$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: 8gCjjqoZTIiGqOiNjA38j2tVEFMWYB3+XsVga8dEldU= Subject key identifier: C8:AB:EE:65:6B:2C:31:D4:E1:7B:E7:1A:53:92:1D:64:B9:26:70:E9 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 5E2674D50850F75DFF8A939054BCDBE433186EBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0145 Signing time: Thu 05 Jun 2025 10:32:01 +0000 Manifest this update: Thu 05 Jun 2025 10:27:01 +0000 Manifest next update: Sun 08 Jun 2025 11:47:01 +0000 Files and hashes: 1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: Xtf1gH5OkG5PXlrFcfUYL9z6M0m8Sx8X0yS/1h5AtU4=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:26:74:d5:08:50:f7:5d:ff:8a:93:90:54:bc:db:e4:33:18:6e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Jun 5 10:27:01 2025 GMT Not After : Jun 8 11:47:01 2025 GMT Subject: CN=C8ABEE656B2C31D4E17BE71A53921D64B92670E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:82:85:a1:66:1c:3a:e7:a6:3b:b8:e3:86: a9:4c:a7:df:0d:2e:ea:c3:49:07:a8:81:42:11:08: 59:07:38:27:fe:d8:3c:19:02:0d:a5:1b:aa:7b:e0: 37:6c:df:2d:67:c4:d6:7f:b6:a1:4e:9a:32:b8:86: 08:a7:c8:07:29:81:e9:1c:9a:2b:57:04:8e:25:99: 5d:5f:4c:83:d9:e5:a1:f7:71:c2:3c:89:19:81:57: 3e:74:f6:d1:cc:0e:27:aa:01:ed:e6:f7:a0:fe:ad: 7a:f7:15:aa:3b:cb:f8:97:ca:d6:1d:e8:98:72:9a: d7:73:72:d6:02:8c:37:93:2e:bd:fb:d8:a4:6d:11: b2:fe:ff:b3:7a:b3:34:91:da:67:25:94:2a:28:1e: c3:6a:e1:7c:69:f3:23:20:b2:8d:5a:aa:a2:62:37: a7:c6:32:dc:fe:72:96:ac:7b:05:24:19:dd:ae:94: 50:9a:25:45:6b:3b:f6:b6:9d:ed:9a:6a:73:ba:ac: 0a:fa:4f:0d:9a:aa:b3:0b:cc:9f:f9:43:bc:3a:1a: 89:e1:ef:93:b1:6b:b6:68:d9:96:8d:ad:31:14:31: bf:95:50:e0:ee:47:35:e2:0c:07:ac:b1:45:34:be: 5b:33:0a:a0:c3:be:c4:93:af:ce:0a:36:28:aa:b2: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AB:EE:65:6B:2C:31:D4:E1:7B:E7:1A:53:92:1D:64:B9:26:70:E9 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:06:9e:37:e5:80:ec:dd:c5:c6:a7:80:f6:01:0d:95:d3:a9: 47:08:f0:ad:92:eb:c1:13:76:33:1b:7a:a4:f3:43:fc:58:d5: 8c:bb:04:4c:27:86:de:21:08:77:e7:36:1f:ae:38:17:6c:0a: cc:3b:a6:ba:a5:ea:2b:01:c3:a7:ec:fb:44:df:8e:39:26:e6: 4d:0c:40:85:4c:52:5d:38:5f:b4:c4:0e:2e:69:a8:26:38:61: d5:f0:62:d2:54:4a:cc:0d:7e:9a:81:bb:15:ac:b0:88:de:33: a9:8f:13:3e:4d:0e:26:d9:08:19:b6:a7:d2:13:39:20:6a:26: b0:ff:8b:4b:58:07:85:68:9b:e9:a0:21:e9:de:65:50:56:c8: 89:fd:68:05:4d:cf:1f:d5:01:08:d3:c8:bb:db:ce:d0:38:f9: 59:7e:86:07:f5:43:a6:cf:60:77:dc:01:58:b4:c3:24:39:e9: 1f:7a:cb:03:ae:f6:aa:3a:a8:c7:e9:1c:13:f7:98:d8:03:d4: 9a:f9:79:99:f9:14:5c:2e:4c:ae:12:83:66:9c:b9:be:2e:ab: 4d:28:46:83:eb:09:1b:d6:d3:89:cf:a8:cb:e2:09:2e:a2:ee: ae:82:e3:c4:ce:db:ff:93:a3:9e:cf:38:1f:8f:b8:87:f7:d9: 6c:a6:12:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiZ01QhQ913/ipOQVLzb5DMYbr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTA2MDUxMDI3MDFaFw0yNTA2MDgxMTQ3MDFaMDMxMTAvBgNV BAMTKEM4QUJFRTY1NkIyQzMxRDRFMTdCRTcxQTUzOTIxRDY0QjkyNjcwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGoKFoWYcOuemO7jjhqlMp98N LurDSQeogUIRCFkHOCf+2DwZAg2lG6p74Dds3y1nxNZ/tqFOmjK4hginyAcpgekc mitXBI4lmV1fTIPZ5aH3ccI8iRmBVz509tHMDieqAe3m96D+rXr3Fao7y/iXytYd 6JhymtdzctYCjDeTLr372KRtEbL+/7N6szSR2mcllCooHsNq4Xxp8yMgso1aqqJi N6fGMtz+cpasewUkGd2ulFCaJUVrO/a2ne2aanO6rAr6Tw2aqrMLzJ/5Q7w6Gonh 75Oxa7Zo2ZaNrTEUMb+VUODuRzXiDAessUU0vlszCqDDvsSTr84KNiiqsgG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKvuZWssMdThe+caU5IdZLkmcOkwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwGnjflgOzdxcangPYBDZXTqUcI8K2S68ET djMbeqTzQ/xY1Yy7BEwnht4hCHfnNh+uOBdsCsw7prql6isBw6fs+0Tfjjkm5k0M QIVMUl04X7TEDi5pqCY4YdXwYtJUSswNfpqBuxWssIjeM6mPEz5NDibZCBm2p9IT OSBqJrD/i0tYB4Vom+mgIeneZVBWyIn9aAVNzx/VAQjTyLvbztA4+Vl+hgf1Q6bP YHfcAVi0wyQ56R96ywOu9qo6qMfpHBP3mNgD1Jr5eZn5FFwuTK4Sg2acub4uq00o RoPrCRvW04nPqMviCS6i7q6C48TO2/+To57POB+PuIf32WymEl4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:00 2025 by rpki-client