$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: ARsiAKpjjHcywQMjQ/AyHHmecRM/CscOhJH1f5ncpEI= Subject key identifier: D8:81:6E:83:63:00:BD:A4:C6:60:6B:58:17:CB:49:E5:F6:07:E1:5B Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 4017ABC064F85441918C9A6A614AD28EE65E0F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 0181 Signing time: Fri 05 Sep 2025 13:41:50 +0000 Manifest this update: Fri 05 Sep 2025 13:36:50 +0000 Manifest next update: Mon 08 Sep 2025 19:42:50 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: CPbnPDZnLkWAY+E4Je1WQzEPzEAK3G68QL8qZRwjXfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:17:ab:c0:64:f8:54:41:91:8c:9a:6a:61:4a:d2:8e:e6:5e:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Sep 5 13:36:50 2025 GMT Not After : Sep 8 19:42:50 2025 GMT Subject: CN=D8816E836300BDA4C6606B5817CB49E5F607E15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:d7:1d:fc:7c:af:3d:e9:82:67:fa:28:3c: 43:9c:f4:5d:61:0a:a9:ac:d5:f0:bf:48:17:89:3e: 5c:a1:d4:e1:aa:53:d7:90:d1:c6:b0:0a:83:9b:a3: fb:90:bf:08:72:a2:58:69:fb:b5:89:d4:cf:7e:9d: 0f:38:74:7e:1c:d4:c0:2d:aa:8b:f2:24:ef:f1:b4: b4:f8:d7:12:bc:a6:a0:bf:73:f9:b8:c9:78:8f:bf: 46:ba:38:fb:27:95:b6:17:a1:b9:9a:3b:18:ea:02: 2c:03:96:db:16:9a:e6:85:55:b2:65:91:41:e7:c9: 42:b5:07:e9:94:f8:f3:fa:8c:c1:b9:1b:31:39:97: 0d:42:7d:19:fa:0d:d2:72:64:4d:8d:56:be:a4:e6: 5a:d7:04:25:a6:cf:ca:38:f9:97:9c:28:47:c5:ac: 62:3c:59:fc:53:25:2e:59:fe:d5:07:6e:a7:86:38: 9d:b1:56:49:45:d3:c2:f0:e7:6c:2e:d9:4c:d3:16: e3:f1:59:7f:e3:5e:13:68:72:f8:11:67:96:45:9d: 1e:34:30:d8:a7:aa:65:ca:02:1c:59:10:61:e9:18: 8c:80:fb:0f:65:63:d4:fc:33:34:74:7d:57:90:33: 3b:38:41:26:90:6a:ac:37:6b:78:3b:93:df:71:7f: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:6E:83:63:00:BD:A4:C6:60:6B:58:17:CB:49:E5:F6:07:E1:5B X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8b:c7:93:73:2c:de:49:81:1a:45:51:ba:f1:13:6b:b9:b8: dc:57:36:20:cb:b1:06:55:0e:44:4b:cd:7c:7c:d7:d9:06:dc: 82:e1:b5:5b:63:7e:8c:2e:4c:ee:4f:4f:1e:a8:0b:4a:b7:fd: 67:c6:30:09:34:c5:d5:e0:57:a3:2e:f7:25:c2:38:c0:0c:ec: bb:e2:1b:84:6e:50:d5:d6:51:68:f7:d1:3c:93:a2:58:91:96: 7e:12:61:31:df:2f:ba:26:7b:85:7f:b7:98:20:3c:63:ef:0d: 55:76:4c:10:40:85:e8:e2:a9:d8:a8:4c:f5:9c:10:e4:da:20: bc:0d:02:b1:86:3b:83:d5:35:5c:d0:8d:f2:b3:04:16:56:fe: 08:1d:43:1d:1c:0a:7d:38:a7:43:f0:77:a4:dd:d1:0a:4f:3b: 0b:b5:75:43:10:f5:37:0e:5d:a4:87:ed:4b:2a:6c:3b:a8:ec: 2c:06:ef:5a:2a:cf:82:f1:20:b6:06:28:ad:20:26:01:91:99: f8:cd:f3:12:bb:2c:e1:cc:2f:7a:f7:c5:d7:24:f4:73:45:dc: ce:fb:ce:23:1a:52:2f:e5:31:e6:5c:5e:71:3c:46:e5:77:0b: ed:a8:29:40:74:8e:d8:a0:80:d2:30:07:7c:82:34:38:1c:ed: 56:66:2c:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBerwGT4VEGRjJpqYUrSjuZeDzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTA5MDUxMzM2NTBaFw0yNTA5MDgxOTQyNTBaMDMxMTAvBgNV BAMTKEQ4ODE2RTgzNjMwMEJEQTRDNjYwNkI1ODE3Q0I0OUU1RjYwN0UxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Bdcd/HyvPemCZ/ooPEOc9F1h Cqms1fC/SBeJPlyh1OGqU9eQ0cawCoObo/uQvwhyolhp+7WJ1M9+nQ84dH4c1MAt qovyJO/xtLT41xK8pqC/c/m4yXiPv0a6OPsnlbYXobmaOxjqAiwDltsWmuaFVbJl kUHnyUK1B+mU+PP6jMG5GzE5lw1CfRn6DdJyZE2NVr6k5lrXBCWmz8o4+ZecKEfF rGI8WfxTJS5Z/tUHbqeGOJ2xVklF08Lw52wu2UzTFuPxWX/jXhNocvgRZ5ZFnR40 MNinqmXKAhxZEGHpGIyA+w9lY9T8MzR0fVeQMzs4QSaQaqw3a3g7k99xf1CHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2IFug2MAvaTGYGtYF8tJ5fYH4VswHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeLx5NzLN5JgRpFUbrxE2u5uNxXNiDLsQZV DkRLzXx819kG3ILhtVtjfowuTO5PTx6oC0q3/WfGMAk0xdXgV6Mu9yXCOMAM7Lvi G4RuUNXWUWj30TyToliRln4SYTHfL7ome4V/t5ggPGPvDVV2TBBAhejiqdioTPWc EOTaILwNArGGO4PVNVzQjfKzBBZW/ggdQx0cCn04p0Pwd6Td0QpPOwu1dUMQ9TcO XaSH7UsqbDuo7CwG71oqz4LxILYGKK0gJgGRmfjN8xK7LOHML3r3xdck9HNF3M77 ziMaUi/lMeZcXnE8RuV3C+2oKUB0jtiggNIwB3yCNDgc7VZmLGs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:28 2025 by rpki-client