$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: MpvJ4Bfw2Bs0+U6oNXkzvElrtYayjh0bpAFuFClQONo= Subject key identifier: 2B:13:F6:AB:BA:D4:C7:EF:00:39:C5:B4:79:4A:7D:C9:7E:B7:51:E0 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 506E444F7FC460F4E2090B128847F31C523FA921 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 01F1 Signing time: Wed 06 Aug 2025 10:02:15 +0000 Manifest this update: Wed 06 Aug 2025 09:57:15 +0000 Manifest next update: Sat 09 Aug 2025 11:54:15 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: 9Ceqsw5oQ3HeyZQP9FidpetPtUgOf7xt+h25zTYq79I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6e:44:4f:7f:c4:60:f4:e2:09:0b:12:88:47:f3:1c:52:3f:a9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Aug 6 09:57:15 2025 GMT Not After : Aug 9 11:54:15 2025 GMT Subject: CN=2B13F6ABBAD4C7EF0039C5B4794A7DC97EB751E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:e0:0f:8a:e7:08:34:6c:75:da:8a:a0:4b: ef:b6:98:2e:c1:85:0d:64:42:e9:af:e8:59:19:5d: 24:d4:8c:2b:11:0a:47:28:17:61:97:a9:19:02:fb: c8:49:b7:63:56:1d:f2:88:37:0e:b1:16:13:9c:f2: 6a:39:ac:4d:98:cc:4c:74:40:f4:ff:0b:0f:8f:67: b5:6e:6c:d4:40:05:ba:7a:41:80:f2:8c:6c:8e:1d: 9b:9b:46:52:38:28:a7:48:3a:63:e7:95:98:35:d1: 4a:ab:90:bc:af:7c:0f:6b:8d:96:60:36:c8:b9:e4: 86:72:0e:94:e6:77:d1:05:00:48:b2:7c:92:fd:a0: 5b:6d:6a:67:53:54:c1:56:d2:a5:7e:dc:f5:f9:20: 9c:15:3b:e8:02:91:14:f0:3d:40:6d:b1:24:e4:30: c4:64:4b:d5:a7:e5:bf:49:b6:b3:cc:b3:4b:29:88: ee:67:fd:01:4e:91:65:ee:ae:68:e0:9f:b9:66:d1: 99:63:7b:ae:8a:91:b5:f8:c5:2c:ea:1f:88:2a:f5: dd:b2:f0:a5:81:89:92:eb:54:8f:58:d5:e2:4d:26: 83:0f:85:b8:f6:d7:33:b5:d0:69:94:13:55:4c:c3: 1c:c4:c1:c9:f2:3b:24:52:53:34:a7:35:81:64:ce: 95:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:F6:AB:BA:D4:C7:EF:00:39:C5:B4:79:4A:7D:C9:7E:B7:51:E0 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:47:31:d4:06:a5:82:a1:d5:49:bb:c7:cb:07:b4:74:20: 51:3a:c3:2f:37:63:d7:d2:57:f8:40:14:9c:10:05:b6:af:dc: 9e:40:fe:11:3f:ea:d5:85:d9:b0:e1:88:7e:5f:72:29:b9:c6: dc:0c:24:ac:e6:82:ee:0f:f5:72:2b:d6:30:94:b7:6d:48:85: b6:23:a0:ba:10:5d:92:d9:84:cf:c7:50:61:3d:85:f5:23:d8: 49:fe:a1:f2:9d:cd:f7:e6:3c:d5:b1:cd:31:ce:d0:d0:7e:97: 64:c3:34:85:1d:35:a1:39:7f:ab:3d:57:f2:a4:40:fa:2b:41: 73:0b:bf:34:05:a4:4e:fc:92:49:93:11:8a:69:73:14:1e:0a: 02:70:10:a0:92:4c:52:bc:63:08:2c:37:53:65:31:b2:02:f2: 83:a9:20:d3:86:90:85:20:c3:02:bf:19:f6:c8:cb:a1:49:1c: 86:51:3a:c5:d2:ba:2d:73:b4:88:99:04:63:f8:2d:b3:ae:5c: b1:92:ef:67:0c:7e:e8:3a:7c:02:27:ea:d9:36:d9:ac:eb:e5: 0e:44:91:c2:cc:72:b2:ac:82:8f:15:4f:05:fb:66:04:3b:21: 6a:02:54:35:86:2b:0c:34:d9:e9:0e:51:0e:5f:b1:93:ac:ff: bd:88:06:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUG5ET3/EYPTiCQsSiEfzHFI/qSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTA4MDYwOTU3MTVaFw0yNTA4MDkxMTU0MTVaMDMxMTAvBgNV BAMTKDJCMTNGNkFCQkFENEM3RUYwMDM5QzVCNDc5NEE3REM5N0VCNzUxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjOAPiucINGx12oqgS++2mC7B hQ1kQumv6FkZXSTUjCsRCkcoF2GXqRkC+8hJt2NWHfKINw6xFhOc8mo5rE2YzEx0 QPT/Cw+PZ7VubNRABbp6QYDyjGyOHZubRlI4KKdIOmPnlZg10UqrkLyvfA9rjZZg Nsi55IZyDpTmd9EFAEiyfJL9oFttamdTVMFW0qV+3PX5IJwVO+gCkRTwPUBtsSTk MMRkS9Wn5b9JtrPMs0spiO5n/QFOkWXurmjgn7lm0Zlje66KkbX4xSzqH4gq9d2y 8KWBiZLrVI9Y1eJNJoMPhbj21zO10GmUE1VMwxzEwcnyOyRSUzSnNYFkzpVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxP2q7rUx+8AOcW0eUp9yX63UeAwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeBRzHUBqWCodVJu8fLB7R0IFE6wy83Y9fS V/hAFJwQBbav3J5A/hE/6tWF2bDhiH5fcim5xtwMJKzmgu4P9XIr1jCUt21IhbYj oLoQXZLZhM/HUGE9hfUj2En+ofKdzffmPNWxzTHO0NB+l2TDNIUdNaE5f6s9V/Kk QPorQXMLvzQFpE78kkmTEYppcxQeCgJwEKCSTFK8YwgsN1NlMbIC8oOpINOGkIUg wwK/GfbIy6FJHIZROsXSui1ztIiZBGP4LbOuXLGS72cMfug6fAIn6tk22azr5Q5E kcLMcrKsgo8VTwX7ZgQ7IWoCVDWGKww02ekOUQ5fsZOs/72IBnU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:06 2025 by rpki-client