$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: Cfh30C+DPVYt1jg5JzPeDnX9gp3SSj9YqkEysxhDNZw= Subject key identifier: A8:7F:7B:3B:30:6A:68:07:5D:70:A4:A1:5D:C1:5F:B8:11:A8:55:6B Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 48498772A6234DCD34746055E774EF6797128A29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: B8 Signing time: Tue 05 Aug 2025 00:31:22 +0000 Manifest this update: Tue 05 Aug 2025 00:26:22 +0000 Manifest next update: Fri 08 Aug 2025 11:31:22 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: t+CPpE2TC/5JImEcRiXdAKKegyxY7qwMPfKY4AYQh6I=) 2: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: z20Fl0OwCc3NyyaK1DhGe2A0/cEHHlCHiT57+2pJ4rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:49:87:72:a6:23:4d:cd:34:74:60:55:e7:74:ef:67:97:12:8a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Aug 5 00:26:22 2025 GMT Not After : Aug 8 11:31:22 2025 GMT Subject: CN=A87F7B3B306A68075D70A4A15DC15FB811A8556B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:66:64:9c:8d:21:c7:d6:8f:19:a8:ee:e3: 83:ec:47:9e:99:2f:8f:70:d5:48:57:d9:d8:4c:00: d1:18:31:20:e5:dc:2f:c4:e6:bf:16:d6:b9:79:a1: e0:38:f2:4e:a3:70:a2:63:65:cc:44:74:08:77:c5: 32:2d:6a:b4:37:af:74:7d:d9:9b:e6:f2:07:26:f3: e8:e7:7c:bd:29:73:74:0b:25:14:4d:7d:dc:91:8b: 89:53:2b:87:9b:b8:37:90:31:ec:a6:17:04:c8:f0: da:f4:74:0c:1b:55:eb:03:bf:c1:0b:8f:96:04:b8: 32:3a:c0:aa:76:59:4b:ad:53:d2:57:a1:0e:02:f2: 91:af:8d:d0:8d:74:42:56:3a:0e:23:30:03:3d:cc: 3d:03:33:ae:8e:2f:92:57:57:d9:dc:90:67:78:15: 26:05:3b:3f:44:18:5c:98:25:94:34:dc:28:33:9e: ae:69:57:bd:0e:1a:02:70:db:c0:17:62:bc:46:ba: 00:0b:28:26:ee:6c:a8:1d:5e:1c:58:e4:28:5d:64: 11:46:c0:31:51:79:0c:b8:b1:ef:80:3b:aa:9b:18: a2:cf:1c:96:4b:84:31:b9:2a:5b:3f:70:70:68:bf: 3d:48:ef:63:aa:cf:03:7f:a9:94:90:af:31:f5:bd: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7F:7B:3B:30:6A:68:07:5D:70:A4:A1:5D:C1:5F:B8:11:A8:55:6B X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:eb:87:38:8c:ed:60:70:0a:89:dc:2a:55:95:1a:b0:d9: 21:eb:08:9b:3d:c8:6d:ed:e5:cb:e9:65:02:08:b3:04:79:7f: 19:25:9c:83:89:69:69:9e:88:75:87:8b:a1:1e:86:d3:4c:63: d0:ff:73:0b:12:cf:5a:45:fd:87:14:b9:57:18:4e:7a:e2:53: 09:4c:59:b2:15:73:50:b4:6d:36:f1:5d:48:8e:0a:ee:16:81: c1:c9:a6:b8:3e:b5:82:c7:1e:19:e4:da:a0:b6:b4:2a:8b:6b: 0a:ab:88:ef:26:ca:6c:1a:4c:0e:b5:8b:e0:1b:25:f6:fe:e9: 6e:b8:a7:3d:02:d1:11:18:38:75:eb:9c:ba:81:f4:c6:d4:aa: a5:5e:e5:09:d9:be:90:61:b6:a7:11:d4:4d:87:47:1a:05:56: c6:6e:20:40:6c:e6:08:83:6d:41:95:1d:9e:de:85:a9:4b:20: f4:5c:15:bd:56:0b:8b:80:c1:9a:27:4a:a2:e2:7b:d9:1a:58: 5a:98:99:ac:c0:ab:ca:e4:b6:29:9b:43:95:35:fd:31:98:57: 40:39:87:6f:3b:dc:a3:4f:d1:ab:8b:dd:ff:c9:82:ef:74:32: 7a:fd:3c:7d:a1:bf:a3:99:c2:51:73:b9:fc:26:00:6e:a4:9d: ca:06:28:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEmHcqYjTc00dGBV53TvZ5cSiikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNTA4MDUwMDI2MjJaFw0yNTA4MDgxMTMxMjJaMDMxMTAvBgNV BAMTKEE4N0Y3QjNCMzA2QTY4MDc1RDcwQTRBMTVEQzE1RkI4MTFBODU1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lGZknI0hx9aPGaju44PsR56Z L49w1UhX2dhMANEYMSDl3C/E5r8W1rl5oeA48k6jcKJjZcxEdAh3xTItarQ3r3R9 2Zvm8gcm8+jnfL0pc3QLJRRNfdyRi4lTK4ebuDeQMeymFwTI8Nr0dAwbVesDv8EL j5YEuDI6wKp2WUutU9JXoQ4C8pGvjdCNdEJWOg4jMAM9zD0DM66OL5JXV9nckGd4 FSYFOz9EGFyYJZQ03Cgznq5pV70OGgJw28AXYrxGugALKCbubKgdXhxY5ChdZBFG wDFReQy4se+AO6qbGKLPHJZLhDG5Kls/cHBovz1I72OqzwN/qZSQrzH1vevdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqH97OzBqaAddcKShXcFfuBGoVWswHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwV64c4jO1gcAqJ3CpVlRqw2SHrCJs9yG3t 5cvpZQIIswR5fxklnIOJaWmeiHWHi6EehtNMY9D/cwsSz1pF/YcUuVcYTnriUwlM WbIVc1C0bTbxXUiOCu4WgcHJprg+tYLHHhnk2qC2tCqLawqriO8mymwaTA61i+Ab Jfb+6W64pz0C0REYOHXrnLqB9MbUqqVe5QnZvpBhtqcR1E2HRxoFVsZuIEBs5giD bUGVHZ7ehalLIPRcFb1WC4uAwZonSqLie9kaWFqYmazAq8rktimbQ5U1/TGYV0A5 h2873KNP0auL3f/Jgu90Mnr9PH2hv6OZwlFzufwmAG6kncoGKAc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:05 2025 by rpki-client