$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: +46ebl5+DCzTymVPtcNM4StmKYxasnNXs9yObJgFppk= Subject key identifier: D2:80:5C:6C:3D:71:D7:E7:6D:F0:92:F6:73:1E:31:14:93:C1:CA:96 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 6CE7A29820922DFC77D5E7DF173FDF682525D34F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 0219 Signing time: Tue 04 Nov 2025 06:12:11 +0000 Manifest this update: Tue 04 Nov 2025 06:07:11 +0000 Manifest next update: Fri 07 Nov 2025 11:24:11 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: c+xGk2rpUpbnqqXgoRnmjLhyifEnbr7uv76oEQYCuDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e7:a2:98:20:92:2d:fc:77:d5:e7:df:17:3f:df:68:25:25:d3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Nov 4 06:07:11 2025 GMT Not After : Nov 7 11:24:11 2025 GMT Subject: CN=D2805C6C3D71D7E76DF092F6731E311493C1CA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:cc:ea:0b:30:64:7e:d4:e6:6b:5b:ee:8f: b0:e9:c1:bb:b8:b6:1f:22:fb:c7:3d:a4:bb:5b:ed: af:04:ca:c3:f2:75:e3:c9:4d:30:a0:f4:40:02:44: 05:4d:f4:63:2f:d6:e4:fd:c5:eb:2f:10:d4:87:4e: 5e:dd:3e:57:a3:a1:57:74:f6:a5:2e:f8:2d:3c:c9: b3:78:c5:c7:63:18:33:55:ea:d1:af:ad:78:9e:0c: 74:9c:8d:63:e4:d4:23:c9:05:8f:6c:a5:8b:6c:c7: 7f:4a:e3:33:c0:03:53:9c:73:01:ac:1a:37:2c:5f: f4:e5:23:00:35:b8:81:af:25:a2:1a:9e:dc:3d:b4: 65:04:04:59:b3:94:62:4c:78:49:d1:d6:a2:99:cc: 5a:c0:ae:29:4b:ee:f7:25:63:00:cc:4a:1a:fc:6e: 70:7d:f0:ac:40:cf:dd:ff:b5:98:42:89:39:d9:e9: 18:ab:32:09:c9:00:77:16:5d:b0:3a:2a:b2:b5:c1: 6b:14:80:f7:42:7e:fb:26:3c:95:89:9f:65:6d:5f: b2:d0:15:71:05:e0:b5:70:c2:97:d1:48:85:03:1b: 58:95:56:55:21:a5:33:ec:ab:60:cc:95:de:c6:a2: 2e:f2:d3:c4:82:79:63:32:19:ba:97:d4:2d:ea:4f: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:5C:6C:3D:71:D7:E7:6D:F0:92:F6:73:1E:31:14:93:C1:CA:96 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:64:d4:4c:d4:80:e4:0f:ea:38:78:6f:fa:df:da:c4:68: bd:f4:75:d7:b8:40:69:0b:d9:49:29:8d:b4:86:5b:5d:4d:3a: 4a:7e:67:74:0b:ed:c6:29:d7:f0:bb:73:15:7a:8d:bc:55:2f: bf:02:40:2a:e1:b9:75:02:e3:40:fe:fa:66:40:9a:af:53:40: e8:a8:85:fc:31:dc:4b:26:1a:60:db:36:ae:43:06:e1:71:c5: b5:b9:40:2f:4c:0f:4e:5e:8b:0b:9b:02:43:21:0c:10:d2:a8: 12:4b:30:91:fb:ef:0e:16:98:00:7f:d1:b8:dd:23:1f:ee:a7: e5:33:11:13:7b:b4:ca:20:00:21:0f:fb:2d:b4:0a:44:71:ec: ce:4a:2e:c3:19:81:c3:51:57:c4:99:be:59:19:0c:f7:b2:48: 39:e1:fc:e6:52:ac:28:9c:f1:ab:65:f7:9f:a8:4b:eb:62:04: 0c:6a:6a:45:4a:a9:46:f8:d3:3d:7a:29:0b:bb:62:c0:4a:37: 03:da:53:f1:2f:68:8d:45:54:67:65:61:71:e2:91:5b:d2:3d: 7b:3b:74:21:8a:9e:ad:db:d1:94:86:45:81:eb:30:df:13:60: 35:60:ac:6d:35:b4:89:ea:b7:80:8b:0c:d4:09:b1:69:f4:17: 00:0a:ba:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOeimCCSLfx31effFz/faCUl008wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTExMDQwNjA3MTFaFw0yNTExMDcxMTI0MTFaMDMxMTAvBgNV BAMTKEQyODA1QzZDM0Q3MUQ3RTc2REYwOTJGNjczMUUzMTE0OTNDMUNBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AszqCzBkftTma1vuj7Dpwbu4 th8i+8c9pLtb7a8EysPydePJTTCg9EACRAVN9GMv1uT9xesvENSHTl7dPlejoVd0 9qUu+C08ybN4xcdjGDNV6tGvrXieDHScjWPk1CPJBY9spYtsx39K4zPAA1OccwGs GjcsX/TlIwA1uIGvJaIantw9tGUEBFmzlGJMeEnR1qKZzFrArilL7vclYwDMShr8 bnB98KxAz93/tZhCiTnZ6RirMgnJAHcWXbA6KrK1wWsUgPdCfvsmPJWJn2VtX7LQ FXEF4LVwwpfRSIUDG1iVVlUhpTPsq2DMld7Goi7y08SCeWMyGbqX1C3qT56RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oBcbD1x1+dt8JL2cx4xFJPBypYwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw8ZNRM1IDkD+o4eG/639rEaL30dde4QGkL 2UkpjbSGW11NOkp+Z3QL7cYp1/C7cxV6jbxVL78CQCrhuXUC40D++mZAmq9TQOio hfwx3EsmGmDbNq5DBuFxxbW5QC9MD05eiwubAkMhDBDSqBJLMJH77w4WmAB/0bjd Ix/up+UzERN7tMogACEP+y20CkRx7M5KLsMZgcNRV8SZvlkZDPeySDnh/OZSrCic 8atl95+oS+tiBAxqakVKqUb40z16KQu7YsBKNwPaU/EvaI1FVGdlYXHikVvSPXs7 dCGKnq3b0ZSGRYHrMN8TYDVgrG01tInqt4CLDNQJsWn0FwAKuss= -----END CERTIFICATE-----Generated at Wed Nov 5 23:41:56 2025 by rpki-client