$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: CG2N9SVU5nDJ5SVfJiyIGOM4KHUmf+WPwe/J5chcEkk= Subject key identifier: FE:89:A4:A7:E2:B0:C5:D3:D2:50:B0:E3:00:3C:68:E9:F7:EB:FA:57 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 1B9D7DC8A960E4C243A13BF7FC1CC074C5CEFAA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 57 Signing time: Sat 09 Aug 2025 17:11:12 +0000 Manifest this update: Sat 09 Aug 2025 17:06:12 +0000 Manifest next update: Tue 12 Aug 2025 18:38:12 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: 1uBCX9+d3eGGGdzWJjOPR6h0JY5gGqwjvvcGZx3ES/g=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 18:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9d:7d:c8:a9:60:e4:c2:43:a1:3b:f7:fc:1c:c0:74:c5:ce:fa:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Aug 9 17:06:12 2025 GMT Not After : Aug 12 18:38:12 2025 GMT Subject: CN=FE89A4A7E2B0C5D3D250B0E3003C68E9F7EBFA57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:b9:8b:5e:1f:33:6a:f8:a4:da:a1:11:2b: a4:54:49:13:7c:27:53:c7:67:a6:91:c9:20:47:c9: f7:f0:11:63:44:9b:39:96:d4:2e:e2:9d:f0:79:fb: 04:25:b0:9c:45:43:20:8a:e2:61:e9:89:49:d2:c5: 51:55:65:21:83:f4:52:19:56:23:19:2c:1b:22:a2: 38:12:81:af:a2:e1:ad:60:44:f3:de:54:6e:bd:fd: e0:cc:7b:1a:98:74:da:54:95:89:bb:3d:59:dd:1f: 60:f4:22:fb:6d:2b:91:a4:df:8f:ee:60:01:18:a1: 6c:8d:c5:b5:39:20:1e:46:6f:65:ee:e4:49:5f:48: 7a:0f:35:d5:f4:3e:6e:a4:e6:e5:21:fd:b4:3d:58: 80:36:cb:8e:50:5a:80:ed:34:4c:21:19:c2:d1:2e: ca:a4:af:7d:3a:6c:24:00:5e:34:4f:4f:75:47:49: 39:99:7c:3e:68:4e:ed:4c:a8:22:8c:f4:b1:6a:00: ff:a4:8f:82:ac:59:ee:91:ec:46:05:86:52:4f:7e: 8c:eb:e8:37:ed:1d:72:c9:1d:b7:2f:7a:eb:70:86: 23:d4:a3:b5:b9:6d:4e:06:3e:61:7f:28:d2:48:b2: 24:4b:de:4d:39:74:61:ca:9e:5b:74:4c:08:6f:be: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:89:A4:A7:E2:B0:C5:D3:D2:50:B0:E3:00:3C:68:E9:F7:EB:FA:57 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3a:27:ff:72:75:59:00:87:0d:18:2c:e5:cc:41:a9:cc:95: ce:11:b1:5c:97:90:a7:8f:3e:69:d9:e0:8c:85:e5:55:a5:d4: a0:48:72:8d:cc:bf:a7:9c:d4:25:d2:00:21:78:8f:ee:f1:36: cf:50:da:14:21:3c:71:c9:55:7c:ef:ba:2c:8e:a6:40:91:5a: 9f:4c:6d:3f:2f:eb:42:d1:e6:c6:be:fd:fd:d0:da:0d:d0:d6: 80:2b:c2:2e:e3:34:eb:21:1f:cc:60:4b:1a:7b:2d:9c:f4:65: 8c:30:60:8b:eb:1a:4f:0f:db:b9:b7:20:de:b9:b1:da:5e:bd: 9c:2b:a2:48:ee:fe:ed:85:5a:dc:b8:f5:d9:5a:77:c2:2c:39: 6e:cb:af:82:c3:94:33:b4:0a:27:dd:d7:7a:f2:86:f7:8a:24: 32:6e:fd:31:ae:cf:45:9e:96:bd:59:f8:c6:1d:c5:52:d1:67: fa:ce:09:76:08:90:3a:ad:3b:25:19:48:4c:e5:97:0b:e0:83: 64:1b:fe:4d:3b:98:f0:af:42:79:0e:13:94:84:e7:82:6a:87: 3e:68:35:2f:ac:7a:55:96:eb:e2:ef:8c:df:ae:91:d5:01:27: b9:00:3b:22:76:55:49:8b:4b:16:14:fe:9c:a5:44:ae:cb:1e: 36:ab:54:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG519yKlg5MJDoTv3/BzAdMXO+qcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA4MDkxNzA2MTJaFw0yNTA4MTIxODM4MTJaMDMxMTAvBgNV BAMTKEZFODlBNEE3RTJCMEM1RDNEMjUwQjBFMzAwM0M2OEU5RjdFQkZBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoLmLXh8zavik2qERK6RUSRN8 J1PHZ6aRySBHyffwEWNEmzmW1C7infB5+wQlsJxFQyCK4mHpiUnSxVFVZSGD9FIZ ViMZLBsiojgSga+i4a1gRPPeVG69/eDMexqYdNpUlYm7PVndH2D0IvttK5Gk34/u YAEYoWyNxbU5IB5Gb2Xu5ElfSHoPNdX0Pm6k5uUh/bQ9WIA2y45QWoDtNEwhGcLR Lsqkr306bCQAXjRPT3VHSTmZfD5oTu1MqCKM9LFqAP+kj4KsWe6R7EYFhlJPfozr 6DftHXLJHbcveutwhiPUo7W5bU4GPmF/KNJIsiRL3k05dGHKnlt0TAhvvvIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/omkp+KwxdPSULDjADxo6ffr+lcwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ06J/9ydVkAhw0YLOXMQanMlc4RsVyXkKeP PmnZ4IyF5VWl1KBIco3Mv6ec1CXSACF4j+7xNs9Q2hQhPHHJVXzvuiyOpkCRWp9M bT8v60LR5sa+/f3Q2g3Q1oArwi7jNOshH8xgSxp7LZz0ZYwwYIvrGk8P27m3IN65 sdpevZwrokju/u2FWty49dlad8IsOW7Lr4LDlDO0Cifd13ryhveKJDJu/TGuz0We lr1Z+MYdxVLRZ/rOCXYIkDqtOyUZSEzllwvgg2Qb/k07mPCvQnkOE5SE54Jqhz5o NS+selWW6+LvjN+ukdUBJ7kAOyJ2VUmLSxYU/pylRK7LHjarVLk= -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:23 2025 by rpki-client