$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: Y74i5twyTqo8cIP56Daf3zY2WEScvnsMmMabU4xsBgc= Subject key identifier: D6:2C:33:2A:B9:29:69:39:EC:A3:D5:F1:3E:EB:A3:87:EA:A1:73:37 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 2E28C54ACD2089842FEFA1833AE0DD1C4F29A301 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 02B4 Signing time: Thu 21 Aug 2025 11:02:26 +0000 Manifest this update: Thu 21 Aug 2025 10:57:26 +0000 Manifest next update: Sun 24 Aug 2025 12:16:26 +0000 Files and hashes: 1: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: 8qGcZzL2uobdi3u5eYU8EdhSrbksg0KFGdy+O+wlaR8=) 2: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 3: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 4: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) 5: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) 6: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) 7: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 8: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:28:c5:4a:cd:20:89:84:2f:ef:a1:83:3a:e0:dd:1c:4f:29:a3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Aug 21 10:57:26 2025 GMT Not After : Aug 24 12:16:26 2025 GMT Subject: CN=D62C332AB9296939ECA3D5F13EEBA387EAA17337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:a8:85:f5:43:1e:bf:b7:cf:ad:15:a6:72: ff:a2:67:e5:92:7c:2d:d1:04:b0:a5:c9:e5:1d:e4: f6:b5:c0:38:78:52:e8:52:85:42:80:4f:77:86:03: 28:65:82:df:31:20:f1:b9:88:ad:09:94:7f:ec:30: 30:a7:c1:09:a9:42:45:5b:89:ff:e9:df:a1:ca:67: ec:45:67:b8:3a:f2:80:92:f6:2f:19:a1:f4:2c:f1: 24:3b:f6:7d:e4:22:c2:54:e3:85:f6:02:23:f7:34: 6c:e7:6f:ec:d5:99:c5:07:e1:ce:ef:0e:6e:76:ff: 3b:95:44:e7:d0:39:9b:d1:5c:7d:da:c1:57:53:3d: a1:3c:79:ec:77:9a:a4:e8:fe:36:81:1a:ca:c4:02: 57:d2:05:c8:a9:2d:e0:b8:06:62:49:c7:e3:bc:c8: 8d:2c:ad:04:5e:f7:72:49:e6:45:6a:e9:ca:b3:cb: 35:44:2a:56:1f:43:9a:d1:d6:3d:d0:0b:61:6c:68: 63:13:03:62:68:0d:ae:71:ef:0a:7e:b4:6b:eb:74: b7:e4:4e:92:2f:eb:de:2a:c2:d0:9a:01:67:2d:c8: 04:5d:06:a8:3b:51:9d:9c:fc:e9:c2:74:1d:6f:7b: e5:49:6f:81:65:49:ac:fa:55:72:fc:91:74:11:4d: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2C:33:2A:B9:29:69:39:EC:A3:D5:F1:3E:EB:A3:87:EA:A1:73:37 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1d:49:40:e4:8e:a2:86:be:64:20:8f:b7:82:af:58:9b:53: c6:55:53:3a:a9:be:60:ff:d9:7b:a6:8a:4e:d1:e3:47:92:d0: 41:17:e2:c8:66:b5:b2:87:b2:45:e9:79:58:65:10:4d:71:f5: e4:cd:73:28:a5:c2:c8:84:a7:5f:8e:91:46:e8:6a:66:7e:ad: bf:ae:3c:84:21:28:5e:e0:ea:b6:ef:da:df:1e:03:38:fb:ad: 34:70:db:b1:0f:0c:e7:67:1f:83:c7:e3:b7:da:f0:71:5c:12: f2:ec:09:36:29:15:0a:b7:b0:13:6f:83:0b:7e:b3:1d:98:e3: 82:1e:cf:f3:dc:b7:07:a8:1b:06:ca:38:e0:0d:ad:c6:fe:ae: 4c:71:cf:6f:39:8b:51:1f:cd:db:b5:f6:2e:1f:e6:86:61:80: d8:7e:53:24:d8:43:f2:a9:51:56:a6:42:19:57:1a:10:2a:c3: bc:dd:9c:54:f2:47:5e:51:5f:e4:41:7c:3b:0c:0f:90:5a:75: fd:9b:ec:86:48:30:12:ee:b7:de:4a:e8:46:e4:64:c9:84:86: 21:c7:0d:d7:bf:b7:9d:42:1d:64:d8:d6:8e:34:b3:e3:bc:7d: 36:c5:83:0b:9e:77:83:91:2b:72:86:6b:83:2b:91:49:e6:57: 79:71:79:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULijFSs0giYQv76GDOuDdHE8powEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTA4MjExMDU3MjZaFw0yNTA4MjQxMjE2MjZaMDMxMTAvBgNV BAMTKEQ2MkMzMzJBQjkyOTY5MzlFQ0EzRDVGMTNFRUJBMzg3RUFBMTczMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eKiF9UMev7fPrRWmcv+iZ+WS fC3RBLClyeUd5Pa1wDh4UuhShUKAT3eGAyhlgt8xIPG5iK0JlH/sMDCnwQmpQkVb if/p36HKZ+xFZ7g68oCS9i8ZofQs8SQ79n3kIsJU44X2AiP3NGznb+zVmcUH4c7v Dm52/zuVROfQOZvRXH3awVdTPaE8eex3mqTo/jaBGsrEAlfSBcipLeC4BmJJx+O8 yI0srQRe93JJ5kVq6cqzyzVEKlYfQ5rR1j3QC2FsaGMTA2JoDa5x7wp+tGvrdLfk TpIv694qwtCaAWctyARdBqg7UZ2c/OnCdB1ve+VJb4FlSaz6VXL8kXQRTURrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1iwzKrkpaTnso9XxPuujh+qhczcwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgdSUDkjqKGvmQgj7eCr1ibU8ZVUzqpvmD/ 2Xumik7R40eS0EEX4shmtbKHskXpeVhlEE1x9eTNcyilwsiEp1+OkUboamZ+rb+u PIQhKF7g6rbv2t8eAzj7rTRw27EPDOdnH4PH47fa8HFcEvLsCTYpFQq3sBNvgwt+ sx2Y44Iez/PctweoGwbKOOANrcb+rkxxz285i1Efzdu19i4f5oZhgNh+UyTYQ/Kp UVamQhlXGhAqw7zdnFTyR15RX+RBfDsMD5Badf2b7IZIMBLut95K6EbkZMmEhiHH Dde/t51CHWTY1o40s+O8fTbFgwued4ORK3KGa4MrkUnmV3lxeWE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:06 2025 by rpki-client