$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: Xs4ROc86smbuVb2632hWd69URcYSkwlM985biP9elyA= Subject key identifier: 28:F3:2C:0D:E3:D9:3B:77:73:4E:9B:63:94:2A:CA:90:50:97:AA:57 Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 010B578EBB965BC5A98B7986F1D20D5032FBE820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01A2 Signing time: Mon 02 Jun 2025 23:32:40 +0000 Manifest this update: Mon 02 Jun 2025 23:27:40 +0000 Manifest next update: Fri 06 Jun 2025 02:24:40 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: tNcMIZ8J7C01WrEMalzqqVwTGpCsJiZFpXCN8no9Lps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0b:57:8e:bb:96:5b:c5:a9:8b:79:86:f1:d2:0d:50:32:fb:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Jun 2 23:27:40 2025 GMT Not After : Jun 6 02:24:40 2025 GMT Subject: CN=28F32C0DE3D93B77734E9B63942ACA905097AA57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:a6:a0:45:1f:c4:e5:38:6e:e2:ea:78:5f: bd:99:59:1d:1f:f0:a5:66:fa:ec:76:f6:73:61:ab: 39:c5:3b:35:36:e9:64:43:d4:5d:7d:e0:14:29:50: 6d:6c:8c:d3:87:f0:19:b3:76:45:44:ed:81:7b:a4: d5:83:0c:0f:ed:61:20:e6:db:de:4e:39:da:01:18: 36:e9:a5:aa:72:16:50:af:55:88:85:ac:ce:28:cc: 74:14:6f:74:23:4c:26:41:1e:03:5f:e0:cb:6f:70: bf:cd:5c:18:40:f9:9c:96:e9:6f:0d:6c:0d:54:33: 51:cf:a7:12:65:c4:37:ca:f3:02:6c:ce:2c:96:22: 9e:b3:3f:7c:3e:de:32:3e:88:e3:35:4b:5b:34:4a: 90:eb:e8:f7:40:6c:2f:7b:f2:eb:8c:cb:b6:a1:27: 36:b5:d9:e7:f6:1e:d8:f8:11:ac:5d:d3:c9:19:66: e0:fe:af:de:20:22:2e:49:89:ef:9c:7d:92:44:7c: 7a:b9:75:f0:50:83:5d:34:0e:11:82:dd:6a:be:10: 04:75:c5:6a:d8:ce:ff:6e:3d:e6:73:d1:2e:88:19: 19:31:07:0d:c4:05:9e:78:dd:3d:5b:88:d6:4d:3a: 95:97:eb:74:b7:38:bd:1e:ab:bc:3c:91:07:dd:f4: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:2C:0D:E3:D9:3B:77:73:4E:9B:63:94:2A:CA:90:50:97:AA:57 X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4c:76:bb:2b:df:04:53:63:59:da:7a:5b:f0:6c:a5:38:7e: b3:ef:f5:b6:c7:3e:0a:2a:72:9b:d1:30:8e:48:df:bb:fc:16: 3f:ce:a5:62:02:ff:2f:5f:d9:c3:4f:b5:17:5a:81:8f:0b:d5: 1a:c4:b7:6f:cc:30:07:34:ba:8d:ef:8b:58:88:a4:02:9d:63: 5f:c5:56:f1:83:1c:c6:6b:b2:b9:72:14:23:18:31:51:00:c9: c5:0f:a0:f3:21:c6:cd:fc:b8:38:c3:46:60:f5:11:b0:0b:76: 5c:76:ce:a1:cb:78:df:a7:32:56:cb:b1:ed:27:19:c3:ff:e1: 9e:93:a0:5c:16:1a:53:88:1d:79:60:fe:5e:88:86:e9:98:8c: be:dc:9b:9f:a4:64:d4:ba:9f:05:2c:dd:33:53:23:0e:11:9d: ea:b1:a1:42:83:63:92:27:4f:88:7a:ea:46:c7:b1:71:33:73: bb:58:b8:6f:d5:e2:9e:ea:be:4c:07:43:bb:5e:56:bd:cb:86: 65:62:82:8d:80:00:d3:0b:d8:8c:d8:c9:b9:43:41:99:23:8b: 55:ac:df:5d:b2:40:d8:72:c3:18:d0:4d:c7:6e:66:93:42:7e: a5:66:08:28:a7:b1:9c:86:c6:ae:b0:ae:87:3f:9c:65:8f:04: d7:c5:2d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQtXjruWW8Wpi3mG8dINUDL76CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA2MDIyMzI3NDBaFw0yNTA2MDYwMjI0NDBaMDMxMTAvBgNV BAMTKDI4RjMyQzBERTNEOTNCNzc3MzRFOUI2Mzk0MkFDQTkwNTA5N0FBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoa6agRR/E5Thu4up4X72ZWR0f 8KVm+ux29nNhqznFOzU26WRD1F194BQpUG1sjNOH8BmzdkVE7YF7pNWDDA/tYSDm 295OOdoBGDbppapyFlCvVYiFrM4ozHQUb3QjTCZBHgNf4MtvcL/NXBhA+ZyW6W8N bA1UM1HPpxJlxDfK8wJsziyWIp6zP3w+3jI+iOM1S1s0SpDr6PdAbC978uuMy7ah Jza12ef2Htj4Eaxd08kZZuD+r94gIi5Jie+cfZJEfHq5dfBQg100DhGC3Wq+EAR1 xWrYzv9uPeZz0S6IGRkxBw3EBZ543T1biNZNOpWX63S3OL0eq7w8kQfd9OKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPMsDePZO3dzTptjlCrKkFCXqlcwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRMdrsr3wRTY1naelvwbKU4frPv9bbHPgoq cpvRMI5I37v8Fj/OpWIC/y9f2cNPtRdagY8L1RrEt2/MMAc0uo3vi1iIpAKdY1/F VvGDHMZrsrlyFCMYMVEAycUPoPMhxs38uDjDRmD1EbALdlx2zqHLeN+nMlbLse0n GcP/4Z6ToFwWGlOIHXlg/l6IhumYjL7cm5+kZNS6nwUs3TNTIw4RneqxoUKDY5In T4h66kbHsXEzc7tYuG/V4p7qvkwHQ7teVr3LhmVigo2AANML2IzYyblDQZkji1Ws 312yQNhywxjQTcduZpNCfqVmCCinsZyGxq6wroc/nGWPBNfFLXA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:34 2025 by rpki-client