$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: QHqbS7DKrVjgAbRzIniI9Q2RPIA9PBTkgpmUvFNN7gU= Subject key identifier: 70:18:F9:DF:B8:E2:28:99:3D:3D:98:FA:A8:60:EA:5B:A2:58:21:56 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 6AEC8C7F68931727BDCBAB973B463C7F4050FA5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 0364 Signing time: Fri 06 Jun 2025 11:52:16 +0000 Manifest this update: Fri 06 Jun 2025 11:47:16 +0000 Manifest next update: Mon 09 Jun 2025 21:29:16 +0000 Files and hashes: 1: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: LiveCPu73a1wsUu/0gGdZ6b51An8daBIZ7LBHr7zUcE=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 3: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ec:8c:7f:68:93:17:27:bd:cb:ab:97:3b:46:3c:7f:40:50:fa:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Jun 6 11:47:16 2025 GMT Not After : Jun 9 21:29:16 2025 GMT Subject: CN=7018F9DFB8E228993D3D98FAA860EA5BA2582156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:0e:7f:73:61:7c:a1:09:a6:35:7f:dc:2a: 6a:31:f0:77:dd:95:cd:8b:23:7d:11:2e:f3:aa:c1: 8d:ab:38:11:1e:64:25:6b:50:73:4b:36:69:8d:86: be:7b:e3:9c:6e:53:7d:8e:7b:5d:05:45:a0:74:6f: 35:5f:9e:73:4b:f7:15:fe:95:65:78:2d:36:83:95: 18:67:8d:0b:3f:2c:cc:b5:55:a5:3f:bc:0a:e6:15: 93:1b:12:f2:31:c2:0e:b5:70:21:d0:e0:26:37:95: a9:a1:1c:41:1b:92:24:ff:9f:21:0b:ce:36:a2:09: 20:c9:a9:e0:94:17:86:b8:dd:2a:b3:3a:85:02:ae: 70:8d:18:c6:cf:b6:ad:f7:98:c1:b1:94:52:b3:81: 24:e9:95:ed:50:48:47:5f:4c:2a:5c:5c:a7:38:fc: 42:4f:8b:52:f6:db:27:af:b1:54:98:5d:02:03:ed: a7:95:b8:9a:98:5c:78:6f:f1:94:a7:c4:65:64:ad: 30:f5:c0:90:fd:60:6f:29:03:0d:0a:82:7f:ad:4d: c0:c5:52:65:64:36:45:43:f3:fa:cc:14:aa:60:97: 91:81:90:07:f7:9c:d7:58:02:c0:dd:2b:51:ac:8f: cd:d6:d9:d6:82:7a:ac:89:8d:94:7a:2c:cf:96:f2: a4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:18:F9:DF:B8:E2:28:99:3D:3D:98:FA:A8:60:EA:5B:A2:58:21:56 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a6:a1:88:fc:fd:64:f0:78:8e:05:d6:c0:0c:0f:2a:10:00: 62:05:4a:8f:2e:86:c6:d0:aa:d0:96:f1:7a:b0:9f:4c:d7:0a: 66:95:0c:7a:63:70:85:07:5c:96:6b:a4:05:cd:e9:f2:84:37: d0:65:6c:12:f6:16:0e:67:02:d2:21:71:90:d4:20:e4:8b:48: 97:37:06:91:b7:5c:da:40:f9:8e:d8:6b:07:15:21:27:27:5b: 64:69:cc:1f:fd:2c:60:9e:db:77:4d:ce:d4:ef:0f:4f:9b:63: 34:f3:20:54:ef:70:a5:0f:42:50:c5:d1:08:ff:cb:6e:97:3d: cd:b4:5b:3d:07:a4:8d:6d:f7:d9:b1:69:ea:74:66:cc:6b:55: d1:9a:0d:5d:e0:dc:f0:b6:94:b8:8c:ae:dd:ae:22:9a:19:71: ee:61:df:e5:21:9b:da:dc:2d:12:e3:85:f6:b0:e4:01:13:e8: 4a:d6:54:e1:ae:c1:6d:54:73:d0:e4:8f:0f:0b:29:b9:48:dc: 9a:6b:d8:c1:a2:96:ca:3a:6f:78:32:24:af:a7:23:a8:59:53: fe:19:a2:4f:83:29:eb:e5:5c:a3:c4:d1:ed:ae:6e:cd:07:a9: 08:52:3b:cc:90:0a:a8:d5:ca:da:53:a7:89:ae:0e:7a:70:b0: 55:71:1a:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauyMf2iTFye9y6uXO0Y8f0BQ+l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA2MDYxMTQ3MTZaFw0yNTA2MDkyMTI5MTZaMDMxMTAvBgNV BAMTKDcwMThGOURGQjhFMjI4OTkzRDNEOThGQUE4NjBFQTVCQTI1ODIxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nw5/c2F8oQmmNX/cKmox8Hfd lc2LI30RLvOqwY2rOBEeZCVrUHNLNmmNhr5745xuU32Oe10FRaB0bzVfnnNL9xX+ lWV4LTaDlRhnjQs/LMy1VaU/vArmFZMbEvIxwg61cCHQ4CY3lamhHEEbkiT/nyEL zjaiCSDJqeCUF4a43SqzOoUCrnCNGMbPtq33mMGxlFKzgSTple1QSEdfTCpcXKc4 /EJPi1L22yevsVSYXQID7aeVuJqYXHhv8ZSnxGVkrTD1wJD9YG8pAw0Kgn+tTcDF UmVkNkVD8/rMFKpgl5GBkAf3nNdYAsDdK1Gsj83W2daCeqyJjZR6LM+W8qQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcBj537jiKJk9PZj6qGDqW6JYIVYwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKemoYj8/WTweI4F1sAMDyoQAGIFSo8uhsbQ qtCW8Xqwn0zXCmaVDHpjcIUHXJZrpAXN6fKEN9BlbBL2Fg5nAtIhcZDUIOSLSJc3 BpG3XNpA+Y7YawcVIScnW2RpzB/9LGCe23dNztTvD0+bYzTzIFTvcKUPQlDF0Qj/ y26XPc20Wz0HpI1t99mxaep0ZsxrVdGaDV3g3PC2lLiMrt2uIpoZce5h3+Uhm9rc LRLjhfaw5AET6ErWVOGuwW1Uc9Dkjw8LKblI3Jpr2MGilso6b3gyJK+nI6hZU/4Z ok+DKevlXKPE0e2ubs0HqQhSO8yQCqjVytpTp4muDnpwsFVxGjA= -----END CERTIFICATE-----Generated at Sun Jun 8 01:42:07 2025 by rpki-client