$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: /t2f79biZzhoolpeBA0DH7YTqi8/b2+FhKIBK+qmsGs= Subject key identifier: E0:21:18:13:3C:57:AE:04:09:C5:A8:0A:68:58:24:69:98:14:C3:BF Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 01101FFFCED690219EF097E904509601692D758A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 015C Signing time: Sat 14 Jun 2025 02:01:47 +0000 Manifest this update: Sat 14 Jun 2025 01:56:47 +0000 Manifest next update: Tue 17 Jun 2025 09:28:47 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: aE92eTPTOQlpz0WNVUWXWUmtE6nlw/6omWx3pfD9W2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 09:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:10:1f:ff:ce:d6:90:21:9e:f0:97:e9:04:50:96:01:69:2d:75:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Jun 14 01:56:47 2025 GMT Not After : Jun 17 09:28:47 2025 GMT Subject: CN=E02118133C57AE0409C5A80A685824699814C3BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:a8:bf:65:a4:9c:0c:f0:24:c1:14:84:51: 42:e9:0e:e7:8a:82:3a:73:34:75:87:50:67:38:b1: 39:06:93:d1:b3:94:33:57:cb:96:0b:b7:ad:92:5d: 68:e7:cb:70:32:c2:56:91:4e:ab:94:76:32:85:f9: f0:b3:e8:f4:28:93:ff:af:b9:6f:02:96:ca:b4:22: 8f:3c:3a:c7:ee:ef:02:f1:ca:21:a6:1e:fe:72:78: 8e:84:25:7f:ab:9a:de:33:e0:61:b2:e8:3f:cb:7d: ec:13:0e:0a:d7:74:ae:6b:06:86:87:97:01:67:42: f0:f9:6c:02:10:64:ef:55:af:c3:6c:00:c2:01:1d: b3:71:97:a8:43:12:07:58:67:67:f8:b1:1b:e5:cf: a4:e7:21:3c:44:b5:b0:58:31:9d:2a:5c:bb:b5:a2: 24:74:23:6a:07:06:b9:33:50:be:d1:9d:fe:54:ec: e3:f4:89:36:f3:5f:90:dd:1e:90:ff:a4:3c:86:57: 04:ca:ff:55:27:a0:a3:04:22:1e:b1:9c:6d:a4:7f: 5b:fe:74:83:93:9c:e3:1b:95:6a:7a:59:28:44:ae: 1d:d5:70:ab:93:05:9e:d6:da:d4:5c:ae:ec:62:65: 2c:9d:d7:0c:f9:78:7b:4c:d1:0c:36:15:52:30:5d: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:18:13:3C:57:AE:04:09:C5:A8:0A:68:58:24:69:98:14:C3:BF X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:15:de:0c:37:ff:28:81:99:8c:78:42:76:86:4c:1b:a8:f1: a0:8f:2b:a6:1d:ae:34:92:85:97:c2:93:e7:b3:ba:35:d9:9f: df:e8:32:9a:70:23:ba:62:1b:6b:de:79:9c:59:4a:50:c9:e8: b3:36:8d:95:72:9d:21:71:aa:f1:48:25:4d:af:01:0e:45:16: 8a:65:9e:b6:39:a3:66:17:1f:4d:3d:ab:36:11:5c:60:69:98: 31:70:c9:ff:1d:cf:3e:81:0e:74:1d:67:5d:4d:56:5c:63:2a: 2a:65:7a:57:c5:2c:4b:a8:84:4f:48:96:d7:a7:d7:21:97:f5: 7a:44:e4:c2:85:31:95:dc:4c:be:63:2a:59:59:b9:2f:96:a8: 7b:25:bc:44:b0:e0:96:bf:7e:da:b4:7d:57:9b:15:17:0a:df: 42:26:af:d5:96:25:06:1d:e2:bd:db:2b:66:a4:a2:44:6e:4c: 7a:07:b0:56:dc:85:68:36:1a:c7:28:30:f0:f1:f2:eb:46:e4: e7:6f:38:eb:e0:89:a6:9e:68:18:c6:2d:95:86:87:96:72:e9: 69:3e:70:36:92:16:42:4d:f7:88:f8:dc:b4:97:ff:17:47:e6: f6:c2:40:51:83:59:d4:f8:b6:7b:8a:cc:3a:6f:db:23:54:22: 44:ad:bc:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARAf/87WkCGe8JfpBFCWAWktdYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTA2MTQwMTU2NDdaFw0yNTA2MTcwOTI4NDdaMDMxMTAvBgNV BAMTKEUwMjExODEzM0M1N0FFMDQwOUM1QTgwQTY4NTgyNDY5OTgxNEMzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4qi/ZaScDPAkwRSEUULpDueK gjpzNHWHUGc4sTkGk9GzlDNXy5YLt62SXWjny3AywlaRTquUdjKF+fCz6PQok/+v uW8Clsq0Io88Osfu7wLxyiGmHv5yeI6EJX+rmt4z4GGy6D/LfewTDgrXdK5rBoaH lwFnQvD5bAIQZO9Vr8NsAMIBHbNxl6hDEgdYZ2f4sRvlz6TnITxEtbBYMZ0qXLu1 oiR0I2oHBrkzUL7Rnf5U7OP0iTbzX5DdHpD/pDyGVwTK/1UnoKMEIh6xnG2kf1v+ dIOTnOMblWp6WShErh3VcKuTBZ7W2tRcruxiZSyd1wz5eHtM0Qw2FVIwXUynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4CEYEzxXrgQJxagKaFgkaZgUw78wHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEV3gw3/yiBmYx4QnaGTBuo8aCPK6YdrjSS hZfCk+ezujXZn9/oMppwI7piG2veeZxZSlDJ6LM2jZVynSFxqvFIJU2vAQ5FFopl nrY5o2YXH009qzYRXGBpmDFwyf8dzz6BDnQdZ11NVlxjKiplelfFLEuohE9Ilten 1yGX9XpE5MKFMZXcTL5jKllZuS+WqHslvESw4Ja/ftq0fVebFRcK30Imr9WWJQYd 4r3bK2akokRuTHoHsFbchWg2GscoMPDx8utG5OdvOOvgiaaeaBjGLZWGh5Zy6Wk+ cDaSFkJN94j43LSX/xdH5vbCQFGDWdT4tnuKzDpv2yNUIkStvGw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:01 2025 by rpki-client