$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: a4S3vBsJPs3r3R1a62g5ps9yGhE90667RZKahT3aCJs= Subject key identifier: 54:EB:05:23:5B:94:E8:A2:8B:BC:C8:4E:C0:DF:99:C2:95:B2:21:40 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 7925AC254CF4716747D3909E03891C418F224EDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: A2 Signing time: Sun 07 Sep 2025 08:01:26 +0000 Manifest this update: Sun 07 Sep 2025 07:56:26 +0000 Manifest next update: Wed 10 Sep 2025 17:26:26 +0000 Files and hashes: 1: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: DWdZ1zn7T4KhuzVMumqIDY7wLL+5onWv6nqQuDWU28I=) 2: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 3: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) 4: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 5: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 7: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:25:ac:25:4c:f4:71:67:47:d3:90:9e:03:89:1c:41:8f:22:4e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Sep 7 07:56:26 2025 GMT Not After : Sep 10 17:26:26 2025 GMT Subject: CN=54EB05235B94E8A28BBCC84EC0DF99C295B22140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:04:a1:a6:b3:9b:81:0e:8b:44:73:9c:9c: 29:e4:8f:0b:7a:e6:6a:24:06:6f:43:c2:be:7d:36: 62:92:c0:6c:b6:ae:8e:89:67:c4:3d:76:59:1a:77: aa:cd:6b:eb:06:bc:f2:36:9f:d1:ff:90:a6:7d:a9: 5e:2b:41:01:16:ad:b3:8b:a7:2e:81:7f:86:93:a3: 57:0b:34:d2:4b:96:d0:b8:f4:08:01:1e:94:5b:f1: 6d:18:9b:31:7f:f0:8f:2f:49:67:8c:7f:08:0e:ff: 19:21:7a:9b:b9:51:81:57:05:16:68:f7:c4:4f:41: 23:f4:23:fd:28:6a:1d:3a:1a:7a:f6:e3:96:50:49: 11:21:ce:dd:b5:8d:53:8a:72:1c:21:8e:16:d5:c1: ef:d3:10:fd:6d:9b:d5:62:41:99:ec:18:14:59:1d: 25:e0:b5:91:31:f2:58:ab:81:87:77:df:3d:52:31: 8f:00:d9:39:c9:57:64:d9:32:bb:b9:1f:50:4c:8d: f0:d1:2e:91:39:8e:81:5f:84:60:cb:80:24:46:f5: b7:02:f4:de:b4:f7:66:76:dc:ce:8e:d5:c6:a9:aa: d5:18:22:01:b1:55:5c:ed:4f:53:5d:10:02:2b:84: 9e:b2:2d:4c:df:95:e9:97:f2:a5:7b:1d:75:74:2e: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:05:23:5B:94:E8:A2:8B:BC:C8:4E:C0:DF:99:C2:95:B2:21:40 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:65:df:f5:ee:b5:c7:0e:9b:de:9a:41:20:15:a9:5f:d3:c3: 64:f6:a5:ae:81:1e:ce:b0:6d:04:48:f5:92:cf:d4:bc:4e:0b: 50:e5:65:b3:f9:39:d3:9f:c9:fb:87:8d:ce:d1:5b:48:ce:d9: e4:1a:d2:e0:1b:7d:57:2b:10:bb:99:d8:87:1d:f4:bf:c6:14: ee:0b:2f:47:6b:03:4b:76:b0:4d:bb:ce:65:51:c3:26:13:20: e7:b3:49:d8:86:98:54:ce:80:c0:15:fb:cc:4f:d0:2f:d7:db: 3f:1d:5c:c3:6c:40:0c:ce:a0:7c:31:3e:b3:75:eb:68:a0:45: b7:00:9e:13:83:35:23:2d:52:b4:0e:fc:b5:1c:0b:14:06:2e: 31:b6:59:2b:fc:c0:62:de:8a:fe:81:ae:a8:9d:d0:43:f1:51: f8:3c:a7:c2:f0:dc:73:09:64:ff:b0:9c:bc:d3:29:e0:b2:91: 3e:d6:b2:c6:de:c8:e3:5c:bd:64:44:c8:c3:c3:5c:83:c7:c4: 64:ad:a6:18:83:e9:0b:10:67:27:c4:bd:3b:da:89:54:e1:45: d2:9e:39:8b:28:05:0e:90:07:33:93:8a:4c:54:36:e0:49:ff: be:4a:df:e2:9e:bc:fb:db:be:69:93:c5:68:e6:26:12:71:4d: 67:2e:73:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSWsJUz0cWdH05CeA4kcQY8iTtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTA5MDcwNzU2MjZaFw0yNTA5MTAxNzI2MjZaMDMxMTAvBgNV BAMTKDU0RUIwNTIzNUI5NEU4QTI4QkJDQzg0RUMwREY5OUMyOTVCMjIxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRagShprObgQ6LRHOcnCnkjwt6 5mokBm9Dwr59NmKSwGy2ro6JZ8Q9dlkad6rNa+sGvPI2n9H/kKZ9qV4rQQEWrbOL py6Bf4aTo1cLNNJLltC49AgBHpRb8W0YmzF/8I8vSWeMfwgO/xkhepu5UYFXBRZo 98RPQSP0I/0oah06Gnr245ZQSREhzt21jVOKchwhjhbVwe/TEP1tm9ViQZnsGBRZ HSXgtZEx8lirgYd33z1SMY8A2TnJV2TZMru5H1BMjfDRLpE5joFfhGDLgCRG9bcC 9N6092Z23M6O1capqtUYIgGxVVztT1NdEAIrhJ6yLUzflemX8qV7HXV0LuJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOsFI1uU6KKLvMhOwN+ZwpWyIUAwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9l3/XutccOm96aQSAVqV/Tw2T2pa6BHs6w bQRI9ZLP1LxOC1DlZbP5OdOfyfuHjc7RW0jO2eQa0uAbfVcrELuZ2Icd9L/GFO4L L0drA0t2sE27zmVRwyYTIOezSdiGmFTOgMAV+8xP0C/X2z8dXMNsQAzOoHwxPrN1 62igRbcAnhODNSMtUrQO/LUcCxQGLjG2WSv8wGLeiv6Brqid0EPxUfg8p8Lw3HMJ ZP+wnLzTKeCykT7WssbeyONcvWREyMPDXIPHxGStphiD6QsQZyfEvTvaiVThRdKe OYsoBQ6QBzOTikxUNuBJ/75K3+KevPvbvmmTxWjmJhJxTWcuc3o= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:20 2025 by rpki-client