$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: 5RcFuVza0CQpMEdXWCO7LlYGTA2dX7YBoPpS3wHj3vc= Subject key identifier: FB:95:97:EB:0B:70:D8:AA:91:9E:1E:8E:60:FE:89:17:68:C6:11:55 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 08BAB4D39E53A518762EE37E0BC815BB581F7D39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0160 Signing time: Tue 05 Aug 2025 07:12:05 +0000 Manifest this update: Tue 05 Aug 2025 07:07:05 +0000 Manifest next update: Fri 08 Aug 2025 11:24:05 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: r9VnWtMsrLOa2M2wtUtz2p1Ht82EXTUHBJOlGXNGHQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ba:b4:d3:9e:53:a5:18:76:2e:e3:7e:0b:c8:15:bb:58:1f:7d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Aug 5 07:07:05 2025 GMT Not After : Aug 8 11:24:05 2025 GMT Subject: CN=FB9597EB0B70D8AA919E1E8E60FE891768C61155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:27:c1:c2:57:3b:48:59:25:2b:fc:52:dd:95: 04:14:14:d2:33:55:9e:2b:3e:7e:81:68:79:7b:87: af:7c:dc:de:a6:87:35:44:83:15:4d:6e:9b:ec:79: 1b:32:1d:9e:00:c3:9b:32:0b:df:f3:7b:50:06:d0: 9f:c3:2b:0a:5e:c6:3d:a0:90:95:ca:72:c4:1e:3f: b8:28:82:49:1d:86:bd:28:ce:b3:98:e6:d7:41:5b: 29:6b:68:72:32:49:47:14:e2:f5:82:90:4b:3a:44: 0a:b3:f5:fc:4d:d2:bb:f5:0b:de:91:86:25:eb:2a: 1b:b4:4d:c3:d0:15:cd:5a:27:32:29:27:57:48:a7: 49:8e:b9:68:d5:9d:9d:da:95:67:74:b1:b1:fb:c3: 9c:fb:f6:59:40:33:f2:d1:7a:ef:46:e6:06:42:ef: 5b:6f:46:27:07:64:00:8e:ec:43:0a:7c:34:33:76: bc:fb:cb:20:3b:10:a6:d3:fb:19:94:91:67:4b:75: 37:c6:c8:d4:09:1c:78:0b:1a:4c:08:09:6c:25:87: 2c:30:c6:30:16:b6:79:ee:d3:e5:37:af:50:d4:cc: e3:44:39:ba:3d:55:74:dc:c3:aa:4b:2e:c9:8b:01: 84:65:cd:6f:b6:03:69:5b:9e:fa:bd:dd:33:ae:05: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:97:EB:0B:70:D8:AA:91:9E:1E:8E:60:FE:89:17:68:C6:11:55 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:95:46:f7:ce:2c:bd:70:b3:86:08:9c:e9:1a:48:ea:b6:61: fd:ee:89:7e:d6:10:e6:4d:3f:7d:2c:99:b0:ff:cf:5d:a0:b3: a1:88:fe:81:66:f7:48:13:48:df:0a:39:9c:fc:98:d3:ef:99: 0b:c2:76:1e:da:63:8c:f6:66:64:77:74:80:a0:ed:93:63:24: 62:9a:ed:f8:b6:e0:65:6c:d9:37:68:fd:5b:e0:a5:ef:39:e0: 9f:31:57:5c:a0:6b:60:a6:9e:85:02:6b:88:86:77:77:83:ce: bb:66:49:66:14:71:57:d1:55:79:e9:c4:af:80:de:57:45:b8: 00:40:76:20:71:96:4d:13:d3:28:28:3f:82:d7:2e:44:35:a1: 25:81:8e:9e:13:b0:fc:e5:4f:4b:34:83:45:f0:07:06:a7:92: 1e:14:5f:0d:9f:3e:40:dd:4f:1d:00:93:17:33:76:fc:8e:a7: 7d:15:8b:a5:d0:14:22:66:a2:7f:dd:4b:91:2b:38:38:14:67: 39:23:38:37:71:55:3d:c4:6e:bc:e1:11:19:e3:5f:89:b4:58: 58:bc:41:04:83:0b:4f:5f:51:93:fe:fd:69:ab:23:b0:46:75: 94:78:6c:b5:16:36:97:3a:44:e4:1d:9f:5f:df:0c:12:aa:19: 75:b6:1a:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLq0055TpRh2LuN+C8gVu1gffTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTA4MDUwNzA3MDVaFw0yNTA4MDgxMTI0MDVaMDMxMTAvBgNV BAMTKEZCOTU5N0VCMEI3MEQ4QUE5MTlFMUU4RTYwRkU4OTE3NjhDNjExNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrJ8HCVztIWSUr/FLdlQQUFNIz VZ4rPn6BaHl7h6983N6mhzVEgxVNbpvseRsyHZ4Aw5syC9/ze1AG0J/DKwpexj2g kJXKcsQeP7gogkkdhr0ozrOY5tdBWylraHIySUcU4vWCkEs6RAqz9fxN0rv1C96R hiXrKhu0TcPQFc1aJzIpJ1dIp0mOuWjVnZ3alWd0sbH7w5z79llAM/LReu9G5gZC 71tvRicHZACO7EMKfDQzdrz7yyA7EKbT+xmUkWdLdTfGyNQJHHgLGkwICWwlhyww xjAWtnnu0+U3r1DUzONEObo9VXTcw6pLLsmLAYRlzW+2A2lbnvq93TOuBRBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5WX6wtw2KqRnh6OYP6JF2jGEVUwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWVRvfOLL1ws4YInOkaSOq2Yf3uiX7WEOZN P30smbD/z12gs6GI/oFm90gTSN8KOZz8mNPvmQvCdh7aY4z2ZmR3dICg7ZNjJGKa 7fi24GVs2Tdo/Vvgpe854J8xV1yga2CmnoUCa4iGd3eDzrtmSWYUcVfRVXnpxK+A 3ldFuABAdiBxlk0T0ygoP4LXLkQ1oSWBjp4TsPzlT0s0g0XwBwankh4UXw2fPkDd Tx0AkxczdvyOp30Vi6XQFCJmon/dS5ErODgUZzkjODdxVT3EbrzhERnjX4m0WFi8 QQSDC09fUZP+/WmrI7BGdZR4bLUWNpc6ROQdn1/fDBKqGXW2Gvo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:46:59 2025 by rpki-client