$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: kJwDG9bBSihyRHtYDe4maCbLRtreS8yWujqvURU74hI= Subject key identifier: F4:40:82:86:D4:78:E1:6D:F6:48:E5:35:DF:1C:E5:B8:55:30:C2:B8 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 39E2E6523EC825E027027FDAE4B92466CA9C8D3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 9B Signing time: Thu 21 Aug 2025 18:10:48 +0000 Manifest this update: Thu 21 Aug 2025 18:05:48 +0000 Manifest next update: Sun 24 Aug 2025 23:04:48 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: ldXwWAawYbp/NNxDkp+3Bp20TTnygS90OhRhma0I4+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e2:e6:52:3e:c8:25:e0:27:02:7f:da:e4:b9:24:66:ca:9c:8d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Aug 21 18:05:48 2025 GMT Not After : Aug 24 23:04:48 2025 GMT Subject: CN=F4408286D478E16DF648E535DF1CE5B85530C2B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:99:ae:c9:ff:95:84:bf:31:04:1f:f3:8a: b9:aa:6b:38:68:49:7a:bf:af:6a:cb:52:eb:89:7c: 76:49:d7:91:17:af:f8:d5:05:e9:d2:e4:7c:f9:84: f6:b5:91:48:ca:5f:6d:7c:d7:2e:54:2a:06:80:ad: 0d:98:38:48:fc:30:7d:94:e8:ef:7e:24:b8:01:eb: 67:3f:6e:e5:78:65:2f:ec:fa:90:a3:be:b2:09:16: f2:2d:89:2d:37:17:c0:7f:6b:b5:00:22:03:ef:da: 80:b8:ee:61:8b:39:a3:35:50:72:65:46:57:47:bc: e4:f4:9d:60:00:f8:7f:16:03:27:9f:db:2e:31:1e: 71:4b:cf:38:b4:e1:4c:4b:ca:fa:ab:38:00:74:89: b0:c3:03:b5:87:0e:34:c7:a9:ec:4c:56:9c:c2:b1: c9:ed:ca:6a:6b:d2:cd:e8:93:e8:3c:65:c8:e6:df: 1f:15:ca:25:97:bb:db:65:6b:e2:59:d7:ba:7b:e2: a6:a4:24:2b:61:c7:66:c8:46:08:77:8d:f7:b8:e8: 84:9c:b9:37:cb:75:b5:ba:45:08:0b:ec:b3:f4:77: 45:c2:d3:ae:73:ac:68:e1:39:e3:1b:42:65:83:77: 1d:81:6e:73:58:59:e9:3a:f3:9e:9c:e8:b5:f3:ee: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:40:82:86:D4:78:E1:6D:F6:48:E5:35:DF:1C:E5:B8:55:30:C2:B8 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d4:1b:67:05:33:54:b9:46:b8:b2:c8:0b:0b:95:45:40:ff: 89:06:c1:ae:5d:4d:66:88:00:b2:ab:e7:fb:b8:cc:12:72:5a: 09:43:07:bb:a1:ed:fb:8b:fd:3e:6e:b0:99:bf:ad:73:d9:e1: cc:0a:3a:36:29:b6:f1:cc:35:24:f2:ee:6b:6c:df:9b:1c:85: 31:a5:70:12:a8:5f:c9:20:ac:83:56:49:00:b4:5e:b7:c2:75: 8f:39:24:6b:49:11:29:38:67:b5:d1:35:f7:1e:a0:9c:a3:dd: 14:49:28:2c:67:d9:70:cb:99:cd:6e:69:98:6b:e4:28:73:12: 4a:1f:ad:7a:0f:af:5e:84:da:75:0f:98:83:64:8b:f4:4c:33: 78:e4:0e:55:6d:8b:78:71:38:83:90:57:a8:aa:57:a6:a2:5d: c5:5d:b3:80:7d:50:df:c8:1a:9f:c2:69:e1:da:0a:cb:82:49: 8d:69:bb:4a:be:6c:50:d5:fa:8e:56:38:14:c3:47:8d:58:e2: 85:d5:49:37:49:8a:e7:6b:4e:9c:bd:bd:a6:69:be:30:bf:a1: 6a:94:ab:19:b4:a5:df:9d:86:fc:2d:c1:b9:68:82:c2:dd:4b: 20:3b:cc:b3:ea:cd:6d:77:0c:69:8d:d0:84:40:00:d9:19:63: ce:83:a3:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeLmUj7IJeAnAn/a5LkkZsqcjTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA4MjExODA1NDhaFw0yNTA4MjQyMzA0NDhaMDMxMTAvBgNV BAMTKEY0NDA4Mjg2RDQ3OEUxNkRGNjQ4RTUzNURGMUNFNUI4NTUzMEMyQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbZmuyf+VhL8xBB/zirmqazho SXq/r2rLUuuJfHZJ15EXr/jVBenS5Hz5hPa1kUjKX2181y5UKgaArQ2YOEj8MH2U 6O9+JLgB62c/buV4ZS/s+pCjvrIJFvItiS03F8B/a7UAIgPv2oC47mGLOaM1UHJl RldHvOT0nWAA+H8WAyef2y4xHnFLzzi04UxLyvqrOAB0ibDDA7WHDjTHqexMVpzC scntympr0s3ok+g8Zcjm3x8VyiWXu9tla+JZ17p74qakJCthx2bIRgh3jfe46ISc uTfLdbW6RQgL7LP0d0XC065zrGjhOeMbQmWDdx2BbnNYWek6856c6LXz7hzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ECChtR44W32SOU13xzluFUwwrgwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfUG2cFM1S5RriyyAsLlUVA/4kGwa5dTWaI ALKr5/u4zBJyWglDB7uh7fuL/T5usJm/rXPZ4cwKOjYptvHMNSTy7mts35schTGl cBKoX8kgrINWSQC0XrfCdY85JGtJESk4Z7XRNfceoJyj3RRJKCxn2XDLmc1uaZhr 5ChzEkofrXoPr16E2nUPmINki/RMM3jkDlVti3hxOIOQV6iqV6aiXcVds4B9UN/I Gp/CaeHaCsuCSY1pu0q+bFDV+o5WOBTDR41Y4oXVSTdJiudrTpy9vaZpvjC/oWqU qxm0pd+dhvwtwblogsLdSyA7zLPqzW13DGmN0IRAANkZY86DozU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:16 2025 by rpki-client