$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: xPkUm6ZBc0t2RIZjKVCdkuUqihDo+OOibMF2n4nKVBA= Subject key identifier: 89:17:C5:4B:71:36:27:68:BB:18:1D:52:55:02:35:11:A1:F2:90:BB Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 2B22963742E92AFD47BC06A1C0016B0A45D0E51B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 01CB Signing time: Sun 20 Jul 2025 14:12:04 +0000 Manifest this update: Sun 20 Jul 2025 14:07:04 +0000 Manifest next update: Thu 24 Jul 2025 01:47:04 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: 3JumUm1OrTHRtQ6ju+uG/8aR83tB7T44VvuAUKPx92Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:22:96:37:42:e9:2a:fd:47:bc:06:a1:c0:01:6b:0a:45:d0:e5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Jul 20 14:07:04 2025 GMT Not After : Jul 24 01:47:04 2025 GMT Subject: CN=8917C54B71362768BB181D5255023511A1F290BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:9b:72:2d:18:f8:5e:39:ed:d9:28:5f:0e: 20:75:a2:9f:04:6b:09:e2:4c:d6:f1:04:1f:09:f7: 5b:2a:51:d2:45:58:d2:1e:81:f3:c2:48:89:8e:7a: 46:a3:5f:64:7c:56:2f:00:f2:0d:1d:a9:0a:65:80: 82:a7:d8:1a:89:2d:e5:e0:c5:ba:52:47:91:57:04: a5:65:a3:cc:9c:63:fa:db:42:9c:86:f3:3f:31:3b: bf:10:be:ac:97:64:7e:53:f3:5d:01:9f:e1:3f:45: d9:58:6c:75:70:1f:0c:13:de:4d:53:60:c5:11:32: e7:91:b1:ac:9d:3f:ab:a7:8f:4b:7c:7d:96:c3:4b: 70:55:71:34:0c:4d:4d:38:5c:9d:18:c1:17:0c:de: d0:97:29:bf:7d:7d:4b:0b:2a:8f:42:02:76:73:c0: 1b:b3:63:3a:17:6b:45:2b:1f:6e:7a:06:a6:4f:18: 33:1f:0e:da:fc:8c:e4:bf:57:49:9e:d7:38:76:e7: b5:38:aa:c5:36:ea:44:59:1e:64:9d:d3:51:17:c9: 03:3d:fd:24:93:91:0f:82:29:cc:86:6c:c3:95:32: 8d:c3:9a:7b:23:9b:fc:5c:9d:82:f5:f2:0b:6c:41: 5e:08:4d:7c:93:a1:64:bc:90:d8:ea:09:0e:d4:6e: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:C5:4B:71:36:27:68:BB:18:1D:52:55:02:35:11:A1:F2:90:BB X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1d:0f:0e:d6:43:47:b4:4c:37:5f:f5:22:c0:e5:23:65:49: ec:52:c9:5b:75:9a:63:8c:fa:9f:0b:3f:5f:67:0e:ea:87:c0: d6:cc:5b:33:c7:2c:0c:c4:e7:5c:eb:85:53:21:76:5c:65:28: f6:25:19:42:df:ac:38:19:04:a7:c7:c1:f5:32:4d:5c:84:6d: 3f:18:96:4c:80:f6:61:5f:c3:3b:7f:58:75:36:0a:30:a4:14: 23:09:29:d5:1d:e9:d9:48:82:e5:1a:3c:ba:06:b3:0c:60:08: 86:73:6a:ca:b4:22:52:45:47:1c:1b:fa:45:01:88:d5:ed:01: 69:ae:65:3b:3f:0b:27:88:ac:db:bc:ba:c5:40:72:c1:7d:49: 75:2b:4d:67:a2:8e:38:73:51:46:33:8d:c0:69:76:1b:7f:a0: b2:89:40:d4:31:c0:d2:01:34:9f:9a:69:f4:76:b2:28:a7:5c: 40:34:ab:1d:57:9c:20:2d:10:1c:26:20:86:a6:59:e7:06:3d: 77:1e:5f:49:4b:ea:f5:00:b8:9d:0c:2c:9c:2a:2c:59:c0:e6: 65:61:49:da:a8:3f:b4:38:f6:59:25:ed:6b:7a:58:cd:0d:cb: 72:d6:fb:1a:3e:0d:12:61:de:5b:90:93:36:d1:21:89:dd:e2: fa:93:ce:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyKWN0LpKv1HvAahwAFrCkXQ5RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTA3MjAxNDA3MDRaFw0yNTA3MjQwMTQ3MDRaMDMxMTAvBgNV BAMTKDg5MTdDNTRCNzEzNjI3NjhCQjE4MUQ1MjU1MDIzNTExQTFGMjkwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdf5tyLRj4Xjnt2ShfDiB1op8E awniTNbxBB8J91sqUdJFWNIegfPCSImOekajX2R8Vi8A8g0dqQplgIKn2BqJLeXg xbpSR5FXBKVlo8ycY/rbQpyG8z8xO78QvqyXZH5T810Bn+E/RdlYbHVwHwwT3k1T YMURMueRsaydP6unj0t8fZbDS3BVcTQMTU04XJ0YwRcM3tCXKb99fUsLKo9CAnZz wBuzYzoXa0UrH256BqZPGDMfDtr8jOS/V0me1zh257U4qsU26kRZHmSd01EXyQM9 /SSTkQ+CKcyGbMOVMo3Dmnsjm/xcnYL18gtsQV4ITXyToWS8kNjqCQ7UblMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRfFS3E2J2i7GB1SVQI1EaHykLswHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMdDw7WQ0e0TDdf9SLA5SNlSexSyVt1mmOM +p8LP19nDuqHwNbMWzPHLAzE51zrhVMhdlxlKPYlGULfrDgZBKfHwfUyTVyEbT8Y lkyA9mFfwzt/WHU2CjCkFCMJKdUd6dlIguUaPLoGswxgCIZzasq0IlJFRxwb+kUB iNXtAWmuZTs/CyeIrNu8usVAcsF9SXUrTWeijjhzUUYzjcBpdht/oLKJQNQxwNIB NJ+aafR2siinXEA0qx1XnCAtEBwmIIamWecGPXceX0lL6vUAuJ0MLJwqLFnA5mVh SdqoP7Q49lkl7Wt6WM0Ny3LW+xo+DRJh3luQkzbRIYnd4vqTztQ= -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:31 2025 by rpki-client