$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: XOSLe+Ce73XBE+w3zv3y3ZsOH15DPjHG0Tn43zfd3io= Subject key identifier: F2:43:8C:19:87:4F:C9:FF:51:D7:13:45:FB:ED:E1:9F:65:86:76:49 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 2C69BF31CF1F844777D8C5B899EAB25E2D8B0C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 77 Signing time: Wed 04 Jun 2025 04:10:48 +0000 Manifest this update: Wed 04 Jun 2025 04:05:48 +0000 Manifest next update: Sat 07 Jun 2025 07:15:48 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: enXhRfFUZO3Z6KNzX1/jhq1PpMVjZqvuzKNfAzj1mQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:69:bf:31:cf:1f:84:47:77:d8:c5:b8:99:ea:b2:5e:2d:8b:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Jun 4 04:05:48 2025 GMT Not After : Jun 7 07:15:48 2025 GMT Subject: CN=F2438C19874FC9FF51D71345FBEDE19F65867649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:04:b1:72:08:3e:bc:5b:fe:05:36:51:87:32: c3:1a:03:16:9d:23:22:2d:48:cd:24:33:99:aa:ab: dc:b6:01:03:d5:06:d1:a4:1f:e2:7a:49:87:7b:5d: 5c:4f:0f:ff:3a:fb:a2:6b:63:04:77:ad:54:a0:f8: 45:cc:a5:c6:de:83:11:7a:9b:dc:5b:7b:cb:84:50: 90:53:9c:73:ac:5a:60:8c:df:a1:8b:56:34:2d:10: d5:3e:10:61:99:76:ba:55:73:43:60:ad:2d:23:2f: 70:2c:0c:3f:55:0f:24:51:04:75:14:57:84:f7:b2: 6e:f8:81:dd:23:12:9a:f5:c4:70:ee:13:ce:22:ef: 82:04:36:d9:98:3c:f3:e1:70:7a:3c:4a:80:05:84: d8:a2:ba:01:e3:f0:57:f4:3a:58:20:e2:c0:f0:54: b0:e2:ea:dc:a1:90:4f:ec:d9:17:99:5b:ad:d3:75: 70:8a:f7:a0:09:e8:32:eb:98:d2:fb:1b:8e:b0:57: 5b:15:65:48:e7:52:a1:4a:b1:3d:a7:6c:ba:ba:2c: 10:d8:8a:22:2d:1e:0e:88:12:91:a5:68:89:38:76: 70:6c:f7:de:8a:cf:55:71:27:b9:3e:80:0f:f4:f4: 53:e5:0e:d2:39:97:5e:05:f6:a3:fa:4d:ea:23:fe: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:43:8C:19:87:4F:C9:FF:51:D7:13:45:FB:ED:E1:9F:65:86:76:49 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:64:c5:21:c0:bc:c3:fb:26:71:db:82:55:c3:ab:8b:7a:26: 1a:5e:bd:5d:84:66:c9:ae:45:a3:d1:da:e8:51:f0:ab:a3:31: 7c:e1:08:51:24:2c:8a:d8:65:9a:9b:23:be:de:c1:a6:25:2b: d1:1b:04:00:ea:45:d4:b2:82:e7:bf:cd:86:6a:9d:d6:d6:ec: b8:a9:b0:26:74:7e:b5:73:89:24:12:78:9b:f8:9e:a7:bd:09: bf:5e:e5:36:0b:1b:61:a3:ba:41:2c:2e:95:22:ad:78:ca:ba: 45:81:a5:fe:59:9a:94:3b:5e:4f:bf:7a:e6:0a:ab:4c:ec:76: 20:be:99:05:23:c1:33:4d:8f:58:a4:d2:7b:17:c8:76:8d:9a: cf:62:ab:cb:de:c1:2f:7c:ac:c6:cf:b5:ca:a2:7a:a9:48:a0: 34:22:32:51:a7:5b:a8:ad:41:68:1c:f9:d5:96:e6:c9:12:5c: db:da:05:b0:63:d1:d6:bd:f9:8d:97:46:c4:cf:27:2e:07:87: ee:25:6d:7a:ea:9e:4e:68:3d:20:e0:73:1e:8a:ca:ee:cf:95: d2:1d:80:98:35:5c:f9:d8:ef:5a:55:2c:0a:ec:89:be:b3:15: 6d:61:1e:94:bf:08:1e:60:47:5d:76:94:3f:5e:f5:1f:4e:c5: 81:47:f5:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGm/Mc8fhEd32MW4meqyXi2LDIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA2MDQwNDA1NDhaFw0yNTA2MDcwNzE1NDhaMDMxMTAvBgNV BAMTKEYyNDM4QzE5ODc0RkM5RkY1MUQ3MTM0NUZCRURFMTlGNjU4Njc2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4BLFyCD68W/4FNlGHMsMaAxad IyItSM0kM5mqq9y2AQPVBtGkH+J6SYd7XVxPD/86+6JrYwR3rVSg+EXMpcbegxF6 m9xbe8uEUJBTnHOsWmCM36GLVjQtENU+EGGZdrpVc0NgrS0jL3AsDD9VDyRRBHUU V4T3sm74gd0jEpr1xHDuE84i74IENtmYPPPhcHo8SoAFhNiiugHj8Ff0Olgg4sDw VLDi6tyhkE/s2ReZW63TdXCK96AJ6DLrmNL7G46wV1sVZUjnUqFKsT2nbLq6LBDY iiItHg6IEpGlaIk4dnBs996Kz1VxJ7k+gA/09FPlDtI5l14F9qP6Teoj/nD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kOMGYdPyf9R1xNF++3hn2WGdkkwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANZkxSHAvMP7JnHbglXDq4t6JhpevV2EZsmu RaPR2uhR8KujMXzhCFEkLIrYZZqbI77ewaYlK9EbBADqRdSygue/zYZqndbW7Lip sCZ0frVziSQSeJv4nqe9Cb9e5TYLG2GjukEsLpUirXjKukWBpf5ZmpQ7Xk+/euYK q0zsdiC+mQUjwTNNj1ik0nsXyHaNms9iq8vewS98rMbPtcqieqlIoDQiMlGnW6it QWgc+dWW5skSXNvaBbBj0da9+Y2XRsTPJy4Hh+4lbXrqnk5oPSDgcx6Kyu7PldId gJg1XPnY71pVLArsib6zFW1hHpS/CB5gR112lD9e9R9OxYFH9Xc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:09 2025 by rpki-client