$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: 4WTCsTnMJsjaCY5C//bmcSpxXkyDLxjqBKDNL5jU+ZI= Subject key identifier: 9E:0E:97:38:26:54:BD:A8:A2:9A:62:7E:73:B4:0F:5A:0C:86:58:9A Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 19DB5897D9D271793A5AF3E2D35AA9019ABD4324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 029F Signing time: Sat 06 Sep 2025 10:02:13 +0000 Manifest this update: Sat 06 Sep 2025 09:57:13 +0000 Manifest next update: Tue 09 Sep 2025 18:45:13 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: mcvfbMvV5s2Ds1NnDogX0kF+tDQD2Hx0KxbyQTFoXJc=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:db:58:97:d9:d2:71:79:3a:5a:f3:e2:d3:5a:a9:01:9a:bd:43:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Sep 6 09:57:13 2025 GMT Not After : Sep 9 18:45:13 2025 GMT Subject: CN=9E0E97382654BDA8A29A627E73B40F5A0C86589A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:a0:48:a7:58:f5:89:97:b2:d3:e5:a3:49: 11:ca:08:fd:6f:b3:02:09:a9:e4:46:92:95:d2:c7: 67:b5:1e:8e:29:ca:3a:85:e7:36:c3:cf:85:a1:00: 63:5b:dd:ad:f4:c3:fb:08:d4:8e:b0:17:63:a0:7e: 03:14:96:d1:d8:f1:4e:a9:3a:2b:6e:f0:ec:db:c2: 1a:10:6a:a0:b0:7c:eb:e8:c2:48:79:8a:c5:68:ae: 89:74:6d:de:26:99:8d:90:27:d9:8d:43:96:53:0c: 84:1f:11:cb:af:b8:ac:37:02:56:b9:23:2d:b6:98: 2a:b5:87:bd:8d:7b:09:b6:ba:06:0c:6f:11:6f:b2: 3c:8f:c7:87:c0:e2:ce:f8:db:5f:41:c1:b9:d1:2a: 55:69:9d:5c:eb:82:67:91:71:64:6d:07:95:0e:e8: 92:af:28:76:47:5c:0f:66:bd:44:b6:57:4a:55:ec: f2:09:92:89:3c:ce:24:40:77:73:f1:25:7e:cb:ac: 68:b0:54:44:75:e8:74:93:b0:9d:6f:cc:99:c6:92: aa:70:a0:d7:a0:6a:39:de:ad:11:7c:98:f1:97:9f: e7:fc:21:66:80:7a:6b:01:79:34:a2:1f:ea:d3:78: 94:30:ff:3d:b6:27:fc:d5:52:b8:ea:a2:07:68:5f: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0E:97:38:26:54:BD:A8:A2:9A:62:7E:73:B4:0F:5A:0C:86:58:9A X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9f:0b:4e:f2:63:cc:1c:1d:2d:59:74:c3:ad:5e:37:08:6a: 27:aa:e9:a5:85:51:c9:19:a7:9c:48:f8:d6:31:d6:3e:16:4e: bf:1e:e8:2c:fe:1b:49:70:b6:1c:34:9a:c3:fc:95:c2:fa:d9: cc:f4:7d:a0:b5:8f:66:db:fe:db:48:b3:60:12:39:ea:61:59: 21:96:f4:0e:fc:14:78:53:89:ca:12:e7:78:38:f0:bd:40:4a: 62:f9:17:95:6c:22:ea:a4:7a:2b:0b:f0:1f:5e:18:53:3d:36: be:67:17:d0:dd:db:50:e9:cb:07:8d:45:98:0f:18:6b:5d:bb: 07:86:8f:75:7e:d3:2e:45:2f:d6:fc:e2:8b:ae:73:83:93:80: c7:40:ab:48:2a:aa:a1:b2:92:66:d3:76:17:9f:2d:82:18:41: 18:a3:cf:f0:3a:e5:48:f2:a3:e4:7a:d7:4c:bc:e7:61:65:d9: 08:ab:fc:bc:09:f5:cb:92:90:1b:63:71:79:50:8a:d5:51:da: fe:aa:d5:95:5f:57:3d:c0:7f:14:fe:fa:64:2a:7c:49:6f:ea: 3d:78:9f:1a:f6:5d:85:e5:4d:c7:90:e9:2a:2e:52:ea:c8:65: 04:7e:c7:06:56:31:80:3c:19:a3:40:54:67:0f:32:a2:74:e4: f2:07:31:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdtYl9nScXk6WvPi01qpAZq9QyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTA5MDYwOTU3MTNaFw0yNTA5MDkxODQ1MTNaMDMxMTAvBgNV BAMTKDlFMEU5NzM4MjY1NEJEQThBMjlBNjI3RTczQjQwRjVBMEM4NjU4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW5qBIp1j1iZey0+WjSRHKCP1v swIJqeRGkpXSx2e1Ho4pyjqF5zbDz4WhAGNb3a30w/sI1I6wF2OgfgMUltHY8U6p Oitu8OzbwhoQaqCwfOvowkh5isVorol0bd4mmY2QJ9mNQ5ZTDIQfEcuvuKw3Ala5 Iy22mCq1h72Newm2ugYMbxFvsjyPx4fA4s74219BwbnRKlVpnVzrgmeRcWRtB5UO 6JKvKHZHXA9mvUS2V0pV7PIJkok8ziRAd3PxJX7LrGiwVER16HSTsJ1vzJnGkqpw oNegajnerRF8mPGXn+f8IWaAemsBeTSiH+rTeJQw/z22J/zVUrjqogdoX3TtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUng6XOCZUvaiimmJ+c7QPWgyGWJowHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOfC07yY8wcHS1ZdMOtXjcIaieq6aWFUckZ p5xI+NYx1j4WTr8e6Cz+G0lwthw0msP8lcL62cz0faC1j2bb/ttIs2ASOephWSGW 9A78FHhTicoS53g48L1ASmL5F5VsIuqkeisL8B9eGFM9Nr5nF9Dd21DpyweNRZgP GGtduweGj3V+0y5FL9b84ouuc4OTgMdAq0gqqqGykmbTdhefLYIYQRijz/A65Ujy o+R610y852Fl2Qir/LwJ9cuSkBtjcXlQitVR2v6q1ZVfVz3AfxT++mQqfElv6j14 nxr2XYXlTceQ6SouUurIZQR+xwZWMYA8GaNAVGcPMqJ05PIHMaY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:15 2025 by rpki-client