$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: 4AO9IOXHQjKd35vcF6fjY5guCnWvdArHXq1mR/6O7bc= Subject key identifier: 0F:6A:AF:CF:F6:2F:26:37:DA:1A:E4:12:E3:5D:AC:5B:94:48:23:E5 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 4CF284BCE57C86DCD2B26924E32C9D1B457D4551 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 038D Signing time: Sat 06 Sep 2025 04:32:17 +0000 Manifest this update: Sat 06 Sep 2025 04:27:17 +0000 Manifest next update: Tue 09 Sep 2025 14:49:17 +0000 Files and hashes: 1: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 2: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: 6kDXwMqqWW2ex7LpnkjNexUGsA0rcn8o5zSmpIGiXiQ=) 3: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f2:84:bc:e5:7c:86:dc:d2:b2:69:24:e3:2c:9d:1b:45:7d:45:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Sep 6 04:27:17 2025 GMT Not After : Sep 9 14:49:17 2025 GMT Subject: CN=0F6AAFCFF62F2637DA1AE412E35DAC5B944823E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:a0:63:d6:00:14:58:3c:b7:5d:f5:c2:81: a5:8b:6f:4b:eb:b2:98:e6:5a:37:8d:c9:f4:55:5e: 18:7c:59:76:5a:c2:89:67:cf:6c:5e:d6:1d:0e:34: b0:2b:54:a9:37:d7:f0:91:4f:db:de:04:ca:49:a6: 18:33:5a:51:a3:65:f1:eb:b2:88:be:1f:fb:b3:43: 01:50:f4:6a:ec:6e:3d:66:41:31:27:d9:e5:8e:8c: 6e:f9:1d:dc:1b:6e:dd:61:36:bc:cf:61:20:07:d8: 28:20:70:d5:d4:95:75:c0:c9:26:2b:57:84:cb:56: d7:c4:82:4f:7f:7e:1f:2d:0c:46:7c:b7:a6:c9:0c: 0a:f3:07:17:cf:b2:7d:71:79:4b:99:99:06:4c:14: c2:06:e2:50:f9:27:73:5c:41:17:f2:39:52:8b:a2: 60:27:f1:5e:5e:fd:b0:ec:e1:6a:72:ae:e8:6f:55: 0e:5b:fb:75:49:cb:f5:4a:54:c0:83:e0:f8:a0:bd: 48:54:fc:c4:80:d8:05:55:b4:54:a1:1e:18:93:64: 09:b4:41:a7:5c:63:02:77:e3:24:e5:21:b1:5e:91: 68:15:c3:54:e6:15:1b:57:d2:c8:1f:61:85:d3:49: 18:f5:30:80:95:8a:98:ef:e6:bf:35:07:ed:99:00: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:AF:CF:F6:2F:26:37:DA:1A:E4:12:E3:5D:AC:5B:94:48:23:E5 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2c:44:65:89:ec:d4:72:c5:eb:41:6c:95:49:c6:c2:95:da: 84:ee:98:12:0a:9a:ee:b5:86:9f:b2:49:70:de:02:20:d5:81: 78:f8:b6:22:80:67:9f:35:50:2f:d1:48:b9:5a:0d:94:76:7a: 3b:c5:4d:da:1d:23:6d:ac:ab:de:59:b3:86:a0:ef:7a:a2:6f: a6:e6:ea:23:5c:74:a1:89:57:bb:e3:5a:e0:24:cc:a5:db:bc: b6:d6:fd:56:b2:c6:9b:71:15:04:5a:e5:e3:67:ed:b6:ca:2b: ff:48:5a:a3:1b:0d:41:f8:8c:33:aa:a4:c1:99:f3:1e:f7:dc: 6d:2a:c0:d4:ac:64:d8:8c:77:c4:f0:22:32:26:c9:c6:91:87: a0:a9:1b:e9:60:72:37:ea:6f:26:9c:08:ff:b9:0a:db:73:b2: 9d:b5:d7:04:cb:29:f5:b2:07:d4:51:8a:f5:75:47:e6:82:7c: 26:cf:ed:ea:ad:95:4a:42:78:83:c5:af:3e:c6:61:1d:25:29: 34:c2:cb:58:df:24:e2:3b:23:a8:3f:d6:ba:e6:d2:80:9f:45: 44:7a:81:3c:bd:32:b0:e6:9c:87:49:ec:bf:8e:9e:9b:04:4c: 91:13:63:3f:c0:ca:a3:76:e2:64:a0:84:b9:94:07:7c:b9:cc: ed:40:6d:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPKEvOV8htzSsmkk4yydG0V9RVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA5MDYwNDI3MTdaFw0yNTA5MDkxNDQ5MTdaMDMxMTAvBgNV BAMTKDBGNkFBRkNGRjYyRjI2MzdEQTFBRTQxMkUzNURBQzVCOTQ0ODIzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQKBj1gAUWDy3XfXCgaWLb0vr spjmWjeNyfRVXhh8WXZawolnz2xe1h0ONLArVKk31/CRT9veBMpJphgzWlGjZfHr soi+H/uzQwFQ9Grsbj1mQTEn2eWOjG75Hdwbbt1hNrzPYSAH2CggcNXUlXXAySYr V4TLVtfEgk9/fh8tDEZ8t6bJDArzBxfPsn1xeUuZmQZMFMIG4lD5J3NcQRfyOVKL omAn8V5e/bDs4WpyruhvVQ5b+3VJy/VKVMCD4PigvUhU/MSA2AVVtFShHhiTZAm0 QadcYwJ34yTlIbFekWgVw1TmFRtX0sgfYYXTSRj1MICVipjv5r81B+2ZAPMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2qvz/YvJjfaGuQS412sW5RII+UwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUsRGWJ7NRyxetBbJVJxsKV2oTumBIKmu61 hp+ySXDeAiDVgXj4tiKAZ581UC/RSLlaDZR2ejvFTdodI22sq95Zs4ag73qib6bm 6iNcdKGJV7vjWuAkzKXbvLbW/VayxptxFQRa5eNn7bbKK/9IWqMbDUH4jDOqpMGZ 8x733G0qwNSsZNiMd8TwIjImycaRh6CpG+lgcjfqbyacCP+5Cttzsp211wTLKfWy B9RRivV1R+aCfCbP7eqtlUpCeIPFrz7GYR0lKTTCy1jfJOI7I6g/1rrm0oCfRUR6 gTy9MrDmnIdJ7L+OnpsETJETYz/AyqN24mSghLmUB3y5zO1AbV8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:45 2025 by rpki-client