$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: 98cBe04wxZ9M24X6PhK04MfLlBYuiX4cAZu60+LcTBs= Subject key identifier: 1E:0E:0A:B9:3F:5F:2F:D0:70:11:AF:33:46:15:FF:C1:A6:6D:8F:EF Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 683733DBE60D06E7410AF653B030777A663C0222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 01D4 Signing time: Fri 09 May 2025 21:31:25 +0000 Manifest this update: Fri 09 May 2025 21:26:25 +0000 Manifest next update: Tue 13 May 2025 08:27:25 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: 5UO55TPSGmB7yma262cgr0dyQh9Va2fecwvVtGaMwkk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:37:33:db:e6:0d:06:e7:41:0a:f6:53:b0:30:77:7a:66:3c:02:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: May 9 21:26:25 2025 GMT Not After : May 13 08:27:25 2025 GMT Subject: CN=1E0E0AB93F5F2FD07011AF334615FFC1A66D8FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:a6:34:0a:9f:60:b2:5e:0f:c2:8e:11:b3: 02:61:bb:c0:24:a8:84:7e:45:d4:c0:69:d8:f0:5c: 55:cc:96:5a:a0:49:df:18:b9:ff:16:fa:fe:b8:29: cd:db:6e:00:a4:a3:c0:60:d2:bd:70:4f:32:9b:7f: 32:89:2a:d4:1e:d7:b6:5f:46:ba:c7:49:b2:58:ef: ae:db:0e:c8:d7:f8:d6:38:25:2a:50:5e:28:d5:16: ae:9c:59:30:60:77:04:63:44:4a:45:55:3e:1b:24: da:db:d9:37:65:0d:26:76:9f:b9:d1:f0:b9:68:8d: fa:8e:2a:a7:54:a4:1e:a9:70:a1:c1:5c:22:26:34: 6b:d7:b7:7c:91:3d:72:29:21:7e:2c:b5:f1:89:c2: b7:fc:04:6f:8a:78:09:bb:18:00:68:a0:81:c8:a0: 97:e9:a8:8c:2f:ee:3d:ef:03:c9:12:bc:a6:ac:0a: 11:54:43:eb:29:38:bc:50:a9:45:c5:14:99:9b:db: 81:a4:9e:19:a8:a8:fd:5a:3a:72:6a:05:a7:88:5c: 01:cb:07:66:53:8a:30:75:ba:9f:49:57:9a:52:cb: 46:a5:c4:50:00:50:9c:0d:75:e0:77:49:6d:63:2b: 39:74:d6:b0:d9:d3:7b:54:89:46:7b:9d:06:f9:4d: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0E:0A:B9:3F:5F:2F:D0:70:11:AF:33:46:15:FF:C1:A6:6D:8F:EF X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:75:46:f3:24:0f:6c:0b:cf:a0:ab:23:31:36:08:34:3a:d0: e8:e3:92:a8:4a:20:14:f1:2e:f2:3f:67:26:1a:67:eb:c9:09: 73:e9:88:c6:e5:f6:c8:df:da:f2:ff:e2:f2:17:7e:5b:16:c8: 08:e5:0d:ba:83:b3:9a:f0:d8:36:25:ca:f7:bd:23:2c:f8:bf: 46:d5:53:39:23:a1:f5:d7:7e:44:66:f8:7d:3a:82:e0:e6:c2: b0:82:57:98:91:f9:f2:08:79:6e:66:91:6e:d1:92:f4:3e:be: f3:ca:f2:49:c5:16:6b:a0:ca:64:d2:25:2c:f5:bc:e6:0f:7b: 37:99:ee:1e:eb:8a:b9:b5:8e:77:48:af:e7:d1:59:20:1e:28: b7:ca:94:82:4e:b2:6c:c8:0a:a9:1b:6c:2c:95:9b:df:b0:ff: d8:f8:13:0c:ec:7e:e7:f3:36:f2:d0:af:d6:90:c7:39:ac:64: d8:cf:48:5b:e0:79:20:c6:7e:11:f6:30:32:0a:d5:59:1b:ee: c5:8c:bf:cc:b7:dc:9a:01:3c:ab:75:78:ce:74:09:d2:56:77: fb:ff:8d:64:76:ba:06:d0:02:bc:1f:2f:4b:fe:90:e6:06:19: 2d:28:0a:f5:99:79:1c:6f:81:2d:72:e3:cc:79:1f:59:02:72: 25:35:76:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDcz2+YNBudBCvZTsDB3emY8AiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA1MDkyMTI2MjVaFw0yNTA1MTMwODI3MjVaMDMxMTAvBgNV BAMTKDFFMEUwQUI5M0Y1RjJGRDA3MDExQUYzMzQ2MTVGRkMxQTY2RDhGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTqY0Cp9gsl4Pwo4RswJhu8Ak qIR+RdTAadjwXFXMllqgSd8Yuf8W+v64Kc3bbgCko8Bg0r1wTzKbfzKJKtQe17Zf RrrHSbJY767bDsjX+NY4JSpQXijVFq6cWTBgdwRjREpFVT4bJNrb2TdlDSZ2n7nR 8LlojfqOKqdUpB6pcKHBXCImNGvXt3yRPXIpIX4stfGJwrf8BG+KeAm7GABooIHI oJfpqIwv7j3vA8kSvKasChFUQ+spOLxQqUXFFJmb24GknhmoqP1aOnJqBaeIXAHL B2ZTijB1up9JV5pSy0alxFAAUJwNdeB3SW1jKzl01rDZ03tUiUZ7nQb5Tas/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHg4KuT9fL9BwEa8zRhX/waZtj+8wHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC51RvMkD2wLz6CrIzE2CDQ60OjjkqhKIBTx LvI/ZyYaZ+vJCXPpiMbl9sjf2vL/4vIXflsWyAjlDbqDs5rw2DYlyve9Iyz4v0bV UzkjofXXfkRm+H06guDmwrCCV5iR+fIIeW5mkW7RkvQ+vvPK8knFFmugymTSJSz1 vOYPezeZ7h7rirm1jndIr+fRWSAeKLfKlIJOsmzICqkbbCyVm9+w/9j4Ewzsfufz NvLQr9aQxzmsZNjPSFvgeSDGfhH2MDIK1Vkb7sWMv8y33JoBPKt1eM50CdJWd/v/ jWR2ugbQArwfL0v+kOYGGS0oCvWZeRxvgS1y48x5H1kCciU1drU= -----END CERTIFICATE-----Generated at Sat May 10 05:25:51 2025 by rpki-client