$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: WIedjOsOfL9JyKeNYF2F1iZDuhohpL4UUOS0AbLARCo= Subject key identifier: 79:11:0F:80:67:CB:BA:2A:0E:4D:EA:DC:20:46:B6:97:63:CC:FF:67 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 523357A44800C0CAEFB0738D0DC62EAC859886D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 50 Signing time: Thu 24 Jul 2025 02:31:10 +0000 Manifest this update: Thu 24 Jul 2025 02:26:10 +0000 Manifest next update: Sun 27 Jul 2025 14:12:10 +0000 Files and hashes: 1: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: NgtowsoSkijWZwkR5hn4AWUfHSGSP+aVeMt+xRvHAaE=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:33:57:a4:48:00:c0:ca:ef:b0:73:8d:0d:c6:2e:ac:85:98:86:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Jul 24 02:26:10 2025 GMT Not After : Jul 27 14:12:10 2025 GMT Subject: CN=79110F8067CBBA2A0E4DEADC2046B69763CCFF67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:04:9d:d8:04:28:f7:57:24:44:07:5d:1d: 6b:98:05:e7:34:cf:55:32:50:4d:09:d3:6e:7c:06: 7e:9e:4f:c6:7e:4b:26:c9:f6:01:2f:5e:85:86:de: 1a:68:95:d6:ae:86:c2:a7:52:d8:5f:b3:29:29:96: 25:7e:ad:c3:e9:94:22:cb:c8:bb:9b:5e:d9:ab:37: 8c:8d:b0:52:b9:33:7a:e6:a8:44:22:72:c6:c2:86: e2:bb:0b:cd:50:c6:93:c0:fc:c0:e1:3b:ae:ef:09: 15:6e:33:6b:8d:2f:7b:a9:72:35:75:ef:8c:41:a5: 9d:ea:47:ef:73:f4:2f:dd:5b:d1:50:cf:f3:cf:f5: 35:67:44:b9:3e:41:14:8e:ae:33:d2:97:0e:45:14: 85:a1:cd:ac:74:49:9a:c6:d2:32:8c:7d:59:32:5c: c7:81:52:1f:f7:f2:91:7d:56:be:56:33:36:37:0d: 40:bf:85:8d:fd:3e:39:cd:81:7a:0c:2e:46:f9:73: d2:21:f9:d3:e8:8d:76:69:f6:11:5b:62:82:55:c5: 37:8a:20:eb:f5:85:de:4c:99:46:d1:26:20:ed:69: 37:e8:f4:cb:c7:d5:76:18:f6:2e:2e:60:35:81:4d: bd:5b:b6:b9:09:b7:ac:3e:8e:0d:e7:4f:85:99:53: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:0F:80:67:CB:BA:2A:0E:4D:EA:DC:20:46:B6:97:63:CC:FF:67 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0f:7a:19:5b:5d:3d:99:59:78:2b:14:4b:a1:cd:3e:0f:2b: f7:61:ea:56:18:17:89:07:0e:0f:cb:19:df:d3:62:fc:6d:cb: 68:86:c6:af:99:2d:a7:d2:16:fb:2b:35:e4:c3:71:6e:31:ab: f2:ee:25:97:13:40:f5:f5:5f:48:d7:c3:b5:75:bf:15:30:c7: ea:f9:fe:29:fa:3e:c4:6b:c6:cc:1a:4f:7f:d8:ff:40:0f:3f: 4f:0d:4c:91:ac:f1:e6:94:c4:bc:17:c0:00:be:0b:3c:dc:e1: e8:11:f8:b4:54:b7:da:03:49:a6:43:47:4f:cb:0a:d4:72:91: 66:86:32:d0:1f:b4:28:42:ad:0a:bd:38:56:eb:14:38:13:1c: d5:87:5f:44:42:ac:12:27:e5:2c:e7:74:ad:e8:e9:61:4e:ed: c4:6e:d9:15:61:4f:c7:e0:b9:0d:60:9a:c3:23:1f:29:69:03: 28:73:30:de:13:07:a2:a3:09:6e:8f:dc:28:44:6c:1d:04:be: e2:09:f1:d2:79:c1:a5:11:84:c6:72:e3:04:a3:ad:5c:eb:ce: 86:4b:c9:89:fd:ba:44:de:57:3f:e1:d3:86:13:13:4d:da:70: ea:46:63:cd:eb:a2:86:9e:05:12:aa:6d:64:0f:47:e9:8a:80: 14:e8:4b:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjNXpEgAwMrvsHONDcYurIWYhtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA3MjQwMjI2MTBaFw0yNTA3MjcxNDEyMTBaMDMxMTAvBgNV BAMTKDc5MTEwRjgwNjdDQkJBMkEwRTRERUFEQzIwNDZCNjk3NjNDQ0ZGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bgSd2AQo91ckRAddHWuYBec0 z1UyUE0J0258Bn6eT8Z+SybJ9gEvXoWG3hpoldauhsKnUthfsykpliV+rcPplCLL yLubXtmrN4yNsFK5M3rmqEQicsbChuK7C81QxpPA/MDhO67vCRVuM2uNL3upcjV1 74xBpZ3qR+9z9C/dW9FQz/PP9TVnRLk+QRSOrjPSlw5FFIWhzax0SZrG0jKMfVky XMeBUh/38pF9Vr5WMzY3DUC/hY39PjnNgXoMLkb5c9Ih+dPojXZp9hFbYoJVxTeK IOv1hd5MmUbRJiDtaTfo9MvH1XYY9i4uYDWBTb1btrkJt6w+jg3nT4WZU0ZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeREPgGfLuioOTercIEa2l2PM/2cwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcPehlbXT2ZWXgrFEuhzT4PK/dh6lYYF4kH Dg/LGd/TYvxty2iGxq+ZLafSFvsrNeTDcW4xq/LuJZcTQPX1X0jXw7V1vxUwx+r5 /in6PsRrxswaT3/Y/0APP08NTJGs8eaUxLwXwAC+Czzc4egR+LRUt9oDSaZDR0/L CtRykWaGMtAftChCrQq9OFbrFDgTHNWHX0RCrBIn5SzndK3o6WFO7cRu2RVhT8fg uQ1gmsMjHylpAyhzMN4TB6KjCW6P3ChEbB0EvuIJ8dJ5waURhMZy4wSjrVzrzoZL yYn9ukTeVz/h04YTE03acOpGY83rooaeBRKqbWQPR+mKgBToSx8= -----END CERTIFICATE-----Generated at Thu Jul 24 08:22:39 2025 by rpki-client