$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: gaQq0L+aun5Xs74+N5DXTZTKSgQyp3SwObQ0pbfLLNg= Subject key identifier: 1C:6C:BB:CD:E7:90:FC:1D:F9:6B:6D:C5:33:43:0B:7A:56:4B:33:2D Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 1782CB6195EDEE19FCDFC5E9A2E459FCF8BB8BEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: B5 Signing time: Sun 19 Oct 2025 19:30:50 +0000 Manifest this update: Sun 19 Oct 2025 19:25:50 +0000 Manifest next update: Thu 23 Oct 2025 01:20:50 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: sFncyzmcPOJhDV8kZidx5a0cC0pEmZV5vxox2k8cfBM=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:82:cb:61:95:ed:ee:19:fc:df:c5:e9:a2:e4:59:fc:f8:bb:8b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Oct 19 19:25:50 2025 GMT Not After : Oct 23 01:20:50 2025 GMT Subject: CN=1C6CBBCDE790FC1DF96B6DC533430B7A564B332D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:c2:79:84:5f:2d:b2:65:8a:d6:d6:79:1e: 4c:72:08:71:82:51:44:4d:51:9e:1f:37:9d:a9:d1: 71:e3:e5:5a:3f:b0:cb:12:ec:06:c5:d0:21:db:18: 1d:67:d2:4a:b2:fb:18:7c:4d:92:25:32:fe:44:9c: cc:99:5b:31:bd:5e:5e:d4:e2:4b:c6:ab:a5:2d:2f: 5d:9f:08:5a:09:f2:a6:65:52:de:6e:20:39:b5:93: c5:eb:9d:70:66:d3:21:c6:ed:12:4d:bb:e7:8e:05: f8:b0:df:0d:f6:d7:b0:44:4a:05:69:a9:2c:69:d5: 02:0e:07:4b:0d:8f:0d:45:70:43:c0:5f:b4:dd:f5: 66:99:be:49:ea:f6:43:24:9d:a9:48:43:7c:aa:52: 2e:9d:4b:9c:a6:9f:d6:45:5f:c8:6d:dd:19:c2:36: 13:49:67:76:47:dd:d4:40:7a:b7:d2:53:2e:50:ea: 3a:3f:b9:21:d7:bd:53:03:05:8b:15:14:a5:80:7d: 19:45:dc:a0:f9:b8:55:da:b8:2e:33:50:1b:38:d5: 07:2f:4f:20:6b:fd:00:6b:f1:87:09:57:73:cb:ab: bc:f4:52:09:8d:59:31:b7:ae:e0:e5:93:57:e3:fe: cd:0a:dd:ff:92:fb:cd:8d:fa:ac:4e:3d:3e:22:dd: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:BB:CD:E7:90:FC:1D:F9:6B:6D:C5:33:43:0B:7A:56:4B:33:2D X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:77:a8:d9:d3:7b:e4:7e:22:ad:a6:3a:d0:1d:3b:03:68:84: a5:f9:42:33:88:b6:7a:3e:d9:3a:af:01:d8:37:53:5f:da:12: 28:95:c2:0d:37:56:f2:41:e9:b6:13:b5:1f:76:c4:69:b8:5a: e4:40:5a:2e:1b:4f:b6:53:c5:4c:c3:70:48:f0:4b:e3:79:e3: 80:3c:cc:62:41:8d:b5:c6:33:45:c6:b5:91:2a:c7:ba:8e:20: 7c:8b:2f:f0:5c:7b:bc:c1:fa:78:cc:af:3e:1f:15:69:9a:ac: 6d:27:b8:da:d0:c2:53:fb:c5:00:e3:f0:a2:cc:76:f2:ea:27: 2c:f6:6f:84:8c:f2:7a:1e:de:48:29:45:b1:96:f4:14:e5:94: c0:db:d3:ce:08:60:cb:6b:bf:50:ea:55:b6:67:65:13:6f:9c: f3:b6:c7:88:4a:59:cb:bf:94:6d:79:e1:e9:af:4d:ae:54:94: 65:06:9f:c0:bc:a4:30:30:6d:16:33:a5:a2:6e:24:e3:65:37: 9c:d4:01:1f:0c:4c:2c:f7:d7:21:b5:e6:f0:fd:83:b5:c6:eb: ed:fa:9f:7c:e3:9f:76:6b:5f:88:ae:a2:b2:cb:3f:f4:e3:b4: 5f:e0:f5:21:1b:30:79:b4:7f:dd:82:2e:e6:e5:d6:f7:8b:68: 94:c6:bc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4LLYZXt7hn838XpouRZ/Pi7i+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTEwMTkxOTI1NTBaFw0yNTEwMjMwMTIwNTBaMDMxMTAvBgNV BAMTKDFDNkNCQkNERTc5MEZDMURGOTZCNkRDNTMzNDMwQjdBNTY0QjMzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiucJ5hF8tsmWK1tZ5HkxyCHGC UURNUZ4fN52p0XHj5Vo/sMsS7AbF0CHbGB1n0kqy+xh8TZIlMv5EnMyZWzG9Xl7U 4kvGq6UtL12fCFoJ8qZlUt5uIDm1k8XrnXBm0yHG7RJNu+eOBfiw3w3217BESgVp qSxp1QIOB0sNjw1FcEPAX7Td9WaZvknq9kMknalIQ3yqUi6dS5ymn9ZFX8ht3RnC NhNJZ3ZH3dRAerfSUy5Q6jo/uSHXvVMDBYsVFKWAfRlF3KD5uFXauC4zUBs41Qcv TyBr/QBr8YcJV3PLq7z0UgmNWTG3ruDlk1fj/s0K3f+S+82N+qxOPT4i3f+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHGy7zeeQ/B35a23FM0MLelZLMy0wHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp3qNnTe+R+Iq2mOtAdOwNohKX5QjOItno+ 2TqvAdg3U1/aEiiVwg03VvJB6bYTtR92xGm4WuRAWi4bT7ZTxUzDcEjwS+N544A8 zGJBjbXGM0XGtZEqx7qOIHyLL/Bce7zB+njMrz4fFWmarG0nuNrQwlP7xQDj8KLM dvLqJyz2b4SM8noe3kgpRbGW9BTllMDb084IYMtrv1DqVbZnZRNvnPO2x4hKWcu/ lG154emvTa5UlGUGn8C8pDAwbRYzpaJuJONlN5zUAR8MTCz31yG15vD9g7XG6+36 n3zjn3ZrX4iuorLLP/TjtF/g9SEbMHm0f92CLubl1veLaJTGvD8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:39 2025 by rpki-client