$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: aY5BP8bpm0E7g0RwwFELC+ICFPfTJzVx0pOsoBGDXKw= Subject key identifier: C5:C0:83:81:1F:5A:62:4E:9B:FF:A1:3E:C0:A4:56:0A:2F:0A:B4:55 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 314FB8F1FB5A756F48208C7AFD25E17B6541D2FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 70 Signing time: Mon 02 Jun 2025 21:30:54 +0000 Manifest this update: Mon 02 Jun 2025 21:25:54 +0000 Manifest next update: Fri 06 Jun 2025 04:37:54 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: TCrizzYKm2Cbf/U3JcEW20R8nXSrGSEoxx/aZb0g3JI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 04:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4f:b8:f1:fb:5a:75:6f:48:20:8c:7a:fd:25:e1:7b:65:41:d2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Jun 2 21:25:54 2025 GMT Not After : Jun 6 04:37:54 2025 GMT Subject: CN=C5C083811F5A624E9BFFA13EC0A4560A2F0AB455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:e1:9a:32:11:15:69:1b:53:57:43:3b:7d: b1:67:13:d3:3d:09:48:a9:01:2e:dd:8b:d3:6a:a1: a4:40:0e:95:78:cf:68:a8:72:f4:b0:b7:3f:71:de: 2a:79:b2:02:1a:59:28:c6:21:e0:97:92:69:3b:8e: 52:78:b1:33:22:2a:dc:7b:91:78:98:d5:27:0c:a8: c7:3c:f6:38:11:25:52:d1:d7:6a:de:0e:75:e7:4f: ef:d9:2f:19:81:1a:57:95:ca:95:e0:ce:2a:76:c4: 6a:2f:d5:18:25:19:d9:4d:19:6d:17:3b:d2:38:ef: 78:9f:6a:14:e0:f7:73:35:98:46:97:7c:da:a1:e7: 74:cb:02:36:63:ae:f7:33:25:ec:83:7c:21:b5:93: de:46:9f:8f:93:58:12:df:33:a9:43:e4:bc:aa:fe: 11:8c:81:d6:11:ad:93:31:20:8d:aa:69:e9:e6:c2: 40:fa:8e:35:c0:b6:b6:82:70:d4:d7:8a:e3:a8:66: 45:72:d7:57:29:fd:7c:3d:1c:52:65:81:5f:8a:c7: b0:fc:ba:dd:c3:17:8d:51:fd:8f:b0:18:87:e0:e4: 4b:c5:57:47:29:e9:a0:29:93:8c:3d:7d:bf:89:f7: a3:6d:c4:26:c5:7d:84:24:a4:c2:fc:73:23:84:f7: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C0:83:81:1F:5A:62:4E:9B:FF:A1:3E:C0:A4:56:0A:2F:0A:B4:55 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:31:be:67:20:db:77:74:c5:a4:19:c5:ff:7b:b6:22:b1:1e: 83:26:2b:f9:fb:d4:6e:32:e6:4c:8a:d2:2f:7b:c3:ac:e5:cd: 83:82:fa:67:6a:e3:1a:ef:3e:88:b2:32:c2:59:1c:18:4c:40: 2e:22:7c:1d:84:c9:ab:72:8a:37:79:19:15:e0:38:a8:f8:65: 99:a7:12:e3:ba:43:9a:e0:d5:a5:6a:20:41:16:66:16:de:ed: 19:c6:25:b9:cf:1b:ad:54:97:21:35:62:a4:fe:ed:6b:69:7c: 9f:b2:e9:9d:70:f6:5a:1a:b6:f7:de:68:d7:b3:99:2c:e9:81: 3e:71:3f:cb:56:f7:50:4d:fe:2a:7b:86:65:c7:4e:84:85:e9: 0c:05:0a:4a:ea:d9:85:e4:fb:38:fe:1a:12:49:74:3a:7e:ab: 4d:fa:c2:ec:d8:cc:4f:5e:4d:22:54:48:6b:6a:30:cb:16:6a: cf:23:63:27:04:be:d7:95:f8:01:36:13:ed:10:1e:20:b5:ac: 2b:67:2e:f0:18:5f:bd:70:42:a1:01:c2:b1:32:b1:55:01:37: 47:27:8e:65:06:5d:2f:b3:5e:73:a9:85:85:f7:da:29:4f:5d: 06:7c:91:b4:40:8c:dd:45:18:2a:19:df:ba:8a:b5:aa:e2:1f: 97:ec:81:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMU+48ftadW9IIIx6/SXhe2VB0vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA2MDIyMTI1NTRaFw0yNTA2MDYwNDM3NTRaMDMxMTAvBgNV BAMTKEM1QzA4MzgxMUY1QTYyNEU5QkZGQTEzRUMwQTQ1NjBBMkYwQUI0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxOGaMhEVaRtTV0M7fbFnE9M9 CUipAS7di9NqoaRADpV4z2iocvSwtz9x3ip5sgIaWSjGIeCXkmk7jlJ4sTMiKtx7 kXiY1ScMqMc89jgRJVLR12reDnXnT+/ZLxmBGleVypXgzip2xGov1RglGdlNGW0X O9I473ifahTg93M1mEaXfNqh53TLAjZjrvczJeyDfCG1k95Gn4+TWBLfM6lD5Lyq /hGMgdYRrZMxII2qaenmwkD6jjXAtraCcNTXiuOoZkVy11cp/Xw9HFJlgV+Kx7D8 ut3DF41R/Y+wGIfg5EvFV0cp6aApk4w9fb+J96NtxCbFfYQkpML8cyOE94cvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcCDgR9aYk6b/6E+wKRWCi8KtFUwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwxvmcg23d0xaQZxf97tiKxHoMmK/n71G4y 5kyK0i97w6zlzYOC+mdq4xrvPoiyMsJZHBhMQC4ifB2Eyatyijd5GRXgOKj4ZZmn EuO6Q5rg1aVqIEEWZhbe7RnGJbnPG61UlyE1YqT+7WtpfJ+y6Z1w9loatvfeaNez mSzpgT5xP8tW91BN/ip7hmXHToSF6QwFCkrq2YXk+zj+GhJJdDp+q036wuzYzE9e TSJUSGtqMMsWas8jYycEvteV+AE2E+0QHiC1rCtnLvAYX71wQqEBwrEysVUBN0cn jmUGXS+zXnOphYX32ilPXQZ8kbRAjN1FGCoZ37qKtariH5fsgQs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:13 2025 by rpki-client