$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: UtIy86UgsET9Stbpw6bhtlXwvWi6SS7l1L/Ve78wXVk= Subject key identifier: B7:0A:18:15:2D:EA:BB:1A:81:4D:B9:2B:A8:88:77:C0:69:2F:5F:CB Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 6A7E1C14DFD2A35288ACC26665C6352773DC7AF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: A2 Signing time: Sat 06 Sep 2025 16:00:48 +0000 Manifest this update: Sat 06 Sep 2025 15:55:48 +0000 Manifest next update: Tue 09 Sep 2025 16:35:48 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: m21Lf/IUYxyeCYK4rQ4ipfnxtdNUFj7lDFrKejibQcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7e:1c:14:df:d2:a3:52:88:ac:c2:66:65:c6:35:27:73:dc:7a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Sep 6 15:55:48 2025 GMT Not After : Sep 9 16:35:48 2025 GMT Subject: CN=B70A18152DEABB1A814DB92BA88877C0692F5FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:05:6f:3c:e5:e1:1f:7b:c0:21:94:6e:19:da: bf:13:0e:9d:76:e6:c6:92:f8:0d:6d:89:14:f5:c1: 12:30:21:86:3d:f6:c9:cd:d8:ac:7f:5d:95:58:54: 2c:f3:60:c7:cc:2a:dd:07:75:5f:84:8a:16:9d:95: 83:f6:c0:a9:68:73:79:9b:94:0c:23:ad:1e:0d:45: 2d:d4:d7:a8:b9:76:a9:b6:6d:92:3e:5e:c0:87:8d: 81:9b:d9:8e:94:74:ba:0b:68:4e:08:10:0a:2c:9f: 66:64:cb:d6:4e:4c:10:0a:cc:60:aa:bc:0f:c3:98: 73:49:6b:58:fc:e2:35:01:be:85:d5:12:8a:fe:a0: 6d:6e:d4:8d:4e:f5:66:2b:b9:ff:02:14:33:57:27: 8c:c9:76:b8:f4:ce:88:77:d8:96:89:fa:92:d9:3c: 90:02:34:3b:8d:5f:bd:6e:b3:ae:4c:7a:1c:46:a9: ea:41:40:7e:52:d6:71:88:88:51:7a:23:a0:bd:af: fc:80:06:1e:df:01:37:42:10:e7:a2:94:5e:76:6c: df:4c:67:cd:3e:f7:e4:6b:ab:d4:6f:4f:53:a5:72: 8c:a3:e4:dd:13:4d:84:70:88:e2:6a:46:71:20:b3: 20:cd:e1:42:af:c5:8c:75:ae:7f:2a:d5:2c:e4:08: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:18:15:2D:EA:BB:1A:81:4D:B9:2B:A8:88:77:C0:69:2F:5F:CB X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:74:ac:7c:10:d7:51:1f:c5:42:d8:10:8a:c1:d2:4b:da:2a: b6:1b:d2:44:62:a8:5e:30:5f:f6:40:31:a5:c5:44:62:63:e0: 27:74:42:43:ce:46:23:4f:40:e8:57:e0:fe:c6:0b:9f:93:3c: 99:c6:a5:89:18:60:dd:42:cd:c5:65:a8:49:58:19:a1:a5:9a: fd:77:b9:8c:59:74:7b:43:3a:15:89:05:7c:3b:e0:9c:8e:ec: 29:04:1f:00:7b:11:8c:24:54:cc:88:e4:a5:8d:c4:eb:1b:29: 59:7d:69:53:ab:3b:b2:f0:8d:ea:43:38:a7:2c:c6:68:9b:79: 27:b6:ee:14:5a:71:a3:9d:23:26:4a:8e:98:6d:3f:41:c4:23: a6:db:b3:22:7f:c8:9f:da:15:47:c5:50:9c:68:a4:00:27:e5: 2b:e5:13:da:66:4d:50:00:25:cf:3f:b0:f6:28:7d:82:e6:e6: 7c:90:2b:4f:b9:56:fb:51:3c:82:a2:97:da:08:74:97:2c:33: c0:32:15:de:8f:dd:6a:d2:a4:8f:e1:3d:68:cb:67:c5:6c:1a: f8:73:69:15:63:6d:6e:d2:d2:d0:b6:c1:ae:d5:69:aa:f7:40: 1e:db:f5:e4:e5:6f:db:75:07:a7:0d:29:16:2a:c5:c8:24:b4: ce:f2:fd:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUan4cFN/So1KIrMJmZcY1J3PcevIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA5MDYxNTU1NDhaFw0yNTA5MDkxNjM1NDhaMDMxMTAvBgNV BAMTKEI3MEExODE1MkRFQUJCMUE4MTREQjkyQkE4ODg3N0MwNjkyRjVGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBW885eEfe8AhlG4Z2r8TDp12 5saS+A1tiRT1wRIwIYY99snN2Kx/XZVYVCzzYMfMKt0HdV+EihadlYP2wKloc3mb lAwjrR4NRS3U16i5dqm2bZI+XsCHjYGb2Y6UdLoLaE4IEAosn2Zky9ZOTBAKzGCq vA/DmHNJa1j84jUBvoXVEor+oG1u1I1O9WYruf8CFDNXJ4zJdrj0zoh32JaJ+pLZ PJACNDuNX71us65MehxGqepBQH5S1nGIiFF6I6C9r/yABh7fATdCEOeilF52bN9M Z80+9+Rrq9RvT1Olcoyj5N0TTYRwiOJqRnEgsyDN4UKvxYx1rn8q1SzkCBdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwoYFS3quxqBTbkrqIh3wGkvX8swHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh0rHwQ11EfxULYEIrB0kvaKrYb0kRiqF4w X/ZAMaXFRGJj4Cd0QkPORiNPQOhX4P7GC5+TPJnGpYkYYN1CzcVlqElYGaGlmv13 uYxZdHtDOhWJBXw74JyO7CkEHwB7EYwkVMyI5KWNxOsbKVl9aVOrO7LwjepDOKcs xmibeSe27hRacaOdIyZKjphtP0HEI6bbsyJ/yJ/aFUfFUJxopAAn5SvlE9pmTVAA Jc8/sPYofYLm5nyQK0+5VvtRPIKil9oIdJcsM8AyFd6P3WrSpI/hPWjLZ8VsGvhz aRVjbW7S0tC2wa7Vaar3QB7b9eTlb9t1B6cNKRYqxcgktM7y/Ts= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:45 2025 by rpki-client