$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: taT+2W5bu0fVTRv7/mXPHNE5kLJob2ofQgpx51YxmEM= Subject key identifier: 8B:CC:59:A8:D6:47:5A:47:C2:86:76:53:93:DE:5E:D5:8C:80:5D:30 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 210F74C472ACDAE02A9065E77D868BF33914F5CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 15:52:19 +0000 Manifest this update: Fri 22 Aug 2025 15:47:19 +0000 Manifest next update: Tue 26 Aug 2025 01:03:19 +0000 Files and hashes: 1: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 2: 34332e3235342e3132342e302f32322d3234203d3e203538343832.roa (hash: e3muRzfy0SlZi4zTuzBYhrkL1KwTSlGH+1rlG4IrFUw=) 3: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: XQBIt4RY6PqN7tXhiB5MLHWBLEpX57iq/pWi9oMbK9E=) 4: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0f:74:c4:72:ac:da:e0:2a:90:65:e7:7d:86:8b:f3:39:14:f5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Aug 22 15:47:19 2025 GMT Not After : Aug 26 01:03:19 2025 GMT Subject: CN=8BCC59A8D6475A47C286765393DE5ED58C805D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:2a:d7:d1:d0:10:8a:a1:5e:6a:8a:0f:8d: 0c:d5:47:1c:3b:8a:c6:4c:63:8b:81:15:38:28:98: 4f:61:b1:24:92:7e:20:78:e0:0c:60:79:94:14:b3: a7:23:74:32:42:bf:d2:3e:83:f6:4c:80:87:b8:e7: ca:c3:b8:37:f3:02:7a:9a:9b:23:58:17:81:86:c9: fe:76:b3:f1:a4:5e:97:31:40:07:b9:b7:ab:ed:15: d9:f0:11:88:3f:0f:fa:9e:b0:42:f1:7e:66:d8:f4: 5b:36:06:a5:95:9a:83:1c:83:5a:58:4d:e7:d6:cc: 15:95:b9:59:12:0f:6e:fd:bf:31:04:aa:96:29:10: 8a:9c:4f:b8:48:2f:3d:ce:98:48:9d:2a:a4:7a:7d: 35:ba:92:3a:db:fd:c0:23:12:c2:27:03:15:1c:7a: e5:df:ec:c4:76:ea:17:ac:24:92:ff:a4:f4:7a:30: 2b:89:14:99:5d:f0:4c:74:27:d1:16:95:cd:a2:9b: 21:6d:82:b5:81:9d:da:09:49:22:b5:c0:52:65:76: da:e8:a8:d8:14:46:3b:dd:9a:2f:d0:32:b8:3e:e7: dc:f0:30:33:7d:7f:ab:7f:4c:31:2a:58:22:ea:bf: 11:6f:ca:46:a0:ce:be:ee:87:8c:3b:1d:26:2b:59: 3e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CC:59:A8:D6:47:5A:47:C2:86:76:53:93:DE:5E:D5:8C:80:5D:30 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:87:d4:2f:6f:1b:d9:2f:ea:79:01:06:be:32:0b:80:6c:7f: 38:4c:8c:33:96:35:bf:a4:0f:c9:6a:eb:00:2b:7b:29:a3:cf: ff:61:4c:b3:18:1b:93:25:ff:80:ab:14:0a:a3:0c:2b:fd:71: c6:16:5a:87:97:fd:fa:11:b9:88:f3:f8:f5:e6:16:d1:6d:8c: 53:ea:39:45:ce:fe:79:5d:15:43:9d:b9:ae:28:63:20:d9:db: 0c:de:a1:af:3d:c4:15:47:9d:17:ef:7d:c8:c8:92:68:1c:e5: b0:84:f2:de:b8:5f:43:66:ca:21:78:33:6f:7f:f7:96:4f:9f: ae:60:f1:65:2f:27:7b:72:b7:c9:92:00:7a:1a:46:33:07:d3: ff:94:ff:11:1b:5f:59:b2:59:52:06:f2:da:b7:72:7b:b3:a8: 9f:ee:20:2a:db:0a:a5:9b:0f:c7:dd:d7:bd:b0:32:5b:58:18: c5:51:9a:1e:4b:ae:aa:d1:b9:f3:af:88:24:76:6a:5c:f2:35: a5:fb:fb:12:3f:3a:83:cc:12:77:c4:53:e6:fd:79:6a:00:38: 6b:58:bc:83:f2:65:92:b1:87:18:88:dd:bb:ab:21:45:8f:b5: 35:74:b4:e0:b1:eb:e0:8d:7f:d7:37:20:44:c1:1c:fd:a2:f1: 19:65:32:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQ90xHKs2uAqkGXnfYaL8zkU9cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA4MjIxNTQ3MTlaFw0yNTA4MjYwMTAzMTlaMDMxMTAvBgNV BAMTKDhCQ0M1OUE4RDY0NzVBNDdDMjg2NzY1MzkzREU1RUQ1OEM4MDVEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0yrX0dAQiqFeaooPjQzVRxw7 isZMY4uBFTgomE9hsSSSfiB44AxgeZQUs6cjdDJCv9I+g/ZMgIe458rDuDfzAnqa myNYF4GGyf52s/GkXpcxQAe5t6vtFdnwEYg/D/qesELxfmbY9Fs2BqWVmoMcg1pY TefWzBWVuVkSD279vzEEqpYpEIqcT7hILz3OmEidKqR6fTW6kjrb/cAjEsInAxUc euXf7MR26hesJJL/pPR6MCuJFJld8Ex0J9EWlc2imyFtgrWBndoJSSK1wFJldtro qNgURjvdmi/QMrg+59zwMDN9f6t/TDEqWCLqvxFvykagzr7uh4w7HSYrWT4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8xZqNZHWkfChnZTk95e1YyAXTAwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWH1C9vG9kv6nkBBr4yC4BsfzhMjDOWNb+k D8lq6wAreymjz/9hTLMYG5Ml/4CrFAqjDCv9ccYWWoeX/foRuYjz+PXmFtFtjFPq OUXO/nldFUOdua4oYyDZ2wzeoa89xBVHnRfvfcjIkmgc5bCE8t64X0NmyiF4M29/ 95ZPn65g8WUvJ3tyt8mSAHoaRjMH0/+U/xEbX1myWVIG8tq3cnuzqJ/uICrbCqWb D8fd172wMltYGMVRmh5LrqrRufOviCR2alzyNaX7+xI/OoPMEnfEU+b9eWoAOGtY vIPyZZKxhxiI3burIUWPtTV0tOCx6+CNf9c3IETBHP2i8RllMgA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:29 2025 by rpki-client