$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: PiyCc5T01WdiL27Jz9NEsRp21RT3dcT5ZFbbPkUaRW4= Subject key identifier: CD:86:77:D1:1D:A9:EF:DB:CB:33:22:43:73:5C:E3:22:3B:27:68:7A Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 435D184642D78365EEC411F98DFA4741B5F3722D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 0162 Signing time: Fri 27 Jun 2025 17:11:48 +0000 Manifest this update: Fri 27 Jun 2025 17:06:48 +0000 Manifest next update: Mon 30 Jun 2025 21:58:48 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: b3raOC6XngGyQBJ64lipissnKnyJiDjjBUCqqGBmst4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:18:46:42:d7:83:65:ee:c4:11:f9:8d:fa:47:41:b5:f3:72:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Jun 27 17:06:48 2025 GMT Not After : Jun 30 21:58:48 2025 GMT Subject: CN=CD8677D11DA9EFDBCB332243735CE3223B27687A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:5a:9e:db:4c:5a:1c:cf:9c:7c:6a:49:36: a3:f3:ca:bb:d5:d0:fa:9c:9a:be:c9:b6:ed:9d:5d: ff:0a:ae:c0:79:a7:0b:59:fb:3f:d7:a1:9f:a5:66: 2f:8d:eb:f9:f3:b1:26:73:38:23:9e:0a:2a:38:c3: 53:4b:7d:0b:31:bf:3b:26:b6:28:5d:f6:cc:96:96: 58:b7:51:92:58:d1:15:97:f9:6b:d3:35:bb:8b:8c: 9e:da:65:11:cc:8b:89:31:a0:d7:58:f0:77:92:1a: 6b:5e:00:0d:1b:4d:f0:bc:df:ad:4f:65:ba:66:cc: fe:95:b4:13:48:9c:e6:2e:ce:4b:80:bb:8c:b5:03: a0:0c:7b:e5:03:21:10:bd:2b:28:71:ee:ec:99:13: 03:8f:47:42:cf:05:27:4f:4f:25:d0:c7:30:00:c4: a5:6b:73:40:67:95:d8:ef:a7:82:af:1e:df:d2:29: fb:26:63:d5:57:16:46:30:5b:6b:6a:68:aa:4c:4e: c5:8e:54:26:b8:c7:25:10:48:f7:d3:1b:71:1c:cd: e4:b9:0a:14:95:69:34:a4:48:24:ac:39:c1:db:93: ce:cd:a0:f7:d0:34:28:a2:c7:8c:f9:e8:da:58:e9: bd:fb:df:cf:66:b7:b9:61:35:2b:d0:f4:8e:c2:ef: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:77:D1:1D:A9:EF:DB:CB:33:22:43:73:5C:E3:22:3B:27:68:7A X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:43:09:71:f8:10:2a:8b:a6:a4:36:9f:ba:53:07:a0:85:67: 7d:d1:9f:16:a8:3a:2c:2d:9f:99:83:ca:66:79:f4:73:16:4d: 88:e8:86:c2:66:a1:7d:06:ed:87:b3:0b:25:5a:55:c9:36:fd: fa:f6:9e:7a:79:fd:7c:49:2a:49:76:7a:f3:b2:79:e1:b1:d1: ff:77:34:cc:81:16:9b:52:f0:6b:4a:aa:99:12:ec:00:22:8e: 11:61:f2:17:80:cf:27:70:1b:dc:23:56:60:13:b7:c0:ba:6a: e5:5f:18:14:90:17:b1:6d:a5:b3:62:dc:18:d1:cb:62:b2:5b: 41:0d:f0:ca:63:97:f6:e0:09:bb:49:f2:8e:8b:06:9e:4c:21: 6d:00:75:52:fb:62:51:ab:a2:92:7e:8b:aa:0f:09:f9:22:be: 72:59:3a:e9:e8:94:0b:9d:95:38:e7:c6:59:3a:85:6a:e6:3a: 8c:bf:1c:78:86:97:20:67:87:95:aa:31:22:76:5b:ac:a4:5c: 65:d2:38:26:7d:8f:23:ad:d6:e5:1f:10:3b:e6:a3:b9:bd:ca: a3:40:4e:2e:f7:15:cf:70:77:85:df:f7:f6:e8:6d:3c:08:97: cd:08:94:97:07:a0:e8:24:4a:d1:6a:e8:81:a5:0b:77:88:64: 5c:6f:83:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ10YRkLXg2XuxBH5jfpHQbXzci0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTA2MjcxNzA2NDhaFw0yNTA2MzAyMTU4NDhaMDMxMTAvBgNV BAMTKENEODY3N0QxMURBOUVGREJDQjMzMjI0MzczNUNFMzIyM0IyNzY4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EFqe20xaHM+cfGpJNqPzyrvV 0Pqcmr7Jtu2dXf8KrsB5pwtZ+z/XoZ+lZi+N6/nzsSZzOCOeCio4w1NLfQsxvzsm tihd9syWlli3UZJY0RWX+WvTNbuLjJ7aZRHMi4kxoNdY8HeSGmteAA0bTfC8361P ZbpmzP6VtBNInOYuzkuAu4y1A6AMe+UDIRC9Kyhx7uyZEwOPR0LPBSdPTyXQxzAA xKVrc0Bnldjvp4KvHt/SKfsmY9VXFkYwW2tqaKpMTsWOVCa4xyUQSPfTG3EczeS5 ChSVaTSkSCSsOcHbk87NoPfQNCiix4z56NpY6b37389mt7lhNSvQ9I7C7ztRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYZ30R2p79vLMyJDc1zjIjsnaHowHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVDCXH4ECqLpqQ2n7pTB6CFZ33RnxaoOiwt n5mDymZ59HMWTYjohsJmoX0G7YezCyVaVck2/fr2nnp5/XxJKkl2evOyeeGx0f93 NMyBFptS8GtKqpkS7AAijhFh8heAzydwG9wjVmATt8C6auVfGBSQF7FtpbNi3BjR y2KyW0EN8Mpjl/bgCbtJ8o6LBp5MIW0AdVL7YlGropJ+i6oPCfkivnJZOunolAud lTjnxlk6hWrmOoy/HHiGlyBnh5WqMSJ2W6ykXGXSOCZ9jyOt1uUfEDvmo7m9yqNA Ti73Fc9wd4Xf9/bobTwIl80IlJcHoOgkStFq6IGlC3eIZFxvg84= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:09 2025 by rpki-client