$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: /q5C6kTwc6tZ0Wt4m3RnoY7g3U1SeA21mVPW6WANiKY= Subject key identifier: F2:8B:86:54:84:7C:3B:01:4F:65:FA:E4:B8:0F:7E:B0:2E:4D:34:97 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 2438B108092150D7DF1F527F5248D67742E59BA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 10:12:19 +0000 Manifest this update: Fri 06 Jun 2025 10:07:19 +0000 Manifest next update: Mon 09 Jun 2025 18:44:19 +0000 Files and hashes: 1: 34332e3235342e3132342e302f32322d3234203d3e203538343832.roa (hash: e3muRzfy0SlZi4zTuzBYhrkL1KwTSlGH+1rlG4IrFUw=) 2: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=) 3: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 4: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: DXxDkkQCjnDNBRUVCueL9pQsGepjFdRccGLMBgtAgJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:38:b1:08:09:21:50:d7:df:1f:52:7f:52:48:d6:77:42:e5:9b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Jun 6 10:07:19 2025 GMT Not After : Jun 9 18:44:19 2025 GMT Subject: CN=F28B8654847C3B014F65FAE4B80F7EB02E4D3497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:66:e5:43:d0:7b:c0:42:ff:65:d4:d3:6e: 11:88:e6:d1:92:d0:a8:72:dc:40:e3:4b:5a:13:b4: 79:25:46:78:98:36:9f:3f:1f:f6:d4:8c:ea:cb:a9: ac:b0:06:9f:e9:c7:fb:2f:f3:6c:74:0b:b6:37:7d: 02:37:2b:92:c6:03:9e:43:ec:ef:2a:bc:1a:b0:73: 0d:10:df:c2:d0:87:9e:a7:e0:5b:b8:16:ae:52:89: cd:52:79:11:1d:90:af:b4:b6:9a:2e:0f:42:20:cd: 87:37:96:db:6d:c7:d2:19:90:56:aa:f1:73:97:8a: 81:d5:c8:25:de:a4:4b:a4:4f:ec:82:c1:10:59:68: 35:63:13:d7:11:ad:7a:86:86:6d:4e:52:af:74:1b: 46:b8:81:c2:1e:6a:c4:5e:04:e8:ac:f6:9f:a5:19: 12:26:fb:9f:0a:dc:35:82:f8:f9:2b:b2:b3:7b:26: 22:86:8a:bf:d0:e3:fc:07:1a:45:06:78:e6:d8:1d: f8:49:7f:ee:d7:fb:77:f6:82:a7:29:45:5d:3c:88: 8c:1e:35:7a:c1:3d:5d:ce:a0:b7:3a:c4:70:a1:6b: 48:92:9b:86:a3:43:0c:f3:9f:fc:4d:00:b2:18:b5: 2f:00:fe:3b:f2:5d:41:88:fe:59:e3:8e:60:af:80: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:86:54:84:7C:3B:01:4F:65:FA:E4:B8:0F:7E:B0:2E:4D:34:97 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:19:f1:be:ab:13:79:76:db:42:31:43:87:1e:ec:dc:08:31: b9:2d:10:2b:6a:30:6b:e3:38:39:49:45:62:a6:10:35:7d:d6: 1d:2f:65:21:cc:92:67:c4:39:d2:f4:40:3b:42:ba:34:93:d9: dd:16:14:97:75:22:43:b0:44:b0:98:3a:3a:41:3f:f3:d0:b5: ea:be:38:30:cc:07:42:9e:53:8b:ed:c5:cc:04:0d:68:40:e9: c1:d3:74:d0:92:c0:2c:36:90:af:38:55:4c:40:3f:90:66:dd: f8:62:0e:91:f8:6f:e3:73:17:4f:f4:7d:9c:53:54:43:d8:15: 10:c4:aa:7d:c9:b3:1e:05:43:51:69:8d:60:6c:8b:61:93:b5: 8a:8a:89:50:6c:21:8b:e5:76:de:54:93:f7:a7:8c:b7:99:44: 34:94:33:fc:fc:a8:0e:3a:16:db:cd:38:18:27:99:28:57:d6: 1e:e6:8b:39:38:38:dd:d7:4a:87:d6:b1:b3:5a:bb:01:52:bd: 64:1c:ed:e7:9b:21:9c:8f:1a:32:58:df:c3:fa:48:3c:43:cb: c6:b5:b7:5e:2e:a8:31:b5:7d:ac:3c:96:4e:46:09:39:5d:ae: cb:43:38:cc:ac:ca:04:12:81:ca:06:0d:84:bc:ae:e9:35:14: ab:94:d8:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDixCAkhUNffH1J/UkjWd0Llm6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA2MDYxMDA3MTlaFw0yNTA2MDkxODQ0MTlaMDMxMTAvBgNV BAMTKEYyOEI4NjU0ODQ3QzNCMDE0RjY1RkFFNEI4MEY3RUIwMkU0RDM0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoL2blQ9B7wEL/ZdTTbhGI5tGS 0Khy3EDjS1oTtHklRniYNp8/H/bUjOrLqaywBp/px/sv82x0C7Y3fQI3K5LGA55D 7O8qvBqwcw0Q38LQh56n4Fu4Fq5Sic1SeREdkK+0tpouD0IgzYc3ltttx9IZkFaq 8XOXioHVyCXepEukT+yCwRBZaDVjE9cRrXqGhm1OUq90G0a4gcIeasReBOis9p+l GRIm+58K3DWC+PkrsrN7JiKGir/Q4/wHGkUGeObYHfhJf+7X+3f2gqcpRV08iIwe NXrBPV3OoLc6xHCha0iSm4ajQwzzn/xNALIYtS8A/jvyXUGI/lnjjmCvgASjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ouGVIR8OwFPZfrkuA9+sC5NNJcwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYZ8b6rE3l220IxQ4ce7NwIMbktECtqMGvj ODlJRWKmEDV91h0vZSHMkmfEOdL0QDtCujST2d0WFJd1IkOwRLCYOjpBP/PQteq+ ODDMB0KeU4vtxcwEDWhA6cHTdNCSwCw2kK84VUxAP5Bm3fhiDpH4b+NzF0/0fZxT VEPYFRDEqn3Jsx4FQ1FpjWBsi2GTtYqKiVBsIYvldt5Uk/enjLeZRDSUM/z8qA46 FtvNOBgnmShX1h7mizk4ON3XSofWsbNauwFSvWQc7eebIZyPGjJY38P6SDxDy8a1 t14uqDG1faw8lk5GCTldrstDOMysygQSgcoGDYS8ruk1FKuU2MY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:31:57 2025 by rpki-client