$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: jIR4NtHvW0QyBRbQC9DUXdKjNPKaiTLbcVovwitdjz0= Subject key identifier: 1B:3C:DC:8E:75:C2:C7:FC:4F:FD:D9:4C:4F:E2:B7:1F:D0:94:2E:E1 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 21524DF8D92F61F8B365FA18BFF63CCCA2F3698F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 01DF Signing time: Tue 03 Jun 2025 07:01:34 +0000 Manifest this update: Tue 03 Jun 2025 06:56:34 +0000 Manifest next update: Fri 06 Jun 2025 18:15:34 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: h0jxvXsff4poQUZc0yZE7OUVi5iJLsuoAWOVHFtwSHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:52:4d:f8:d9:2f:61:f8:b3:65:fa:18:bf:f6:3c:cc:a2:f3:69:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Jun 3 06:56:34 2025 GMT Not After : Jun 6 18:15:34 2025 GMT Subject: CN=1B3CDC8E75C2C7FC4FFDD94C4FE2B71FD0942EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:4c:d6:60:90:64:ea:42:ae:72:a5:b1:b0: 37:f8:06:e4:7b:64:14:87:06:33:89:02:11:57:c8: 43:ea:b9:2d:3e:e1:35:5f:87:bc:93:40:39:5a:1b: f9:cf:dc:9f:32:71:e6:a6:0c:2d:bd:07:78:c1:74: 3f:d8:ab:f1:ca:a3:ee:b7:b0:02:93:0d:33:de:bd: 38:1e:fa:25:eb:a4:d2:92:df:76:af:fb:3e:18:2c: 0c:f6:22:0d:b8:da:c2:45:51:9e:cb:61:92:79:c4: 78:ed:62:49:eb:f1:f5:fe:7d:e9:77:9d:d6:08:09: fa:3b:62:f0:e4:44:1d:92:4c:5d:a4:2a:2a:d1:f1: 51:83:5c:55:41:3b:1d:35:4e:49:40:4e:ff:fa:ec: bf:43:c7:02:44:aa:72:30:10:0a:21:e6:fe:04:dd: 15:eb:8e:91:c8:37:33:fa:4b:92:1d:5f:5e:58:53: be:81:e3:cf:ec:0d:e6:ad:29:4b:6f:9f:e9:e8:5a: f8:59:96:8a:51:db:a5:c0:e8:e9:c4:bd:a1:d2:e7: 5c:7a:c2:5c:11:aa:73:3b:d1:01:8e:e7:b7:56:24: 77:47:b1:57:e5:27:f7:3c:22:2e:bb:c2:ec:93:6e: 92:5d:50:b8:df:00:c4:71:e4:4f:8d:cd:f8:95:19: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:DC:8E:75:C2:C7:FC:4F:FD:D9:4C:4F:E2:B7:1F:D0:94:2E:E1 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ef:ef:b9:5a:f3:45:a7:42:f1:f1:e6:98:f5:48:2f:b1:06: 76:07:c9:92:e7:ee:d2:59:44:ca:a5:2b:4c:ca:65:3e:a4:34: 9b:39:59:a3:98:ef:fb:f9:bb:05:d8:8c:b7:c9:d9:e4:0b:5f: 2c:69:76:c1:7e:4d:bb:25:73:ec:2e:d4:2b:26:3b:df:0e:f8: cb:c7:eb:5c:78:39:8d:31:a7:1e:ba:34:a7:90:85:76:70:65: 8f:ae:86:c5:f3:b2:7f:99:02:e4:88:24:01:37:d9:0e:25:06: 20:4d:44:87:30:ae:f0:22:86:38:23:73:fe:a9:a6:72:54:d3: 0f:27:19:34:1b:b4:04:23:b8:05:17:fd:9d:da:01:fa:79:75: 03:79:32:d8:0d:ca:aa:1f:36:3f:87:22:e2:4c:e7:e1:ea:28: 42:d5:0e:3b:e1:3c:20:37:55:97:f1:69:4f:24:14:52:02:65: 6b:d8:f1:85:ee:33:71:d7:0d:2b:f1:b7:a3:1e:10:94:06:93: cf:cc:f1:63:b5:fd:de:5c:a4:2e:8a:96:b9:e7:da:67:56:30: 6c:14:2b:f7:1d:15:5e:d3:19:39:20:f8:35:4b:00:63:06:2a: 59:6a:38:f4:5a:57:52:2a:ea:f8:77:cc:d3:c0:1f:5c:7e:26: 37:73:3e:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVJN+NkvYfizZfoYv/Y8zKLzaY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA2MDMwNjU2MzRaFw0yNTA2MDYxODE1MzRaMDMxMTAvBgNV BAMTKDFCM0NEQzhFNzVDMkM3RkM0RkZERDk0QzRGRTJCNzFGRDA5NDJFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmMkzWYJBk6kKucqWxsDf4BuR7 ZBSHBjOJAhFXyEPquS0+4TVfh7yTQDlaG/nP3J8yceamDC29B3jBdD/Yq/HKo+63 sAKTDTPevTge+iXrpNKS33av+z4YLAz2Ig242sJFUZ7LYZJ5xHjtYknr8fX+fel3 ndYICfo7YvDkRB2STF2kKirR8VGDXFVBOx01TklATv/67L9DxwJEqnIwEAoh5v4E 3RXrjpHINzP6S5IdX15YU76B48/sDeatKUtvn+noWvhZlopR26XA6OnEvaHS51x6 wlwRqnM70QGO57dWJHdHsVflJ/c8Ii67wuyTbpJdULjfAMRx5E+NzfiVGQH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGzzcjnXCx/xP/dlMT+K3H9CULuEwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITv77la80WnQvHx5pj1SC+xBnYHyZLn7tJZ RMqlK0zKZT6kNJs5WaOY7/v5uwXYjLfJ2eQLXyxpdsF+Tbslc+wu1CsmO98O+MvH 61x4OY0xpx66NKeQhXZwZY+uhsXzsn+ZAuSIJAE32Q4lBiBNRIcwrvAihjgjc/6p pnJU0w8nGTQbtAQjuAUX/Z3aAfp5dQN5MtgNyqofNj+HIuJM5+HqKELVDjvhPCA3 VZfxaU8kFFICZWvY8YXuM3HXDSvxt6MeEJQGk8/M8WO1/d5cpC6Klrnn2mdWMGwU K/cdFV7TGTkg+DVLAGMGKllqOPRaV1Iq6vh3zNPAH1x+JjdzPrM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:06 2025 by rpki-client