eHsLGck08gRM Q0gJ5HI0vYh1b2YKfrRtpS46nfi7lPzAYlMKp1La+dfcIDL3enw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:42 2025 by rpki-client