$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: NPKtF5HPleak3cEP9d6OWeEs5MCr8ciguPQ7+IvFXDU= Subject key identifier: 67:23:AB:EC:D3:85:9A:0C:0C:03:05:6A:29:45:1D:44:88:03:0F:94 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 4B1E0D0312173065FD1E839F4E7CFE174ABCD59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01E4 Signing time: Sun 20 Jul 2025 11:12:52 +0000 Manifest this update: Sun 20 Jul 2025 11:07:52 +0000 Manifest next update: Wed 23 Jul 2025 22:23:52 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 3: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: EJ9u/t0aYJUX/WWSDFrtPw5l64SsTho2jdPGm3loMcM=) 4: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1e:0d:03:12:17:30:65:fd:1e:83:9f:4e:7c:fe:17:4a:bc:d5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Jul 20 11:07:52 2025 GMT Not After : Jul 23 22:23:52 2025 GMT Subject: CN=6723ABECD3859A0C0C03056A29451D4488030F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:0e:f1:da:75:22:70:c1:5f:31:88:23:6b: c9:81:9a:04:e3:32:93:6e:87:bd:64:62:95:d8:5c: f3:71:a0:da:3e:e2:db:29:d6:93:2a:c5:cd:21:dc: ee:9f:98:8f:7b:00:08:47:c1:50:54:33:3b:e5:45: 0f:09:84:b9:15:ef:9b:13:f3:96:ee:c4:94:fb:ac: 87:3a:53:19:48:b2:40:90:e5:4e:71:a9:13:f6:29: 08:8b:6d:5e:11:19:d4:80:b4:52:22:28:d1:d0:bf: 32:3c:2a:5d:95:3e:1a:dc:21:ed:f4:89:84:fb:63: fa:c0:f9:3e:40:b1:a8:db:eb:4b:bc:25:f8:c2:0b: a0:d0:b5:c6:ef:d0:23:bb:54:17:58:40:bb:67:c3: 91:85:84:98:bb:e1:06:c4:ff:b0:6d:83:6d:8b:d3: f5:d1:a5:c3:47:f9:be:2b:72:60:61:c3:e5:f2:df: a7:c4:77:92:43:ff:b2:c8:49:81:35:ab:45:86:ba: cd:1b:f9:df:2a:79:14:b5:66:05:d2:78:01:4d:a8: 0d:50:97:1d:91:2d:c4:7f:20:6a:80:c1:d6:d0:ed: 12:5e:40:a3:ac:3b:3d:9a:33:36:b3:82:00:7d:61: ed:2a:d8:18:a0:8e:bc:ff:6b:d7:e9:26:b5:2a:9d: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:AB:EC:D3:85:9A:0C:0C:03:05:6A:29:45:1D:44:88:03:0F:94 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bd:d8:f2:ea:3b:5b:45:25:7a:4c:69:8d:c6:2d:f7:91:c1: 7c:5b:73:7a:b8:da:a9:e3:65:7d:37:b7:4b:f7:8c:58:99:0e: 34:7a:b9:9e:16:c4:15:34:42:18:c4:55:b1:21:54:7b:26:5f: db:cc:64:6d:7e:6a:fc:7c:28:1c:eb:6e:44:2b:76:18:15:b6: 60:82:b3:d8:7a:9d:e8:c6:b2:f7:bd:73:0b:42:f9:10:9e:54: f8:a0:74:be:36:40:6d:aa:19:0b:dc:94:90:41:f3:bd:ec:03: 09:7e:8c:de:07:f6:16:78:13:5f:c3:fe:3d:0e:88:c8:2d:04: 73:1a:5e:02:4b:3f:2a:bd:05:30:c0:e3:3e:e8:f9:75:70:0c: cd:d9:7a:ef:4e:5c:22:03:d1:2b:d3:db:3c:9a:8d:10:6b:8e: 7b:0e:7b:8e:ac:8e:6a:f5:c4:de:38:8d:d1:24:ad:32:74:f3: 0a:7a:9c:41:75:34:81:f0:7b:56:12:01:3e:f1:5c:77:e7:2b: cc:4e:94:0a:2e:63:39:87:35:91:23:09:37:7b:11:ec:14:ce: c8:39:f3:81:b1:42:9c:2f:c2:02:eb:10:05:40:be:87:09:80: e0:ae:47:b6:4f:c6:4d:ee:61:fa:06:07:4a:1c:24:49:18:74: 0a:2b:58:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx4NAxIXMGX9HoOfTnz+F0q81ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA3MjAxMTA3NTJaFw0yNTA3MjMyMjIzNTJaMDMxMTAvBgNV BAMTKDY3MjNBQkVDRDM4NTlBMEMwQzAzMDU2QTI5NDUxRDQ0ODgwMzBGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27w7x2nUicMFfMYgja8mBmgTj MpNuh71kYpXYXPNxoNo+4tsp1pMqxc0h3O6fmI97AAhHwVBUMzvlRQ8JhLkV75sT 85buxJT7rIc6UxlIskCQ5U5xqRP2KQiLbV4RGdSAtFIiKNHQvzI8Kl2VPhrcIe30 iYT7Y/rA+T5Asajb60u8JfjCC6DQtcbv0CO7VBdYQLtnw5GFhJi74QbE/7Btg22L 0/XRpcNH+b4rcmBhw+Xy36fEd5JD/7LISYE1q0WGus0b+d8qeRS1ZgXSeAFNqA1Q lx2RLcR/IGqAwdbQ7RJeQKOsOz2aMzazggB9Ye0q2Bigjrz/a9fpJrUqnY59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyOr7NOFmgwMAwVqKUUdRIgDD5QwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm92PLqO1tFJXpMaY3GLfeRwXxbc3q42qnj ZX03t0v3jFiZDjR6uZ4WxBU0QhjEVbEhVHsmX9vMZG1+avx8KBzrbkQrdhgVtmCC s9h6nejGsve9cwtC+RCeVPigdL42QG2qGQvclJBB873sAwl+jN4H9hZ4E1/D/j0O iMgtBHMaXgJLPyq9BTDA4z7o+XVwDM3Zeu9OXCID0SvT2zyajRBrjnsOe46sjmr1 xN44jdEkrTJ08wp6nEF1NIHwe1YSAT7xXHfnK8xOlAouYzmHNZEjCTd7EewUzsg5 84GxQpwvwgLrEAVAvocJgOCuR7ZPxk3uYfoGB0ocJEkYdAorWJo= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:10 2025 by rpki-client