$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: JHKPu3VcfyHoSBLfTaDoZ830WnSPjD7V2spe2wy5RHE= Subject key identifier: A9:93:A8:A3:81:C4:D7:5E:2D:AB:50:CA:00:29:2E:B4:D4:22:18:2F Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 68A6909F6906A715F18207507B1ED00FB694A89F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0364 Signing time: Tue 05 Aug 2025 18:21:26 +0000 Manifest this update: Tue 05 Aug 2025 18:16:26 +0000 Manifest next update: Fri 08 Aug 2025 19:14:26 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: 7dlTQHqd222yfBLf1itQA2WupOia4VsPLGAnnp8s6Mc=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a6:90:9f:69:06:a7:15:f1:82:07:50:7b:1e:d0:0f:b6:94:a8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Aug 5 18:16:26 2025 GMT Not After : Aug 8 19:14:26 2025 GMT Subject: CN=A993A8A381C4D75E2DAB50CA00292EB4D422182F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d8:6e:83:5d:48:9c:76:b2:96:b1:86:ae:20: de:d3:ef:51:9b:63:cc:f0:34:53:6c:25:43:f5:1a: d9:ea:08:f7:2f:c5:65:ad:c6:9b:15:5a:55:5c:73: 90:de:1a:3a:7b:bb:17:e5:14:bf:cc:f2:dc:6e:cd: c3:82:dc:e0:7b:11:c1:4b:9c:b3:34:c1:8f:60:35: bf:6c:0b:2b:f4:d4:94:15:d2:96:b3:5a:c8:80:da: 5c:eb:9d:7b:d3:42:1b:83:72:92:39:b2:d0:ef:2b: 62:34:26:3d:2a:7f:ac:22:04:b1:d2:ef:49:db:25: 1a:ac:48:2d:0a:a9:da:b4:92:a9:8e:84:5d:14:e1: 15:8f:77:bc:4d:e3:93:96:b5:96:b2:a3:82:94:43: a8:a7:e7:68:6b:98:6f:34:9d:0c:66:32:b7:19:e1: 40:36:5f:bc:94:34:c6:67:04:67:0d:c4:6c:51:92: 05:1a:98:44:e2:5c:95:63:28:be:88:eb:9a:5e:ea: 8f:7d:62:51:87:65:f0:b5:e1:b0:81:77:56:0e:91: e5:b7:8b:b9:6b:95:e1:89:01:96:71:99:d6:70:47: c7:c2:1e:0d:ac:ee:52:e2:be:81:26:b4:6f:2c:64: 32:99:8f:3e:86:f7:b7:af:2b:6c:50:87:0b:67:1d: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:93:A8:A3:81:C4:D7:5E:2D:AB:50:CA:00:29:2E:B4:D4:22:18:2F X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:50:e6:ad:25:cb:2d:07:36:eb:93:34:aa:79:08:64:13:7a: 5f:1b:a0:5f:f5:a6:45:1d:6e:bc:6a:8b:59:ab:52:92:56:60: 38:b4:3b:35:35:b2:99:1e:14:4b:ef:72:72:2d:0d:23:e1:58: 6d:89:08:ea:f5:59:7c:6e:07:63:1a:86:7a:f1:99:ac:0b:23: 71:32:2d:ba:ec:01:ec:ef:44:ad:e2:42:b0:fb:a9:fb:00:99: 2b:7a:43:e8:58:3a:41:6a:aa:76:e5:00:dc:47:63:02:d3:9a: b5:18:35:7b:b0:a0:ce:a2:9b:30:a8:6d:28:40:f2:20:e5:1b: 3e:0c:e8:53:df:55:08:74:e4:d6:6b:14:17:0f:84:16:2c:2a: 58:8f:13:06:6a:8d:d7:14:ab:43:c3:5c:2c:bc:cf:64:71:ca: cb:45:c2:7a:72:48:76:4e:18:d5:0a:36:4b:42:d7:3b:31:de: 7f:26:ab:20:46:e8:ca:f8:7e:1f:2f:f0:d7:46:69:d9:56:67: 05:71:13:76:04:67:23:89:83:95:02:89:b7:ae:9b:7e:ba:2c: ad:c8:01:5a:37:db:7a:fa:2e:9d:fe:42:ef:bc:06:ff:57:46: 97:89:65:5b:31:36:62:c3:d5:57:13:d1:5f:e7:97:f9:ec:d6: 96:86:41:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKaQn2kGpxXxggdQex7QD7aUqJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA4MDUxODE2MjZaFw0yNTA4MDgxOTE0MjZaMDMxMTAvBgNV BAMTKEE5OTNBOEEzODFDNEQ3NUUyREFCNTBDQTAwMjkyRUI0RDQyMjE4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2G6DXUicdrKWsYauIN7T71Gb Y8zwNFNsJUP1GtnqCPcvxWWtxpsVWlVcc5DeGjp7uxflFL/M8txuzcOC3OB7EcFL nLM0wY9gNb9sCyv01JQV0pazWsiA2lzrnXvTQhuDcpI5stDvK2I0Jj0qf6wiBLHS 70nbJRqsSC0Kqdq0kqmOhF0U4RWPd7xN45OWtZayo4KUQ6in52hrmG80nQxmMrcZ 4UA2X7yUNMZnBGcNxGxRkgUamETiXJVjKL6I65pe6o99YlGHZfC14bCBd1YOkeW3 i7lrleGJAZZxmdZwR8fCHg2s7lLivoEmtG8sZDKZjz6G97evK2xQhwtnHe/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZOoo4HE114tq1DKACkutNQiGC8wHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBQ5q0lyy0HNuuTNKp5CGQTel8boF/1pkUd brxqi1mrUpJWYDi0OzU1spkeFEvvcnItDSPhWG2JCOr1WXxuB2MahnrxmawLI3Ey LbrsAezvRK3iQrD7qfsAmSt6Q+hYOkFqqnblANxHYwLTmrUYNXuwoM6imzCobShA 8iDlGz4M6FPfVQh05NZrFBcPhBYsKliPEwZqjdcUq0PDXCy8z2RxystFwnpySHZO GNUKNktC1zsx3n8mqyBG6Mr4fh8v8NdGadlWZwVxE3YEZyOJg5UCibeum366LK3I AVo323r6Lp3+Qu+8Bv9XRpeJZVsxNmLD1VcT0V/nl/ns1paGQWM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:49 2025 by rpki-client