$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: jJDWymPQCP05thQBuBXcX8oLpKBlCwJduBpVyPaiSBU= Subject key identifier: E9:BF:8A:F5:F3:14:E0:09:CE:8A:3A:A3:F4:33:CF:F6:E5:1D:9A:38 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 07C19C723F1DC9001D7FC0C8AB3D88543319EB69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 01E9 Signing time: Sat 19 Jul 2025 19:02:06 +0000 Manifest this update: Sat 19 Jul 2025 18:57:06 +0000 Manifest next update: Tue 22 Jul 2025 22:06:06 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: leEjGXvyo1I+I/iRevgLCxttADlqokHyNMM6Agf8Ymw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c1:9c:72:3f:1d:c9:00:1d:7f:c0:c8:ab:3d:88:54:33:19:eb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Jul 19 18:57:06 2025 GMT Not After : Jul 22 22:06:06 2025 GMT Subject: CN=E9BF8AF5F314E009CE8A3AA3F433CFF6E51D9A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:f3:ca:b5:e6:c8:1e:aa:29:89:41:14:cf: f0:b2:c9:77:d3:d7:ac:1a:60:06:b5:24:fb:92:bf: f1:30:5a:7b:32:89:52:11:28:68:81:f8:c3:2b:95: 28:be:95:d6:dc:e2:64:50:68:3f:98:8f:ad:af:11: 32:e7:55:b2:e3:e1:4c:65:d1:77:99:c4:8e:f8:59: c9:a5:f6:bb:d7:f0:8f:77:4a:63:b5:57:de:d5:68: f2:73:8e:57:72:e9:54:e6:13:18:2a:29:99:e9:fb: c4:89:c6:f6:2a:e2:3f:fb:78:1b:0c:01:95:ee:a0: 62:64:ba:fb:71:b6:10:39:e0:02:f2:0b:3e:01:d3: 99:d2:7d:df:7b:24:db:1c:e6:2f:e0:7f:43:61:cc: 3f:49:59:08:47:9f:80:fa:0f:22:21:01:81:58:71: a0:2d:b2:92:73:10:c4:7b:88:e5:11:bb:14:5f:6d: 63:cc:62:b0:00:a9:0c:5d:ff:90:d9:53:7a:f1:ae: e0:49:29:c9:c9:32:92:75:c6:c3:e2:c9:9e:48:41: c6:82:12:f2:2b:ee:23:a9:87:18:da:29:84:91:d0: 15:e1:de:24:77:38:3e:f3:38:93:52:30:ef:cd:eb: fc:60:e7:4f:29:d1:2e:84:c7:59:d9:5f:13:56:d6: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BF:8A:F5:F3:14:E0:09:CE:8A:3A:A3:F4:33:CF:F6:E5:1D:9A:38 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:77:b1:a9:d8:08:2e:11:19:76:5c:06:16:a6:9d:36:c6:0f: 10:1a:9a:02:b2:19:69:da:93:96:f1:63:b1:8c:a3:be:be:b2: e3:62:ec:9d:16:61:50:f0:4f:07:9c:64:fb:e7:ec:da:e4:c6: 50:38:26:01:57:2e:fc:a9:e5:61:fd:42:e0:d2:20:5e:8f:83: 5a:b5:c8:cf:9a:07:80:d2:24:a2:7c:e7:79:11:a6:66:63:82: da:bb:66:ba:fe:b3:f5:da:d3:36:67:44:95:31:ba:6a:0b:bb: a8:41:dc:46:f6:45:7b:fd:d4:74:ac:f5:d1:db:c8:14:5d:82: 9c:25:14:c4:f3:14:8c:66:40:25:dc:89:62:4a:2d:fe:30:69: 4a:61:ee:64:21:03:43:fa:31:67:35:82:7c:05:42:cb:6c:13: cc:0d:db:25:d8:e9:77:06:77:e3:eb:96:87:1b:3f:43:15:c4: cf:13:3c:6c:d1:b8:86:86:c0:64:f1:c5:4c:68:16:23:7f:e0: bd:e3:1c:2b:82:0c:b1:16:8b:46:88:f3:fb:d1:3c:21:14:a8: a0:20:64:a7:fd:5b:94:c9:56:63:c5:5a:6f:d5:e4:cc:d9:6b: 8e:9f:aa:7c:c5:34:a5:93:b6:25:b1:89:1d:f7:ca:41:4c:24: ef:6f:8a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8Gccj8dyQAdf8DIqz2IVDMZ62kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTA3MTkxODU3MDZaFw0yNTA3MjIyMjA2MDZaMDMxMTAvBgNV BAMTKEU5QkY4QUY1RjMxNEUwMDlDRThBM0FBM0Y0MzNDRkY2RTUxRDlBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbPPKtebIHqopiUEUz/CyyXfT 16waYAa1JPuSv/EwWnsyiVIRKGiB+MMrlSi+ldbc4mRQaD+Yj62vETLnVbLj4Uxl 0XeZxI74Wcml9rvX8I93SmO1V97VaPJzjldy6VTmExgqKZnp+8SJxvYq4j/7eBsM AZXuoGJkuvtxthA54ALyCz4B05nSfd97JNsc5i/gf0NhzD9JWQhHn4D6DyIhAYFY caAtspJzEMR7iOURuxRfbWPMYrAAqQxd/5DZU3rxruBJKcnJMpJ1xsPiyZ5IQcaC EvIr7iOphxjaKYSR0BXh3iR3OD7zOJNSMO/N6/xg508p0S6Ex1nZXxNW1pjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6b+K9fMU4AnOijqj9DPP9uUdmjgwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ3sanYCC4RGXZcBhamnTbGDxAamgKyGWna k5bxY7GMo76+suNi7J0WYVDwTwecZPvn7NrkxlA4JgFXLvyp5WH9QuDSIF6Pg1q1 yM+aB4DSJKJ853kRpmZjgtq7Zrr+s/Xa0zZnRJUxumoLu6hB3Eb2RXv91HSs9dHb yBRdgpwlFMTzFIxmQCXciWJKLf4waUph7mQhA0P6MWc1gnwFQstsE8wN2yXY6XcG d+PrlocbP0MVxM8TPGzRuIaGwGTxxUxoFiN/4L3jHCuCDLEWi0aI8/vRPCEUqKAg ZKf9W5TJVmPFWm/V5MzZa46fqnzFNKWTtiWxiR33ykFMJO9vinY= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:04 2025 by rpki-client