$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: m3yOBekL1ocGFDJl9kOC896scUuEfufDl/cVSGz6MTs= Subject key identifier: D1:82:88:B1:F3:C0:E2:D4:58:F6:FE:83:71:45:6B:4B:E5:7E:AE:6F Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 170A99D4C68755B783741F68DC7C234D7BEE3D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 01E9 Signing time: Wed 04 Jun 2025 01:11:05 +0000 Manifest this update: Wed 04 Jun 2025 01:06:05 +0000 Manifest next update: Sat 07 Jun 2025 03:55:05 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 2: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) 3: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: CKk56kwzCtyiCUQVXcpk5fr1X3+2jPyYf+BC1b3Gyao=) 4: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0a:99:d4:c6:87:55:b7:83:74:1f:68:dc:7c:23:4d:7b:ee:3d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Jun 4 01:06:05 2025 GMT Not After : Jun 7 03:55:05 2025 GMT Subject: CN=D18288B1F3C0E2D458F6FE8371456B4BE57EAE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:56:f1:34:f2:4e:b8:40:9f:d4:5d:b1:0f:3c: 1d:99:30:fb:fc:46:05:26:42:44:81:c6:93:59:97: de:a3:66:69:c6:93:db:cc:47:33:36:92:fd:84:62: 0a:bd:d9:09:4c:d5:50:1e:f1:64:d4:c3:9f:01:2d: b9:22:28:73:d5:29:87:27:c2:93:c3:b0:0b:95:69: 7f:09:53:76:be:18:21:a3:bc:50:5e:82:5e:9f:33: db:f5:20:3b:05:2c:21:bf:07:a1:8d:f9:dd:c8:a3: 09:97:1f:8b:19:94:5f:d1:cf:20:e4:c7:d3:72:5f: 1d:99:3a:d4:b6:a3:e2:e6:0a:0a:86:09:25:62:16: 36:cf:f0:fb:d3:55:c1:68:ad:d5:aa:12:4e:d8:56: 77:ab:d7:44:08:60:0a:dd:92:67:ba:fd:10:ca:d8: d2:47:f2:6a:f0:82:e1:93:10:de:23:64:26:32:ba: a2:91:00:a2:92:d3:17:8f:bc:ba:82:04:6d:c4:69: d9:61:aa:96:31:c6:81:db:31:d0:a3:8a:5c:98:d5: ca:35:be:27:1e:10:d0:40:bb:9c:84:92:ec:df:5e: 93:1d:39:7e:28:aa:87:8a:69:12:ad:56:20:df:7d: 10:58:8c:90:dc:af:8b:12:01:14:06:cb:ae:3d:fc: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:88:B1:F3:C0:E2:D4:58:F6:FE:83:71:45:6B:4B:E5:7E:AE:6F X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:05:e9:5f:28:81:e9:85:0d:e1:26:de:28:c9:58:63:94:13: 1c:2f:cb:3c:a4:83:42:b1:e7:c6:d5:22:63:e4:39:fe:16:54: 9d:d4:9c:f6:ee:a1:ba:99:cd:19:64:72:45:0e:fd:b4:f3:dc: 08:15:08:d6:0c:bb:40:f0:2b:9b:e4:dd:54:e9:98:b5:d4:fd: 94:55:5b:3a:44:b4:36:16:8a:b0:21:57:20:67:2c:8d:4a:fb: db:e0:38:9d:ee:68:e1:3f:6b:4b:6f:fd:e7:af:6a:f5:18:17: 4d:cc:55:85:45:cb:20:bf:7d:48:4f:2c:e0:5e:ad:0b:33:0b: 9d:59:51:10:5d:7f:3a:c2:f6:31:f5:50:eb:0d:72:ee:7a:17: 66:f0:13:90:3e:4e:bb:0f:93:e6:f2:9f:4c:57:2e:0c:11:48: c9:3a:1d:8a:ef:3d:b6:c9:40:91:73:a2:9e:cc:f6:58:37:8e: 92:26:59:cc:ba:b8:ab:14:4c:38:b2:9f:e5:8b:df:28:22:d8: 0b:59:b4:df:67:36:b4:8d:dc:ad:40:44:39:e1:1f:9a:e9:2d: 0e:b5:7f:e8:f3:e4:3a:d5:59:06:1e:98:8c:ba:12:de:55:82: af:5f:f6:12:55:bf:d7:2e:f6:09:fb:f6:ed:a1:bb:bd:ea:26: 16:a2:c8:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwqZ1MaHVbeDdB9o3HwjTXvuPQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTA2MDQwMTA2MDVaFw0yNTA2MDcwMzU1MDVaMDMxMTAvBgNV BAMTKEQxODI4OEIxRjNDMEUyRDQ1OEY2RkU4MzcxNDU2QjRCRTU3RUFFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoVvE08k64QJ/UXbEPPB2ZMPv8 RgUmQkSBxpNZl96jZmnGk9vMRzM2kv2EYgq92QlM1VAe8WTUw58BLbkiKHPVKYcn wpPDsAuVaX8JU3a+GCGjvFBegl6fM9v1IDsFLCG/B6GN+d3IowmXH4sZlF/RzyDk x9NyXx2ZOtS2o+LmCgqGCSViFjbP8PvTVcFordWqEk7YVner10QIYArdkme6/RDK 2NJH8mrwguGTEN4jZCYyuqKRAKKS0xePvLqCBG3EadlhqpYxxoHbMdCjilyY1co1 viceENBAu5yEkuzfXpMdOX4oqoeKaRKtViDffRBYjJDcr4sSARQGy649/J99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YKIsfPA4tRY9v6DcUVrS+V+rm8wHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkF6V8ogemFDeEm3ijJWGOUExwvyzykg0Kx 58bVImPkOf4WVJ3UnPbuobqZzRlkckUO/bTz3AgVCNYMu0DwK5vk3VTpmLXU/ZRV WzpEtDYWirAhVyBnLI1K+9vgOJ3uaOE/a0tv/eevavUYF03MVYVFyyC/fUhPLOBe rQszC51ZURBdfzrC9jH1UOsNcu56F2bwE5A+TrsPk+byn0xXLgwRSMk6HYrvPbbJ QJFzop7M9lg3jpImWcy6uKsUTDiyn+WL3ygi2AtZtN9nNrSN3K1ARDnhH5rpLQ61 f+jz5DrVWQYemIy6Et5Vgq9f9hJVv9cu9gn79u2hu73qJhaiyH4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:14 2025 by rpki-client