$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: uA8xM8W6bbCsrxOx28ehFLkYgHCr8lGxjyZXq36X1nc= Subject key identifier: 43:48:38:32:33:C6:D9:7F:2C:5C:A0:B7:30:A6:C1:2D:E3:D7:BE:7E Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 5B5A26D5E73C8549459347A03ED56E3CE34AD06F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 82 Signing time: Sat 28 Jun 2025 13:40:47 +0000 Manifest this update: Sat 28 Jun 2025 13:35:47 +0000 Manifest next update: Tue 01 Jul 2025 14:58:47 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: bwTlitRe4Y83cfzjTYPJpfog+8GZ0xD023or5TunA7A=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5a:26:d5:e7:3c:85:49:45:93:47:a0:3e:d5:6e:3c:e3:4a:d0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Jun 28 13:35:47 2025 GMT Not After : Jul 1 14:58:47 2025 GMT Subject: CN=4348383233C6D97F2C5CA0B730A6C12DE3D7BE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:3b:e7:13:a1:3d:22:c9:5c:83:2d:41:b0: e1:4d:4a:b5:11:71:f9:71:94:51:4c:b1:cb:d9:1a: 5b:4c:13:bf:4f:83:20:c5:4a:e3:11:35:3a:f8:01: d1:44:ad:f5:b3:6c:88:d2:81:06:a1:02:b2:3b:d4: fa:6a:62:13:23:2f:98:55:9f:5f:32:cf:2f:f4:7b: f3:6d:ed:86:4d:2d:92:98:ac:81:c3:cd:49:1a:17: df:b5:3d:e9:01:0a:49:48:07:e5:13:1e:f3:76:9b: 42:1b:dc:f3:7c:73:10:dc:55:9c:b8:ae:87:8c:69: 98:d5:9a:d9:31:9f:cf:0b:3b:42:40:fb:1e:ff:62: 85:49:46:d2:ff:ba:cf:0a:40:08:a5:c1:9d:39:7c: 7a:40:6e:fe:e1:cf:c8:fe:32:2a:ba:5d:fc:9a:12: bd:b5:37:b5:b4:67:fb:83:c5:85:71:1a:50:d7:b1: 3a:f7:28:6c:02:b2:59:eb:a1:93:59:8d:99:de:d6: b8:fb:08:4d:63:b6:ae:cc:14:e7:04:8c:a2:76:d2: d4:d4:37:65:95:e0:ee:12:36:ef:32:93:89:93:a8: 49:a5:5b:54:7c:af:3a:11:9b:24:e1:b9:b4:67:18: 6f:b2:b5:d9:a3:62:d5:e2:99:e2:b1:c1:30:07:76: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:38:32:33:C6:D9:7F:2C:5C:A0:B7:30:A6:C1:2D:E3:D7:BE:7E X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:5b:05:fb:b8:85:a1:39:ba:43:cc:d1:9b:9a:14:2d:d4:67: 77:e9:d2:93:de:ea:28:2a:aa:58:ac:f8:a2:15:e0:c8:ed:f1: 79:16:a4:2e:71:c7:c5:cb:c7:64:ec:90:ba:b9:05:fe:7b:b4: 34:ba:0c:64:ba:75:0a:42:b4:e2:3f:be:9b:b5:41:da:24:61: e3:d9:43:ef:00:67:2b:95:93:4f:ff:d2:f9:3f:8d:5c:ec:64: cd:ba:c5:75:b6:2c:2b:cb:70:88:bb:d9:f6:45:b3:92:79:89: 80:07:72:79:bb:e3:6d:3b:35:89:4a:1d:4f:34:34:cf:b8:a4: 61:8f:c7:2f:65:02:89:26:48:5d:b5:92:43:23:0b:65:fc:38: 19:c4:1e:b1:2a:93:ea:b6:85:58:14:40:bc:a3:64:86:95:99: 32:39:22:47:21:46:c5:4b:69:27:55:b2:f2:94:76:40:85:84: 06:ac:05:98:29:93:d7:24:d6:c2:d5:e6:aa:60:9e:91:42:f8: d7:61:e6:2c:14:e6:13:5c:3c:44:48:64:85:24:02:e0:f8:3c: ca:c7:69:67:48:c5:d9:54:a5:79:a1:b4:a7:25:e5:d6:a8:5e: 84:70:72:eb:6a:d3:fb:82:86:f9:f3:1b:a0:99:2c:3a:2d:ae: 29:17:4d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1om1ec8hUlFk0egPtVuPONK0G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA2MjgxMzM1NDdaFw0yNTA3MDExNDU4NDdaMDMxMTAvBgNV BAMTKDQzNDgzODMyMzNDNkQ5N0YyQzVDQTBCNzMwQTZDMTJERTNEN0JFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjozvnE6E9Islcgy1BsOFNSrUR cflxlFFMscvZGltME79PgyDFSuMRNTr4AdFErfWzbIjSgQahArI71PpqYhMjL5hV n18yzy/0e/Nt7YZNLZKYrIHDzUkaF9+1PekBCklIB+UTHvN2m0Ib3PN8cxDcVZy4 roeMaZjVmtkxn88LO0JA+x7/YoVJRtL/us8KQAilwZ05fHpAbv7hz8j+Miq6Xfya Er21N7W0Z/uDxYVxGlDXsTr3KGwCslnroZNZjZne1rj7CE1jtq7MFOcEjKJ20tTU N2WV4O4SNu8yk4mTqEmlW1R8rzoRmyThubRnGG+ytdmjYtXimeKxwTAHdiU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0g4MjPG2X8sXKC3MKbBLePXvn4wHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANlbBfu4haE5ukPM0ZuaFC3UZ3fp0pPe6igq qlis+KIV4Mjt8XkWpC5xx8XLx2TskLq5Bf57tDS6DGS6dQpCtOI/vpu1QdokYePZ Q+8AZyuVk0//0vk/jVzsZM26xXW2LCvLcIi72fZFs5J5iYAHcnm74207NYlKHU80 NM+4pGGPxy9lAokmSF21kkMjC2X8OBnEHrEqk+q2hVgUQLyjZIaVmTI5IkchRsVL aSdVsvKUdkCFhAasBZgpk9ck1sLV5qpgnpFC+Ndh5iwU5hNcPERIZIUkAuD4PMrH aWdIxdlUpXmhtKcl5daoXoRwcutq0/uChvnzG6CZLDotrikXTSw= -----END CERTIFICATE-----Generated at Sun Jun 29 20:05:11 2025 by rpki-client