$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: YpcXxD6r/KoDYJThhy//pK7eBJPXdAmUUgreJeqnFqU= Subject key identifier: 3E:09:E3:5C:91:4E:CA:C4:76:9A:B4:A1:A0:B1:15:F6:79:72:F3:E0 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 10A0212714ABA94F869EF81686951F634FA90D5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 3B Signing time: Fri 06 Jun 2025 08:51:11 +0000 Manifest this update: Fri 06 Jun 2025 08:46:11 +0000 Manifest next update: Mon 09 Jun 2025 16:56:11 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: QDf/aMjVTys4JiGRKAgJfs0VrdcYz3fYRuBy3bKZRDI=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a0:21:27:14:ab:a9:4f:86:9e:f8:16:86:95:1f:63:4f:a9:0d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Jun 6 08:46:11 2025 GMT Not After : Jun 9 16:56:11 2025 GMT Subject: CN=3E09E35C914ECAC4769AB4A1A0B115F67972F3E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:dc:94:12:3f:09:1a:b6:49:d3:4e:b1:fd: a0:f9:05:5b:ea:3e:06:7a:c1:da:9c:85:60:98:5e: 02:9b:23:f5:07:de:57:57:21:03:39:05:2f:ca:1f: 10:91:ba:fd:e2:90:65:10:ef:15:2f:08:3f:c3:a7: 77:08:34:6f:e1:52:ae:bf:92:d1:36:01:65:c2:84: 3d:a0:d4:88:52:ef:c8:49:c4:ce:55:99:95:d6:1f: eb:8e:01:f2:bf:35:64:00:f7:69:cc:8e:a6:6f:e7: de:0d:84:32:d2:03:4e:9f:62:d8:b4:4a:8e:91:d5: e0:86:96:a1:dc:3f:bd:a9:93:1e:2f:d0:36:06:0b: a8:3d:cb:92:9e:1b:b8:6b:4f:e2:a4:47:93:e4:76: 5b:af:18:b2:4f:a0:12:f2:d8:73:5b:58:de:7f:fe: 0a:0c:c3:a6:8c:b8:7e:ff:2d:d1:23:82:8b:04:09: e0:71:a9:c0:57:1c:36:4b:33:7e:ad:9a:9b:f3:ed: 3b:00:3a:9e:d9:b4:24:dd:94:b1:50:47:d5:80:a6: 17:3f:e5:e7:d3:03:de:0a:37:70:2d:15:8d:1a:7f: c9:f5:31:11:50:a9:be:5c:69:27:6f:1c:71:21:d5: df:36:d4:ee:2f:b5:e4:e3:09:b4:df:8a:29:d4:25: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:09:E3:5C:91:4E:CA:C4:76:9A:B4:A1:A0:B1:15:F6:79:72:F3:E0 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:10:c8:87:3f:d5:12:51:cc:bb:74:25:f7:60:03:1b:f6:9b: 03:2c:c6:e1:03:98:b8:38:03:6c:9c:e4:84:a1:ee:92:8e:01: a4:be:70:11:2d:1d:3d:6c:9d:f9:7f:e8:a7:a4:15:f8:c8:34: f6:77:16:df:d2:31:51:c5:6f:aa:7f:d9:2d:6b:4a:9f:e9:36: 08:39:e4:44:20:78:b1:f0:a9:c7:a5:85:e6:86:69:38:11:1c: 7f:b2:f0:14:90:6d:5c:31:b9:c3:62:2b:04:f4:a3:90:6b:25: 1c:61:65:2e:05:23:29:83:34:73:75:36:f1:0b:b5:14:37:81: a6:a1:d1:ea:b5:d8:ed:79:0b:01:28:43:54:95:3f:f5:0e:d5: 2e:03:ea:f3:a0:55:67:71:93:38:2f:7c:d1:58:02:fe:5c:66: fe:c9:6d:ec:17:86:55:32:17:3c:80:51:7d:df:5d:a7:6c:07: 87:81:5f:02:59:e0:92:95:1a:3c:3a:5e:21:08:a3:c0:0c:79: ea:51:8c:d5:c0:70:eb:cc:e1:5b:71:57:61:cc:77:18:ce:53: 14:0f:ad:e7:27:d8:24:f9:05:ba:48:af:1e:d2:c7:7d:e3:b8: a1:b9:bb:47:0e:16:fb:70:e1:d1:32:c3:7e:53:26:97:6b:b5: 66:51:e9:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKAhJxSrqU+GnvgWhpUfY0+pDVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA2MDYwODQ2MTFaFw0yNTA2MDkxNjU2MTFaMDMxMTAvBgNV BAMTKDNFMDlFMzVDOTE0RUNBQzQ3NjlBQjRBMUEwQjExNUY2Nzk3MkYzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNdyUEj8JGrZJ006x/aD5BVvq PgZ6wdqchWCYXgKbI/UH3ldXIQM5BS/KHxCRuv3ikGUQ7xUvCD/Dp3cING/hUq6/ ktE2AWXChD2g1IhS78hJxM5VmZXWH+uOAfK/NWQA92nMjqZv594NhDLSA06fYti0 So6R1eCGlqHcP72pkx4v0DYGC6g9y5KeG7hrT+KkR5PkdluvGLJPoBLy2HNbWN5/ /goMw6aMuH7/LdEjgosECeBxqcBXHDZLM36tmpvz7TsAOp7ZtCTdlLFQR9WAphc/ 5efTA94KN3AtFY0af8n1MRFQqb5caSdvHHEh1d821O4vteTjCbTfiinUJSrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPgnjXJFOysR2mrShoLEV9nly8+AwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwQyIc/1RJRzLt0JfdgAxv2mwMsxuEDmLg4 A2yc5ISh7pKOAaS+cBEtHT1snfl/6KekFfjINPZ3Ft/SMVHFb6p/2S1rSp/pNgg5 5EQgeLHwqcelheaGaTgRHH+y8BSQbVwxucNiKwT0o5BrJRxhZS4FIymDNHN1NvEL tRQ3gaah0eq12O15CwEoQ1SVP/UO1S4D6vOgVWdxkzgvfNFYAv5cZv7JbewXhlUy FzyAUX3fXadsB4eBXwJZ4JKVGjw6XiEIo8AMeepRjNXAcOvM4VtxV2HMdxjOUxQP recn2CT5BbpIrx7Sx33juKG5u0cOFvtw4dEyw35TJpdrtWZR6cc= -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:20 2025 by rpki-client