$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: TLBNH1D0mrMuWkm17RIBItCTwMkSq1fyJntXoCyNAOw= Subject key identifier: DA:DE:8E:1E:A0:1E:E3:05:49:51:81:05:1E:70:03:68:E2:CF:25:28 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 2A3179E55D058065AAF7ED8D0BCC400F562BACFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 93 Signing time: Tue 05 Aug 2025 23:50:49 +0000 Manifest this update: Tue 05 Aug 2025 23:45:49 +0000 Manifest next update: Sat 09 Aug 2025 09:43:49 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: bH2jpuonC8zcRYV8NPkWVZ8V9euTsFxLCmhgfcd6lyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:31:79:e5:5d:05:80:65:aa:f7:ed:8d:0b:cc:40:0f:56:2b:ac:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Aug 5 23:45:49 2025 GMT Not After : Aug 9 09:43:49 2025 GMT Subject: CN=DADE8E1EA01EE305495181051E700368E2CF2528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:7d:a8:bb:75:da:67:73:09:fb:c9:f4:6d: d0:e2:0c:a7:f8:bd:77:68:85:ef:09:af:d5:7f:2b: dc:b6:59:53:5d:55:9c:f7:03:09:90:b1:a2:0d:07: d6:d3:5b:a4:e9:71:ca:d0:8f:8a:c9:86:14:04:03: f9:90:b0:60:ce:c8:cc:bf:74:7d:18:12:7b:72:29: d9:9b:41:d0:92:22:c5:aa:ad:41:58:d9:c6:91:ce: 31:53:0c:db:10:cd:51:00:a2:00:46:8e:34:ff:25: 86:9c:0f:ef:b2:af:78:c3:7a:65:f4:ff:1d:5c:63: fc:dd:fa:1a:64:68:4f:d4:7a:8d:5a:d2:a6:1e:00: 33:3f:01:24:5f:cd:f8:32:56:14:5f:11:49:da:c0: 3c:f4:63:43:a6:1a:36:a7:f7:da:84:3e:f1:e3:af: 52:f5:14:d5:ef:6e:51:ff:f6:d2:14:3f:71:5a:af: cc:12:3c:93:7e:a9:72:bd:72:87:03:6a:21:2e:9c: 85:80:13:76:10:f2:9f:1c:6e:64:33:6a:d3:72:3c: 79:a9:a1:84:bf:bd:ac:02:f9:d2:89:a0:cd:42:0a: d5:9c:19:23:d9:c5:50:78:6c:2f:42:fb:ea:50:aa: 4c:ee:05:35:2e:eb:c0:98:80:c7:14:bd:ec:5f:7d: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:8E:1E:A0:1E:E3:05:49:51:81:05:1E:70:03:68:E2:CF:25:28 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fd:dd:14:3b:cc:dd:94:7c:44:09:b4:d2:67:33:49:c8:ff: 7e:6b:01:a6:5c:85:6a:5a:25:5d:b5:12:fc:78:60:a7:ff:3a: 17:9f:a3:3d:f4:cd:cf:6a:3e:35:50:ce:05:8b:a0:48:7d:aa: ac:c0:41:22:5a:f1:b3:f7:67:e2:2b:3f:60:70:e0:ec:95:07: a9:2d:3c:97:79:5b:ac:f2:0a:56:d1:21:0f:96:1a:0f:fe:22: af:97:8e:1b:26:14:86:95:25:90:c6:16:9c:18:a0:76:91:9e: 1a:4c:e9:8a:48:76:0d:e8:21:18:8e:aa:8b:8e:99:a2:89:f5: b5:b5:a8:6e:38:23:f7:0d:ec:7c:c1:42:21:a0:55:c8:cc:85: 97:63:aa:51:93:dd:fe:1d:e5:2d:d4:92:ed:00:1b:4f:97:34: bb:41:6a:10:4c:5a:b1:40:e8:68:00:ea:a1:e9:ef:ab:f3:2f: 3d:26:18:65:e9:88:d8:3a:59:b6:48:8d:22:00:e2:d3:d4:81: 2b:ad:37:5d:4f:ee:c0:0d:e0:39:d3:c6:73:08:f1:69:a7:26: 18:a9:46:3b:87:08:7e:18:c7:58:b8:cc:0a:f1:db:7a:7a:c6: cd:4e:51:ec:b5:df:e9:73:1a:8e:e7:e6:03:26:f1:e2:af:44: 4d:14:de:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjF55V0FgGWq9+2NC8xAD1YrrP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA4MDUyMzQ1NDlaFw0yNTA4MDkwOTQzNDlaMDMxMTAvBgNV BAMTKERBREU4RTFFQTAxRUUzMDU0OTUxODEwNTFFNzAwMzY4RTJDRjI1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcb32ou3XaZ3MJ+8n0bdDiDKf4 vXdohe8Jr9V/K9y2WVNdVZz3AwmQsaINB9bTW6TpccrQj4rJhhQEA/mQsGDOyMy/ dH0YEntyKdmbQdCSIsWqrUFY2caRzjFTDNsQzVEAogBGjjT/JYacD++yr3jDemX0 /x1cY/zd+hpkaE/Ueo1a0qYeADM/ASRfzfgyVhRfEUnawDz0Y0OmGjan99qEPvHj r1L1FNXvblH/9tIUP3Far8wSPJN+qXK9cocDaiEunIWAE3YQ8p8cbmQzatNyPHmp oYS/vawC+dKJoM1CCtWcGSPZxVB4bC9C++pQqkzuBTUu68CYgMcUvexffY2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2t6OHqAe4wVJUYEFHnADaOLPJSgwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH93RQ7zN2UfEQJtNJnM0nI/35rAaZchWpa JV21Evx4YKf/Ohefoz30zc9qPjVQzgWLoEh9qqzAQSJa8bP3Z+IrP2Bw4OyVB6kt PJd5W6zyClbRIQ+WGg/+Iq+XjhsmFIaVJZDGFpwYoHaRnhpM6YpIdg3oIRiOqouO maKJ9bW1qG44I/cN7HzBQiGgVcjMhZdjqlGT3f4d5S3Uku0AG0+XNLtBahBMWrFA 6GgA6qHp76vzLz0mGGXpiNg6WbZIjSIA4tPUgSutN11P7sAN4DnTxnMI8WmnJhip RjuHCH4Yx1i4zArx23p6xs1OUey13+lzGo7n5gMm8eKvRE0U3sc= -----END CERTIFICATE-----Generated at Wed Aug 6 10:03:43 2025 by rpki-client