$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: zgo/2KqF6SJJ0e7kYiVlCHomSk6U75ggEhj01L9DOhY= Subject key identifier: CC:C2:EC:FC:B4:8A:82:D4:65:94:14:6A:D0:72:D7:8C:24:31:66:8A Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 50384CA23AB4EBA83310AFD7C02870C1BF1A8CFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 016E Signing time: Fri 05 Sep 2025 19:22:09 +0000 Manifest this update: Fri 05 Sep 2025 19:17:09 +0000 Manifest next update: Tue 09 Sep 2025 06:37:09 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: F/xJV8T2k+l8Slo/05AQ13jSkSZt1/botcnkYh+j5a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:38:4c:a2:3a:b4:eb:a8:33:10:af:d7:c0:28:70:c1:bf:1a:8c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Sep 5 19:17:09 2025 GMT Not After : Sep 9 06:37:09 2025 GMT Subject: CN=CCC2ECFCB48A82D46594146AD072D78C2431668A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:ce:40:58:04:ca:68:4d:97:77:22:e7:e3: da:14:90:e9:30:e6:63:eb:e2:32:77:71:65:81:91: a9:1d:d8:af:42:08:63:02:eb:37:eb:37:25:a2:b9: 30:7d:ad:f1:60:4d:26:09:77:84:5b:ab:cb:5c:dd: b5:a4:9b:8c:c7:c7:a0:d2:52:ac:ff:89:00:11:63: 82:87:65:f9:98:d8:99:1e:3f:77:d1:90:f2:46:19: 16:f4:b8:44:f5:0b:dc:88:79:81:77:c4:e3:8a:4f: 5e:f7:18:fb:58:77:5b:32:1c:63:05:c5:46:12:0d: fc:d2:f9:bb:e1:5e:6d:6c:a7:07:09:10:8f:da:c5: 86:af:14:39:06:7b:d8:1f:74:b6:05:25:72:c7:6f: b4:c7:4e:2f:3d:5b:94:29:2d:3b:fc:8e:e0:2b:96: 75:4b:b8:ab:58:cc:0f:aa:f5:48:aa:83:85:92:16: e5:28:56:91:8b:29:86:70:39:f4:9d:f3:eb:bc:be: 83:13:8d:19:54:42:dd:df:24:37:e4:87:f5:86:e0: b9:60:65:05:7d:c5:8e:0c:ab:2a:85:75:88:97:0f: 6b:ae:71:20:dc:45:a9:87:69:15:dc:db:72:37:6f: 35:f9:5a:e9:5e:a0:77:eb:c7:eb:b5:61:d7:38:de: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:EC:FC:B4:8A:82:D4:65:94:14:6A:D0:72:D7:8C:24:31:66:8A X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4e:a2:71:c0:19:32:48:bc:53:6c:9c:a5:bc:5a:da:37:93: 2a:92:b3:f4:af:78:4f:65:f3:10:b2:77:b1:6b:ca:73:30:9d: 23:0c:a9:1b:85:c2:72:03:b7:93:53:e8:99:b4:df:17:ba:d7: 61:2b:fa:1c:29:2d:5f:b0:3b:97:f1:d8:75:bd:c7:be:e6:47: a7:72:d1:55:fa:ff:fa:64:8b:41:71:88:75:c5:3b:e6:de:a0: b8:d2:46:e8:de:ae:f4:87:87:6a:1c:c8:e0:71:a9:92:19:1a: f8:74:dd:19:95:c3:46:86:a4:54:e8:1c:05:91:c4:05:1c:57: 16:86:0c:07:72:72:d7:5f:d7:c9:c3:81:8c:f5:33:90:f0:42: fb:ca:c3:f1:84:6d:bd:37:30:15:de:df:d5:b7:d9:ed:12:20: a1:c5:69:78:2a:d7:bd:2e:34:fc:42:05:78:d2:e7:2d:38:70: 3a:11:ac:9e:ae:d7:30:67:b2:58:15:1c:ee:74:c8:e6:58:03: 55:8c:1d:8d:9f:d7:42:ab:a1:61:5f:0e:91:cd:91:36:4a:3b: dc:b5:85:49:32:8c:55:3a:41:e6:22:9a:f3:75:9f:3b:e4:28: 45:2f:1e:34:25:ad:9e:a5:e8:d4:36:31:22:19:0f:e3:55:fd: 1b:fa:02:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDhMojq066gzEK/XwChwwb8ajP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTA5MDUxOTE3MDlaFw0yNTA5MDkwNjM3MDlaMDMxMTAvBgNV BAMTKENDQzJFQ0ZDQjQ4QTgyRDQ2NTk0MTQ2QUQwNzJENzhDMjQzMTY2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefc5AWATKaE2XdyLn49oUkOkw 5mPr4jJ3cWWBkakd2K9CCGMC6zfrNyWiuTB9rfFgTSYJd4Rbq8tc3bWkm4zHx6DS Uqz/iQARY4KHZfmY2JkeP3fRkPJGGRb0uET1C9yIeYF3xOOKT173GPtYd1syHGMF xUYSDfzS+bvhXm1spwcJEI/axYavFDkGe9gfdLYFJXLHb7THTi89W5QpLTv8juAr lnVLuKtYzA+q9Uiqg4WSFuUoVpGLKYZwOfSd8+u8voMTjRlUQt3fJDfkh/WG4Llg ZQV9xY4MqyqFdYiXD2uucSDcRamHaRXc23I3bzX5WuleoHfrx+u1Ydc43joPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMLs/LSKgtRllBRq0HLXjCQxZoowHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItOonHAGTJIvFNsnKW8Wto3kyqSs/SveE9l 8xCyd7FrynMwnSMMqRuFwnIDt5NT6Jm03xe612Er+hwpLV+wO5fx2HW9x77mR6dy 0VX6//pki0FxiHXFO+beoLjSRujervSHh2ocyOBxqZIZGvh03RmVw0aGpFToHAWR xAUcVxaGDAdyctdf18nDgYz1M5DwQvvKw/GEbb03MBXe39W32e0SIKHFaXgq170u NPxCBXjS5y04cDoRrJ6u1zBnslgVHO50yOZYA1WMHY2f10KroWFfDpHNkTZKO9y1 hUkyjFU6QeYimvN1nzvkKEUvHjQlrZ6l6NQ2MSIZD+NV/Rv6Aks= -----END CERTIFICATE-----Generated at Sun Sep 7 15:30:35 2025 by rpki-client