$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: iX1ckMTICUsgQWs8Nq+fD1+0tRJsHT69HjVbwTCF+wQ= Subject key identifier: 59:C0:94:DA:49:00:9C:98:E6:C0:83:04:B2:97:42:63:A9:35:46:64 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 3BAD127F85D94B84B2DA27CB9209C3A07B6CD08C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 8B Signing time: Fri 18 Jul 2025 23:50:46 +0000 Manifest this update: Fri 18 Jul 2025 23:45:46 +0000 Manifest next update: Tue 22 Jul 2025 06:44:46 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: wiDfx0nBnCQEbBaeIo4rxQQFi6jLEQmd/xbjAcdwnVM=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ad:12:7f:85:d9:4b:84:b2:da:27:cb:92:09:c3:a0:7b:6c:d0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Jul 18 23:45:46 2025 GMT Not After : Jul 22 06:44:46 2025 GMT Subject: CN=59C094DA49009C98E6C08304B2974263A9354664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:9f:94:ea:46:95:00:a8:55:92:b2:9c:75: 27:a5:9e:5a:bd:67:f4:99:93:fe:e4:90:b5:2a:bd: 5e:9e:ac:fe:9c:0d:1b:5e:1d:7b:bc:75:77:93:9d: 3c:7e:de:f7:ca:81:1e:76:16:86:2d:f9:7d:86:d8: 52:70:9e:fd:28:75:8a:df:de:fc:da:23:af:bc:30: bd:8d:71:08:5c:f0:bf:6b:96:e2:22:4f:17:e7:39: 66:1b:6b:70:48:55:1e:6f:29:2c:20:a4:d1:f9:f0: 43:2e:2f:e6:8e:27:11:df:08:cd:df:a2:d1:69:30: 21:08:bd:46:a7:3d:1b:7f:27:5f:8c:8c:91:bc:11: 8d:a2:f6:70:ce:2d:89:05:ef:aa:ee:e7:1d:96:f3: 62:79:f8:76:2e:90:a6:8d:eb:3b:be:92:54:62:74: d2:47:47:e7:c3:70:49:cf:9b:49:db:89:58:c5:d7: cf:02:24:3f:5a:86:d7:47:f5:75:d6:fa:7e:c4:06: bc:79:fe:69:0a:4b:17:30:7b:d2:0a:22:38:b8:ec: 64:18:b0:82:16:54:3e:bd:d8:46:d2:55:c8:b3:37: 7f:ce:08:17:8f:4a:b7:12:c2:85:c9:fe:25:53:93: 17:68:34:aa:08:e8:b1:28:95:bf:2b:55:f6:c1:5e: 75:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C0:94:DA:49:00:9C:98:E6:C0:83:04:B2:97:42:63:A9:35:46:64 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:37:60:e2:7f:15:af:e5:27:a7:f1:d8:b5:76:1c:65:78:02: f9:fd:4c:64:9d:47:63:1a:6c:6d:f8:a0:d6:50:93:0d:26:57: 40:8d:99:8d:cb:3e:9b:70:b5:d7:24:f8:78:ee:03:71:c5:32: 91:bc:74:bc:85:9d:78:86:81:65:ed:8e:38:fd:59:12:cd:91: b4:55:a3:5b:6c:6e:a6:35:7a:10:a3:00:32:1d:67:d8:b7:4c: 8c:35:ae:a4:db:99:f5:85:4d:e9:3b:b9:a6:e4:36:6f:16:95: 98:fa:a7:c4:fe:43:c0:5b:d7:da:4b:27:bb:8e:4a:45:10:31: 67:59:de:5d:96:7f:8f:0b:01:a9:10:ca:79:81:4d:2f:53:46: 72:d6:ea:45:5d:c4:ee:af:a4:1a:f5:dd:b0:2f:cc:2f:61:ca: ee:2a:d3:7e:28:f6:84:16:65:a9:58:3b:43:8f:fe:8b:cf:cb: 53:5c:01:fc:ab:90:8c:3b:b5:ef:92:b2:7f:10:73:c1:c0:ae: c1:bc:b2:78:84:9a:7a:24:21:5d:a0:35:23:7d:62:7e:33:84: 4f:56:95:66:04:38:04:58:92:db:70:e2:cb:af:90:3b:eb:08: 84:37:34:40:d5:f0:6b:2d:56:70:2b:22:fc:09:79:12:02:aa: 19:5f:de:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO60Sf4XZS4Sy2ifLkgnDoHts0IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA3MTgyMzQ1NDZaFw0yNTA3MjIwNjQ0NDZaMDMxMTAvBgNV BAMTKDU5QzA5NERBNDkwMDlDOThFNkMwODMwNEIyOTc0MjYzQTkzNTQ2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChP5+U6kaVAKhVkrKcdSelnlq9 Z/SZk/7kkLUqvV6erP6cDRteHXu8dXeTnTx+3vfKgR52FoYt+X2G2FJwnv0odYrf 3vzaI6+8ML2NcQhc8L9rluIiTxfnOWYba3BIVR5vKSwgpNH58EMuL+aOJxHfCM3f otFpMCEIvUanPRt/J1+MjJG8EY2i9nDOLYkF76ru5x2W82J5+HYukKaN6zu+klRi dNJHR+fDcEnPm0nbiVjF188CJD9ahtdH9XXW+n7EBrx5/mkKSxcwe9IKIji47GQY sIIWVD692EbSVcizN3/OCBePSrcSwoXJ/iVTkxdoNKoI6LEolb8rVfbBXnXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWcCU2kkAnJjmwIMEspdCY6k1RmQwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANI3YOJ/Fa/lJ6fx2LV2HGV4Avn9TGSdR2Ma bG34oNZQkw0mV0CNmY3LPptwtdck+HjuA3HFMpG8dLyFnXiGgWXtjjj9WRLNkbRV o1tsbqY1ehCjADIdZ9i3TIw1rqTbmfWFTek7uabkNm8WlZj6p8T+Q8Bb19pLJ7uO SkUQMWdZ3l2Wf48LAakQynmBTS9TRnLW6kVdxO6vpBr13bAvzC9hyu4q034o9oQW ZalYO0OP/ovPy1NcAfyrkIw7te+Ssn8Qc8HArsG8sniEmnokIV2gNSN9Yn4zhE9W lWYEOARYkttw4suvkDvrCIQ3NEDV8GstVnArIvwJeRICqhlf3gU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:24 2025 by rpki-client