$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: qDsP3b7vfFxAqFSyDTb2D8A1ZYzyTRvNHxyZfXBGCC4= Subject key identifier: DD:1D:CB:17:AA:A6:00:E9:F6:0C:A7:80:9D:68:F0:AD:07:93:93:DC Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 1878A2E5837F00D85A75E04D496AE5CE061C7F60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01DD Signing time: Wed 06 Aug 2025 02:22:50 +0000 Manifest this update: Wed 06 Aug 2025 02:17:50 +0000 Manifest next update: Sat 09 Aug 2025 10:54:50 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: SPIWVsw6iXvGqAbd5GMmvvS12dMuvfsMElGdrB1h6Ag=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:78:a2:e5:83:7f:00:d8:5a:75:e0:4d:49:6a:e5:ce:06:1c:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Aug 6 02:17:50 2025 GMT Not After : Aug 9 10:54:50 2025 GMT Subject: CN=DD1DCB17AAA600E9F60CA7809D68F0AD079393DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:60:8b:00:8b:20:e3:ff:b5:63:a2:fc:68: e2:91:26:13:56:fe:15:ae:77:ed:cf:f8:a5:73:49: fb:fa:db:0c:07:b2:db:78:38:9c:25:6c:44:97:43: ca:7f:ba:a2:8a:25:8b:1d:72:23:d1:ef:5f:5a:64: 6f:8c:7e:a1:9b:ed:8d:38:37:91:8d:96:e8:96:60: 8d:d6:98:53:22:23:77:6e:8e:47:3b:1f:f0:79:76: 93:1f:d8:a5:b8:8c:04:5c:94:33:19:ae:94:1e:6a: 2f:a6:be:c7:74:b4:ea:d8:15:f7:94:f3:25:61:9b: a4:77:31:71:d1:64:36:cd:64:89:c6:88:3f:ab:7e: 28:e6:e1:f7:37:8d:bb:5b:e1:d1:ba:f5:58:35:1c: 04:c2:23:90:d8:12:a8:1f:f0:5c:5f:86:39:b2:86: 55:87:e7:21:ae:97:e9:85:53:a3:eb:f3:b8:dc:01: 91:d9:ec:17:ff:36:59:c3:04:0d:32:1b:fd:64:e9: 78:cf:d8:05:d2:ed:d1:e7:ab:2b:9c:55:7c:4e:d6: 5b:aa:ee:98:d4:1d:63:57:ee:f3:9e:06:73:41:e6: 1a:4e:03:38:8e:47:40:43:0d:a5:09:9b:e8:d7:74: 69:3e:d1:6b:d1:77:d0:f9:c3:aa:f5:8a:3c:4a:dd: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1D:CB:17:AA:A6:00:E9:F6:0C:A7:80:9D:68:F0:AD:07:93:93:DC X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:06:6a:87:9c:cb:68:50:89:a5:24:d0:a3:0a:72:ce:31: 71:23:e9:fb:3f:7c:e7:ab:a6:41:d1:d3:91:64:be:b1:de:b7: a3:67:47:74:7b:d7:51:59:01:9a:e9:df:f5:0f:9f:4b:5c:c7: 9c:de:99:4d:f3:6a:02:67:34:ba:d4:b7:13:dc:67:c5:f3:e9: cf:0e:29:0e:63:e7:a9:95:8e:f9:3b:c0:67:9c:e1:11:2f:a8: 4f:bd:be:56:22:08:28:af:a4:d1:70:82:5d:41:c1:04:c9:88: 7a:66:58:0f:b6:99:68:be:ff:16:58:be:2e:e2:a8:11:b7:e2: 72:ba:bf:7e:a1:07:8f:16:b7:09:6f:38:42:c0:b5:90:31:b8: 14:40:35:60:86:38:c4:89:58:21:a9:f3:b7:49:13:7b:41:81: b7:93:8e:34:cc:ee:14:9c:29:b8:a4:3a:33:ed:b8:dd:1b:4f: 73:29:2f:f0:14:50:fe:cf:ea:dc:b7:c0:b6:98:76:22:1c:1c: 6a:3c:bf:52:71:81:4e:05:74:6c:70:ab:cb:6b:b5:b5:49:c2: 2c:6c:2e:89:2d:2b:2d:e7:9c:35:6e:40:b8:d0:f4:f6:ca:20: 27:94:b0:b6:d5:96:69:15:f1:d0:f4:5f:22:31:e0:25:93:ca: ec:6a:a6:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHii5YN/ANhadeBNSWrlzgYcf2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA4MDYwMjE3NTBaFw0yNTA4MDkxMDU0NTBaMDMxMTAvBgNV BAMTKEREMURDQjE3QUFBNjAwRTlGNjBDQTc4MDlENjhGMEFEMDc5MzkzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4GCLAIsg4/+1Y6L8aOKRJhNW /hWud+3P+KVzSfv62wwHstt4OJwlbESXQ8p/uqKKJYsdciPR719aZG+MfqGb7Y04 N5GNluiWYI3WmFMiI3dujkc7H/B5dpMf2KW4jARclDMZrpQeai+mvsd0tOrYFfeU 8yVhm6R3MXHRZDbNZInGiD+rfijm4fc3jbtb4dG69Vg1HATCI5DYEqgf8Fxfhjmy hlWH5yGul+mFU6Pr87jcAZHZ7Bf/NlnDBA0yG/1k6XjP2AXS7dHnqyucVXxO1luq 7pjUHWNX7vOeBnNB5hpOAziOR0BDDaUJm+jXdGk+0WvRd9D5w6r1ijxK3ZUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3R3LF6qmAOn2DKeAnWjwrQeTk9wwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWYBmqHnMtoUImlJNCjCnLOMXEj6fs/fOer pkHR05FkvrHet6NnR3R711FZAZrp3/UPn0tcx5zemU3zagJnNLrUtxPcZ8Xz6c8O KQ5j56mVjvk7wGec4REvqE+9vlYiCCivpNFwgl1BwQTJiHpmWA+2mWi+/xZYvi7i qBG34nK6v36hB48WtwlvOELAtZAxuBRANWCGOMSJWCGp87dJE3tBgbeTjjTM7hSc KbikOjPtuN0bT3MpL/AUUP7P6ty3wLaYdiIcHGo8v1JxgU4FdGxwq8trtbVJwixs LoktKy3nnDVuQLjQ9PbKICeUsLbVlmkV8dD0XyIx4CWTyuxqpjI= -----END CERTIFICATE-----Generated at Thu Aug 7 07:19:56 2025 by rpki-client