$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: k+zTeuhSZpCmlrJbAbcpEeFbNWHqxvJzJYvBjWbhrP8= Subject key identifier: F7:E1:0D:DD:4F:6D:90:8D:FD:84:4C:4E:A0:E6:87:2F:FF:07:E3:DD Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 32FC3FC75DB82F888A52E8D96DE7215DC608B5A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 01EA Signing time: Sun 29 Jun 2025 00:21:25 +0000 Manifest this update: Sun 29 Jun 2025 00:16:25 +0000 Manifest next update: Wed 02 Jul 2025 08:34:25 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: xsmpoVaGZrFWD8bN9B+PPH950pLKrUKbwUKqlFwKkMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fc:3f:c7:5d:b8:2f:88:8a:52:e8:d9:6d:e7:21:5d:c6:08:b5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Jun 29 00:16:25 2025 GMT Not After : Jul 2 08:34:25 2025 GMT Subject: CN=F7E10DDD4F6D908DFD844C4EA0E6872FFF07E3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:31:6c:35:79:ef:96:0f:2c:65:29:31:20: 25:0b:64:f3:95:c5:23:f6:00:fc:59:82:0b:7e:6b: 91:f8:30:2a:0e:85:97:9e:17:21:f1:91:e3:2a:31: c1:c2:c5:29:13:8b:8d:ec:6e:1b:2d:c3:84:38:ec: b0:e9:c0:c1:7d:cd:19:84:b8:64:4e:d4:9a:64:fd: 3d:c9:6f:bd:3c:f8:94:9e:17:fd:35:12:54:ba:33: d8:6a:3d:50:20:f3:8d:b2:41:dd:cb:82:6a:59:6d: 8c:7a:09:90:99:fb:6f:23:be:5f:96:66:8b:ca:bb: f7:6c:85:01:6e:b4:38:05:ca:ab:fc:5b:cc:03:57: d2:73:f7:a2:42:f0:63:85:ed:3d:c6:00:80:a8:ca: 26:79:5b:26:27:02:a5:14:0f:6e:49:97:47:ad:ed: af:61:14:90:d6:ea:f5:e1:35:a0:dc:80:b8:9b:d8: a8:f3:c0:64:88:87:e9:f8:8e:db:bf:ca:c2:f5:d8: cd:f0:b2:ea:4d:c1:47:28:dd:92:28:f4:48:0b:ff: cd:2d:15:8a:90:17:3e:f8:e1:4f:9f:b7:66:f0:b3: 9c:ed:25:dd:17:31:f3:5b:85:3c:cd:52:86:4b:5c: d2:aa:63:83:2b:44:a7:d3:6c:a9:eb:fd:2e:b2:25: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:0D:DD:4F:6D:90:8D:FD:84:4C:4E:A0:E6:87:2F:FF:07:E3:DD X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c8:2d:e3:6d:e3:c0:c6:6e:ee:fd:6e:25:8a:5e:5c:4f:65: fa:32:1d:1c:bf:ed:3f:a5:e9:bd:a5:82:17:2c:37:0c:34:68: 6a:35:b2:09:e7:41:5e:c7:32:11:da:86:18:39:61:fd:dc:6c: 80:91:f6:73:77:fe:31:05:9a:79:bb:4c:0a:b6:35:08:95:15: 14:47:88:2e:48:54:9a:41:e6:4a:32:65:d3:3e:b5:55:f6:77: 18:ad:08:c1:cb:8f:ab:43:15:af:10:99:04:23:af:e7:b2:f5: 0e:3f:59:7b:a8:7d:15:c1:59:96:a4:32:60:a2:55:3f:d1:da: ae:bd:02:19:5d:e6:26:66:af:16:ef:e2:e6:ca:90:19:ec:87: 7a:0a:d2:0d:cd:34:6d:01:0a:b6:63:11:90:af:12:48:cc:1c: 24:a1:ba:ab:95:d1:6b:4a:01:c7:3b:d6:b7:55:3e:08:8a:ca: fb:70:67:b4:e2:c1:06:aa:2a:f6:90:ad:e9:35:e9:f9:02:b1: 4f:bd:30:ab:95:53:8b:f1:08:02:86:d6:58:ff:f9:e1:ff:21: 14:d2:ba:de:fa:5f:b2:0e:e9:da:fc:d5:7c:82:f4:8e:e3:f6: 3d:b0:61:3a:af:b0:31:5d:cc:b9:91:4e:ea:38:96:ed:9a:c0: ae:31:9f:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvw/x124L4iKUujZbechXcYItaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA2MjkwMDE2MjVaFw0yNTA3MDIwODM0MjVaMDMxMTAvBgNV BAMTKEY3RTEwRERENEY2RDkwOERGRDg0NEM0RUEwRTY4NzJGRkYwN0UzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlzFsNXnvlg8sZSkxICULZPOV xSP2APxZggt+a5H4MCoOhZeeFyHxkeMqMcHCxSkTi43sbhstw4Q47LDpwMF9zRmE uGRO1Jpk/T3Jb708+JSeF/01ElS6M9hqPVAg842yQd3LgmpZbYx6CZCZ+28jvl+W ZovKu/dshQFutDgFyqv8W8wDV9Jz96JC8GOF7T3GAICoyiZ5WyYnAqUUD25Jl0et 7a9hFJDW6vXhNaDcgLib2KjzwGSIh+n4jtu/ysL12M3wsupNwUco3ZIo9EgL/80t FYqQFz744U+ft2bws5ztJd0XMfNbhTzNUoZLXNKqY4MrRKfTbKnr/S6yJcu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+EN3U9tkI39hExOoOaHL/8H490wHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDILeNt48DGbu79biWKXlxPZfoyHRy/7T+l 6b2lghcsNww0aGo1sgnnQV7HMhHahhg5Yf3cbICR9nN3/jEFmnm7TAq2NQiVFRRH iC5IVJpB5koyZdM+tVX2dxitCMHLj6tDFa8QmQQjr+ey9Q4/WXuofRXBWZakMmCi VT/R2q69Ahld5iZmrxbv4ubKkBnsh3oK0g3NNG0BCrZjEZCvEkjMHCShuquV0WtK Acc71rdVPgiKyvtwZ7TiwQaqKvaQrek16fkCsU+9MKuVU4vxCAKG1lj/+eH/IRTS ut76X7IO6dr81XyC9I7j9j2wYTqvsDFdzLmRTuo4lu2awK4xn2k= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:17 2025 by rpki-client