$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: 677I0I69EOQ7S47Xb4uub21+/g49+4sjSH4nQF+sYLw= Subject key identifier: D0:19:DF:85:BA:92:B9:CE:F1:EF:E3:42:62:99:29:58:56:F6:C3:10 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 2D1F58819FC12A301E499AED8699B93C7CB7C4AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 3F Signing time: Sun 15 Jun 2025 16:11:10 +0000 Manifest this update: Sun 15 Jun 2025 16:06:10 +0000 Manifest next update: Thu 19 Jun 2025 04:10:10 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 3: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: LilQMRjx2B5ztvPpH0WIhX0qm4FfJ6z32zAVE9Wkyn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1f:58:81:9f:c1:2a:30:1e:49:9a:ed:86:99:b9:3c:7c:b7:c4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Jun 15 16:06:10 2025 GMT Not After : Jun 19 04:10:10 2025 GMT Subject: CN=D019DF85BA92B9CEF1EFE3426299295856F6C310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:db:ad:34:5c:6c:19:1c:3f:02:c8:12:e5: 0f:8a:88:72:f8:49:75:d5:d5:7d:38:b4:6d:c0:8a: 7b:4b:4a:51:31:0b:72:af:0f:48:d4:7c:70:1b:16: 32:f4:d1:7d:a4:ca:c3:9f:16:68:f2:36:d6:3c:e7: 05:d5:74:b7:1b:35:5d:da:a3:d0:14:52:9a:fd:6d: 3a:47:cc:f4:30:37:75:3c:51:7d:d4:01:ff:0b:61: 84:c4:13:45:9d:ba:ab:4a:30:43:3c:3e:94:8a:0e: 8a:46:75:27:91:31:4f:9f:ff:80:65:94:c6:35:72: d0:36:28:26:2a:b0:32:d9:93:ae:b8:93:7a:3f:a8: 9d:14:ae:2b:09:85:ae:ad:a5:cb:84:16:03:f9:5d: bb:d6:de:ca:ea:1d:64:c7:28:12:eb:0c:4f:64:6e: 97:e0:52:4f:eb:fd:71:29:43:0d:a7:ce:11:b9:ae: a2:27:16:ea:1b:c2:6b:3b:8f:bb:18:0d:70:e3:ec: 1f:5b:29:16:73:53:c9:73:31:13:df:29:36:4c:36: 8b:70:c1:05:9b:1a:9e:de:82:de:76:b7:4d:98:66: 0c:ee:c3:38:4a:ec:40:b5:2c:db:15:ab:d1:b5:bc: 18:4f:74:43:a5:e9:54:41:db:10:92:a6:94:ca:af: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:19:DF:85:BA:92:B9:CE:F1:EF:E3:42:62:99:29:58:56:F6:C3:10 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:19:ed:ac:46:51:9d:0d:b1:7c:92:98:aa:95:b3:97:81:5c: 7c:3b:1f:b7:06:6e:2a:07:57:7b:ba:53:d2:93:58:e2:6f:db: 47:59:c1:04:6a:59:d5:3d:07:38:ec:8a:3c:a6:9a:cd:d9:1a: 45:5c:47:fb:33:63:fa:ac:e5:5d:a3:23:e7:aa:5d:4c:76:fc: 0e:7d:6e:1a:b1:85:21:67:65:4a:65:98:8d:0d:59:34:22:f6: 26:2d:6b:e2:b1:e5:4b:53:ba:4b:e7:c2:72:d3:8d:dc:2f:cd: ba:47:1c:3b:a7:0d:91:cb:d8:f0:63:8c:0b:c0:c5:04:86:fd: 2f:69:27:64:db:10:56:ae:9c:0f:44:19:7a:53:df:af:0c:70: 0b:f0:81:75:b6:df:f6:cc:24:40:5e:70:c3:61:29:e8:dd:eb: 07:b9:5e:8c:d0:9c:dd:af:50:e2:1a:19:b0:bf:70:fa:fb:c1: 26:4c:5a:22:a8:f8:e3:1f:92:15:ed:c6:87:db:c4:53:8d:e8: 8e:3b:ae:73:00:8d:9e:eb:65:7a:f7:cf:b3:67:2c:69:0b:02: 12:70:41:48:10:46:6b:2d:8f:28:3b:0d:97:bc:eb:ba:10:78: 3f:84:2f:31:a6:d3:3a:27:4d:9f:83:d9:44:09:70:37:bc:13: e0:83:cd:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULR9YgZ/BKjAeSZrthpm5PHy3xKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA2MTUxNjA2MTBaFw0yNTA2MTkwNDEwMTBaMDMxMTAvBgNV BAMTKEQwMTlERjg1QkE5MkI5Q0VGMUVGRTM0MjYyOTkyOTU4NTZGNkMzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eNutNFxsGRw/AsgS5Q+KiHL4 SXXV1X04tG3AintLSlExC3KvD0jUfHAbFjL00X2kysOfFmjyNtY85wXVdLcbNV3a o9AUUpr9bTpHzPQwN3U8UX3UAf8LYYTEE0WduqtKMEM8PpSKDopGdSeRMU+f/4Bl lMY1ctA2KCYqsDLZk664k3o/qJ0UrisJha6tpcuEFgP5XbvW3srqHWTHKBLrDE9k bpfgUk/r/XEpQw2nzhG5rqInFuobwms7j7sYDXDj7B9bKRZzU8lzMRPfKTZMNotw wQWbGp7egt52t02YZgzuwzhK7EC1LNsVq9G1vBhPdEOl6VRB2xCSppTKr43/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BnfhbqSuc7x7+NCYpkpWFb2wxAwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQZ7axGUZ0NsXySmKqVs5eBXHw7H7cGbioH V3u6U9KTWOJv20dZwQRqWdU9Bzjsijymms3ZGkVcR/szY/qs5V2jI+eqXUx2/A59 bhqxhSFnZUplmI0NWTQi9iYta+Kx5UtTukvnwnLTjdwvzbpHHDunDZHL2PBjjAvA xQSG/S9pJ2TbEFaunA9EGXpT368McAvwgXW23/bMJEBecMNhKejd6we5XozQnN2v UOIaGbC/cPr7wSZMWiKo+OMfkhXtxofbxFON6I47rnMAjZ7rZXr3z7NnLGkLAhJw QUgQRmstjyg7DZe867oQeD+ELzGm0zonTZ+D2UQJcDe8E+CDzYE= -----END CERTIFICATE-----Generated at Tue Jun 17 08:44:47 2025 by rpki-client