$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: 3u9V3wOidYlDpi15+VtchrPFH+Dm8VWwaAiFy+ki8A8= Subject key identifier: 79:EF:06:70:7A:7F:07:F2:18:AF:E4:01:EF:5C:BC:27:78:27:F4:96 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 16E1F091E82CF78C09F1ABAF8066AD0E27C9063B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01F9 Signing time: Fri 05 Sep 2025 22:02:14 +0000 Manifest this update: Fri 05 Sep 2025 21:57:14 +0000 Manifest next update: Tue 09 Sep 2025 07:39:14 +0000 Files and hashes: 1: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: v3vcErLa+mTA18n8AH61rM2t6Jtw0+2c/mWvC1y9L8c=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 3: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 4: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e1:f0:91:e8:2c:f7:8c:09:f1:ab:af:80:66:ad:0e:27:c9:06:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Sep 5 21:57:14 2025 GMT Not After : Sep 9 07:39:14 2025 GMT Subject: CN=79EF06707A7F07F218AFE401EF5CBC277827F496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:d9:8f:90:93:39:3f:5f:74:3b:06:9d:9b: 7c:00:d6:44:55:25:05:ca:20:19:0b:8a:19:01:42: c0:e2:70:a3:f8:e7:5b:36:2d:03:38:cc:11:b5:ef: ea:a2:9b:a7:77:bf:04:35:bf:f8:7d:96:cc:0f:56: dc:f8:7f:0a:42:8d:9e:31:bb:e2:d0:45:14:e6:fb: b2:08:03:96:5b:48:ad:e1:91:10:0e:9f:59:39:38: 60:42:b3:94:33:8f:eb:9b:18:d2:0b:97:86:7f:bc: 31:b9:ab:6e:c4:ea:23:d6:96:5d:9d:93:2e:c9:f8: 2f:5a:e5:c2:f7:79:9e:ed:80:29:b1:8d:a7:87:4d: 00:48:0d:66:eb:6d:7a:33:68:73:98:ae:fd:cd:b2: eb:55:1d:d0:3e:fb:88:95:ed:1f:11:f8:66:4c:12: d4:64:10:d1:45:c7:3b:9a:09:d0:4e:cd:2b:42:50: f8:4d:5a:e2:d7:4b:d7:bd:ed:85:33:79:77:74:17: 95:62:61:ad:33:0a:00:50:84:10:6c:c4:64:5b:7c: b2:72:46:34:eb:2e:c9:ed:d6:4d:db:60:3d:e5:ad: 6c:bf:c3:60:a5:12:b4:8d:66:93:35:29:fe:44:ab: 27:ab:e1:ff:58:5b:db:f7:96:92:03:cf:0a:0a:ca: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:06:70:7A:7F:07:F2:18:AF:E4:01:EF:5C:BC:27:78:27:F4:96 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fc:1b:1d:e7:4d:72:3e:50:ba:a2:83:d9:c6:cc:09:b8:df: 6d:e0:0e:bc:98:f1:35:aa:a5:b6:3f:31:b4:98:14:a9:85:00: e5:76:5b:4f:33:fd:c2:46:a0:68:8d:aa:ec:66:3f:d1:9e:dc: 3f:aa:f6:53:ce:9b:f0:79:5b:68:c7:cc:31:dc:aa:96:5b:93: bf:28:39:dd:08:2b:6f:45:b7:ec:cd:57:47:f3:5c:28:3e:fa: 7d:fd:30:da:30:b2:ad:4a:66:d3:dd:bc:f1:b2:3b:15:1c:a7: 25:a2:d9:69:90:19:af:1e:94:ba:80:0c:93:7e:f8:67:e6:ec: 45:80:bb:0d:cd:64:91:1b:0c:4c:a6:76:22:e5:f5:9e:1d:92: ef:cf:14:37:aa:cb:3c:8b:0d:23:cc:a4:cd:f4:f1:bb:29:85: ca:66:4a:84:9d:4e:bc:48:c7:5f:9c:fd:74:a4:8e:2d:9d:9e: f3:df:88:90:b1:d0:f4:01:84:bf:c5:dc:c2:dc:70:4d:d3:18: 32:49:8c:eb:1f:c7:5e:cd:66:14:2d:fb:d6:1b:1e:76:b7:7f: e3:8e:72:e2:b4:f7:d9:88:3b:a8:17:ff:9c:e2:ae:97:e8:ba: 6d:11:3f:e9:d3:c7:d0:a5:2c:90:6b:6f:f1:98:09:0c:3d:4e: 66:3e:15:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuHwkegs94wJ8auvgGatDifJBjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA5MDUyMTU3MTRaFw0yNTA5MDkwNzM5MTRaMDMxMTAvBgNV BAMTKDc5RUYwNjcwN0E3RjA3RjIxOEFGRTQwMUVGNUNCQzI3NzgyN0Y0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPtmPkJM5P190Owadm3wA1kRV JQXKIBkLihkBQsDicKP451s2LQM4zBG17+qim6d3vwQ1v/h9lswPVtz4fwpCjZ4x u+LQRRTm+7IIA5ZbSK3hkRAOn1k5OGBCs5Qzj+ubGNILl4Z/vDG5q27E6iPWll2d ky7J+C9a5cL3eZ7tgCmxjaeHTQBIDWbrbXozaHOYrv3NsutVHdA++4iV7R8R+GZM EtRkENFFxzuaCdBOzStCUPhNWuLXS9e97YUzeXd0F5ViYa0zCgBQhBBsxGRbfLJy RjTrLsnt1k3bYD3lrWy/w2ClErSNZpM1Kf5Eqyer4f9YW9v3lpIDzwoKyoz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUee8GcHp/B/IYr+QB71y8J3gn9JYwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv8Gx3nTXI+ULqig9nGzAm4323gDryY8TWq pbY/MbSYFKmFAOV2W08z/cJGoGiNquxmP9Ge3D+q9lPOm/B5W2jHzDHcqpZbk78o Od0IK29Ft+zNV0fzXCg++n39MNowsq1KZtPdvPGyOxUcpyWi2WmQGa8elLqADJN+ +Gfm7EWAuw3NZJEbDEymdiLl9Z4dku/PFDeqyzyLDSPMpM308bsphcpmSoSdTrxI x1+c/XSkji2dnvPfiJCx0PQBhL/F3MLccE3TGDJJjOsfx17NZhQt+9YbHna3f+OO cuK099mIO6gX/5zirpfoum0RP+nTx9ClLJBrb/GYCQw9TmY+FeM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client