$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: O7p+qfgOw2LHQwkhfgeTOiEeiucJcFZWi+OwmO2VzF0= Subject key identifier: A1:23:C0:3B:4E:2C:04:5D:3F:48:31:84:72:A6:A7:C7:32:54:23:C6 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 0B09C64CE15F230017FD784611D77482BDB5D8B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 0513 Signing time: Mon 08 Sep 2025 03:14:35 +0000 Manifest this update: Mon 08 Sep 2025 03:09:35 +0000 Manifest next update: Thu 11 Sep 2025 15:02:35 +0000 Files and hashes: 1: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 2: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=) 3: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=) 4: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=) 5: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=) 6: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=) 7: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=) 8: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=) 9: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=) 10: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: KPWAw4zYQcuW1ZlShGnp021bKYbjvXQP/0NhBAfFrk0=) 11: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=) 12: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=) 13: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=) 14: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=) 15: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=) 16: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:09:c6:4c:e1:5f:23:00:17:fd:78:46:11:d7:74:82:bd:b5:d8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Sep 8 03:09:35 2025 GMT Not After : Sep 11 15:02:35 2025 GMT Subject: CN=A123C03B4E2C045D3F48318472A6A7C7325423C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:aa:2b:ca:e1:23:ad:b0:d8:c9:65:89:03: ce:49:38:f3:59:be:c6:12:4c:13:ba:c4:eb:06:d6: 13:e8:4c:d2:92:e9:b1:f4:fb:ef:e1:5f:e8:58:b5: ca:38:ae:2d:54:68:7b:24:79:8f:fb:b7:5c:4f:13: 72:a7:ea:8f:5b:36:83:3a:9e:40:f1:50:7c:83:f4: f3:15:b8:67:f6:97:0e:da:f2:ca:2c:b1:8a:58:4c: c7:74:b4:51:e1:e0:17:d4:74:c4:dc:81:34:03:66: d0:47:d4:78:50:8a:17:bd:9f:63:99:5b:ab:c2:04: bf:7a:61:ce:14:8a:70:fd:45:73:62:8b:ce:5e:fd: 41:ee:99:51:35:2d:85:23:ef:04:9e:49:d5:bf:46: 25:59:b1:63:b8:52:87:b9:c9:70:72:68:e0:d9:d9: 3d:51:6f:5c:0e:09:77:b7:62:d4:96:92:09:88:19: 62:b3:67:5d:9f:21:a0:72:76:91:57:79:ff:67:c4: d9:da:11:95:31:d4:5b:a8:18:78:7e:67:90:81:7f: 1e:4b:21:41:a8:3a:c9:be:4f:08:8f:3b:90:5e:8d: 89:46:8e:d5:59:f6:ce:bc:41:b2:2a:9c:fe:fd:06: 98:25:e5:81:f5:a9:09:a4:3a:f1:05:9a:fc:44:96: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:23:C0:3B:4E:2C:04:5D:3F:48:31:84:72:A6:A7:C7:32:54:23:C6 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1a:f2:34:b4:73:6f:0b:1f:6c:aa:22:18:09:be:a9:56:aa: 45:a3:5d:91:5d:f7:ea:12:d1:0e:65:e0:7e:54:25:b2:04:c4: 92:28:41:a0:b2:7a:21:60:a4:8b:1d:a5:84:f8:14:84:d5:89: 68:69:ab:31:0c:29:bd:d4:44:52:2e:f0:6e:ec:58:da:2f:73: ae:a4:0c:82:1a:66:df:9a:92:87:a1:5c:f0:65:30:07:db:06: 50:ac:b3:ce:5b:e8:2c:69:2e:f1:33:db:07:c5:25:a4:5b:f5: a7:34:a9:a4:a4:00:bd:b7:6c:44:02:72:35:30:da:cc:91:71: f6:cf:0d:0b:31:ca:16:02:60:3a:90:a8:18:39:b6:93:4c:a1: ed:9f:b0:27:c5:f9:93:8e:dc:3e:d3:1a:eb:05:d5:d0:57:d8: 1e:13:8e:52:7d:3f:ca:70:2c:32:2b:59:73:df:5f:83:79:1b: d2:8c:8c:1d:41:be:6b:2f:4b:00:53:46:44:d2:3b:a7:c0:92: 3e:6b:35:38:f7:8e:00:10:90:e3:4b:1c:95:9b:fa:ab:bf:5e: af:68:be:ee:ba:61:e9:3f:da:a6:23:01:90:7c:05:15:ad:32: e3:d5:25:58:85:4d:2a:03:d1:20:25:71:0b:c1:12:21:db:d1: ab:fc:4c:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwnGTOFfIwAX/XhGEdd0gr212LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA5MDgwMzA5MzVaFw0yNTA5MTExNTAyMzVaMDMxMTAvBgNV BAMTKEExMjNDMDNCNEUyQzA0NUQzRjQ4MzE4NDcyQTZBN0M3MzI1NDIzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8c6oryuEjrbDYyWWJA85JOPNZ vsYSTBO6xOsG1hPoTNKS6bH0++/hX+hYtco4ri1UaHskeY/7t1xPE3Kn6o9bNoM6 nkDxUHyD9PMVuGf2lw7a8sossYpYTMd0tFHh4BfUdMTcgTQDZtBH1HhQihe9n2OZ W6vCBL96Yc4UinD9RXNii85e/UHumVE1LYUj7wSeSdW/RiVZsWO4Uoe5yXByaODZ 2T1Rb1wOCXe3YtSWkgmIGWKzZ12fIaBydpFXef9nxNnaEZUx1FuoGHh+Z5CBfx5L IUGoOsm+TwiPO5BejYlGjtVZ9s68QbIqnP79Bpgl5YH1qQmkOvEFmvxElkolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSPAO04sBF0/SDGEcqanxzJUI8YwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIa8jS0c28LH2yqIhgJvqlWqkWjXZFd9+oS 0Q5l4H5UJbIExJIoQaCyeiFgpIsdpYT4FITViWhpqzEMKb3URFIu8G7sWNovc66k DIIaZt+akoehXPBlMAfbBlCss85b6CxpLvEz2wfFJaRb9ac0qaSkAL23bEQCcjUw 2syRcfbPDQsxyhYCYDqQqBg5tpNMoe2fsCfF+ZOO3D7TGusF1dBX2B4TjlJ9P8pw LDIrWXPfX4N5G9KMjB1BvmsvSwBTRkTSO6fAkj5rNTj3jgAQkONLHJWb+qu/Xq9o vu66Yek/2qYjAZB8BRWtMuPVJViFTSoD0SAlcQvBEiHb0av8TAo= -----END CERTIFICATE-----Generated at Tue Sep 9 16:41:17 2025 by rpki-client