$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: ia/A+u2jT5cO2H/dCL+yGTGA3z4iZY3X18S4MIOSMao= Subject key identifier: F8:08:9B:09:21:57:75:53:11:0E:8D:95:62:84:DB:1B:37:18:9C:7C Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 69551797E8C1BAF79B813F4FEE3EE33F1F781503 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 01DF Signing time: Wed 03 Sep 2025 16:02:07 +0000 Manifest this update: Wed 03 Sep 2025 15:57:07 +0000 Manifest next update: Sat 06 Sep 2025 17:17:07 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: IuQ5NWGxAORdRyOk6PPJ8jXTo8x07bk7mR2U/dQQOyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:55:17:97:e8:c1:ba:f7:9b:81:3f:4f:ee:3e:e3:3f:1f:78:15:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Sep 3 15:57:07 2025 GMT Not After : Sep 6 17:17:07 2025 GMT Subject: CN=F8089B0921577553110E8D956284DB1B37189C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:1d:2d:a8:cb:d1:b9:59:a5:ca:99:aa:99: ab:fb:6d:b5:1f:4f:7f:84:56:e6:4b:c3:3e:59:2f: 05:34:96:88:95:bf:f2:71:ad:84:54:fd:a2:65:68: e2:39:eb:79:1e:99:bc:7c:d4:c5:02:20:44:5f:cc: f3:12:66:7e:7d:f1:05:cc:e1:7e:b0:0c:b5:bf:79: 8f:ef:ea:fd:aa:7a:b9:ac:5b:70:2e:0a:c3:46:6f: d9:0d:3d:7d:3c:10:6f:1d:2e:bb:d9:fc:7b:b0:92: 9c:ed:da:fc:7b:0f:ee:cb:46:2f:b0:3f:cd:bc:0d: 8d:91:49:04:9e:f5:60:84:77:16:25:b3:68:94:87: 55:a2:06:fa:d1:84:97:78:8c:29:7e:f8:29:3d:11: f2:9f:cf:61:97:4e:39:fd:f5:45:07:b7:e0:46:8e: 5c:7a:7e:b8:af:26:2d:08:fe:81:3e:c6:d6:b0:6b: 27:72:17:52:8d:85:ec:e1:39:69:f0:2f:77:86:e5: b2:50:ce:cb:02:99:d2:30:7d:cc:03:42:c1:1a:fd: ae:f2:ee:23:21:dd:a7:ef:7b:be:68:d2:c1:78:21: da:84:fb:c9:52:cb:d5:24:46:23:35:28:b1:da:53: 2b:4e:86:79:41:08:be:0a:f6:86:0c:84:d3:e6:d7: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:08:9B:09:21:57:75:53:11:0E:8D:95:62:84:DB:1B:37:18:9C:7C X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:72:29:93:7f:ea:04:db:76:4a:2c:86:fa:c7:da:b4:16:3f: f0:e3:b7:b2:3d:29:5a:d5:e4:cd:38:ab:8d:1d:36:f5:70:10: 32:b7:1a:57:54:23:73:ee:5c:a5:18:54:5c:a7:7d:95:53:73: d4:75:8b:74:c0:9d:cd:c4:6c:96:5d:af:37:20:b5:c7:3c:f6: 30:d7:01:77:11:35:f9:68:b4:a2:f0:fb:90:48:ec:0f:24:5b: af:6a:68:fc:c2:78:90:e9:71:1f:0a:21:90:8c:e3:05:ee:f6: 04:bb:e8:72:1e:c1:02:1b:56:77:5d:a3:b3:a7:8d:f9:c2:2a: 55:8e:15:d6:88:8f:42:e6:80:71:ee:c0:49:d1:2f:50:48:59: 4c:a2:da:45:c5:57:ab:fb:1a:bf:11:b9:be:bb:49:00:c5:8b: b4:9d:f1:26:fc:88:31:a4:d9:d3:41:ca:ae:75:d5:c1:fa:b1: 2f:8a:a2:44:f0:d8:41:60:58:94:0e:e3:7e:f4:05:a0:0f:9a: 2d:a8:24:a8:43:0d:e0:9a:39:45:de:d1:34:ca:64:dc:05:00: ff:1f:4f:1c:68:61:d3:1a:c1:49:b7:d6:46:7e:1e:c0:ce:b3: b4:7b:6e:fa:65:da:5e:cf:2f:ba:33:de:82:03:4b:d9:08:f5: ed:a6:32:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVUXl+jBuvebgT9P7j7jPx94FQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTA5MDMxNTU3MDdaFw0yNTA5MDYxNzE3MDdaMDMxMTAvBgNV BAMTKEY4MDg5QjA5MjE1Nzc1NTMxMTBFOEQ5NTYyODREQjFCMzcxODlDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUR0tqMvRuVmlypmqmav7bbUf T3+EVuZLwz5ZLwU0loiVv/JxrYRU/aJlaOI563kembx81MUCIERfzPMSZn598QXM 4X6wDLW/eY/v6v2qermsW3AuCsNGb9kNPX08EG8dLrvZ/Huwkpzt2vx7D+7LRi+w P828DY2RSQSe9WCEdxYls2iUh1WiBvrRhJd4jCl++Ck9EfKfz2GXTjn99UUHt+BG jlx6frivJi0I/oE+xtawaydyF1KNhezhOWnwL3eG5bJQzssCmdIwfcwDQsEa/a7y 7iMh3afve75o0sF4IdqE+8lSy9UkRiM1KLHaUytOhnlBCL4K9oYMhNPm1zQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+AibCSFXdVMRDo2VYoTbGzcYnHwwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdyKZN/6gTbdkoshvrH2rQWP/Djt7I9KVrV 5M04q40dNvVwEDK3GldUI3PuXKUYVFynfZVTc9R1i3TAnc3EbJZdrzcgtcc89jDX AXcRNflotKLw+5BI7A8kW69qaPzCeJDpcR8KIZCM4wXu9gS76HIewQIbVnddo7On jfnCKlWOFdaIj0LmgHHuwEnRL1BIWUyi2kXFV6v7Gr8Rub67SQDFi7Sd8Sb8iDGk 2dNByq511cH6sS+KokTw2EFgWJQO4370BaAPmi2oJKhDDeCaOUXe0TTKZNwFAP8f TxxoYdMawUm31kZ+HsDOs7R7bvpl2l7PL7oz3oIDS9kI9e2mMks= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:54 2025 by rpki-client