$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: 4fxHBPvkrv/stgneyTjNoWJ6p9hWxg16VY8PLgjAbV8= Subject key identifier: D5:8C:14:38:4B:51:4C:07:8A:94:D9:EC:B6:5F:40:CE:C4:CF:13:E7 Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 0BBF2D79A4F0B4F0D57F53EA6ED2448CFFF9C334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 01DA Signing time: Sat 23 Aug 2025 04:42:08 +0000 Manifest this update: Sat 23 Aug 2025 04:37:08 +0000 Manifest next update: Tue 26 Aug 2025 08:54:08 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: nzplX+xjP1mLHQ1PM9KVfMeMLsn9+SiEya7QTD6WUsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bf:2d:79:a4:f0:b4:f0:d5:7f:53:ea:6e:d2:44:8c:ff:f9:c3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Aug 23 04:37:08 2025 GMT Not After : Aug 26 08:54:08 2025 GMT Subject: CN=D58C14384B514C078A94D9ECB65F40CEC4CF13E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:ca:da:71:1f:0a:37:d2:10:35:04:bb:e1: e0:67:01:10:54:64:e9:93:3b:69:c8:b8:cf:d4:6d: c6:4c:bf:0d:e2:9f:02:b5:67:6c:dd:e3:98:a4:b5: ae:7d:6e:9d:b3:d3:00:dd:00:6e:d0:65:ef:4e:c9: cc:55:9f:ef:5a:75:a6:ec:6a:34:17:21:1f:e1:56: 46:3d:88:3b:7d:db:5f:b6:d0:17:02:5f:66:dd:d6: 4c:59:68:4e:92:86:be:6f:c0:39:5c:0d:f8:c4:28: 59:3f:9f:52:7a:2c:43:63:5a:7e:70:ea:f3:61:b6: 97:15:f7:91:4e:fa:40:9c:d5:02:bb:ee:bc:bd:73: dd:76:c1:d0:7d:49:e6:c2:d0:17:7d:42:65:54:09: b1:32:26:e2:75:df:86:53:d6:2d:b6:1f:f8:4c:86: 11:b6:8a:40:32:96:da:db:b2:57:67:1d:3b:1f:c7: 5a:e4:45:74:86:7e:2f:f5:c9:e2:8b:e3:4a:27:5c: 3c:ec:13:5d:97:68:d5:20:2f:83:1c:2c:70:81:7b: 43:7a:74:2d:5f:6f:2b:94:9e:50:c5:b2:24:54:aa: 8c:d0:89:67:16:9b:c0:87:50:62:15:fc:d1:0f:24: 43:44:d0:85:ee:6b:18:df:df:82:3b:af:54:be:c4: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:14:38:4B:51:4C:07:8A:94:D9:EC:B6:5F:40:CE:C4:CF:13:E7 X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:39:a9:05:3e:4a:77:2d:4d:ff:6e:90:a4:a3:41:42:5a:6c: 5a:54:c3:89:9d:c0:9f:06:88:82:be:a9:5e:8e:d6:68:be:ec: ec:40:40:3e:7e:9e:68:7c:26:b2:bf:8f:dc:5c:23:e7:a1:d9: 26:b4:a4:cb:28:6f:5f:d8:ca:b6:1c:56:3b:28:8a:5a:a9:b1: f6:c9:53:9c:23:77:f3:0e:aa:d1:70:4a:a8:b4:35:2f:a1:4a: 3b:34:8a:d5:f1:c6:c9:10:c5:ab:e3:be:7d:48:15:3d:c5:67: 55:2c:34:a5:59:fc:38:7c:ea:99:74:45:b8:55:e7:2f:d9:17: 16:1b:42:59:89:2e:7e:14:c4:b8:8a:88:b5:da:c0:0e:bf:d3: 25:1b:be:37:a4:fb:f3:9c:21:1f:20:82:2a:a3:1b:e3:b9:fc: 89:fb:57:5d:07:a2:3b:fb:10:98:35:7f:63:80:5c:28:d3:4c: 7e:4c:25:5a:97:15:10:58:17:c6:e4:1a:6a:84:d2:ba:5f:68: 26:f3:71:88:27:75:17:7f:f6:72:8c:e6:83:7c:64:f4:54:f2: d0:34:f0:15:02:01:4c:42:c4:ff:1b:ca:0b:d2:aa:89:fe:0e: 8c:66:52:52:a9:e8:a9:64:30:4b:74:40:2e:ff:45:ce:9b:be: 3c:76:61:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC78teaTwtPDVf1PqbtJEjP/5wzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTA4MjMwNDM3MDhaFw0yNTA4MjYwODU0MDhaMDMxMTAvBgNV BAMTKEQ1OEMxNDM4NEI1MTRDMDc4QTk0RDlFQ0I2NUY0MENFQzRDRjEzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQsracR8KN9IQNQS74eBnARBU ZOmTO2nIuM/UbcZMvw3inwK1Z2zd45ikta59bp2z0wDdAG7QZe9OycxVn+9adabs ajQXIR/hVkY9iDt921+20BcCX2bd1kxZaE6Shr5vwDlcDfjEKFk/n1J6LENjWn5w 6vNhtpcV95FO+kCc1QK77ry9c912wdB9SebC0Bd9QmVUCbEyJuJ134ZT1i22H/hM hhG2ikAyltrbsldnHTsfx1rkRXSGfi/1yeKL40onXDzsE12XaNUgL4McLHCBe0N6 dC1fbyuUnlDFsiRUqozQiWcWm8CHUGIV/NEPJENE0IXuaxjf34I7r1S+xHthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YwUOEtRTAeKlNnstl9AzsTPE+cwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADE5qQU+SnctTf9ukKSjQUJabFpUw4mdwJ8G iIK+qV6O1mi+7OxAQD5+nmh8JrK/j9xcI+eh2Sa0pMsob1/YyrYcVjsoilqpsfbJ U5wjd/MOqtFwSqi0NS+hSjs0itXxxskQxavjvn1IFT3FZ1UsNKVZ/Dh86pl0RbhV 5y/ZFxYbQlmJLn4UxLiKiLXawA6/0yUbvjek+/OcIR8ggiqjG+O5/In7V10Hojv7 EJg1f2OAXCjTTH5MJVqXFRBYF8bkGmqE0rpfaCbzcYgndRd/9nKM5oN8ZPRU8tA0 8BUCAUxCxP8bygvSqon+DoxmUlKp6KlkMEt0QC7/Rc6bvjx2YYo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:50 2025 by rpki-client