$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: xUDY+Jew1q9ygxqhxoIbSMv57HRNiERbBecw3Y+EdmI= Subject key identifier: A2:D8:73:9A:D7:CA:C5:75:09:96:E0:20:FE:2D:06:3A:88:5E:79:FE Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 4D8514B5070A6E2EF9F3DCEFF7D5712CAF333E27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01EB Signing time: Tue 05 Aug 2025 00:32:18 +0000 Manifest this update: Tue 05 Aug 2025 00:27:18 +0000 Manifest next update: Fri 08 Aug 2025 12:02:18 +0000 Files and hashes: 1: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: pVZbIFBpB0v1gtzaB03gplq76TQVALmsbP/7gc8LpiA=) 2: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 3: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 4: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:85:14:b5:07:0a:6e:2e:f9:f3:dc:ef:f7:d5:71:2c:af:33:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Aug 5 00:27:18 2025 GMT Not After : Aug 8 12:02:18 2025 GMT Subject: CN=A2D8739AD7CAC5750996E020FE2D063A885E79FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:15:71:eb:14:98:fe:55:df:25:7c:92:63: 94:fd:d9:4e:44:e0:cd:3a:15:7f:4c:66:d4:da:03: e6:a7:cb:36:ae:fa:78:47:71:f8:f2:bf:19:75:8b: 24:73:36:1a:01:76:09:90:a3:2d:fb:2c:fe:45:93: ac:8d:78:11:30:da:64:65:b2:02:35:24:72:22:8f: b7:e2:dd:06:fc:02:1e:8b:58:69:66:9c:24:f8:11: 0f:9e:43:a6:58:d4:74:20:31:cf:7b:54:01:c1:5a: bd:b4:ba:4d:80:f2:7a:d3:0a:45:41:d1:ab:23:6f: ae:a5:88:9a:5e:93:f7:2f:66:fa:39:b9:75:b0:25: 11:e2:23:94:bc:ae:1d:06:62:64:e9:68:7a:4a:df: 91:1d:8e:54:6b:9a:57:3b:b5:8c:6e:8d:97:f5:11: 76:f3:e3:fb:fb:b7:b0:c1:7b:2b:39:60:4b:0d:a8: c1:b3:21:92:56:9c:96:44:58:2c:02:4a:98:4c:19: 10:30:3a:d0:0b:c7:54:91:d1:9b:cc:c9:ae:d2:35: 23:c3:a9:e1:05:04:60:c1:0e:0a:84:5d:68:87:4d: c9:9f:27:fa:37:9b:59:54:d9:03:49:20:a2:89:16: 32:9c:6e:13:5a:fd:e2:2a:3e:50:31:bb:44:ca:56: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D8:73:9A:D7:CA:C5:75:09:96:E0:20:FE:2D:06:3A:88:5E:79:FE X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:de:7a:61:c3:d2:11:14:76:4d:60:a7:0a:f0:7f:ed:c0:fd: a1:b2:db:0f:ce:39:a1:d2:e2:52:a5:d2:43:55:f9:4f:1e:b5: 51:fe:c8:f5:25:93:5b:31:e8:e5:fe:87:a2:08:94:40:ae:db: 7c:83:9c:d6:48:28:cd:95:bd:3b:bb:7b:88:a1:c0:36:8a:ff: a7:9d:df:bb:6a:f6:84:3b:e0:09:1d:de:83:e9:17:fb:be:f2: 55:b9:47:d1:45:87:fc:7e:d1:2b:8f:c2:52:66:d5:20:3f:7d: 82:0e:52:2b:b9:05:08:e9:00:91:6a:81:ff:7a:e8:88:6a:f8: 1c:31:12:91:a6:b8:01:53:7b:8e:3e:e1:8c:7b:b7:12:e7:99: 8e:9c:88:9f:0b:6b:98:68:e9:7d:45:60:99:6b:a3:f1:ed:bd: bc:aa:47:46:54:7b:e5:14:7a:2c:d2:42:65:0b:0f:98:ef:eb: 08:4c:7d:46:60:8e:56:36:c2:92:39:66:d6:38:a2:31:a5:26: 95:2a:1c:ea:64:b8:9e:76:7c:51:a2:a0:89:1b:c3:be:09:04: ef:7a:1f:8e:bd:4c:81:70:d0:4b:69:5d:83:3e:d4:da:d9:9d: f1:18:1c:7b:30:67:e9:8c:7c:82:f2:50:de:76:8d:94:5d:d2: b2:53:1c:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYUUtQcKbi7589zv99VxLK8zPicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA4MDUwMDI3MThaFw0yNTA4MDgxMjAyMThaMDMxMTAvBgNV BAMTKEEyRDg3MzlBRDdDQUM1NzUwOTk2RTAyMEZFMkQwNjNBODg1RTc5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwBVx6xSY/lXfJXySY5T92U5E 4M06FX9MZtTaA+anyzau+nhHcfjyvxl1iyRzNhoBdgmQoy37LP5Fk6yNeBEw2mRl sgI1JHIij7fi3Qb8Ah6LWGlmnCT4EQ+eQ6ZY1HQgMc97VAHBWr20uk2A8nrTCkVB 0asjb66liJpek/cvZvo5uXWwJRHiI5S8rh0GYmTpaHpK35EdjlRrmlc7tYxujZf1 EXbz4/v7t7DBeys5YEsNqMGzIZJWnJZEWCwCSphMGRAwOtALx1SR0ZvMya7SNSPD qeEFBGDBDgqEXWiHTcmfJ/o3m1lU2QNJIKKJFjKcbhNa/eIqPlAxu0TKVnKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUothzmtfKxXUJluAg/i0GOoheef4wHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKreemHD0hEUdk1gpwrwf+3A/aGy2w/OOaHS 4lKl0kNV+U8etVH+yPUlk1sx6OX+h6IIlECu23yDnNZIKM2VvTu7e4ihwDaK/6ed 37tq9oQ74Akd3oPpF/u+8lW5R9FFh/x+0SuPwlJm1SA/fYIOUiu5BQjpAJFqgf96 6Ihq+BwxEpGmuAFTe44+4Yx7txLnmY6ciJ8La5ho6X1FYJlro/HtvbyqR0ZUe+UU eizSQmULD5jv6whMfUZgjlY2wpI5ZtY4ojGlJpUqHOpkuJ52fFGioIkbw74JBO96 H469TIFw0EtpXYM+1NrZnfEYHHswZ+mMfILyUN52jZRd0rJTHJw= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:45 2025 by rpki-client