$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: pSSZDTvUWc3zLKd8aSIRuw4v3PnmPHxWwIdRRljtEFU= Subject key identifier: E0:0E:8C:13:DA:46:95:D5:4C:E1:2B:37:07:60:A4:C2:9C:E7:CA:89 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 04E6F613B91BC6D13A8B0AA61976795330723AC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01D5 Signing time: Fri 18 Jul 2025 22:11:49 +0000 Manifest this update: Fri 18 Jul 2025 22:06:49 +0000 Manifest next update: Tue 22 Jul 2025 05:31:49 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 2: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: aNKJg6uVZEtrp60dXDkJ3/WZ2r0rKwDY42la/hlK2Ug=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 05:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:f6:13:b9:1b:c6:d1:3a:8b:0a:a6:19:76:79:53:30:72:3a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Jul 18 22:06:49 2025 GMT Not After : Jul 22 05:31:49 2025 GMT Subject: CN=E00E8C13DA4695D54CE12B370760A4C29CE7CA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:12:07:08:77:51:6c:23:c1:ba:66:c8:eb: a4:59:83:04:e1:81:1f:85:1c:0e:22:df:f6:60:c5: 61:44:e6:ec:2c:ce:6d:aa:26:63:50:eb:aa:f1:83: 41:ab:0f:19:6f:d6:2b:32:c2:9b:b2:03:65:ff:b0: 85:0b:e5:3c:7b:55:96:e9:2b:84:7e:30:ac:8c:6e: c1:a7:7f:36:37:69:85:cb:7e:2b:28:6d:41:89:1e: dc:7c:d7:79:0f:04:29:42:18:97:19:39:44:f2:0b: df:0f:c7:3c:f1:02:66:b5:5e:1b:8f:f3:8d:8e:db: 89:f5:e1:c9:4d:05:81:dc:f6:50:34:b2:86:36:90: e1:56:73:50:a8:bf:0a:98:b5:9b:0a:8b:05:8f:68: 5d:80:42:1a:81:46:b5:94:34:f0:76:73:3c:35:14: 5f:c0:bc:68:96:25:ff:3b:ff:8c:70:4e:43:43:b7: 17:8e:b0:a7:7b:8b:59:e5:ac:0f:94:9a:6c:02:25: a1:08:23:6f:a2:bc:ed:2e:f4:99:7b:be:a9:55:0e: 69:8c:ee:cb:87:5d:da:f2:31:aa:42:cc:dc:e4:4d: d8:ec:f7:85:7d:84:71:c5:48:4b:aa:0e:1a:b1:68: 65:31:5c:21:65:a2:91:48:c0:01:a5:74:64:fa:4c: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0E:8C:13:DA:46:95:D5:4C:E1:2B:37:07:60:A4:C2:9C:E7:CA:89 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c3:89:68:b1:9a:c7:33:f7:4f:82:66:f3:1a:d9:dc:b2:03: 10:84:d2:0f:f9:32:29:30:ad:eb:ae:84:77:ed:6b:81:10:ca: e3:19:b1:f4:d0:3c:25:8e:08:2f:85:87:55:1f:45:ce:cc:57: e5:90:13:44:6b:2a:11:2a:95:2e:bd:40:be:64:71:c9:33:ec: b1:b5:0b:01:0e:64:98:17:14:0c:a7:6d:ae:94:c2:58:e2:41: f9:6e:62:b7:14:e2:4a:55:d0:03:e0:80:9c:bb:40:53:74:db: 40:98:d0:c3:8e:7c:35:47:fc:a3:24:11:c2:5a:ba:6c:12:3c: 41:f7:6a:71:ad:b0:cc:60:09:10:54:38:b4:77:f1:3e:5f:e6: 9d:be:9e:e4:a3:95:65:f8:03:15:19:37:76:74:f7:b9:1a:f8: b7:bb:8e:4e:c4:b5:bd:09:59:4b:d0:e7:44:3a:5d:12:9b:33: 63:2c:b5:51:68:25:63:8d:0f:e5:d1:2d:8b:6d:59:1b:31:f8: 51:d7:3b:4a:95:e5:06:85:f5:97:3a:4c:a9:06:37:5a:67:e6: cf:d8:3e:5e:52:c3:d2:bd:0f:ef:ad:fa:da:bc:9d:47:5c:21: 37:95:f2:52:7a:6a:5b:84:e6:c0:d8:c7:25:b6:86:22:4d:12: 0b:98:8b:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOb2E7kbxtE6iwqmGXZ5UzByOscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA3MTgyMjA2NDlaFw0yNTA3MjIwNTMxNDlaMDMxMTAvBgNV BAMTKEUwMEU4QzEzREE0Njk1RDU0Q0UxMkIzNzA3NjBBNEMyOUNFN0NBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfPBIHCHdRbCPBumbI66RZgwTh gR+FHA4i3/ZgxWFE5uwszm2qJmNQ66rxg0GrDxlv1isywpuyA2X/sIUL5Tx7VZbp K4R+MKyMbsGnfzY3aYXLfisobUGJHtx813kPBClCGJcZOUTyC98PxzzxAma1XhuP 842O24n14clNBYHc9lA0soY2kOFWc1CovwqYtZsKiwWPaF2AQhqBRrWUNPB2czw1 FF/AvGiWJf87/4xwTkNDtxeOsKd7i1nlrA+UmmwCJaEII2+ivO0u9Jl7vqlVDmmM 7suHXdryMapCzNzkTdjs94V9hHHFSEuqDhqxaGUxXCFlopFIwAGldGT6TGeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4A6ME9pGldVM4Ss3B2CkwpznyokwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3DiWixmscz90+CZvMa2dyyAxCE0g/5Mikw reuuhHfta4EQyuMZsfTQPCWOCC+Fh1UfRc7MV+WQE0RrKhEqlS69QL5kcckz7LG1 CwEOZJgXFAynba6UwljiQfluYrcU4kpV0APggJy7QFN020CY0MOOfDVH/KMkEcJa umwSPEH3anGtsMxgCRBUOLR38T5f5p2+nuSjlWX4AxUZN3Z097ka+Le7jk7Etb0J WUvQ50Q6XRKbM2MstVFoJWOND+XRLYttWRsx+FHXO0qV5QaF9Zc6TKkGN1pn5s/Y Pl5Sw9K9D++t+tq8nUdcITeV8lJ6aluE5sDYxyW2hiJNEguYi54= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:09 2025 by rpki-client