$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: +SgFv0/ICOgHLkSWcxHnirQzoGp6qbQ73VPkUb81YLs= Subject key identifier: 46:9C:F8:DE:7B:17:47:AE:3C:64:AA:F6:66:8C:00:15:BA:20:70:44 Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 695A1D08FE6F322500AD3816ABE35A061A17CDD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 01FD Signing time: Sat 19 Jul 2025 12:21:04 +0000 Manifest this update: Sat 19 Jul 2025 12:16:04 +0000 Manifest next update: Tue 22 Jul 2025 22:12:04 +0000 Files and hashes: 1: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) 2: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: Pk2ZNr9llwWE6t4q5xUpGdSsEBFlM/nHmkFBSlTniQc=) 3: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 4: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5a:1d:08:fe:6f:32:25:00:ad:38:16:ab:e3:5a:06:1a:17:cd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Jul 19 12:16:04 2025 GMT Not After : Jul 22 22:12:04 2025 GMT Subject: CN=469CF8DE7B1747AE3C64AAF6668C0015BA207044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:86:0d:1f:2a:6e:62:f2:57:b5:c6:26:6e: e8:5e:d1:da:4c:69:77:e4:92:0a:f2:47:f4:50:df: 09:16:ad:1b:fb:79:bb:40:49:78:3b:ae:09:24:c9: 4f:1b:4c:15:36:41:d7:9a:7f:f7:d1:78:bf:89:09: c5:3c:00:80:f9:0a:cd:07:b8:61:a5:a4:c3:c2:20: 18:1e:d1:ae:d9:75:b9:7d:ff:e2:dd:3a:8d:ae:01: f3:82:ae:a5:f8:47:6f:30:c0:62:a2:00:cf:c6:74: 5d:a5:d5:17:24:18:95:86:2c:f2:6f:03:f2:8d:ec: 8c:66:5a:34:e1:4c:4f:ee:ad:d8:85:30:27:8a:dc: 1f:5f:74:63:fa:af:ef:a9:7b:c1:3b:c0:23:0b:fc: 9e:f7:6b:61:0f:95:0a:12:62:19:89:0b:c1:7d:d7: 19:a8:38:01:63:1d:7a:c3:70:f8:48:8c:06:72:8e: 1a:a8:b5:af:59:be:22:b0:ff:1f:8e:ae:51:0c:e0: 81:87:00:3f:6e:5b:93:bb:a2:ed:2d:e9:c3:96:0c: 2f:c7:37:f4:73:89:4d:4f:b5:11:d6:c9:74:3a:c2: 88:a1:64:31:8f:5c:16:5f:fc:c4:2a:ed:ce:b1:a9: 7d:91:93:ed:4e:1b:c1:12:43:93:0f:7c:ca:4a:ae: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9C:F8:DE:7B:17:47:AE:3C:64:AA:F6:66:8C:00:15:BA:20:70:44 X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b6:6c:63:6a:cd:9e:4e:49:cb:5e:43:2e:3d:55:3e:ed:90: 9a:78:7b:92:5c:0c:a5:f3:90:5b:59:dc:44:e7:bc:e8:5a:1d: d8:20:0d:73:63:f3:bc:05:9e:b2:c0:13:5a:9f:e9:f0:05:34: 06:28:e3:d6:d1:7d:2a:b5:2b:66:ba:79:f1:a7:d8:0c:85:c0: c2:9d:ca:7c:7a:7d:2f:47:b1:04:7c:cb:dd:35:ab:12:0d:e2: 11:d1:1a:9c:96:07:b1:1f:7a:fc:23:04:7e:6b:e8:d5:a1:30: 4a:ea:b8:67:26:3e:65:6d:4e:7e:bb:6d:c2:51:ec:be:0c:e4: 8f:bb:61:55:d5:e3:29:55:b8:87:23:13:dd:b7:11:2a:a7:c0: 27:7b:98:0a:e6:8e:7e:cb:39:ba:ff:41:82:84:e9:2f:77:9b: 9f:95:98:10:b7:a7:5d:03:b6:58:0d:46:45:8e:a3:7b:e1:a5: 7d:a2:46:21:8f:6b:41:d6:e8:0a:92:27:31:67:89:e1:c3:f0: 77:d6:31:e8:e1:e8:40:10:dc:dd:20:15:77:3b:8c:30:ab:9f: 59:33:01:fe:45:63:fd:e6:85:48:44:99:11:2e:6f:45:20:6a: 53:97:ff:fb:e3:9d:aa:9f:8a:9c:4f:e7:88:6c:2a:c6:7a:77: 7e:7c:37:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVodCP5vMiUArTgWq+NaBhoXzdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTA3MTkxMjE2MDRaFw0yNTA3MjIyMjEyMDRaMDMxMTAvBgNV BAMTKDQ2OUNGOERFN0IxNzQ3QUUzQzY0QUFGNjY2OEMwMDE1QkEyMDcwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqYYNHypuYvJXtcYmbuhe0dpM aXfkkgryR/RQ3wkWrRv7ebtASXg7rgkkyU8bTBU2Qdeaf/fReL+JCcU8AID5Cs0H uGGlpMPCIBge0a7Zdbl9/+LdOo2uAfOCrqX4R28wwGKiAM/GdF2l1RckGJWGLPJv A/KN7IxmWjThTE/urdiFMCeK3B9fdGP6r++pe8E7wCML/J73a2EPlQoSYhmJC8F9 1xmoOAFjHXrDcPhIjAZyjhqota9ZviKw/x+OrlEM4IGHAD9uW5O7ou0t6cOWDC/H N/RziU1PtRHWyXQ6woihZDGPXBZf/MQq7c6xqX2Rk+1OG8ESQ5MPfMpKruHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURpz43nsXR648ZKr2ZowAFbogcEQwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO2bGNqzZ5OScteQy49VT7tkJp4e5JcDKXz kFtZ3ETnvOhaHdggDXNj87wFnrLAE1qf6fAFNAYo49bRfSq1K2a6efGn2AyFwMKd ynx6fS9HsQR8y901qxIN4hHRGpyWB7EfevwjBH5r6NWhMErquGcmPmVtTn67bcJR 7L4M5I+7YVXV4ylVuIcjE923ESqnwCd7mArmjn7LObr/QYKE6S93m5+VmBC3p10D tlgNRkWOo3vhpX2iRiGPa0HW6AqSJzFnieHD8HfWMejh6EAQ3N0gFXc7jDCrn1kz Af5FY/3mhUhEmREub0UgalOX//vjnaqfipxP54hsKsZ6d358N3s= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:41 2025 by rpki-client