$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: yMKwqbhoat9qoxRJnoDPL/s54xu0PMItovwOGz2RTdk= Subject key identifier: 7E:88:B7:59:C7:C5:F0:67:7E:2B:85:3B:AD:2B:10:3F:F9:41:6B:94 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 715E6DD08AA5D5FAB409EC704B792149C74BAB2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0150 Signing time: Sun 29 Jun 2025 20:22:08 +0000 Manifest this update: Sun 29 Jun 2025 20:17:08 +0000 Manifest next update: Thu 03 Jul 2025 02:35:08 +0000 Files and hashes: 1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: n9yRpQXQAAsIn7kNOUxE81VB1N0AWYuku5aCo8JPNH0=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5e:6d:d0:8a:a5:d5:fa:b4:09:ec:70:4b:79:21:49:c7:4b:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Jun 29 20:17:08 2025 GMT Not After : Jul 3 02:35:08 2025 GMT Subject: CN=7E88B759C7C5F0677E2B853BAD2B103FF9416B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:82:2c:2f:04:7e:66:9c:40:a4:e7:6c:f7: ed:fd:80:05:d5:cf:79:43:da:ec:49:58:74:73:5a: 71:1c:03:fb:b7:29:2f:ad:eb:42:56:aa:d2:54:38: a5:2c:3a:64:ac:6a:24:30:dc:8c:c5:50:df:86:9e: 2f:1e:fe:f2:df:85:f5:5e:df:2a:80:47:08:86:fb: 3b:63:d9:3d:fd:ff:a0:07:56:21:90:75:d0:dc:9e: a5:90:9b:73:0c:cb:3b:9b:5c:20:5e:17:30:fc:cc: e3:c3:67:1b:d8:36:3b:73:ad:a7:92:dd:a5:11:bb: 86:70:3a:c9:19:bc:33:e0:91:57:e2:db:02:37:65: 57:6f:84:95:e1:04:29:6a:cc:1c:ae:d1:c3:e6:89: b3:a7:0b:9d:83:9f:c1:cc:fb:0a:4b:5b:39:4c:9e: 12:a1:34:b5:80:d9:63:e4:b4:fe:4d:5c:c1:ce:ad: a4:e6:45:45:27:28:88:5b:64:77:8f:9d:be:f7:4f: 00:84:26:3a:de:6c:82:f4:7a:f1:08:4e:ea:3c:e3: 43:62:42:c0:f1:45:5c:e7:7c:d2:b8:14:aa:18:df: 5e:7d:03:50:b2:d8:47:30:4d:19:cb:d7:f7:d0:c2: 29:ca:17:9b:a2:3e:1c:4d:97:d7:bc:36:0a:6a:fa: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:88:B7:59:C7:C5:F0:67:7E:2B:85:3B:AD:2B:10:3F:F9:41:6B:94 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5f:71:13:b9:d6:18:5b:f6:70:f3:a5:4c:31:42:5a:e4:b8: f0:8c:70:b9:a7:db:a3:3e:47:1d:4d:ef:bf:03:88:51:4b:1a: dc:c4:6a:13:d2:4f:79:d9:f5:cb:b4:91:f9:b6:02:2c:12:73: 11:93:8f:67:18:7a:08:cf:45:b0:26:96:6b:45:26:54:27:55: 6d:ad:33:ad:0f:17:64:49:62:cd:60:c7:5d:89:e8:f4:b5:0f: 49:bb:c7:6e:49:ca:54:3a:27:e8:39:be:65:96:35:84:d4:a1: fa:30:b4:30:8b:6f:15:17:ac:86:c8:0a:88:9f:73:16:1b:82: 0b:82:70:45:0b:f7:d2:ed:8d:32:9a:83:f2:46:63:36:a8:83: b8:fa:82:df:fc:c2:1b:01:35:cb:07:d7:d9:bb:36:76:b4:a5: 6a:b2:1e:da:19:be:90:5c:bc:13:c6:9a:52:b4:40:a6:96:cd: b0:ec:de:d5:e1:f8:0f:72:ca:ec:29:23:ec:7d:61:48:b8:25: 60:ad:5f:f6:7f:01:bf:9f:f4:be:34:a1:b7:34:3f:82:da:27: 05:7c:37:b9:61:dd:2f:31:e0:93:dc:82:0b:cb:da:bf:65:8f: 6a:03:a3:b8:1d:50:78:9a:05:98:54:17:9b:9a:c5:3e:c7:eb: ab:ba:e6:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcV5t0Iql1fq0CexwS3khScdLqy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTA2MjkyMDE3MDhaFw0yNTA3MDMwMjM1MDhaMDMxMTAvBgNV BAMTKDdFODhCNzU5QzdDNUYwNjc3RTJCODUzQkFEMkIxMDNGRjk0MTZCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZIIsLwR+ZpxApOds9+39gAXV z3lD2uxJWHRzWnEcA/u3KS+t60JWqtJUOKUsOmSsaiQw3IzFUN+Gni8e/vLfhfVe 3yqARwiG+ztj2T39/6AHViGQddDcnqWQm3MMyzubXCBeFzD8zOPDZxvYNjtzraeS 3aURu4ZwOskZvDPgkVfi2wI3ZVdvhJXhBClqzByu0cPmibOnC52Dn8HM+wpLWzlM nhKhNLWA2WPktP5NXMHOraTmRUUnKIhbZHePnb73TwCEJjrebIL0evEITuo840Ni QsDxRVznfNK4FKoY3159A1Cy2EcwTRnL1/fQwinKF5uiPhxNl9e8Ngpq+rY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfoi3WcfF8Gd+K4U7rSsQP/lBa5QwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZfcRO51hhb9nDzpUwxQlrkuPCMcLmn26M+ Rx1N778DiFFLGtzEahPST3nZ9cu0kfm2AiwScxGTj2cYegjPRbAmlmtFJlQnVW2t M60PF2RJYs1gx12J6PS1D0m7x25JylQ6J+g5vmWWNYTUofowtDCLbxUXrIbICoif cxYbgguCcEUL99LtjTKag/JGYzaog7j6gt/8whsBNcsH19m7Nna0pWqyHtoZvpBc vBPGmlK0QKaWzbDs3tXh+A9yyuwpI+x9YUi4JWCtX/Z/Ab+f9L40obc0P4LaJwV8 N7lh3S8x4JPcggvL2r9lj2oDo7gdUHiaBZhUF5uaxT7H66u65ls= -----END CERTIFICATE-----Generated at Mon Jun 30 03:11:31 2025 by rpki-client