$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: tDWDz3WRmwNIKrEJaluMkEI9EAs074hD2gi8JXglPLo= Subject key identifier: 98:97:69:8A:2D:7F:57:6A:8D:F5:EB:99:50:5E:00:9D:F5:61:C0:F4 Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 29E3A30B370CE474EE7AA1F733856D166B04D05B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01A8 Signing time: Mon 16 Jun 2025 00:31:44 +0000 Manifest this update: Mon 16 Jun 2025 00:26:44 +0000 Manifest next update: Thu 19 Jun 2025 05:50:44 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: Lk+ZkOePzpH5+GnBp6xRGbHV8tZrFzqU0LYO55DwUtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e3:a3:0b:37:0c:e4:74:ee:7a:a1:f7:33:85:6d:16:6b:04:d0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Jun 16 00:26:44 2025 GMT Not After : Jun 19 05:50:44 2025 GMT Subject: CN=9897698A2D7F576A8DF5EB99505E009DF561C0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:7a:71:37:75:79:be:ee:9d:9a:29:fa:ac: d8:f3:11:c5:9a:ce:24:69:72:80:fc:ed:0c:bf:ba: f4:b3:94:49:71:8a:77:65:3c:dd:c1:64:29:18:b6: 5c:99:aa:e9:70:bd:e9:24:02:fb:09:60:22:9e:8a: c4:ed:9e:8e:d8:10:84:ca:c7:b4:34:e9:cc:6a:3b: 30:00:c4:10:e3:be:eb:22:d2:63:65:6d:52:4f:25: 14:78:94:ed:31:b6:29:e7:e0:63:32:54:6b:ef:ac: ac:ff:3b:1f:5f:bd:c4:f2:cf:d4:8a:ab:fd:08:5f: d3:42:c4:09:bd:c9:04:b2:b4:49:95:63:2c:bd:72: c4:39:f5:9c:54:6e:e3:e3:3e:1d:b5:77:8d:f8:fe: 2a:49:e5:7d:2f:2a:e0:28:72:52:83:e6:0b:8d:e4: 53:ae:3b:e9:9d:09:7b:11:c0:8a:b8:d1:9f:5c:fb: 69:ea:18:0d:e5:1d:a6:f5:4e:55:a5:29:98:1d:a3: 43:e5:a5:0e:86:29:cf:9a:3a:5e:ca:39:16:1c:02: 26:7a:af:c6:52:78:ca:8d:8f:b8:c4:84:83:86:e1: 6c:93:e6:df:13:e5:2d:47:0b:73:c2:ad:c9:30:c0: 5d:84:ad:84:8f:fe:8a:02:20:78:8e:86:f5:8c:18: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:97:69:8A:2D:7F:57:6A:8D:F5:EB:99:50:5E:00:9D:F5:61:C0:F4 X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:25:b9:46:d7:fd:10:63:82:68:d7:ee:62:a9:7e:4b:eb:e6: 53:b7:1e:6c:24:c6:be:5c:fc:9b:f6:49:a4:60:6b:d0:fa:3f: 92:5d:ff:e9:a7:ae:62:24:cc:be:e8:ca:6d:52:39:14:d1:c0: c4:14:99:d5:34:59:ee:cd:6f:42:c4:89:58:ad:b8:98:39:64: 06:b3:c1:15:8b:d3:a2:22:0a:bd:44:85:d3:3e:dc:86:40:be: 72:dd:fa:26:7e:73:69:85:27:e8:2d:d5:60:6f:70:e0:1a:e9: 1d:38:4f:38:5c:53:3a:9e:15:ab:81:44:fd:2f:0b:03:fb:13: cc:b5:f2:8c:da:f6:72:c4:00:ad:8b:97:26:a3:00:aa:bd:c3: 88:1f:33:a4:68:2b:22:49:5a:a4:4f:5a:82:12:a1:99:47:82: cb:90:0e:08:ae:21:c5:15:d2:fb:f3:79:99:9e:6a:bb:56:65: 8b:36:5f:52:19:61:97:86:9f:54:32:e5:37:15:47:37:2b:e7: ff:79:6a:95:99:21:9a:92:13:3b:b0:d4:c7:51:09:30:3c:f5: 38:68:63:37:b1:38:8f:cc:45:21:cb:e1:4b:e3:77:b1:81:5f: aa:95:44:68:23:fa:af:b2:5a:cb:75:0d:5d:52:a7:72:44:0e: c3:96:b6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeOjCzcM5HTueqH3M4VtFmsE0FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA2MTYwMDI2NDRaFw0yNTA2MTkwNTUwNDRaMDMxMTAvBgNV BAMTKDk4OTc2OThBMkQ3RjU3NkE4REY1RUI5OTUwNUUwMDlERjU2MUMwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5XpxN3V5vu6dmin6rNjzEcWa ziRpcoD87Qy/uvSzlElxindlPN3BZCkYtlyZqulwvekkAvsJYCKeisTtno7YEITK x7Q06cxqOzAAxBDjvusi0mNlbVJPJRR4lO0xtinn4GMyVGvvrKz/Ox9fvcTyz9SK q/0IX9NCxAm9yQSytEmVYyy9csQ59ZxUbuPjPh21d434/ipJ5X0vKuAoclKD5guN 5FOuO+mdCXsRwIq40Z9c+2nqGA3lHab1TlWlKZgdo0PlpQ6GKc+aOl7KORYcAiZ6 r8ZSeMqNj7jEhIOG4WyT5t8T5S1HC3PCrckwwF2ErYSP/ooCIHiOhvWMGERTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJdpii1/V2qN9euZUF4AnfVhwPQwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoluUbX/RBjgmjX7mKpfkvr5lO3Hmwkxr5c /Jv2SaRga9D6P5Jd/+mnrmIkzL7oym1SORTRwMQUmdU0We7Nb0LEiVituJg5ZAaz wRWL06IiCr1EhdM+3IZAvnLd+iZ+c2mFJ+gt1WBvcOAa6R04TzhcUzqeFauBRP0v CwP7E8y18oza9nLEAK2LlyajAKq9w4gfM6RoKyJJWqRPWoISoZlHgsuQDgiuIcUV 0vvzeZmeartWZYs2X1IZYZeGn1Qy5TcVRzcr5/95apWZIZqSEzuw1MdRCTA89Tho YzexOI/MRSHL4Uvjd7GBX6qVRGgj+q+yWst1DV1Sp3JEDsOWth8= -----END CERTIFICATE-----Generated at Wed Jun 18 00:59:38 2025 by rpki-client