$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: CuB9N6Dyf/ZhbpQlujfJ5w/hbwQ6ESTMHqBx4sUduWI= Subject key identifier: 94:1A:FB:0D:06:08:64:2C:D1:DC:D7:23:84:E8:CF:2E:A1:97:46:FE Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 07E63363266C2394CAEB34479D86C6BB68B15EEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0159 Signing time: Sun 20 Jul 2025 09:51:59 +0000 Manifest this update: Sun 20 Jul 2025 09:46:59 +0000 Manifest next update: Wed 23 Jul 2025 21:33:59 +0000 Files and hashes: 1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: EEb2I86TzFTKT0jVn7F+WbRkpWr0dHQNiioVNZm016Q=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e6:33:63:26:6c:23:94:ca:eb:34:47:9d:86:c6:bb:68:b1:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Jul 20 09:46:59 2025 GMT Not After : Jul 23 21:33:59 2025 GMT Subject: CN=941AFB0D0608642CD1DCD72384E8CF2EA19746FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:e0:50:2f:23:91:d0:ea:59:15:d8:a1:6a: ed:8c:90:ce:74:6b:fa:69:72:25:6e:e2:14:43:58: 8e:72:2c:40:6b:f9:be:9e:c0:df:d1:0d:cb:87:f8: 65:c6:8a:23:74:d9:03:34:eb:dc:4c:46:f5:8a:ad: ff:b0:64:c4:17:9e:7d:4a:0e:61:0c:e7:e4:c9:e4: 66:a1:63:0b:0a:88:5e:00:34:55:7b:66:47:fe:e1: 50:8f:69:cf:35:63:22:fe:31:c5:5c:a4:0c:38:1d: dc:42:ff:04:5e:ae:de:e8:ab:69:c4:77:c3:4b:42: cf:76:ff:58:6b:f0:d1:20:5a:10:64:24:13:8d:c7: 7c:8c:aa:85:d0:d3:16:30:60:4f:53:84:b7:2a:b6: fe:2a:7c:0d:52:94:c7:7d:27:e4:83:05:67:c0:9f: 23:68:9f:1b:fa:f2:d3:93:e5:65:4c:00:52:30:87: 3f:42:9e:96:29:4b:4b:21:12:75:3b:84:c8:42:e8: 5c:aa:a7:3b:80:3a:ad:a1:5a:88:d5:a4:3d:ac:22: 34:ba:da:75:77:f8:c7:dc:c0:ac:22:39:30:c2:31: 21:54:3e:0f:83:37:3c:d5:b8:9c:5f:73:e0:ca:41: 97:6e:0b:42:4b:6c:67:66:c1:71:5f:3f:46:97:96: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:FB:0D:06:08:64:2C:D1:DC:D7:23:84:E8:CF:2E:A1:97:46:FE X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:49:0e:00:cb:ae:5d:ad:92:04:78:c6:d2:b3:77:5b:11:25: 9b:8c:b8:2c:8b:4f:ce:34:4d:04:6d:8d:76:6e:44:0a:d7:ce: 7f:25:49:e1:0c:8b:fa:7c:31:2e:44:ba:89:47:14:41:ca:70: 61:4a:cd:7e:0d:bd:73:58:f9:e7:14:d1:75:46:ae:31:ce:1e: d5:3e:3f:79:d3:cc:48:6a:7c:cf:f1:67:cf:34:8f:4b:18:ca: f2:88:ac:a0:4d:be:6f:48:cf:ac:e8:df:f4:58:27:35:17:4d: 6e:b9:84:bb:03:df:ee:ce:98:08:b4:eb:a5:a9:38:55:ad:0f: 4b:d3:c6:e1:39:c0:f6:86:0a:cc:9f:98:e6:82:25:7c:4a:00: 9c:fc:6a:4e:be:12:0e:c5:a2:ce:53:96:e9:8d:f6:f9:ef:8b: b4:81:f2:f7:15:da:b3:dc:86:a5:96:33:e9:8a:e0:e8:87:e7: 2d:0b:a8:5e:15:a0:89:0a:f1:cc:33:1b:9b:76:c1:37:87:79: 6e:ef:cc:80:49:91:3f:1a:fc:49:a7:23:e0:d7:e7:2e:1d:d0: e3:ec:6e:fd:b1:f7:9e:a3:d7:7a:a6:88:59:71:81:4d:53:27: bf:f9:37:0a:d3:a6:95:48:1b:83:af:3b:23:54:03:1e:3c:ce: aa:78:8c:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+YzYyZsI5TK6zRHnYbGu2ixXu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTA3MjAwOTQ2NTlaFw0yNTA3MjMyMTMzNTlaMDMxMTAvBgNV BAMTKDk0MUFGQjBEMDYwODY0MkNEMURDRDcyMzg0RThDRjJFQTE5NzQ2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeOBQLyOR0OpZFdihau2MkM50 a/ppciVu4hRDWI5yLEBr+b6ewN/RDcuH+GXGiiN02QM069xMRvWKrf+wZMQXnn1K DmEM5+TJ5GahYwsKiF4ANFV7Zkf+4VCPac81YyL+McVcpAw4HdxC/wRert7oq2nE d8NLQs92/1hr8NEgWhBkJBONx3yMqoXQ0xYwYE9ThLcqtv4qfA1SlMd9J+SDBWfA nyNonxv68tOT5WVMAFIwhz9CnpYpS0shEnU7hMhC6FyqpzuAOq2hWojVpD2sIjS6 2nV3+MfcwKwiOTDCMSFUPg+DNzzVuJxfc+DKQZduC0JLbGdmwXFfP0aXlthnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBr7DQYIZCzR3NcjhOjPLqGXRv4wHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBJDgDLrl2tkgR4xtKzd1sRJZuMuCyLT840 TQRtjXZuRArXzn8lSeEMi/p8MS5EuolHFEHKcGFKzX4NvXNY+ecU0XVGrjHOHtU+ P3nTzEhqfM/xZ880j0sYyvKIrKBNvm9Iz6zo3/RYJzUXTW65hLsD3+7OmAi066Wp OFWtD0vTxuE5wPaGCsyfmOaCJXxKAJz8ak6+Eg7Fos5TlumN9vnvi7SB8vcV2rPc hqWWM+mK4OiH5y0LqF4VoIkK8cwzG5t2wTeHeW7vzIBJkT8a/EmnI+DX5y4d0OPs bv2x956j13qmiFlxgU1TJ7/5NwrTppVIG4OvOyNUAx48zqp4jPc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:15 2025 by rpki-client