$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: jWeMNv1Xd3aLtv8BlIIhkwnMXFoftBo3ksPAbf64CeI= Subject key identifier: 00:C0:7F:B1:7A:06:D2:B6:20:6A:C8:B9:55:F6:D1:58:CA:71:98:6D Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 6DBF2CF3284AF7C0D62093B978756F6FB824FAD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 01D5 Signing time: Thu 05 Jun 2025 04:42:08 +0000 Manifest this update: Thu 05 Jun 2025 04:37:08 +0000 Manifest next update: Sun 08 Jun 2025 11:58:08 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: KWrm3xaiud8VGzHHuekVk/+6Xtscko7MNixYlQiwTAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bf:2c:f3:28:4a:f7:c0:d6:20:93:b9:78:75:6f:6f:b8:24:fa:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Jun 5 04:37:08 2025 GMT Not After : Jun 8 11:58:08 2025 GMT Subject: CN=00C07FB17A06D2B6206AC8B955F6D158CA71986D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:8a:b8:f6:88:7a:dd:a0:ac:27:0d:5b:be: a7:ec:26:4b:25:81:41:23:6c:4c:79:89:c4:85:44: b4:fc:ba:62:c8:8b:b1:df:24:26:1b:f9:3c:0d:05: 04:dd:a8:5c:7f:b2:38:95:04:f0:2b:14:88:ef:71: d8:e3:10:26:df:fb:10:59:dd:7f:92:da:6f:54:07: c2:7a:eb:04:21:c6:ee:31:48:61:8b:18:68:18:97: d5:87:64:a5:f5:24:75:1e:7f:da:02:70:0a:a4:cf: 6d:b6:73:f8:0c:f8:5d:bf:d5:3b:c6:b9:ff:5c:82: 00:ec:a2:85:82:a0:5e:24:23:53:89:a1:bb:b8:27: 58:2b:09:73:18:bb:fe:2b:1b:56:68:72:b4:21:38: b6:e6:68:85:45:1e:eb:9e:4b:ac:be:a5:d9:38:de: ca:6c:e8:f0:44:0b:96:9c:c2:d7:68:9e:a4:28:07: c6:63:ba:74:30:5d:ee:d4:fd:5c:d3:ef:72:25:74: e1:31:49:07:03:dd:5d:8b:82:76:ad:6f:d9:f1:f5: 9b:7e:56:94:85:e8:10:02:92:29:53:eb:e0:14:92: 65:3e:e8:f8:9d:17:c9:e1:d8:9d:c8:22:77:fb:09: bc:00:13:05:65:df:da:a0:65:a7:11:d9:c6:d0:c4: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C0:7F:B1:7A:06:D2:B6:20:6A:C8:B9:55:F6:D1:58:CA:71:98:6D X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b3:2e:3f:f2:75:48:53:e5:24:45:a9:27:ac:5d:3e:21:b7: 6c:1d:a1:19:fd:ac:27:e6:f1:73:0d:1b:a3:1a:7c:a4:49:25: 7e:25:98:8a:9b:29:55:62:8c:48:52:03:09:f1:28:31:22:b6: 7f:40:0f:91:bc:72:f6:77:1b:9c:7b:4d:e7:d3:6d:a7:09:82: 63:bd:7b:0d:f0:96:92:0a:3a:92:21:8d:fe:37:0c:8e:19:19: e5:57:ce:20:e3:ab:b3:f2:44:22:e1:28:02:fa:93:28:c6:38: d7:da:09:36:35:65:bf:44:16:b2:b1:b4:81:a8:bd:fa:c9:2f: cd:d9:db:9d:1a:04:32:d3:59:f5:e4:e4:46:db:73:ba:85:b9: af:51:fa:e0:9a:3b:50:3c:59:23:43:af:84:d1:eb:23:db:87: 91:ef:c2:dd:43:77:62:51:8e:39:2d:b8:ca:ab:89:10:9c:b6: ea:54:82:68:89:42:c1:ed:bb:02:0f:f5:09:2f:04:53:28:28: ce:36:5c:d5:21:54:fc:1b:ac:31:58:74:8c:5e:0e:80:eb:20: 5f:c3:46:d8:62:bd:41:fa:90:f8:e9:e5:55:06:68:ee:e1:81: 2b:20:0f:a1:08:ca:9c:51:54:3d:29:26:06:8e:c8:8c:b8:98: d6:32:99:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbb8s8yhK98DWIJO5eHVvb7gk+tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTA2MDUwNDM3MDhaFw0yNTA2MDgxMTU4MDhaMDMxMTAvBgNV BAMTKDAwQzA3RkIxN0EwNkQyQjYyMDZBQzhCOTU1RjZEMTU4Q0E3MTk4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2Iq49oh63aCsJw1bvqfsJksl gUEjbEx5icSFRLT8umLIi7HfJCYb+TwNBQTdqFx/sjiVBPArFIjvcdjjECbf+xBZ 3X+S2m9UB8J66wQhxu4xSGGLGGgYl9WHZKX1JHUef9oCcAqkz222c/gM+F2/1TvG uf9cggDsooWCoF4kI1OJobu4J1grCXMYu/4rG1ZocrQhOLbmaIVFHuueS6y+pdk4 3sps6PBEC5acwtdonqQoB8ZjunQwXe7U/VzT73IldOExSQcD3V2Lgnatb9nx9Zt+ VpSF6BACkilT6+AUkmU+6PidF8nh2J3IInf7CbwAEwVl39qgZacR2cbQxFfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMB/sXoG0rYgasi5VfbRWMpxmG0wHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKzLj/ydUhT5SRFqSesXT4ht2wdoRn9rCfm 8XMNG6MafKRJJX4lmIqbKVVijEhSAwnxKDEitn9AD5G8cvZ3G5x7TefTbacJgmO9 ew3wlpIKOpIhjf43DI4ZGeVXziDjq7PyRCLhKAL6kyjGONfaCTY1Zb9EFrKxtIGo vfrJL83Z250aBDLTWfXk5Ebbc7qFua9R+uCaO1A8WSNDr4TR6yPbh5Hvwt1Dd2JR jjktuMqriRCctupUgmiJQsHtuwIP9QkvBFMoKM42XNUhVPwbrDFYdIxeDoDrIF/D RthivUH6kPjp5VUGaO7hgSsgD6EIypxRVD0pJgaOyIy4mNYymb8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:26 2025 by rpki-client