$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: FRPvC7shJB+QyyNpZxxW795B8fs0bMDDAV0OM82/lSw= Subject key identifier: 78:50:7C:65:A0:5E:48:88:D0:9F:1B:CB:1F:90:14:71:59:69:51:DB Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 7466BD5AD8412DB5E9A206C4996A9F2202BD11E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 01FF Signing time: Sat 06 Sep 2025 05:42:08 +0000 Manifest this update: Sat 06 Sep 2025 05:37:08 +0000 Manifest next update: Tue 09 Sep 2025 16:31:08 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: HI/CjU1NPtKP/hLfGuc6ji+UFtWGj/SOfDxY8Oap5Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:bd:5a:d8:41:2d:b5:e9:a2:06:c4:99:6a:9f:22:02:bd:11:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Sep 6 05:37:08 2025 GMT Not After : Sep 9 16:31:08 2025 GMT Subject: CN=78507C65A05E4888D09F1BCB1F901471596951DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:b1:58:c0:2c:d5:de:db:ac:41:7b:b8:40: 8d:2c:b9:a6:e2:c9:79:f9:69:96:57:27:8b:36:be: e6:77:21:c7:1c:26:9f:14:38:b1:05:dc:79:74:9b: 4f:ca:84:c1:f0:75:48:b4:74:92:3c:c2:30:09:ed: 92:0f:e9:32:53:77:98:ad:e0:4f:c1:42:2a:76:d6: d0:8a:40:9e:76:18:2e:bb:3c:8d:42:ef:8d:b1:e3: e9:e0:b0:51:67:85:91:08:45:ac:a2:50:19:c0:f4: 4d:b1:3b:13:ce:45:b1:f7:c6:e3:7d:54:76:d5:ea: 97:31:69:07:a0:6f:de:64:8e:50:c9:9c:10:91:98: 5e:f4:1f:c1:c3:c6:de:67:5d:67:11:f7:ef:b6:e2: 60:78:7a:7f:90:dc:dc:4a:c6:54:48:0f:18:b2:cb: 53:b6:5a:45:26:e5:e4:9b:23:0a:ab:30:53:d8:29: 39:46:87:57:b6:a7:29:3a:ab:6e:48:91:38:6e:ac: 85:96:a4:c0:be:72:c5:16:5b:89:9a:d1:26:14:2d: 7b:5a:c8:50:86:83:45:84:c3:c6:e5:d3:3b:cf:5a: ba:ff:e6:f3:59:ce:fa:6a:a9:f2:02:b1:e8:d8:23: cb:d6:8e:f2:66:8e:a8:75:e4:4e:e4:e7:ac:71:9d: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:50:7C:65:A0:5E:48:88:D0:9F:1B:CB:1F:90:14:71:59:69:51:DB X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e6:b0:61:3d:61:e8:39:0f:73:c2:eb:00:ad:f7:c5:bb:c1: 5b:bc:58:bb:e3:a2:08:e5:52:ca:7a:97:16:a5:d0:40:10:4a: 3f:53:07:9a:b7:c8:10:3d:69:6d:f2:9e:33:af:5e:3a:de:5e: 8f:76:10:7d:f3:5c:b5:ad:ec:df:d5:c1:89:ae:a5:a7:e5:01: 3e:1b:18:c7:f8:51:42:7c:e6:23:5f:6f:8d:45:0e:25:1d:22: 70:d0:60:6d:db:3e:2b:83:61:0b:d3:9d:51:f5:83:35:d2:b7: 54:32:70:bb:df:4d:8d:99:aa:85:5f:d0:b7:22:b9:0a:96:cd: c3:ec:c4:82:12:6b:77:a0:63:70:ca:c1:a8:34:d0:8e:3c:53: fd:63:d5:bd:68:45:70:b3:30:56:4d:1d:6d:68:ea:01:dc:a3: 6c:76:d7:dd:b8:e5:ea:e6:c7:3f:46:a7:20:5d:0a:8c:84:0a: 8d:86:ce:16:2b:7a:9d:23:e4:03:77:11:67:37:0e:83:65:e6: eb:f5:d7:10:8b:0d:ce:77:82:4e:cf:8a:48:5b:de:1d:07:2e: ff:da:82:b0:e1:04:99:ac:94:cb:93:5b:0a:bf:d1:7c:f4:0f: a4:b2:29:48:09:7d:ef:e0:75:0f:15:25:4b:f8:e4:f2:93:73: 46:39:9e:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGa9WthBLbXpogbEmWqfIgK9EeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTA5MDYwNTM3MDhaFw0yNTA5MDkxNjMxMDhaMDMxMTAvBgNV BAMTKDc4NTA3QzY1QTA1RTQ4ODhEMDlGMUJDQjFGOTAxNDcxNTk2OTUxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6grFYwCzV3tusQXu4QI0suabi yXn5aZZXJ4s2vuZ3IcccJp8UOLEF3Hl0m0/KhMHwdUi0dJI8wjAJ7ZIP6TJTd5it 4E/BQip21tCKQJ52GC67PI1C742x4+ngsFFnhZEIRayiUBnA9E2xOxPORbH3xuN9 VHbV6pcxaQegb95kjlDJnBCRmF70H8HDxt5nXWcR9++24mB4en+Q3NxKxlRIDxiy y1O2WkUm5eSbIwqrMFPYKTlGh1e2pyk6q25IkThurIWWpMC+csUWW4ma0SYULXta yFCGg0WEw8bl0zvPWrr/5vNZzvpqqfICsejYI8vWjvJmjqh15E7k56xxnVJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeFB8ZaBeSIjQnxvLH5AUcVlpUdswHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLmsGE9Yeg5D3PC6wCt98W7wVu8WLvjogjl Usp6lxal0EAQSj9TB5q3yBA9aW3ynjOvXjreXo92EH3zXLWt7N/VwYmupaflAT4b GMf4UUJ85iNfb41FDiUdInDQYG3bPiuDYQvTnVH1gzXSt1QycLvfTY2ZqoVf0Lci uQqWzcPsxIISa3egY3DKwag00I48U/1j1b1oRXCzMFZNHW1o6gHco2x219245erm xz9GpyBdCoyECo2GzhYrep0j5AN3EWc3DoNl5uv11xCLDc53gk7Pikhb3h0HLv/a grDhBJmslMuTWwq/0Xz0D6SyKUgJfe/gdQ8VJUv45PKTc0Y5ngA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:24 2025 by rpki-client