$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: yNuPMZ/dcXczaVlftKT6oaTVjk0l6NHxHdxTStYYKAw= Subject key identifier: 1E:F4:9E:F2:30:F6:8C:F8:5F:FF:9C:6E:13:2C:89:51:B5:5D:4D:12 Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 1C10595C58F5F1B53A614D1C07301699372E91BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 01D3 Signing time: Thu 07 Aug 2025 18:22:08 +0000 Manifest this update: Thu 07 Aug 2025 18:17:08 +0000 Manifest next update: Mon 11 Aug 2025 00:48:08 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: yt7oEW5b7STk4hz0V+2eAQxa97/zgLiOrClGB2TN+8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:10:59:5c:58:f5:f1:b5:3a:61:4d:1c:07:30:16:99:37:2e:91:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Aug 7 18:17:08 2025 GMT Not After : Aug 11 00:48:08 2025 GMT Subject: CN=1EF49EF230F68CF85FFF9C6E132C8951B55D4D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:45:55:b3:21:57:51:61:ce:ed:16:4b:ca: 9f:83:ac:bc:56:be:f9:e5:c2:e2:e5:5e:cd:e3:d2: bb:87:f9:02:3d:47:8b:30:2f:70:d0:61:ce:dc:f4: 1b:25:7a:fe:92:a3:50:fb:ec:b5:65:ad:f9:b1:1e: 95:3d:c7:e4:ce:ae:bc:dd:d4:7a:95:b9:69:22:da: f5:14:f0:60:d3:d0:2b:ef:19:ac:a9:89:35:6b:5f: fc:02:60:53:db:83:31:ca:c3:59:42:5c:d8:6e:30: 0a:7f:8d:1b:aa:e6:f3:ca:e2:63:fb:64:6e:97:af: df:8e:0d:ff:16:a7:f4:13:df:68:70:d7:38:5d:0b: 2d:75:27:86:47:a1:e7:c6:dd:83:46:71:4a:34:32: 8c:d1:58:7f:b4:5f:67:39:9d:cf:ed:e1:9a:5e:1d: ea:2f:af:d2:33:2e:35:07:be:cc:d9:ff:04:6c:e8: a6:82:04:be:e1:ac:f7:61:d8:53:ca:16:e4:61:2a: 06:23:12:27:5b:23:bf:57:ff:54:44:55:a0:dc:2e: 94:f1:f1:7e:e6:48:2e:dd:d3:d7:bf:7c:e8:18:56: 3f:bc:b8:77:15:b0:db:a1:44:1e:4c:1a:b2:05:3c: 7e:fe:fa:e9:dd:9c:89:89:cb:b1:e4:9f:ac:1e:9a: fa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:9E:F2:30:F6:8C:F8:5F:FF:9C:6E:13:2C:89:51:B5:5D:4D:12 X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:a4:f0:02:f5:0b:f4:49:52:97:87:74:0f:ba:7b:75:d2: 05:20:fe:3c:8b:15:8d:05:4a:04:71:eb:a8:bd:39:2b:9d:05: ec:87:37:08:13:11:17:71:8b:87:3d:54:d7:8c:76:97:8f:82: dd:4f:67:31:d2:35:39:e1:9e:be:a5:0b:4f:f7:82:d6:79:bf: 63:d8:27:26:10:08:3f:96:9c:73:a7:26:3c:02:fc:ec:0a:0b: 7b:0f:4b:46:5b:b0:cd:18:ef:3a:b1:ba:78:7c:90:17:26:4a: 49:0b:d0:8d:1f:e4:ca:89:2a:e9:21:0f:a3:d4:05:2d:e2:f7: 56:60:0f:b6:f3:b9:0c:96:90:58:29:fb:ce:ea:94:b2:f0:5a: f6:b7:0a:9b:ca:9f:ca:20:d1:1c:90:0f:32:78:10:e8:88:bc: 0a:4b:03:a4:20:a1:36:58:07:6e:f6:1a:07:20:06:ae:07:66: 98:de:f2:30:32:53:59:b5:87:bb:e8:34:e2:38:83:82:63:ed: f8:c2:cb:89:f3:2c:85:cb:19:19:2e:eb:73:ee:c3:ea:9e:76: 53:05:eb:0c:fc:6f:57:d6:a7:ba:5e:21:c6:a5:35:23:27:ab: 8f:c3:79:59:41:64:3e:0e:8b:48:ab:6d:a0:3c:1a:d4:f7:26: 8e:98:83:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBBZXFj18bU6YU0cBzAWmTcukbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTA4MDcxODE3MDhaFw0yNTA4MTEwMDQ4MDhaMDMxMTAvBgNV BAMTKDFFRjQ5RUYyMzBGNjhDRjg1RkZGOUM2RTEzMkM4OTUxQjU1RDREMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DUVVsyFXUWHO7RZLyp+DrLxW vvnlwuLlXs3j0ruH+QI9R4swL3DQYc7c9Bslev6So1D77LVlrfmxHpU9x+TOrrzd 1HqVuWki2vUU8GDT0CvvGaypiTVrX/wCYFPbgzHKw1lCXNhuMAp/jRuq5vPK4mP7 ZG6Xr9+ODf8Wp/QT32hw1zhdCy11J4ZHoefG3YNGcUo0MozRWH+0X2c5nc/t4Zpe Heovr9IzLjUHvszZ/wRs6KaCBL7hrPdh2FPKFuRhKgYjEidbI79X/1REVaDcLpTx 8X7mSC7d09e/fOgYVj+8uHcVsNuhRB5MGrIFPH7++undnImJy7Hkn6wemvq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvSe8jD2jPhf/5xuEyyJUbVdTRIwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHybpPAC9Qv0SVKXh3QPunt10gUg/jyLFY0F SgRx66i9OSudBeyHNwgTERdxi4c9VNeMdpePgt1PZzHSNTnhnr6lC0/3gtZ5v2PY JyYQCD+WnHOnJjwC/OwKC3sPS0ZbsM0Y7zqxunh8kBcmSkkL0I0f5MqJKukhD6PU BS3i91ZgD7bzuQyWkFgp+87qlLLwWva3CpvKn8og0RyQDzJ4EOiIvApLA6QgoTZY B272GgcgBq4HZpje8jAyU1m1h7voNOI4g4Jj7fjCy4nzLIXLGRku63Puw+qedlMF 6wz8b1fWp7peIcalNSMnq4/DeVlBZD4Oi0irbaA8GtT3Jo6Yg0M= -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:50 2025 by rpki-client