$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: pwm7T5eonCRoWeWPLRzKTmI4xnS7QOUzs70qQqHN56k= Subject key identifier: 80:5F:42:BA:F3:0D:99:90:2B:AD:D2:6F:51:A0:5E:22:7F:CC:37:C8 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 7C3E024D0A0CC7A42E0854EC8FE10DCB84CDEB9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0349 Signing time: Fri 06 Jun 2025 08:51:26 +0000 Manifest this update: Fri 06 Jun 2025 08:46:26 +0000 Manifest next update: Mon 09 Jun 2025 10:33:26 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: pCxPfc09t8oEsoCMEFPR8y+OTgkz4XZePEHY99x3v68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 10:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3e:02:4d:0a:0c:c7:a4:2e:08:54:ec:8f:e1:0d:cb:84:cd:eb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Jun 6 08:46:26 2025 GMT Not After : Jun 9 10:33:26 2025 GMT Subject: CN=805F42BAF30D99902BADD26F51A05E227FCC37C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:61:52:91:b4:65:bf:f0:9d:05:eb:c7:77: 9c:2a:15:a5:42:8a:0b:ce:5d:76:6c:73:51:f3:dd: d6:42:dd:ce:28:8e:0d:16:92:40:ab:f2:b5:d7:3e: 58:39:05:a3:40:35:8f:21:df:52:c9:f4:89:e8:fa: 9e:bd:90:24:1f:47:7d:59:93:1c:b5:d1:d4:1d:ef: 7f:4e:e6:6a:b5:df:7f:8c:c0:df:44:8a:8e:e8:5d: 51:c5:cb:0c:6e:3d:92:a0:8a:22:56:65:ef:88:06: c3:a9:e8:77:db:63:50:07:36:9d:b7:de:6c:a4:21: 73:31:e7:e6:fd:bb:0c:8e:5d:d5:c8:c0:05:9b:53: 9f:01:d9:1f:07:b3:b2:f9:2d:cb:0c:8f:d1:2b:27: f7:e1:f2:f3:90:20:5f:65:8c:8b:fa:be:a2:01:68: d8:76:6e:35:a8:71:f4:a8:ac:be:35:59:4e:81:40: 36:f9:46:f3:59:c6:75:10:5a:83:75:1a:ee:a6:61: 95:72:2e:0c:19:33:39:38:04:5b:2c:3d:eb:6d:4e: 5c:54:14:59:3d:74:ab:31:49:8c:1b:45:43:d2:95: e2:a4:d0:c7:fd:a1:79:61:2c:12:59:0a:fc:c4:6f: 59:37:e5:79:b3:70:a1:05:1a:8b:06:f7:5d:86:49: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5F:42:BA:F3:0D:99:90:2B:AD:D2:6F:51:A0:5E:22:7F:CC:37:C8 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:87:97:24:ee:e2:76:90:2c:70:fa:aa:be:9c:81:f0:aa:11: 7f:de:a3:88:44:d2:7c:54:fd:8c:00:d2:31:13:f4:ca:9b:4b: 97:2e:1e:77:df:9a:93:37:8e:f0:3f:42:32:46:12:3e:3b:65: fb:c9:5b:7e:6b:a3:91:de:c3:04:f6:ef:a0:14:71:15:86:98: ba:f1:e4:f8:e0:5c:c3:d9:a0:f2:68:17:26:63:f0:c4:35:ac: 11:6d:9e:a4:c5:2a:3b:ee:5b:34:c6:12:8b:64:8d:8d:9b:53: 6f:6d:1f:0e:c0:8c:ae:e9:43:59:5c:75:91:52:8b:82:d8:da: 6e:b5:1a:09:5d:49:5c:50:1d:d8:8b:c9:31:ea:f1:32:8a:4e: ef:ee:7c:89:9a:90:05:b4:9c:ca:ae:a2:f4:96:2e:a1:46:25: 17:d6:19:c4:1e:98:b6:39:32:ab:ff:a4:86:83:61:db:3d:78: b6:fe:87:a6:a5:67:c2:b7:76:66:ca:4d:14:51:ec:b8:bc:c4: 29:25:89:e6:a0:34:e6:68:52:5f:49:29:75:05:53:c4:f7:ef: f1:56:5d:16:74:55:4d:6c:34:fc:37:b9:2b:67:f1:13:c8:cc: 07:52:de:8d:8c:9a:0b:da:bb:bc:a5:8f:4a:72:46:c3:19:c4: 0c:5e:1d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD4CTQoMx6QuCFTsj+ENy4TN65owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA2MDYwODQ2MjZaFw0yNTA2MDkxMDMzMjZaMDMxMTAvBgNV BAMTKDgwNUY0MkJBRjMwRDk5OTAyQkFERDI2RjUxQTA1RTIyN0ZDQzM3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6S2FSkbRlv/CdBevHd5wqFaVC igvOXXZsc1Hz3dZC3c4ojg0WkkCr8rXXPlg5BaNANY8h31LJ9Ino+p69kCQfR31Z kxy10dQd739O5mq133+MwN9Eio7oXVHFywxuPZKgiiJWZe+IBsOp6HfbY1AHNp23 3mykIXMx5+b9uwyOXdXIwAWbU58B2R8Hs7L5LcsMj9ErJ/fh8vOQIF9ljIv6vqIB aNh2bjWocfSorL41WU6BQDb5RvNZxnUQWoN1Gu6mYZVyLgwZMzk4BFssPettTlxU FFk9dKsxSYwbRUPSleKk0Mf9oXlhLBJZCvzEb1k35XmzcKEFGosG912GSQUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgF9CuvMNmZArrdJvUaBeIn/MN8gwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeHlyTu4naQLHD6qr6cgfCqEX/eo4hE0nxU /YwA0jET9MqbS5cuHnffmpM3jvA/QjJGEj47ZfvJW35ro5HewwT276AUcRWGmLrx 5PjgXMPZoPJoFyZj8MQ1rBFtnqTFKjvuWzTGEotkjY2bU29tHw7AjK7pQ1lcdZFS i4LY2m61GgldSVxQHdiLyTHq8TKKTu/ufImakAW0nMquovSWLqFGJRfWGcQemLY5 Mqv/pIaDYds9eLb+h6alZ8K3dmbKTRRR7Li8xCklieagNOZoUl9JKXUFU8T37/FW XRZ0VU1sNPw3uStn8RPIzAdS3o2Mmgvau7ylj0pyRsMZxAxeHQc= -----END CERTIFICATE-----Generated at Sat Jun 7 12:34:51 2025 by rpki-client