$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: rUUWiUKREaPFTn2C4c76y4v4xKGnvf3oEKB0ppXnnnU= Subject key identifier: AB:19:33:BE:D0:CE:1B:66:C7:84:D2:46:31:50:D1:B2:CE:51:1C:58 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 4AD93774A05E396B4E56110A280212C9E7FEB0D1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 04E4 Signing time: Mon 16 Jun 2025 09:20:34 +0000 Manifest this update: Mon 16 Jun 2025 09:15:34 +0000 Manifest next update: Thu 19 Jun 2025 14:34:34 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: NQo2vb/2jq1yzHmtMhy2kCch3ioDuQlLaxVz0ti/5OM=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d9:37:74:a0:5e:39:6b:4e:56:11:0a:28:02:12:c9:e7:fe:b0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jun 16 09:15:34 2025 GMT Not After : Jun 19 14:34:34 2025 GMT Subject: CN=AB1933BED0CE1B66C784D2463150D1B2CE511C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:01:f5:af:79:e5:3d:8a:fd:ed:4e:1c:32: 4d:04:d3:b7:78:a9:63:e2:d5:a4:f2:80:37:4b:15: bf:80:33:01:02:cc:f1:8a:97:a4:0c:ce:8a:ef:69: fe:32:5d:1c:06:fd:cf:ae:dc:64:87:1c:0e:cf:c2: 67:e6:08:3c:ca:fb:dd:c2:51:7a:da:3e:93:e1:e0: e6:c2:2a:33:e8:b8:43:77:f0:0b:8f:9d:93:75:ca: cf:22:e4:97:40:93:9a:4b:6f:c8:bc:6e:ee:f9:13: cf:21:61:2d:79:47:6a:9f:de:0b:67:24:27:2e:0b: 18:e7:9a:b8:e7:17:6f:40:8a:e4:d2:4e:85:2b:ab: 3d:c0:1f:b9:5d:b5:3b:a5:66:38:a1:08:b1:2f:e7: 86:e7:a3:6b:d4:11:50:24:84:0d:ce:12:c0:cd:be: 7c:f7:bf:69:78:4b:cd:4f:49:df:5a:b7:c8:43:4a: ab:cd:64:1b:14:2b:3c:38:d8:73:fd:c0:94:d1:24: 68:9f:80:c3:c1:85:67:df:90:c6:f5:39:c1:1c:b4: a7:98:89:dc:ac:32:62:02:7f:55:1e:94:8f:92:7f: 91:bf:90:34:cb:23:38:36:dc:36:d1:c1:a1:49:e8: 06:92:59:d7:d6:75:21:37:d8:0e:40:b6:4a:3a:4f: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:19:33:BE:D0:CE:1B:66:C7:84:D2:46:31:50:D1:B2:CE:51:1C:58 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:63:d9:b3:d9:3d:32:da:80:81:be:c1:f8:67:1d:1c:eb:89: 5b:77:e8:87:5e:57:67:f9:42:f9:b0:6c:e3:dc:7c:53:5f:a6: 6d:b3:5a:5c:15:6f:2f:88:98:31:3c:b5:f9:7f:4d:bc:04:4e: 46:de:96:21:3f:9a:15:77:d2:7a:59:ca:2e:40:30:3f:87:a2: b1:32:fe:bb:68:83:e3:d6:37:89:25:e0:c2:21:f3:ba:45:32: d7:ce:f4:ff:c0:32:59:bb:2f:55:a2:e6:81:bd:06:28:f3:08: cc:12:3a:c4:f7:db:5a:8d:d3:ca:c1:61:78:cb:52:85:36:14: dd:c0:db:5e:c4:19:02:7b:85:06:e5:d2:0e:89:02:8e:d9:88: e9:b3:21:e8:7d:1c:cd:32:3f:35:0b:39:a6:ae:84:31:b5:2d: 91:4b:73:49:b7:e5:e2:85:01:2b:4d:f9:da:ce:eb:29:b6:cb: 1b:7f:64:3f:7d:ee:ac:fc:22:5e:42:b9:85:05:0e:af:c8:a5: f0:ec:c6:20:56:2c:f1:16:82:14:13:72:bb:ba:b6:fc:1a:06: fd:86:ee:54:2d:cb:3a:fb:24:bd:8d:6b:12:17:70:23:a3:50: ec:19:96:32:d9:2d:98:0e:bd:8f:94:59:72:bd:d0:db:28:33: 56:f1:52:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUStk3dKBeOWtOVhEKKAISyef+sNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDYxNjA5MTUzNFoX DTI1MDYxOTE0MzQzNFowMzExMC8GA1UEAxMoQUIxOTMzQkVEMENFMUI2NkM3ODRE MjQ2MzE1MEQxQjJDRTUxMUM1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMeAfWveeU9iv3tThwyTQTTt3ipY+LVpPKAN0sVv4AzAQLM8YqXpAzOiu9p /jJdHAb9z67cZIccDs/CZ+YIPMr73cJReto+k+Hg5sIqM+i4Q3fwC4+dk3XKzyLk l0CTmktvyLxu7vkTzyFhLXlHap/eC2ckJy4LGOeauOcXb0CK5NJOhSurPcAfuV21 O6VmOKEIsS/nhueja9QRUCSEDc4SwM2+fPe/aXhLzU9J31q3yENKq81kGxQrPDjY c/3AlNEkaJ+Aw8GFZ9+QxvU5wRy0p5iJ3KwyYgJ/VR6Uj5J/kb+QNMsjODbcNtHB oUnoBpJZ19Z1ITfYDkC2SjpP/W0CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSrGTO+ 0M4bZseE0kYxUNGyzlEcWDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4mPZs9k9 MtqAgb7B+GcdHOuJW3foh15XZ/lC+bBs49x8U1+mbbNaXBVvL4iYMTy1+X9NvARO Rt6WIT+aFXfSelnKLkAwP4eisTL+u2iD49Y3iSXgwiHzukUy1870/8AyWbsvVaLm gb0GKPMIzBI6xPfbWo3TysFheMtShTYU3cDbXsQZAnuFBuXSDokCjtmI6bMh6H0c zTI/NQs5pq6EMbUtkUtzSbfl4oUBK0352s7rKbbLG39kP33urPwiXkK5hQUOr8il 8OzGIFYs8RaCFBNyu7q2/BoG/YbuVC3LOvskvY1rEhdwI6NQ7BmWMtktmA69j5RZ cr3Q2ygzVvFSuA== -----END CERTIFICATE-----Generated at Wed Jun 18 10:58:17 2025 by rpki-client