$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: xfbsOEMBBAJQ+6lfYJOhNa6FV21CVYJ3OXm1te1hfNg= Subject key identifier: E5:5A:05:EE:21:BF:3C:4E:40:65:22:DC:F3:95:A3:9F:A9:3C:AA:0F Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 3BB8A4F4DCD2DDFCBEB0C1DC0815753EB21C6926 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 04DF Signing time: Thu 05 Jun 2025 01:50:34 +0000 Manifest this update: Thu 05 Jun 2025 01:45:34 +0000 Manifest next update: Sun 08 Jun 2025 09:30:34 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: bZ63+r/+Pa/NyL9SKmROcvDrQFAm+YaTo9IdPt3gB1s=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b8:a4:f4:dc:d2:dd:fc:be:b0:c1:dc:08:15:75:3e:b2:1c:69:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jun 5 01:45:34 2025 GMT Not After : Jun 8 09:30:34 2025 GMT Subject: CN=E55A05EE21BF3C4E406522DCF395A39FA93CAA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:b7:f2:3d:12:46:44:75:d1:3c:79:85:1e: c4:38:0a:c2:59:ff:52:20:19:4f:6c:73:e0:79:04: 91:11:a9:89:c9:96:da:32:17:55:ab:ea:f2:11:cf: ee:9e:c7:12:55:fd:c5:e3:16:9a:73:68:c8:b0:1a: 06:d2:00:94:46:44:96:ee:31:d5:79:03:54:16:0c: 9e:df:0c:2f:bb:9a:0a:5f:94:c6:b3:bc:a8:5c:ec: cf:a1:42:bb:1f:2d:2d:9b:50:1d:13:28:36:ab:bb: ee:fc:c4:7b:77:7d:34:7f:4e:16:41:df:e1:f9:e5: 70:03:e6:ba:2d:ba:6f:31:4a:be:f8:73:78:f6:a4: e8:a2:b1:6a:29:83:88:a0:bf:32:6e:52:3f:7f:50: d6:2a:50:ad:12:2f:c3:7f:4b:9a:67:aa:3a:c6:d8: f4:17:0f:05:08:70:fa:dc:8c:1a:06:46:88:6d:7e: 14:08:07:cc:36:77:94:1d:c5:53:50:d2:94:df:6d: 2c:06:d9:bc:93:ac:87:34:81:61:ea:ab:28:b6:e1: 26:11:0d:30:6a:d0:db:ab:f6:20:89:8e:49:58:1f: c3:29:67:43:dc:29:cf:3b:62:19:05:78:55:33:20: 53:e1:67:74:b1:bd:ee:e5:be:9e:82:d2:a7:e7:fc: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:05:EE:21:BF:3C:4E:40:65:22:DC:F3:95:A3:9F:A9:3C:AA:0F X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fe:3c:18:c1:f7:91:33:9f:68:93:81:0a:74:ed:db:90:f8: 6a:65:aa:79:43:8d:49:42:71:23:08:4c:fd:cf:d7:ba:42:5a: 8f:99:63:87:75:c6:ef:62:df:f7:11:81:2a:35:b3:8e:cb:fd: 3d:7e:aa:07:72:49:7a:68:c5:39:9a:87:63:4b:99:31:36:78: d1:71:73:d9:61:ee:24:61:e1:d0:94:01:08:6e:59:aa:25:f4: 9a:18:37:b7:6a:91:04:2c:90:c0:19:1f:fa:6b:f1:22:f9:fb: fe:79:df:75:5e:7d:19:53:fc:2d:c5:3e:7f:a1:fc:49:32:53: d6:79:bd:f6:c9:69:3d:94:6c:54:2d:d8:29:5e:c9:8d:cd:2f: e4:6e:80:b5:37:28:ca:f6:68:43:8a:a8:0a:51:53:31:b4:ab: e8:70:35:72:4c:9d:1f:d5:cd:f7:67:64:2a:23:fa:e5:1c:09: 5e:c9:12:c0:b9:38:5b:f9:3b:ce:24:fd:e5:f8:78:7d:22:73: 5e:15:49:2a:f0:47:91:21:3f:88:0e:35:f1:07:45:49:75:ee: 17:3c:fd:ee:08:88:4d:25:73:86:3c:ab:27:53:e5:fe:d3:4f: e7:dd:c0:6d:1f:d4:39:cb:06:f9:31:bc:64:7a:d3:fc:6f:0c: a2:bf:89:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUO7ik9NzS3fy+sMHcCBV1PrIcaSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDYwNTAxNDUzNFoX DTI1MDYwODA5MzAzNFowMzExMC8GA1UEAxMoRTU1QTA1RUUyMUJGM0M0RTQwNjUy MkRDRjM5NUEzOUZBOTNDQUEwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXpt/I9EkZEddE8eYUexDgKwln/UiAZT2xz4HkEkRGpicmW2jIXVavq8hHP 7p7HElX9xeMWmnNoyLAaBtIAlEZElu4x1XkDVBYMnt8ML7uaCl+UxrO8qFzsz6FC ux8tLZtQHRMoNqu77vzEe3d9NH9OFkHf4fnlcAPmui26bzFKvvhzePak6KKxaimD iKC/Mm5SP39Q1ipQrRIvw39LmmeqOsbY9BcPBQhw+tyMGgZGiG1+FAgHzDZ3lB3F U1DSlN9tLAbZvJOshzSBYeqrKLbhJhENMGrQ26v2IImOSVgfwylnQ9wpzztiGQV4 VTMgU+FndLG97uW+noLSp+f8fesCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBTlWgXu Ib88TkBlItzzlaOfqTyqDzAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf48GMH3 kTOfaJOBCnTt25D4amWqeUONSUJxIwhM/c/XukJaj5ljh3XG72Lf9xGBKjWzjsv9 PX6qB3JJemjFOZqHY0uZMTZ40XFz2WHuJGHh0JQBCG5ZqiX0mhg3t2qRBCyQwBkf +mvxIvn7/nnfdV59GVP8LcU+f6H8STJT1nm99slpPZRsVC3YKV7Jjc0v5G6AtTco yvZoQ4qoClFTMbSr6HA1ckydH9XN92dkKiP65RwJXskSwLk4W/k7ziT95fh4fSJz XhVJKvBHkSE/iA418QdFSXXuFzz97giITSVzhjyrJ1Pl/tNP593AbR/UOcsG+TG8 ZHrT/G8Mor+J8w== -----END CERTIFICATE-----Generated at Fri Jun 6 16:50:30 2025 by rpki-client