$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: 0DMomTs8I1uefS78+mM7E49LLEqNSAOvdlUADifsUeY= Subject key identifier: 9D:99:E7:C5:97:70:4F:CA:59:28:43:7D:FD:04:CB:3A:D0:DA:A2:99 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 29834C1292F54024F6F20DFE9AC5862B6740E155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 6B Signing time: Thu 08 May 2025 09:40:49 +0000 Manifest this update: Thu 08 May 2025 09:35:49 +0000 Manifest next update: Sun 11 May 2025 13:22:49 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: cIcybnB75aJbxf30vgXdOio8v4Rji3U/9CJqFt2g3v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 13:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:83:4c:12:92:f5:40:24:f6:f2:0d:fe:9a:c5:86:2b:67:40:e1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: May 8 09:35:49 2025 GMT Not After : May 11 13:22:49 2025 GMT Subject: CN=9D99E7C597704FCA5928437DFD04CB3AD0DAA299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:ca:7b:f7:15:d7:54:31:f7:79:98:b3:bc: 65:25:1d:bd:1d:c8:51:54:6c:ab:ec:d8:12:19:9b: 95:c7:f6:e0:99:62:41:a3:29:38:66:cd:34:52:46: 01:3a:ab:45:c2:72:b3:e1:a9:6f:78:5d:85:3e:aa: b9:39:8b:a2:be:7d:89:fa:bb:90:f9:38:2d:71:70: 1c:cb:48:11:8b:eb:f2:60:69:eb:85:8a:e4:d3:66: 90:34:09:38:98:20:f5:e7:d2:19:7b:86:a3:8d:25: f9:dc:70:60:67:40:60:52:92:d5:af:c5:f0:15:91: 24:92:1f:b6:b5:99:cc:eb:04:bf:7b:56:44:f6:d0: ca:09:a7:cd:eb:4c:55:d7:e2:fd:40:3a:54:7f:44: 19:67:61:ce:ae:8a:5d:c6:a3:c3:e5:da:5b:20:23: 33:5f:9c:35:43:70:6c:e8:12:36:94:51:8e:2c:d4: 9b:ae:a4:42:04:65:4f:71:3e:5f:7e:85:e4:7e:e9: e8:2e:fc:86:10:da:04:48:0a:0e:2b:ff:72:b1:db: b8:7e:03:05:a0:ae:4e:1a:f6:33:ea:8e:4c:d4:d1: c0:05:72:87:bc:0d:89:9f:18:e6:81:ba:fa:b1:31: 9c:24:c1:5c:5d:bc:92:19:45:3e:8a:7d:c7:1e:c4: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:99:E7:C5:97:70:4F:CA:59:28:43:7D:FD:04:CB:3A:D0:DA:A2:99 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:6d:f5:65:0a:78:03:ff:14:59:39:b4:6b:9d:18:95:bd:7c: 55:1e:b0:02:95:8b:b9:24:9a:c1:99:e9:c4:fa:61:a7:c5:3e: 89:d0:97:22:e5:f3:15:d9:64:38:ee:4f:6c:d7:9a:1f:e8:51: 20:77:66:e6:7d:d6:09:86:cb:b6:4a:ff:01:8c:c5:93:8b:bb: 00:06:65:48:f5:98:ab:69:fe:a5:50:f1:4e:60:07:2a:78:0f: 01:42:2f:31:6b:d1:cb:af:2e:2c:98:ea:fc:00:69:a9:ad:a6: 25:0b:47:8a:18:ed:1d:ff:a2:91:10:46:92:f2:47:af:68:c1: c6:4d:ed:0c:07:67:3c:d1:af:37:11:94:d2:2a:41:ed:aa:c6: c4:24:fa:fe:8d:8c:7b:42:e8:aa:bc:2d:45:87:66:93:6f:32: c5:4b:4b:31:e6:70:51:cb:4f:44:ee:e5:e5:8e:02:83:71:d8: 5b:38:d7:ef:dd:ef:ed:6c:3a:2e:ac:35:a6:12:37:f7:66:a6: e4:9f:db:3c:bf:14:9c:d6:ea:d4:27:9f:a9:5d:45:ec:5e:9a: d3:57:c0:11:65:7e:3f:02:77:4c:43:0b:3c:d1:c2:68:07:80: 59:0a:a5:9a:0c:f5:5f:64:ad:3e:0b:9a:dd:8b:17:32:f5:d8: 69:b5:23:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYNMEpL1QCT28g3+msWGK2dA4VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA1MDgwOTM1NDlaFw0yNTA1MTExMzIyNDlaMDMxMTAvBgNV BAMTKDlEOTlFN0M1OTc3MDRGQ0E1OTI4NDM3REZEMDRDQjNBRDBEQUEyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyMp79xXXVDH3eZizvGUlHb0d yFFUbKvs2BIZm5XH9uCZYkGjKThmzTRSRgE6q0XCcrPhqW94XYU+qrk5i6K+fYn6 u5D5OC1xcBzLSBGL6/JgaeuFiuTTZpA0CTiYIPXn0hl7hqONJfnccGBnQGBSktWv xfAVkSSSH7a1mczrBL97VkT20MoJp83rTFXX4v1AOlR/RBlnYc6uil3Go8Pl2lsg IzNfnDVDcGzoEjaUUY4s1JuupEIEZU9xPl9+heR+6egu/IYQ2gRICg4r/3Kx27h+ AwWgrk4a9jPqjkzU0cAFcoe8DYmfGOaBuvqxMZwkwVxdvJIZRT6KfccexEJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZnnxZdwT8pZKEN9/QTLOtDaopkwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRt9WUKeAP/FFk5tGudGJW9fFUesAKVi7kk msGZ6cT6YafFPonQlyLl8xXZZDjuT2zXmh/oUSB3ZuZ91gmGy7ZK/wGMxZOLuwAG ZUj1mKtp/qVQ8U5gByp4DwFCLzFr0cuvLiyY6vwAaamtpiULR4oY7R3/opEQRpLy R69owcZN7QwHZzzRrzcRlNIqQe2qxsQk+v6NjHtC6Kq8LUWHZpNvMsVLSzHmcFHL T0Tu5eWOAoNx2Fs41+/d7+1sOi6sNaYSN/dmpuSf2zy/FJzW6tQnn6ldRexemtNX wBFlfj8Cd0xDCzzRwmgHgFkKpZoM9V9krT4Lmt2LFzL12Gm1I5M= -----END CERTIFICATE-----Generated at Thu May 8 21:38:21 2025 by rpki-client