$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: tLPv1zg9h+tnnGFBd9g8wOPnSXKlN4U2D1lGTNhi2ls= Subject key identifier: 12:4B:47:3D:12:31:9B:1E:9F:2F:A5:EA:D1:1F:A1:47:6E:4D:BA:00 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 05A50A65F745AC35647ED63586EE8A2CB81F7D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0372 Signing time: Fri 05 Sep 2025 22:41:28 +0000 Manifest this update: Fri 05 Sep 2025 22:36:28 +0000 Manifest next update: Tue 09 Sep 2025 05:05:28 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: ICUEBFpebP0YhmNcZlcr1Id48gkkTm20TM5tG9HCPRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a5:0a:65:f7:45:ac:35:64:7e:d6:35:86:ee:8a:2c:b8:1f:7d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Sep 5 22:36:28 2025 GMT Not After : Sep 9 05:05:28 2025 GMT Subject: CN=124B473D12319B1E9F2FA5EAD11FA1476E4DBA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:58:3a:23:06:32:5a:bb:4e:9d:92:ff:79: f6:0a:36:d5:91:c4:06:ea:4a:ef:aa:2a:b2:dd:b7: 54:89:9e:da:66:52:69:b5:3e:9e:9f:02:cf:23:86: bd:15:d2:f2:b7:35:b5:3a:8b:19:9f:58:d5:96:73: 4b:63:53:7d:a1:b0:fc:09:5d:c8:21:dd:7b:a9:55: 36:b5:76:09:54:30:b7:61:a9:7e:85:d2:f1:21:40: ac:de:88:dd:f3:78:80:b9:93:14:cc:ca:75:44:74: af:8b:5e:43:80:f9:5f:2b:8e:55:c1:71:88:9f:f3: 2f:f9:57:74:81:86:c9:a1:03:8e:e3:e6:22:fe:bb: a2:ef:b6:b1:b1:42:8d:48:4d:a3:9d:93:d2:ab:7f: 2f:d2:d1:54:db:db:de:88:62:f7:90:f0:be:9b:a4: 39:e6:cf:09:aa:ec:24:5a:aa:ed:4f:23:0c:db:f5: 88:39:f0:7d:e1:2e:d2:0d:33:d3:a3:1a:fe:d1:70: 3a:77:6b:66:e4:07:5e:9e:86:04:9a:26:9a:fe:72: e4:23:b4:0e:0f:2f:d6:9b:b0:6f:4c:f3:ba:df:1e: 77:5c:6d:9b:2a:f9:56:76:8e:28:86:da:22:16:f7: 17:70:c8:49:00:8b:c7:ef:c4:99:80:36:6b:b7:2b: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4B:47:3D:12:31:9B:1E:9F:2F:A5:EA:D1:1F:A1:47:6E:4D:BA:00 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8f:de:45:c5:fb:ed:42:cc:fe:65:f7:6d:ac:0c:35:c8:c8: 94:11:d5:c4:4c:7a:06:64:12:9f:c8:88:22:39:fd:7b:dc:28: 78:94:3e:05:b0:b9:58:20:5d:35:e0:3d:c3:f3:e3:b3:d6:0a: 33:b9:50:e4:40:6c:50:5e:3d:60:4e:d5:ad:1b:39:97:05:d2: 77:79:1b:7c:ee:bd:60:44:de:9e:b9:f5:a2:0e:74:a7:68:1e: f2:a2:c6:40:4e:5f:c3:90:4d:13:3b:1b:86:b0:3c:ab:8f:a9: 23:fc:67:5b:74:68:25:00:4c:94:e1:68:ad:78:ba:2e:e7:93: 06:02:81:20:4c:5f:c1:10:28:10:cc:8e:96:08:9a:7e:ce:78: ea:86:a4:c9:c9:b2:7e:f1:6a:88:10:fb:9b:81:62:67:7b:41: 4b:90:4d:57:4c:7d:49:1e:d8:ef:46:39:a4:5e:89:c1:73:3e: 6a:16:74:12:9d:88:c4:58:79:57:9b:08:5d:6c:fb:16:e4:19: df:8d:de:67:ed:75:70:1f:34:97:33:b7:a8:53:f0:23:fe:59: d0:2b:d1:93:62:98:84:d8:e5:9a:6b:73:e5:63:cf:26:8e:3f: e3:b5:6c:f0:38:a2:0f:67:30:44:21:d9:2f:3e:df:17:24:01: a3:f7:ac:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaUKZfdFrDVkftY1hu6KLLgffQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA5MDUyMjM2MjhaFw0yNTA5MDkwNTA1MjhaMDMxMTAvBgNV BAMTKDEyNEI0NzNEMTIzMTlCMUU5RjJGQTVFQUQxMUZBMTQ3NkU0REJBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUVg6IwYyWrtOnZL/efYKNtWR xAbqSu+qKrLdt1SJntpmUmm1Pp6fAs8jhr0V0vK3NbU6ixmfWNWWc0tjU32hsPwJ Xcgh3XupVTa1dglUMLdhqX6F0vEhQKzeiN3zeIC5kxTMynVEdK+LXkOA+V8rjlXB cYif8y/5V3SBhsmhA47j5iL+u6LvtrGxQo1ITaOdk9Krfy/S0VTb296IYveQ8L6b pDnmzwmq7CRaqu1PIwzb9Yg58H3hLtINM9OjGv7RcDp3a2bkB16ehgSaJpr+cuQj tA4PL9absG9M87rfHndcbZsq+VZ2jiiG2iIW9xdwyEkAi8fvxJmANmu3K9TTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEktHPRIxmx6fL6Xq0R+hR25NugAwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6P3kXF++1CzP5l922sDDXIyJQR1cRMegZk Ep/IiCI5/XvcKHiUPgWwuVggXTXgPcPz47PWCjO5UORAbFBePWBO1a0bOZcF0nd5 G3zuvWBE3p659aIOdKdoHvKixkBOX8OQTRM7G4awPKuPqSP8Z1t0aCUATJThaK14 ui7nkwYCgSBMX8EQKBDMjpYImn7OeOqGpMnJsn7xaogQ+5uBYmd7QUuQTVdMfUke 2O9GOaReicFzPmoWdBKdiMRYeVebCF1s+xbkGd+N3mftdXAfNJczt6hT8CP+WdAr 0ZNimITY5Zprc+VjzyaOP+O1bPA4og9nMEQh2S8+3xckAaP3rDs= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:47 2025 by rpki-client