$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: vK75pjw/h4OE9Yrb6sq09XhcChcVsOtVE7YS01PGrhs= Subject key identifier: 1F:71:FB:C6:D6:7C:1F:22:4C:3A:C2:46:9C:D7:F4:EB:A8:2C:DF:2C Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 6481C94D41CFF2DE05DE8725256D95F16F087163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 017A Signing time: Thu 21 Aug 2025 10:31:52 +0000 Manifest this update: Thu 21 Aug 2025 10:26:52 +0000 Manifest next update: Sun 24 Aug 2025 12:27:52 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: naPyE1Rp0IE6IojtoLcesbEV6Gi1HF0DI3I+ZGfRUKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:81:c9:4d:41:cf:f2:de:05:de:87:25:25:6d:95:f1:6f:08:71:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Aug 21 10:26:52 2025 GMT Not After : Aug 24 12:27:52 2025 GMT Subject: CN=1F71FBC6D67C1F224C3AC2469CD7F4EBA82CDF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:aa:e2:b9:88:b1:16:a4:68:d9:5c:0f:ab: 0a:67:2b:cc:02:55:7f:d1:28:80:95:0a:2e:ff:f1: 9d:61:f8:d1:d8:79:d4:85:48:b6:1b:be:da:4b:b7: d5:fa:31:82:5b:5c:8a:c2:b2:32:50:11:01:86:e8: 71:78:48:91:16:ed:c8:4b:e6:bd:57:34:29:e9:9f: eb:6d:61:3a:84:bd:13:11:2d:7f:2b:69:27:1d:0d: bc:e1:49:64:1b:6f:f8:00:04:e8:23:60:5d:ae:f7: 6f:92:f3:a8:99:96:ce:e5:06:19:e0:e9:96:19:a4: f0:04:67:22:9f:9f:24:68:17:f1:01:ee:47:74:c2: 9d:df:c0:ed:b5:5e:63:2c:b2:45:3e:bc:09:87:a9: 13:61:cd:b2:f0:15:d5:d5:f0:21:b5:19:4c:4f:50: 67:db:23:c6:e3:98:7b:15:e6:73:ab:67:7a:ea:20: f6:07:12:5b:27:43:40:66:2c:f9:25:96:a7:ab:bb: 31:7e:b1:b1:60:b2:8d:41:01:ab:36:32:77:2f:30: b0:0e:38:f4:d3:11:6c:df:4d:83:dd:68:48:9e:f9: 98:15:68:29:dd:44:7c:2d:9f:93:f3:04:8e:9d:76: 60:de:e8:5a:9f:e7:39:78:a6:4d:bc:93:82:a6:58: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:FB:C6:D6:7C:1F:22:4C:3A:C2:46:9C:D7:F4:EB:A8:2C:DF:2C X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:ee:b4:cc:b0:b1:eb:a4:94:7f:13:eb:94:ec:70:d9:32: 78:ce:28:00:e7:48:28:3f:0d:e1:b0:fe:da:e1:08:bf:fa:56: dc:8f:38:07:f9:a6:4a:bd:69:dd:3f:30:21:0c:ac:0c:28:32: 02:84:17:01:49:32:39:ea:35:71:85:f0:b5:5c:09:db:a9:5f: ea:89:e4:35:18:e6:d2:d8:60:42:89:0d:12:a9:b6:b5:b2:99: 01:91:53:16:3c:79:c8:ae:77:33:dc:bd:bb:0d:ce:73:be:9d: d7:6b:8a:44:3e:3e:3f:87:c4:fa:81:a1:db:f5:76:09:e3:f3: 91:2a:1b:92:32:43:df:37:ff:b2:34:b5:ec:fe:df:c3:86:12: 9c:9c:49:3a:e3:b0:07:48:6c:55:c7:ff:91:18:39:37:e2:d7: ac:c7:b7:c2:38:62:66:4e:15:c0:5f:d4:af:0e:8b:cf:99:e3: ac:60:aa:75:75:0f:93:f9:52:bb:77:fc:29:9a:8c:ae:4a:a8: 60:90:c0:4f:d9:b6:9f:ee:69:d4:82:7d:65:99:f0:f1:33:a2: ef:f4:d8:a8:1c:bf:2f:7a:87:fa:26:6f:b1:4c:8e:ff:ea:b7: fd:cf:c2:19:e8:22:c1:4f:39:66:16:ef:eb:bc:e7:3c:5a:c0: b7:66:59:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIHJTUHP8t4F3oclJW2V8W8IcWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTA4MjExMDI2NTJaFw0yNTA4MjQxMjI3NTJaMDMxMTAvBgNV BAMTKDFGNzFGQkM2RDY3QzFGMjI0QzNBQzI0NjlDRDdGNEVCQTgyQ0RGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BKriuYixFqRo2VwPqwpnK8wC VX/RKICVCi7/8Z1h+NHYedSFSLYbvtpLt9X6MYJbXIrCsjJQEQGG6HF4SJEW7chL 5r1XNCnpn+ttYTqEvRMRLX8raScdDbzhSWQbb/gABOgjYF2u92+S86iZls7lBhng 6ZYZpPAEZyKfnyRoF/EB7kd0wp3fwO21XmMsskU+vAmHqRNhzbLwFdXV8CG1GUxP UGfbI8bjmHsV5nOrZ3rqIPYHElsnQ0BmLPkllqeruzF+sbFgso1BAas2MncvMLAO OPTTEWzfTYPdaEie+ZgVaCndRHwtn5PzBI6ddmDe6Fqf5zl4pk28k4KmWN1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH3H7xtZ8HyJMOsJGnNf066gs3ywwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe+7rTMsLHrpJR/E+uU7HDZMnjOKADnSCg/ DeGw/trhCL/6VtyPOAf5pkq9ad0/MCEMrAwoMgKEFwFJMjnqNXGF8LVcCdupX+qJ 5DUY5tLYYEKJDRKptrWymQGRUxY8eciudzPcvbsNznO+nddrikQ+Pj+HxPqBodv1 dgnj85EqG5IyQ983/7I0tez+38OGEpycSTrjsAdIbFXH/5EYOTfi16zHt8I4YmZO FcBf1K8Oi8+Z46xgqnV1D5P5Urt3/CmajK5KqGCQwE/Ztp/uadSCfWWZ8PEzou/0 2Kgcvy96h/omb7FMjv/qt/3PwhnoIsFPOWYW7+u85zxawLdmWYg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:09 2025 by rpki-client