$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: aNDs/tiANelk/ei2/gffdC8QrJiT+SsAHKSvLMUZVC8= Subject key identifier: F8:9C:67:61:81:A5:81:EB:D9:E9:A6:92:76:21:47:D9:A2:EB:C5:FD Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 781BCF5F0C8D45B79227C53206B2F479C2C8597A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 029B Signing time: Fri 27 Jun 2025 10:20:56 +0000 Manifest this update: Fri 27 Jun 2025 10:15:56 +0000 Manifest next update: Mon 30 Jun 2025 17:23:56 +0000 Files and hashes: 1: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=) 2: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: jqfoDr2rwL3axGZVrQDtac5GJmi0M0BaICeebhq2kfM=) 3: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=) 4: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=) 5: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=) 6: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=) 7: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=) 8: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 17:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1b:cf:5f:0c:8d:45:b7:92:27:c5:32:06:b2:f4:79:c2:c8:59:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Jun 27 10:15:56 2025 GMT Not After : Jun 30 17:23:56 2025 GMT Subject: CN=F89C676181A581EBD9E9A692762147D9A2EBC5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:1f:98:e7:0b:da:3f:16:bb:12:b6:4a:c6: 0b:1d:05:85:5a:4b:ef:42:8e:ac:3a:2b:b0:d0:ff: c2:1c:77:fa:9c:16:61:30:60:a4:da:a2:69:25:f4: 19:8e:b8:58:15:3d:ec:61:84:ae:91:95:ca:f9:51: 31:a8:a0:0c:c4:d5:b3:52:65:47:9c:e9:e3:c3:2f: 5e:18:37:ac:a3:1e:cb:1b:1b:79:c7:ee:09:44:43: a9:98:a0:14:bf:45:6f:5d:e3:6e:ea:fc:92:0e:d9: 57:2d:08:a1:dd:7b:eb:ec:3f:ef:3f:0c:63:24:03: a8:4e:e7:33:8d:35:c5:02:7f:a0:66:fa:13:a4:17: 17:e5:b7:cc:cc:06:cc:3a:a6:05:b4:72:d5:bc:a9: dd:9d:90:5c:48:3a:0f:76:95:80:0f:1c:7f:98:00: f6:4c:08:93:53:61:42:63:bf:42:a8:0c:45:27:e3: 8a:fd:42:e8:a1:9c:8e:bd:9a:e3:bc:50:a4:60:7b: 9d:d3:ad:7f:74:94:e6:9d:bc:80:13:9d:cb:b2:60: 23:8d:f3:5d:3e:31:9e:fc:0b:10:97:85:cb:5b:4e: a3:e1:57:d5:e7:d4:8f:aa:3f:f4:1b:9b:a5:d1:ec: 73:3b:23:58:b5:a3:b4:18:60:16:12:81:c8:92:7b: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:67:61:81:A5:81:EB:D9:E9:A6:92:76:21:47:D9:A2:EB:C5:FD X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:be:35:d4:96:5d:cb:4e:fb:6a:4a:a1:4f:b2:24:b2:a0:c2: a6:6f:c5:ab:c3:41:87:63:d8:5d:25:80:0e:cf:44:f7:fb:ef: dc:7f:56:2f:78:4f:83:8e:a4:01:fd:73:55:3f:58:da:ff:49: 75:cc:4e:6c:18:66:7e:ad:67:ca:95:8a:c6:32:ec:76:73:7e: d3:a7:d2:c0:d5:67:25:85:64:91:1d:d5:d3:6d:64:3e:98:c8: a7:7c:52:4a:06:d0:9e:db:0d:92:41:27:b9:1d:fe:d3:f3:18: 80:63:26:ee:d9:b0:f6:ac:b2:09:59:15:b1:fc:cd:80:a7:8d: 64:12:f6:64:86:a8:fe:24:a7:c4:4c:a7:5c:5a:ae:90:db:05: 35:81:27:dc:0e:91:c6:2f:97:95:bb:40:37:88:73:bc:5f:12: 30:9f:28:c5:af:0a:d0:16:0a:ab:63:15:a3:d0:b3:7e:af:63: 43:64:4b:2b:10:22:02:00:dc:82:0d:79:24:56:c9:03:56:64: 08:ac:f0:5a:6c:0c:63:13:41:f7:1f:7b:88:db:c6:bb:62:bf: 41:b9:c8:2e:d0:d6:bf:56:82:00:5f:ba:41:71:7a:8b:dc:fe: 14:61:56:9f:5f:f6:ab:c8:44:23:3b:93:2b:d6:b0:f1:01:02: 7c:7b:c7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBvPXwyNRbeSJ8UyBrL0ecLIWXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTA2MjcxMDE1NTZaFw0yNTA2MzAxNzIzNTZaMDMxMTAvBgNV BAMTKEY4OUM2NzYxODFBNTgxRUJEOUU5QTY5Mjc2MjE0N0Q5QTJFQkM1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aR+Y5wvaPxa7ErZKxgsdBYVa S+9Cjqw6K7DQ/8Icd/qcFmEwYKTaomkl9BmOuFgVPexhhK6Rlcr5UTGooAzE1bNS ZUec6ePDL14YN6yjHssbG3nH7glEQ6mYoBS/RW9d427q/JIO2VctCKHde+vsP+8/ DGMkA6hO5zONNcUCf6Bm+hOkFxflt8zMBsw6pgW0ctW8qd2dkFxIOg92lYAPHH+Y APZMCJNTYUJjv0KoDEUn44r9QuihnI69muO8UKRge53TrX90lOadvIATncuyYCON 810+MZ78CxCXhctbTqPhV9Xn1I+qP/Qbm6XR7HM7I1i1o7QYYBYSgciSe6rfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JxnYYGlgevZ6aaSdiFH2aLrxf0wHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMy+NdSWXctO+2pKoU+yJLKgwqZvxavDQYdj 2F0lgA7PRPf779x/Vi94T4OOpAH9c1U/WNr/SXXMTmwYZn6tZ8qVisYy7HZzftOn 0sDVZyWFZJEd1dNtZD6YyKd8UkoG0J7bDZJBJ7kd/tPzGIBjJu7ZsPassglZFbH8 zYCnjWQS9mSGqP4kp8RMp1xarpDbBTWBJ9wOkcYvl5W7QDeIc7xfEjCfKMWvCtAW CqtjFaPQs36vY0NkSysQIgIA3IINeSRWyQNWZAis8FpsDGMTQfcfe4jbxrtiv0G5 yC7Q1r9WggBfukFxeovc/hRhVp9f9qvIRCM7kyvWsPEBAnx7x2k= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:26 2025 by rpki-client