$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: amAPkS1EOb9oRj7ZeQUoPVG8Akccpr21txLL3rBxCdo= Subject key identifier: 91:E5:85:79:9B:A1:FF:E8:C6:77:11:73:F5:0C:B9:2F:44:84:74:52 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 4BF2AC71A03695CE78291177AD140D123CDCE1B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: 7C Signing time: Sun 15 Jun 2025 16:21:25 +0000 Manifest this update: Sun 15 Jun 2025 16:16:25 +0000 Manifest next update: Wed 18 Jun 2025 17:36:25 +0000 Files and hashes: 1: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4=) 2: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: IoXihcWrLe60DlpQzVRAOXX3umofZd3ManAso30bXVY=) 3: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: c4/z4l7mhaPcJUeg7ScGA+dBwsffafw5CNSThiJNa6k=) 4: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: bcKNAldjHqBfsv/Q+Ly6D1o3ohbtzg70IudkGUDipiI=) 5: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: nUQ2kayi0Rj4NqtUCpruCitWDh+npuC9WG+E5F+Bv9o=) 6: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: rvmmuygSDQqp3VTFfTdTUgUhuWy6VU7o/YE+GwA04qY=) 7: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: 1nHw01smVx1ZOqDKUmuMmLHS8nfmS5SZFRiTVrT39OY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f2:ac:71:a0:36:95:ce:78:29:11:77:ad:14:0d:12:3c:dc:e1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Jun 15 16:16:25 2025 GMT Not After : Jun 18 17:36:25 2025 GMT Subject: CN=91E585799BA1FFE8C6771173F50CB92F44847452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:23:6c:58:a0:d4:8f:07:a8:46:ad:b7:5a: e3:42:9f:53:cd:f0:3a:c4:ab:50:9d:2f:84:1d:10: 88:98:48:4d:e2:e6:23:e9:64:57:1c:39:6e:33:01: aa:c3:a7:12:95:3f:32:d3:1b:6f:99:71:7c:a0:2e: 17:2c:ed:ef:f1:fe:f5:1c:dc:71:da:41:ae:a0:80: 0f:1f:3c:49:58:cd:18:d5:1e:91:69:fe:2f:54:0c: d2:2a:b0:ff:e6:a1:73:f1:de:43:c1:25:2c:1b:9c: 5b:dc:30:7f:47:94:3f:3b:c5:27:1f:28:34:c5:91: 38:ce:e3:24:a4:a1:c4:cd:64:96:a5:78:b5:1b:2a: 4f:11:5b:70:f0:71:ec:b0:bf:3e:6d:31:1b:54:84: 33:09:6b:b3:0d:67:a3:7d:74:89:93:b7:fe:40:84: 30:2f:dd:33:f9:c3:62:0b:f6:65:2a:71:2e:ac:45: 59:a1:28:8f:e7:38:19:5c:a4:92:9b:5a:bd:58:4b: 29:89:1b:80:af:70:7d:40:85:1e:6a:e1:8b:c1:91: 55:b5:78:a1:25:22:80:5b:bd:e8:70:5f:ed:ae:db: 3e:3b:a1:67:0d:3e:c7:ce:4d:7d:a9:43:11:09:3f: 6c:c0:a2:6b:7a:e9:73:7d:a5:fa:92:fa:74:d3:64: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E5:85:79:9B:A1:FF:E8:C6:77:11:73:F5:0C:B9:2F:44:84:74:52 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:4f:f2:da:77:3f:24:77:d0:48:ad:d6:4e:d4:a1:4a:c4: bb:2e:32:6c:01:5f:50:6b:d5:f1:f2:79:48:17:eb:10:93:b2: 1e:5b:a5:00:01:92:eb:4e:aa:26:1e:91:59:26:45:cd:09:21: 0c:f6:0b:5d:4b:e7:ff:55:5a:12:0b:e2:de:13:61:c2:cf:12: 23:21:7a:37:13:c3:62:e1:f6:46:a7:9a:7c:d5:b6:56:d7:6c: 3f:4a:fd:9a:3d:c4:7d:50:69:cb:2b:f5:94:1f:c3:7b:23:cd: 9f:1f:72:79:16:7a:10:81:07:b1:a3:7e:00:ff:8b:1b:c8:5c: e2:af:58:bb:63:77:d0:e7:21:e4:d3:b4:f0:23:f3:ce:c1:e9: 1c:d9:31:3a:f0:12:3a:30:51:67:0b:05:e7:d9:1e:2d:a2:88: c6:ef:e3:67:28:5d:e8:1c:3a:07:e2:ec:1e:74:ba:31:5a:53: f6:7c:2f:21:0b:05:1c:0e:7e:36:2f:9c:bf:f7:77:e0:b7:db: 66:83:ac:0f:41:3d:09:69:99:18:4b:44:8d:53:76:f2:b5:05: 12:0f:c9:a8:36:18:f7:08:46:bf:1e:36:da:0b:77:19:44:7f: 19:ab:3e:2d:55:43:b7:ff:f1:fb:48:08:44:e5:9e:1c:df:9e: 35:41:36:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/KscaA2lc54KRF3rRQNEjzc4bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTA2MTUxNjE2MjVaFw0yNTA2MTgxNzM2MjVaMDMxMTAvBgNV BAMTKDkxRTU4NTc5OUJBMUZGRThDNjc3MTE3M0Y1MENCOTJGNDQ4NDc0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWCNsWKDUjweoRq23WuNCn1PN 8DrEq1CdL4QdEIiYSE3i5iPpZFccOW4zAarDpxKVPzLTG2+ZcXygLhcs7e/x/vUc 3HHaQa6ggA8fPElYzRjVHpFp/i9UDNIqsP/moXPx3kPBJSwbnFvcMH9HlD87xScf KDTFkTjO4ySkocTNZJaleLUbKk8RW3Dwceywvz5tMRtUhDMJa7MNZ6N9dImTt/5A hDAv3TP5w2IL9mUqcS6sRVmhKI/nOBlcpJKbWr1YSymJG4CvcH1AhR5q4YvBkVW1 eKElIoBbvehwX+2u2z47oWcNPsfOTX2pQxEJP2zAomt66XN9pfqS+nTTZFtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkeWFeZuh/+jGdxFz9Qy5L0SEdFIwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGT0T/Ladz8kd9BIrdZO1KFKxLsuMmwBX1Br 1fHyeUgX6xCTsh5bpQABkutOqiYekVkmRc0JIQz2C11L5/9VWhIL4t4TYcLPEiMh ejcTw2Lh9kanmnzVtlbXbD9K/Zo9xH1Qacsr9ZQfw3sjzZ8fcnkWehCBB7GjfgD/ ixvIXOKvWLtjd9DnIeTTtPAj887B6RzZMTrwEjowUWcLBefZHi2iiMbv42coXegc Ogfi7B50ujFaU/Z8LyELBRwOfjYvnL/3d+C322aDrA9BPQlpmRhLRI1TdvK1BRIP yag2GPcIRr8eNtoLdxlEfxmrPi1VQ7f/8ftICETlnhzfnjVBNl4= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:05 2025 by rpki-client