$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: P+RaXsUhpqxLlVgWTuhkt6oYJxIx6fswwcsWHnlSVbc= Subject key identifier: 1F:8B:04:BA:EA:4B:35:44:C7:EC:6B:BF:DD:C8:DF:20:98:CA:EA:C4 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 2FB99D94F92D605C69D31D8C93D9C53ED1CBE7A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01CB Signing time: Tue 03 Jun 2025 16:15:54 +0000 Manifest this update: Tue 03 Jun 2025 16:10:54 +0000 Manifest next update: Fri 06 Jun 2025 22:42:54 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (hash: w2tRSLiLgHJy1W/6XsyVINn6a4HucZp7ol94fDbTiO8=) 2: 3130332e3134372e3131342e302f32342d3234203d3e203438343635.roa (hash: 9CXlJMGB7RbCSbz4yAVHg0gxAoOKIuDCGk9V2ZNRStQ=) 3: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: rgFJ98/EqnKQuT7uOMG6CZkoBkNIU5ZfYz7pmO03ZPE=) 4: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: 138EvHBUYQHZkSh9cYyxJkOMyU/10sl3vgUGH5x8Ln4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b9:9d:94:f9:2d:60:5c:69:d3:1d:8c:93:d9:c5:3e:d1:cb:e7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Jun 3 16:10:54 2025 GMT Not After : Jun 6 22:42:54 2025 GMT Subject: CN=1F8B04BAEA4B3544C7EC6BBFDDC8DF2098CAEAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:77:41:3b:86:64:3a:14:86:eb:80:ac:3f: 8c:44:d3:99:7c:ce:63:60:26:bf:5f:cc:f2:84:28: 37:c9:bd:9e:34:d8:d8:bf:ac:c3:ad:cf:93:b4:a7: 35:e0:40:5e:ce:d6:c6:71:5e:65:83:6b:c0:19:d6: 00:8a:dd:75:01:78:0c:00:36:42:f7:07:c6:ab:fe: 5c:31:27:86:11:30:3b:b0:e6:d3:8f:99:eb:61:ad: 93:b2:59:ca:c3:a0:4c:bb:e8:d1:83:96:43:3d:3e: 78:67:59:cd:e8:ff:70:d5:fe:ef:32:fa:2a:32:1f: 0a:7b:00:aa:5e:db:41:60:97:fc:66:a2:9b:da:50: 40:4f:d8:98:b6:a0:f5:e5:46:7a:c1:d8:b2:dc:4b: b1:0e:69:1c:9a:b5:5d:13:fc:9c:e5:43:be:d7:9d: 0a:99:52:93:35:50:fd:2a:9a:31:04:da:a0:67:d7: 95:4e:1e:c3:61:07:9a:5d:25:17:a4:ce:a5:f7:b1: 52:8d:f8:c2:c5:ed:d1:60:a9:9d:49:22:1d:2d:7c: 85:0f:a4:af:ad:43:4e:2d:ed:fc:83:d2:f4:d8:43: bb:df:d0:56:da:81:d5:ac:f6:8e:78:92:0c:12:53: 75:d6:9e:ca:74:f0:7b:01:c4:52:d8:cd:b4:98:28: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:04:BA:EA:4B:35:44:C7:EC:6B:BF:DD:C8:DF:20:98:CA:EA:C4 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ec:50:eb:c3:a4:ee:49:bf:26:aa:3b:8c:9a:18:42:6e:f0: e9:f9:f7:d8:2e:03:16:38:9a:10:a0:6d:ea:5c:34:19:26:82: c4:94:47:54:07:60:83:62:ba:9c:07:b4:81:6f:95:d9:67:14: ec:f2:9d:64:d5:1f:6e:bb:23:cd:21:9c:06:27:9b:30:2f:87: af:dd:20:c9:b6:f1:4f:f3:2f:79:45:50:82:e3:ab:cd:63:cb: e7:02:bb:1a:32:34:39:f0:11:bd:f6:fd:96:e7:3c:c9:3e:4b: 03:ae:c0:c0:d4:09:9b:f0:7c:1e:48:99:3d:1b:72:b7:aa:78: d1:f9:7c:ff:35:fc:58:45:c4:bb:67:b7:99:63:d4:5c:45:a4: d3:49:c3:67:94:90:23:c0:25:89:24:65:b0:fb:95:8c:73:fd: 2e:5c:11:9e:c9:59:a8:29:88:cc:7c:7e:1c:c7:fb:8d:8e:e8: d2:01:03:81:0d:29:b8:17:f8:23:92:8d:eb:b9:de:47:a6:3c: bc:67:2e:cb:ad:d3:4c:91:97:55:1c:a5:fa:ae:5e:17:7c:1b: 1a:24:75:73:81:60:bc:30:60:04:fd:da:3f:04:81:4e:e9:c0: 0d:07:88:47:fe:ed:86:af:7e:3c:38:8a:2c:a6:ed:8a:8f:4b: c4:e2:3f:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7mdlPktYFxp0x2Mk9nFPtHL56gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA2MDMxNjEwNTRaFw0yNTA2MDYyMjQyNTRaMDMxMTAvBgNV BAMTKDFGOEIwNEJBRUE0QjM1NDRDN0VDNkJCRkREQzhERjIwOThDQUVBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CXdBO4ZkOhSG64CsP4xE05l8 zmNgJr9fzPKEKDfJvZ402Ni/rMOtz5O0pzXgQF7O1sZxXmWDa8AZ1gCK3XUBeAwA NkL3B8ar/lwxJ4YRMDuw5tOPmethrZOyWcrDoEy76NGDlkM9PnhnWc3o/3DV/u8y +ioyHwp7AKpe20Fgl/xmopvaUEBP2Ji2oPXlRnrB2LLcS7EOaRyatV0T/JzlQ77X nQqZUpM1UP0qmjEE2qBn15VOHsNhB5pdJRekzqX3sVKN+MLF7dFgqZ1JIh0tfIUP pK+tQ04t7fyD0vTYQ7vf0FbagdWs9o54kgwSU3XWnsp08HsBxFLYzbSYKOlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4sEuupLNUTH7Gu/3cjfIJjK6sQwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrsUOvDpO5JvyaqO4yaGEJu8On599guAxY4 mhCgbepcNBkmgsSUR1QHYINiupwHtIFvldlnFOzynWTVH267I80hnAYnmzAvh6/d IMm28U/zL3lFUILjq81jy+cCuxoyNDnwEb32/ZbnPMk+SwOuwMDUCZvwfB5ImT0b creqeNH5fP81/FhFxLtnt5lj1FxFpNNJw2eUkCPAJYkkZbD7lYxz/S5cEZ7JWagp iMx8fhzH+42O6NIBA4ENKbgX+COSjeu53kemPLxnLsut00yRl1UcpfquXhd8Gxok dXOBYLwwYAT92j8EgU7pwA0HiEf+7Yavfjw4iiym7YqPS8TiP8I= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:03 2025 by rpki-client