$ rpki-client -vvf repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft File: C5E0183A7142717E23D90AF4650F1E14418D85C3.mft (raw, json) Hash identifier: dgbaJrqMuYgnBh88v5HD4A2xwLUIUVcngIqKuU6Ih1U= Subject key identifier: CA:8F:A0:1D:DF:78:BA:C2:A5:A2:B5:4F:8E:90:2E:C7:6A:C9:5C:A3 Authority key identifier: C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 Certificate issuer: /CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Certificate serial: 386FE7D65CCDBF1E05F9606625E7103B13F91512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 06:20:45 +0000 Manifest this update: Sun 15 Jun 2025 06:15:45 +0000 Manifest next update: Wed 18 Jun 2025 15:19:45 +0000 Files and hashes: 1: C5E0183A7142717E23D90AF4650F1E14418D85C3.crl (hash: BxJetv1wqAVZdJltX9X5skUx7e7TjINGH8EV83aEZbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6f:e7:d6:5c:cd:bf:1e:05:f9:60:66:25:e7:10:3b:13:f9:15:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Validity Not Before: Jun 15 06:15:45 2025 GMT Not After : Jun 18 15:19:45 2025 GMT Subject: CN=CA8FA01DDF78BAC2A5A2B54F8E902EC76AC95CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:d4:d3:70:53:aa:ef:47:91:34:b0:81:9e: 97:8c:53:a1:0b:71:40:ef:6d:54:fc:ba:d8:ef:a3: 1a:76:88:ed:e5:16:ea:85:49:83:25:b7:1b:08:34: bc:22:06:a0:60:d1:06:ff:ba:4b:b1:a8:a5:c6:1d: 5d:ca:33:64:53:73:96:9d:f8:35:4f:c2:f3:fc:1b: 8b:18:57:1e:a8:9f:5f:2b:7d:8a:fd:2e:e9:2c:ad: ce:1c:02:01:34:23:4f:ba:b8:b7:15:a8:d9:71:63: 93:bc:e9:f0:9a:bf:12:cb:0b:b7:84:81:77:df:1b: 1b:e1:e7:02:6d:22:9a:ab:80:44:48:5f:90:e1:08: c3:9a:ba:61:00:65:05:78:66:22:01:df:b6:78:e2: de:81:13:0e:1b:a3:fb:7f:d0:aa:97:5b:43:a9:1a: b3:59:cb:6f:2b:39:c9:79:e4:b1:fa:19:1c:e4:a5: 3f:3d:1e:29:e8:4a:50:7a:33:78:87:f5:c5:78:f6: 32:08:3e:2d:58:6d:c4:3b:21:be:07:25:74:a3:3e: 47:fa:6b:0f:12:66:05:6d:0b:a3:99:9d:8e:78:5f: 81:cb:cf:a9:97:6c:8c:78:57:b8:aa:ed:d8:b2:63: 13:ea:31:66:a6:43:11:ae:c5:63:ff:10:bd:9f:c5: fd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:A0:1D:DF:78:BA:C2:A5:A2:B5:4F:8E:90:2E:C7:6A:C9:5C:A3 X509v3 Authority Key Identifier: keyid:C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6f:53:08:c1:e5:c1:29:e0:1e:6f:4a:b0:30:6f:d2:ae:c9: 7d:cb:05:25:57:e1:9d:49:ac:3a:ab:9a:53:7a:23:3f:6f:ad: f3:e7:54:0c:9e:67:22:69:68:05:2a:f8:be:ec:9c:e6:ee:13: 08:7f:7c:6b:18:76:80:37:0d:96:c1:b0:32:d7:17:96:58:9e: e7:29:53:d9:ae:82:f9:65:d4:77:1d:62:5d:3f:1e:15:a9:f8: 30:3e:df:d4:d4:18:b8:49:4e:38:88:1e:c2:07:34:ff:12:11: 6b:a8:49:10:51:ae:0d:e5:c0:b7:85:8b:80:97:8e:e5:ec:f5: fc:96:cb:0c:a3:79:0a:e8:9b:ca:c4:f3:28:ce:12:9a:10:56: da:ff:ab:c1:aa:16:ef:b6:4f:45:f8:1f:1b:e9:d8:9f:43:7c: a0:4f:27:dc:46:a7:10:fc:65:1a:e5:86:79:fd:3a:85:c1:72: eb:bc:d1:90:e6:93:71:25:ca:fb:fd:2b:f3:63:cc:d1:9a:c3: f1:a3:81:9b:1b:90:27:a9:2f:fe:19:47:9a:3b:fd:9e:bf:3b: b4:a5:1a:7b:a0:25:e7:51:33:39:f9:b9:c3:76:9b:6c:3c:70: 36:e7:47:4a:b4:2d:11:12:b6:ef:cf:95:c1:66:46:e8:aa:1d: c6:fe:b6:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOG/n1lzNvx4F+WBmJecQOxP5FRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0 MThEODVDMzAeFw0yNTA2MTUwNjE1NDVaFw0yNTA2MTgxNTE5NDVaMDMxMTAvBgNV BAMTKENBOEZBMDFEREY3OEJBQzJBNUEyQjU0RjhFOTAyRUM3NkFDOTVDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpNTTcFOq70eRNLCBnpeMU6EL cUDvbVT8utjvoxp2iO3lFuqFSYMltxsINLwiBqBg0Qb/ukuxqKXGHV3KM2RTc5ad +DVPwvP8G4sYVx6on18rfYr9Luksrc4cAgE0I0+6uLcVqNlxY5O86fCavxLLC7eE gXffGxvh5wJtIpqrgERIX5DhCMOaumEAZQV4ZiIB37Z44t6BEw4bo/t/0KqXW0Op GrNZy28rOcl55LH6GRzkpT89HinoSlB6M3iH9cV49jIIPi1YbcQ7Ib4HJXSjPkf6 aw8SZgVtC6OZnY54X4HLz6mXbIx4V7iq7diyYxPqMWamQxGuxWP/EL2fxf03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyo+gHd94usKlorVPjpAux2rJXKMwHwYDVR0j BBgwFoAUxeAYOnFCcX4j2Qr0ZQ8eFEGNhcMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDRmMjQ2MC1mZTUwLTQ4MDAtYWUwMi01N2NiM2U4MTVkNWUvMC9DNUUwMTgzQTcx NDI3MTdFMjNEOTBBRjQ2NTBGMUUxNDQxOEQ4NUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0MThE ODVDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFF MTQ0MThEODVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpvUwjB5cEp4B5vSrAwb9KuyX3LBSVX4Z1J rDqrmlN6Iz9vrfPnVAyeZyJpaAUq+L7snObuEwh/fGsYdoA3DZbBsDLXF5ZYnucp U9mugvll1HcdYl0/HhWp+DA+39TUGLhJTjiIHsIHNP8SEWuoSRBRrg3lwLeFi4CX juXs9fyWywyjeQrom8rE8yjOEpoQVtr/q8GqFu+2T0X4Hxvp2J9DfKBPJ9xGpxD8 ZRrlhnn9OoXBcuu80ZDmk3Elyvv9K/NjzNGaw/GjgZsbkCepL/4ZR5o7/Z6/O7Sl GnugJedRMzn5ucN2m2w8cDbnR0q0LREStu/PlcFmRuiqHcb+tuQ= -----END CERTIFICATE-----Generated at Mon Jun 16 14:39:39 2025 by rpki-client