$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: c6MziWdG3hbO1tFmiaQLgpLRmQk9V5R+aenB/RM0rYU= Subject key identifier: E8:02:2A:40:F2:47:86:97:7B:19:F9:4B:01:14:F4:5E:4D:1A:EF:04 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 1D61DA7CF4B78C9ECDAE2282520AFE9A5543ADB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 02BB Signing time: Sat 06 Sep 2025 00:40:57 +0000 Manifest this update: Sat 06 Sep 2025 00:35:57 +0000 Manifest next update: Tue 09 Sep 2025 10:26:57 +0000 Files and hashes: 1: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 2: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 3: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: rgryBx7faKoDL+zOjP6LcmJFbLHUBBOXLpOF8R/a16Q=) 4: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) 5: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) 6: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) 7: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 8: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:61:da:7c:f4:b7:8c:9e:cd:ae:22:82:52:0a:fe:9a:55:43:ad:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Sep 6 00:35:57 2025 GMT Not After : Sep 9 10:26:57 2025 GMT Subject: CN=E8022A40F24786977B19F94B0114F45E4D1AEF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:dc:26:a1:28:62:a1:94:4b:35:2d:26:bc: 8e:ed:69:19:c0:62:36:47:14:93:ec:e2:8d:27:0a: 93:7e:2e:42:2a:50:8b:b7:0a:6c:3b:41:8c:db:10: e2:97:1a:ba:7c:cd:ba:7d:9d:21:6c:a5:b4:5c:b5: dd:76:21:ce:1a:9d:c1:c0:dc:f1:0b:66:b0:a8:60: d9:d2:81:84:cc:81:d7:57:c0:23:3a:5a:14:c4:d7: 76:80:ca:2a:05:5b:85:bb:95:29:59:87:4c:24:fd: 70:02:88:27:65:47:d0:f8:ff:c4:4b:5b:bf:88:eb: e3:3c:cd:96:af:c1:9c:e3:15:76:3f:02:26:4f:6b: 3a:a9:99:fa:df:90:d3:3b:da:3d:8e:80:be:4d:38: b5:e1:d0:16:82:89:b7:53:c4:45:81:38:fc:c7:e3: 02:e1:2d:81:27:70:c0:45:0a:cc:cb:5d:28:61:c5: 13:61:70:08:02:22:af:6d:7a:e7:55:5a:07:03:8a: 1f:37:1b:1d:0b:39:a9:e3:09:f0:fc:6d:84:29:3d: f7:2b:8a:d8:14:5e:86:14:18:2f:8d:35:c2:3f:2b: f8:b3:14:27:46:7f:2b:05:31:c9:e5:26:c5:d7:a2: 40:15:01:54:07:d6:87:ea:06:ec:6c:64:c9:df:8e: 73:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:2A:40:F2:47:86:97:7B:19:F9:4B:01:14:F4:5E:4D:1A:EF:04 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:cc:1b:83:ca:1e:17:9e:59:8d:6c:76:a4:3d:ac:56:e5:67: d7:7e:fa:49:26:c3:16:69:06:30:5d:55:96:82:56:93:e3:56: 9f:13:bf:ec:f1:fd:d9:da:e0:c8:62:00:4a:d2:cb:77:1a:d4: e7:ca:ed:2d:6d:07:a0:c7:bb:51:05:00:a2:1b:8f:7f:16:c1: d3:1c:7c:7b:81:47:c4:3d:54:9e:54:40:7c:6f:65:43:26:df: e4:90:77:d6:1d:a0:bb:7a:3c:33:40:a1:9b:b9:97:5b:c9:b3: c6:a8:86:ad:1e:e8:b3:d1:9b:db:b1:a8:9a:e9:03:68:b8:18: bf:69:10:f5:5e:2b:ae:06:67:3e:f3:2e:cf:48:99:c7:fb:75: a9:c6:b2:ad:5b:87:8f:d1:9f:c7:9d:05:a0:2c:05:0f:a7:30: 37:30:f5:be:f8:fd:0f:87:39:35:c6:95:1c:0b:09:12:7a:59: 02:b8:21:61:d5:3e:45:2d:02:fa:fb:eb:21:8e:3f:6b:68:04: d5:e8:fc:5a:25:6c:48:99:2a:81:f6:67:ed:ca:06:b8:89:21: fe:d7:44:4b:79:7c:94:f2:b0:43:17:77:96:a3:ca:57:04:19: 82:e5:2a:47:82:42:9a:f9:7d:a4:dc:17:da:c1:24:a6:b1:7a: 7c:f6:29:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWHafPS3jJ7NriKCUgr+mlVDrbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTA5MDYwMDM1NTdaFw0yNTA5MDkxMDI2NTdaMDMxMTAvBgNV BAMTKEU4MDIyQTQwRjI0Nzg2OTc3QjE5Rjk0QjAxMTRGNDVFNEQxQUVGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+09wmoShioZRLNS0mvI7taRnA YjZHFJPs4o0nCpN+LkIqUIu3Cmw7QYzbEOKXGrp8zbp9nSFspbRctd12Ic4ancHA 3PELZrCoYNnSgYTMgddXwCM6WhTE13aAyioFW4W7lSlZh0wk/XACiCdlR9D4/8RL W7+I6+M8zZavwZzjFXY/AiZPazqpmfrfkNM72j2OgL5NOLXh0BaCibdTxEWBOPzH 4wLhLYEncMBFCszLXShhxRNhcAgCIq9teudVWgcDih83Gx0LOanjCfD8bYQpPfcr itgUXoYUGC+NNcI/K/izFCdGfysFMcnlJsXXokAVAVQH1ofqBuxsZMnfjnM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6AIqQPJHhpd7GflLART0Xk0a7wQwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHMG4PKHheeWY1sdqQ9rFblZ9d++kkmwxZp BjBdVZaCVpPjVp8Tv+zx/dna4MhiAErSy3ca1OfK7S1tB6DHu1EFAKIbj38WwdMc fHuBR8Q9VJ5UQHxvZUMm3+SQd9YdoLt6PDNAoZu5l1vJs8aohq0e6LPRm9uxqJrp A2i4GL9pEPVeK64GZz7zLs9Imcf7danGsq1bh4/Rn8edBaAsBQ+nMDcw9b74/Q+H OTXGlRwLCRJ6WQK4IWHVPkUtAvr76yGOP2toBNXo/FolbEiZKoH2Z+3KBriJIf7X REt5fJTysEMXd5ajylcEGYLlKkeCQpr5faTcF9rBJKaxenz2KaE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:13 2025 by rpki-client