$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: GKoOJcuuxROoEvU11I/I66Ft2nM5UzhN13YH90+i5mQ= Subject key identifier: FE:9A:9B:96:6C:29:94:94:3B:D0:D1:DA:38:16:B6:B5:60:B8:7D:D9 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 3C4F667A9FE57B91BEDFE0718A5E967EC736160B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 0173 Signing time: Tue 05 Aug 2025 03:31:51 +0000 Manifest this update: Tue 05 Aug 2025 03:26:51 +0000 Manifest next update: Fri 08 Aug 2025 14:42:51 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: Vz94noxsc1+DnhrHb42ji4Bb5Ej9Dphu4S5WmDXjJGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4f:66:7a:9f:e5:7b:91:be:df:e0:71:8a:5e:96:7e:c7:36:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Aug 5 03:26:51 2025 GMT Not After : Aug 8 14:42:51 2025 GMT Subject: CN=FE9A9B966C2994943BD0D1DA3816B6B560B87DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:49:40:3a:15:a7:98:7a:6f:05:89:3e:87: fc:36:cd:2f:96:5b:3e:98:83:06:03:6d:db:8d:3d: fa:4e:e8:d2:60:96:e5:7d:c8:ba:fb:c9:fb:1f:7f: 52:4f:64:87:ae:aa:ad:6a:f9:dd:ac:a4:13:37:d8: d8:ae:ed:18:45:b0:18:95:e4:81:10:1d:5a:1c:b6: bf:69:2d:40:9b:4b:31:38:d3:0f:12:59:f5:7b:16: 08:94:44:7d:b6:30:3b:86:d9:79:9e:29:0a:7c:70: 10:9e:02:22:e3:f4:56:ad:b5:ad:52:7e:06:2f:56: c1:6a:c9:7e:f9:16:5e:cf:df:31:01:ef:35:eb:3d: 01:bb:3f:d9:0c:15:d0:6b:52:6f:70:79:8e:b1:fb: 4e:42:ad:97:cf:90:d4:2c:90:8d:5a:f9:34:e1:c0: 1f:44:75:70:8e:87:a6:44:39:ed:ea:a2:cc:55:6f: e1:2f:21:92:1d:7d:f7:50:63:25:fc:a6:c8:04:36: 13:0b:8d:26:90:9c:4d:57:87:39:89:cd:d6:ff:1d: e0:9b:da:84:7a:9a:3b:b0:29:85:31:f7:ef:ca:6d: ab:19:3c:9c:8f:f5:fe:da:f7:d5:38:c5:02:81:67: 37:d6:22:d9:f6:43:fd:dc:59:fb:92:d2:0c:4c:b8: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:9B:96:6C:29:94:94:3B:D0:D1:DA:38:16:B6:B5:60:B8:7D:D9 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0a:db:dd:df:cb:fc:23:68:e9:e1:8f:98:9e:e3:39:09:af: b2:00:3f:47:cb:a6:ed:39:7a:ad:b2:f7:a2:fb:ad:17:0e:8e: fb:db:cc:1d:21:a6:d7:18:0a:77:3a:48:59:a6:7f:73:d6:a1: 56:03:e1:4c:8c:4d:d5:28:e9:03:37:56:59:e1:a4:0c:e1:6f: c5:b3:93:27:98:92:cf:56:0f:55:d2:71:17:40:d5:31:9c:e1: 78:0d:d7:01:aa:be:e8:e8:8a:df:d5:d4:71:a6:99:f2:59:20: 98:33:14:29:ee:3a:48:70:ea:04:13:71:dc:cd:af:58:f9:f2: 81:8a:dd:c8:f6:de:74:40:e9:8c:78:cf:b0:36:a3:ed:76:d6: 77:b0:1f:c0:0e:db:2d:3a:d2:a1:8a:b0:b5:71:ca:15:3d:86: b5:3d:f4:d4:14:5c:a1:e8:d6:d7:95:50:27:0b:77:bf:42:33: 63:0b:30:1c:4d:35:65:df:03:13:e1:b4:e0:dc:95:da:87:55: b9:4e:92:f3:8a:d2:7b:e2:bf:79:b4:f5:9b:94:b7:cb:33:84: bb:6c:f7:d8:ab:b0:1e:6e:2c:8d:df:ad:b2:90:a1:b4:b1:8d: 83:72:8f:9c:6d:78:88:ef:19:e8:62:9d:6e:f9:3b:31:23:e1: 55:54:39:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPE9mep/le5G+3+Bxil6Wfsc2FgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTA4MDUwMzI2NTFaFw0yNTA4MDgxNDQyNTFaMDMxMTAvBgNV BAMTKEZFOUE5Qjk2NkMyOTk0OTQzQkQwRDFEQTM4MTZCNkI1NjBCODdERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lUlAOhWnmHpvBYk+h/w2zS+W Wz6YgwYDbduNPfpO6NJgluV9yLr7yfsff1JPZIeuqq1q+d2spBM32Niu7RhFsBiV 5IEQHVoctr9pLUCbSzE40w8SWfV7FgiURH22MDuG2XmeKQp8cBCeAiLj9Fatta1S fgYvVsFqyX75Fl7P3zEB7zXrPQG7P9kMFdBrUm9weY6x+05CrZfPkNQskI1a+TTh wB9EdXCOh6ZEOe3qosxVb+EvIZIdffdQYyX8psgENhMLjSaQnE1XhzmJzdb/HeCb 2oR6mjuwKYUx9+/KbasZPJyP9f7a99U4xQKBZzfWItn2Q/3cWfuS0gxMuL0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/pqblmwplJQ70NHaOBa2tWC4fdkwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoK293fy/wjaOnhj5ie4zkJr7IAP0fLpu05 eq2y96L7rRcOjvvbzB0hptcYCnc6SFmmf3PWoVYD4UyMTdUo6QM3VlnhpAzhb8Wz kyeYks9WD1XScRdA1TGc4XgN1wGqvujoit/V1HGmmfJZIJgzFCnuOkhw6gQTcdzN r1j58oGK3cj23nRA6Yx4z7A2o+121newH8AO2y060qGKsLVxyhU9hrU99NQUXKHo 1teVUCcLd79CM2MLMBxNNWXfAxPhtODcldqHVblOkvOK0nviv3m09ZuUt8szhLts 99irsB5uLI3frbKQobSxjYNyj5xteIjvGehinW75OzEj4VVUOQs= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:19 2025 by rpki-client