$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: uhNV8J/r9tneoSu6UKWbk0CkM5sAWKswoFV3pLA2qpE= Subject key identifier: CE:0E:56:4E:AB:8A:10:D8:19:AE:4A:E5:DA:C0:EF:51:C3:FC:DD:33 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 3B3C63C9B6FB91755F6B7457638FB2EA49A04A3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 020C Signing time: Sun 19 Oct 2025 03:23:23 +0000 Manifest this update: Sun 19 Oct 2025 03:18:23 +0000 Manifest next update: Wed 22 Oct 2025 08:06:23 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 2: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: qvIX6+PEUGOCt63dwKWqgdRkQT6RWtODfzQa6kTX0Do=) 3: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 4: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3c:63:c9:b6:fb:91:75:5f:6b:74:57:63:8f:b2:ea:49:a0:4a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Oct 19 03:18:23 2025 GMT Not After : Oct 22 08:06:23 2025 GMT Subject: CN=CE0E564EAB8A10D819AE4AE5DAC0EF51C3FCDD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:55:53:f2:03:5b:16:5f:dd:93:3a:ca:71: 85:b1:8c:91:89:5f:94:3e:60:4c:47:af:90:f2:24: 09:63:ca:6d:89:a8:5b:ff:f0:d6:18:d8:bd:70:e0: 8c:53:46:9c:bb:d8:ce:f4:5c:32:04:cc:af:41:64: ed:8d:2d:1c:8e:2e:29:9e:16:b3:a7:6e:00:5f:00: ae:13:ae:f2:61:8a:d3:d1:33:f0:c6:47:58:b1:1f: 57:05:f7:4c:6e:07:c3:48:9b:a8:80:7b:ee:48:39: 63:1d:ed:d4:e0:3c:7b:5f:cc:07:8a:51:62:d4:a4: 75:84:09:00:e1:67:f6:1b:d2:3c:96:6f:55:6d:0c: ce:7b:bf:68:dd:f4:62:32:d3:0a:9b:76:3d:e1:97: dd:81:3d:23:bb:18:25:3a:43:b4:b4:fb:13:03:59: fd:d9:66:15:97:b1:90:7f:a1:0c:4f:54:40:42:3e: 87:03:6d:ef:5f:53:96:df:b1:a6:c9:1c:c8:de:7d: 7e:dd:d7:ec:e9:0f:40:78:8f:03:4e:d4:82:06:33: d4:a6:94:89:67:d6:6d:3d:17:e5:68:2d:da:cb:69: 09:22:15:34:7f:b4:66:b3:d8:74:9c:61:2a:31:00: de:42:f3:44:e2:0b:16:aa:62:7a:e7:b9:15:2d:41: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:56:4E:AB:8A:10:D8:19:AE:4A:E5:DA:C0:EF:51:C3:FC:DD:33 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:58:a3:14:25:20:75:90:cd:8b:cc:fa:0e:bc:cd:ca:6a:7b: e5:84:cf:d2:82:f9:41:2e:d0:17:3c:3f:3a:df:df:0d:7e:b9: 9a:4b:8e:b9:1c:ab:70:55:4d:85:52:3c:f9:db:48:8e:9e:03: 78:c3:88:c2:f5:1f:32:60:7d:7e:00:1b:45:92:b0:16:3b:b8: 63:d1:e0:93:3c:a5:f1:d1:9b:93:8c:ed:ed:85:19:06:38:a1: b6:64:d9:8d:96:87:b1:37:22:8b:3c:12:a1:29:3b:6c:ac:77: c0:ae:80:fb:72:0b:ed:09:6c:9e:a9:89:34:91:98:0d:f5:5f: 19:37:eb:4b:1f:9b:40:a1:41:eb:d6:ee:90:8a:d5:ec:89:27: 7d:ab:35:ff:af:7d:40:44:be:d3:c0:86:c5:26:a2:36:58:2d: 5f:07:c9:51:6f:e7:2c:b7:58:8f:89:31:cb:a8:52:95:22:5f: 49:66:e2:49:70:11:b0:77:1d:be:89:a8:f4:ea:4c:3f:9f:98: e6:d3:13:c7:c5:90:97:ac:4d:7c:6f:bb:16:14:93:f7:25:ab: 85:43:c0:26:93:dd:c6:f5:bd:51:67:85:ce:18:81:54:f1:0c: 6c:ca:2d:a9:76:de:31:f9:f9:d4:91:34:29:98:5c:aa:a5:1a: 31:c9:31:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzxjybb7kXVfa3RXY4+y6kmgSjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTEwMTkwMzE4MjNaFw0yNTEwMjIwODA2MjNaMDMxMTAvBgNV BAMTKENFMEU1NjRFQUI4QTEwRDgxOUFFNEFFNURBQzBFRjUxQzNGQ0REMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVFVT8gNbFl/dkzrKcYWxjJGJ X5Q+YExHr5DyJAljym2JqFv/8NYY2L1w4IxTRpy72M70XDIEzK9BZO2NLRyOLime FrOnbgBfAK4TrvJhitPRM/DGR1ixH1cF90xuB8NIm6iAe+5IOWMd7dTgPHtfzAeK UWLUpHWECQDhZ/Yb0jyWb1VtDM57v2jd9GIy0wqbdj3hl92BPSO7GCU6Q7S0+xMD Wf3ZZhWXsZB/oQxPVEBCPocDbe9fU5bfsabJHMjefX7d1+zpD0B4jwNO1IIGM9Sm lIln1m09F+VoLdrLaQkiFTR/tGaz2HScYSoxAN5C80TiCxaqYnrnuRUtQT2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzg5WTquKENgZrkrl2sDvUcP83TMwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZYoxQlIHWQzYvM+g68zcpqe+WEz9KC+UEu 0Bc8Pzrf3w1+uZpLjrkcq3BVTYVSPPnbSI6eA3jDiML1HzJgfX4AG0WSsBY7uGPR 4JM8pfHRm5OM7e2FGQY4obZk2Y2Wh7E3Ios8EqEpO2ysd8CugPtyC+0JbJ6piTSR mA31Xxk360sfm0ChQevW7pCK1eyJJ32rNf+vfUBEvtPAhsUmojZYLV8HyVFv5yy3 WI+JMcuoUpUiX0lm4klwEbB3Hb6JqPTqTD+fmObTE8fFkJesTXxvuxYUk/clq4VD wCaT3cb1vVFnhc4YgVTxDGzKLal23jH5+dSRNCmYXKqlGjHJMZc= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:01 2025 by rpki-client