$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: OE0mLBGgHkBPhM7Zy7TcX5BswLfLKp2lnshLIdhPpJE= Subject key identifier: D5:4B:C7:19:9F:BC:65:0D:B8:A9:49:C2:6D:CB:EC:FB:99:07:F8:86 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 70CA628DFBDCCAE7359C2E959FE5EAD88A3B6A86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 0292 Signing time: Fri 06 Jun 2025 14:00:56 +0000 Manifest this update: Fri 06 Jun 2025 13:55:56 +0000 Manifest next update: Mon 09 Jun 2025 17:54:56 +0000 Files and hashes: 1: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=) 2: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=) 3: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=) 4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=) 5: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: BY++ABFqeNMf3ODKJlCsTSK7QdfNm3Hb1D6AFE3UXys=) 6: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=) 7: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=) 8: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ca:62:8d:fb:dc:ca:e7:35:9c:2e:95:9f:e5:ea:d8:8a:3b:6a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Jun 6 13:55:56 2025 GMT Not After : Jun 9 17:54:56 2025 GMT Subject: CN=D54BC7199FBC650DB8A949C26DCBECFB9907F886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:2a:52:88:cb:56:98:4c:f1:3e:d5:0c:12: 6b:c0:f8:4c:ec:99:f1:c4:c9:b1:1d:f8:aa:a5:7b: 6e:d0:6a:bb:3e:09:b9:2e:7a:b3:04:5f:62:1a:ed: 75:58:c9:4c:7d:0c:b3:27:2c:0b:83:f4:cb:d1:6f: 8d:84:20:6d:72:e9:77:36:11:05:f6:9b:e2:b5:43: b9:12:73:16:33:df:be:89:2c:b6:6d:75:f0:71:2e: cf:d1:66:e3:5a:ec:d8:6a:36:6b:70:9a:cd:cf:2e: ae:95:f4:cd:ef:93:09:83:a6:b5:4a:8f:f2:45:d8: 43:20:a3:d2:f5:6e:49:04:98:2f:65:0f:4e:99:1a: a9:2b:95:b7:ac:85:b2:25:d2:f1:73:2e:be:f5:66: 9d:0f:85:0f:05:76:cf:a5:99:37:54:54:6a:35:67: 2a:1a:f1:a6:35:d5:91:2b:b2:26:aa:d2:8c:9e:a7: dc:50:31:0f:a0:cf:1b:8d:08:5f:09:e5:17:26:72: 94:f9:93:b4:da:b8:2d:45:8e:fb:08:b4:81:16:fb: 47:96:57:0d:d5:c3:59:71:00:c7:ec:a8:01:6b:ce: 31:68:86:df:fa:83:27:27:23:fe:5a:5e:b9:b1:2e: cd:e8:be:59:3d:8a:2f:98:38:0c:9b:87:e4:a8:32: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4B:C7:19:9F:BC:65:0D:B8:A9:49:C2:6D:CB:EC:FB:99:07:F8:86 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7e:a9:23:27:86:de:b1:83:eb:4e:b8:7d:d5:f6:d8:7b:b6: 35:ea:b7:54:c4:f3:9d:2c:4e:92:e3:c9:96:b5:25:6d:9e:27: e7:2b:ad:40:e2:50:cd:17:77:a5:1c:6d:4c:75:b6:1b:55:29: 92:11:48:62:72:fb:d5:e7:dd:5f:0b:2a:24:fa:f8:a5:cd:42: ce:44:b7:40:36:78:68:3f:4b:95:8a:c8:1e:bd:66:1b:21:c8: b9:cf:55:79:5c:4b:94:ff:63:81:d2:d8:e7:d2:80:db:90:a9: ca:89:ec:d9:4f:e1:ee:28:9b:5b:e1:48:0c:83:d4:4b:c6:b6: 5c:4c:51:06:87:9c:49:99:59:38:11:5e:91:0a:19:c2:5a:42: 40:d5:94:8e:ab:f9:72:2a:f6:56:9a:a3:79:bb:d2:b2:5c:cb: 0d:eb:76:00:1d:e4:bf:86:6b:47:cc:65:bf:44:2a:d0:a2:97: 4d:42:8e:2a:16:71:b7:da:97:65:57:dd:79:17:6c:33:73:d1: c0:bc:77:6e:c6:0a:07:e8:3c:a6:c2:81:47:b4:b0:be:b0:fa: de:d4:89:97:a0:b4:3b:33:67:83:e1:52:90:85:76:f6:10:c6: dd:d9:57:5e:ea:d9:39:d4:9a:45:c9:32:00:2c:96:b0:10:3b: 64:90:ab:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMpijfvcyuc1nC6Vn+Xq2Io7aoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTA2MDYxMzU1NTZaFw0yNTA2MDkxNzU0NTZaMDMxMTAvBgNV BAMTKEQ1NEJDNzE5OUZCQzY1MERCOEE5NDlDMjZEQ0JFQ0ZCOTkwN0Y4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaCpSiMtWmEzxPtUMEmvA+Ezs mfHEybEd+Kqle27Qars+CbkuerMEX2Ia7XVYyUx9DLMnLAuD9MvRb42EIG1y6Xc2 EQX2m+K1Q7kScxYz376JLLZtdfBxLs/RZuNa7NhqNmtwms3PLq6V9M3vkwmDprVK j/JF2EMgo9L1bkkEmC9lD06ZGqkrlbeshbIl0vFzLr71Zp0PhQ8Fds+lmTdUVGo1 Zyoa8aY11ZErsiaq0oyep9xQMQ+gzxuNCF8J5RcmcpT5k7TauC1FjvsItIEW+0eW Vw3Vw1lxAMfsqAFrzjFoht/6gycnI/5aXrmxLs3ovlk9ii+YOAybh+SoMsWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UvHGZ+8ZQ24qUnCbcvs+5kH+IYwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl+qSMnht6xg+tOuH3V9th7tjXqt1TE850s TpLjyZa1JW2eJ+crrUDiUM0Xd6UcbUx1thtVKZIRSGJy+9Xn3V8LKiT6+KXNQs5E t0A2eGg/S5WKyB69ZhshyLnPVXlcS5T/Y4HS2OfSgNuQqcqJ7NlP4e4om1vhSAyD 1EvGtlxMUQaHnEmZWTgRXpEKGcJaQkDVlI6r+XIq9laao3m70rJcyw3rdgAd5L+G a0fMZb9EKtCil01CjioWcbfal2VX3XkXbDNz0cC8d27GCgfoPKbCgUe0sL6w+t7U iZegtDszZ4PhUpCFdvYQxt3ZV17q2TnUmkXJMgAslrAQO2SQq3Y= -----END CERTIFICATE-----Generated at Sun Jun 8 01:52:51 2025 by rpki-client