$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: Trm4TWE+7ClwjdGXuWykipZWFln18Y9+Bd++1YG5Iw4= Subject key identifier: 1E:66:B8:64:59:AC:2F:DC:D0:8A:A3:9A:C8:53:24:06:43:95:18:63 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 34B7E1D02C5F7DF9E4D83F23C81A885A707096A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01D7 Signing time: Sat 28 Jun 2025 14:52:12 +0000 Manifest this update: Sat 28 Jun 2025 14:47:12 +0000 Manifest next update: Tue 01 Jul 2025 15:18:12 +0000 Files and hashes: 1: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: 5XrTnKRErXVcMAvW4w3L8WV4ahUuNyZ4Jti5O0+B3vI=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 3: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (hash: hO3TYxAXzw/V6r86wSfpnoCd/PGvTd9QJNT7S4oiXc4=) 4: 3130332e3134372e3131342e302f32342d3234203d3e203438343635.roa (hash: 6HZes25jU8jTeRRNY1EC4owClj4ZioAgj/IqCJJN5dI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b7:e1:d0:2c:5f:7d:f9:e4:d8:3f:23:c8:1a:88:5a:70:70:96:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Jun 28 14:47:12 2025 GMT Not After : Jul 1 15:18:12 2025 GMT Subject: CN=1E66B86459AC2FDCD08AA39AC853240643951863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:e9:f5:6b:15:53:96:e5:ac:a6:f2:c3:9b: 24:e0:e6:af:08:6d:41:65:00:79:00:0d:f8:e0:29: ae:a2:3c:d8:e9:4e:9f:dc:73:14:48:a1:73:ed:0a: dc:2c:a6:d7:34:ae:4a:14:1e:64:86:d1:b2:66:5d: 9d:16:43:90:b5:87:31:c0:1d:9b:96:52:ab:2b:f5: d7:07:0d:5c:a3:68:48:1b:7c:1a:0d:db:bc:8d:b7: 51:11:f4:9f:59:e6:97:da:cb:0b:7b:34:ff:5c:59: 5d:c5:4e:66:c4:62:68:02:a8:fa:57:fe:12:1d:68: 58:8b:33:60:df:a1:0b:83:3a:e2:17:9b:b0:87:a0: 64:c3:00:f2:87:f5:c3:f1:90:e8:24:b3:14:b5:21: 2c:1c:b1:d1:2f:40:13:83:fe:33:fa:a7:22:cc:7e: 24:04:ad:c8:ac:6b:5e:c7:0f:c2:3e:bc:1d:4c:4c: ed:28:eb:19:80:7a:cf:1a:4e:c6:6f:4a:d1:ec:69: d9:9e:6a:2c:41:69:58:7c:eb:de:dc:a2:f8:40:52: 26:76:3c:31:f2:75:8a:83:cb:a8:66:5a:15:dd:6e: 1d:90:26:8f:1c:c2:6d:81:2a:9f:18:51:c5:9b:66: d8:9c:56:47:95:6b:91:e3:4a:09:b6:f5:de:94:88: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:66:B8:64:59:AC:2F:DC:D0:8A:A3:9A:C8:53:24:06:43:95:18:63 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:58:24:2f:71:12:f5:df:19:b7:86:e7:d4:1c:60:2b:9a:1d: 08:ee:33:c2:83:da:bf:8e:d2:d8:d3:6c:ba:bd:43:0e:6d:2d: 20:b2:4a:98:fc:ad:32:38:73:5c:61:40:dc:4b:50:8d:1c:bd: 03:43:a0:30:ba:b0:46:73:41:65:77:0e:a3:da:24:8f:2e:9a: 70:a9:5a:48:75:f8:01:13:e7:77:76:8d:03:e2:1e:06:ec:69: 8d:db:49:7c:f4:73:f5:2c:db:b9:15:4b:83:fe:93:e2:ad:27: 59:f9:18:df:42:d0:94:85:e7:58:48:f0:27:d4:a2:11:6d:0f: 5d:14:d4:ca:9b:0f:0b:b4:4c:27:db:8c:3e:41:97:da:1d:f8: 3a:55:2d:85:77:4d:01:dc:25:9f:c4:f0:8c:01:81:9f:a2:b3: 4c:9d:c8:ef:93:e8:80:83:65:f5:32:6a:0b:4e:86:9c:78:24: f1:ec:f6:b5:5d:b9:43:94:ae:13:6a:43:ef:89:0a:7c:06:0f: 12:76:58:23:5e:47:d0:27:1e:c0:d0:b8:13:58:44:0d:8f:8a: 88:ba:83:af:e1:9b:2c:b1:0a:d5:2e:5d:21:42:f9:a3:7b:50: c6:73:a8:21:f3:25:25:27:34:1d:29:46:99:bf:ce:45:ae:89: 4a:0d:e3:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLfh0Cxfffnk2D8jyBqIWnBwlqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA2MjgxNDQ3MTJaFw0yNTA3MDExNTE4MTJaMDMxMTAvBgNV BAMTKDFFNjZCODY0NTlBQzJGRENEMDhBQTM5QUM4NTMyNDA2NDM5NTE4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNOn1axVTluWspvLDmyTg5q8I bUFlAHkADfjgKa6iPNjpTp/ccxRIoXPtCtwsptc0rkoUHmSG0bJmXZ0WQ5C1hzHA HZuWUqsr9dcHDVyjaEgbfBoN27yNt1ER9J9Z5pfaywt7NP9cWV3FTmbEYmgCqPpX /hIdaFiLM2DfoQuDOuIXm7CHoGTDAPKH9cPxkOgksxS1ISwcsdEvQBOD/jP6pyLM fiQErcisa17HD8I+vB1MTO0o6xmAes8aTsZvStHsadmeaixBaVh8697covhAUiZ2 PDHydYqDy6hmWhXdbh2QJo8cwm2BKp8YUcWbZticVkeVa5HjSgm29d6UiF7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHma4ZFmsL9zQiqOayFMkBkOVGGMwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9YJC9xEvXfGbeG59QcYCuaHQjuM8KD2r+O 0tjTbLq9Qw5tLSCySpj8rTI4c1xhQNxLUI0cvQNDoDC6sEZzQWV3DqPaJI8umnCp Wkh1+AET53d2jQPiHgbsaY3bSXz0c/Us27kVS4P+k+KtJ1n5GN9C0JSF51hI8CfU ohFtD10U1MqbDwu0TCfbjD5Bl9od+DpVLYV3TQHcJZ/E8IwBgZ+is0ydyO+T6ICD ZfUyagtOhpx4JPHs9rVduUOUrhNqQ++JCnwGDxJ2WCNeR9AnHsDQuBNYRA2Pioi6 g6/hmyyxCtUuXSFC+aN7UMZzqCHzJSUnNB0pRpm/zkWuiUoN4zw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:07 2025 by rpki-client