$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: XbpptiqdIScInxX9Xu0gC6gDzhEYuqB30U5ZHNs+cvY= Subject key identifier: 9B:17:CE:73:9C:8B:9F:BD:DA:A8:F9:06:B8:E9:F1:04:C8:92:22:34 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 319744AB2399FE422FFE40ABA03DF96CA1E08B34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 08:22:16 +0000 Manifest this update: Sun 29 Jun 2025 08:17:16 +0000 Manifest next update: Wed 02 Jul 2025 15:59:16 +0000 Files and hashes: 1: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 2: 34332e3235342e3132342e302f32322d3234203d3e203538343832.roa (hash: e3muRzfy0SlZi4zTuzBYhrkL1KwTSlGH+1rlG4IrFUw=) 3: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: KMUWhookrTZ3aNJCw1WsqrwiEWBFGxoXRHzyJbbCB/Q=) 4: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:97:44:ab:23:99:fe:42:2f:fe:40:ab:a0:3d:f9:6c:a1:e0:8b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Jun 29 08:17:16 2025 GMT Not After : Jul 2 15:59:16 2025 GMT Subject: CN=9B17CE739C8B9FBDDAA8F906B8E9F104C8922234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:7d:8d:ae:31:1d:85:63:ea:99:5e:b2:83: 50:17:0c:05:dd:d3:81:92:39:97:b0:34:9b:da:ea: 02:a0:31:6e:1c:bb:b2:e0:9a:58:bc:b6:bc:46:f9: 85:01:63:49:c1:88:74:e5:c8:0a:1e:9b:60:97:18: 7d:cf:ce:a2:ed:20:d4:06:31:6a:16:2b:be:1c:c9: cc:97:b0:d0:b1:e8:14:32:b2:c2:a9:3c:a6:d5:bd: c3:7d:ea:8a:62:98:5f:5b:94:3c:37:08:e2:69:65: 38:62:c1:5e:d0:7f:aa:34:51:86:b2:c6:19:0b:da: 33:a4:b7:7d:3c:cf:43:b9:a1:f1:bf:42:26:85:0e: 75:0e:a9:7f:f1:82:e9:5c:c9:09:dc:f0:04:c5:e4: 6c:d2:d5:a4:fc:2e:51:22:2b:52:c4:bf:a4:03:7b: 79:6f:a6:fc:84:bf:73:a6:2d:5f:de:be:3b:07:0f: e5:f3:a4:12:04:dd:95:a5:af:f8:3b:63:f8:64:5f: 7b:db:0a:39:ef:7d:f7:c8:2d:05:a3:2e:83:e9:10: 22:d0:a1:6f:94:77:3a:db:b9:16:e0:69:de:9a:42: 52:86:63:e4:59:74:ab:01:35:63:9c:9c:8c:1e:4a: 67:87:67:15:7d:bc:8d:0a:a5:ab:30:cd:48:b1:45: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:17:CE:73:9C:8B:9F:BD:DA:A8:F9:06:B8:E9:F1:04:C8:92:22:34 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6b:56:93:ac:ec:20:96:3e:0e:a3:9d:70:31:a7:cb:37:12: b4:1d:aa:70:bf:2b:74:bc:77:05:8f:94:a0:0c:4b:ab:88:6b: 81:08:cd:12:27:1c:4a:88:0d:60:dc:69:f8:ac:15:fb:e3:9c: 8d:b5:8d:5f:c3:be:26:9c:2f:8f:a6:f4:33:76:70:c0:8c:17: 18:4d:71:cd:92:c1:50:d2:8d:74:84:4b:a9:41:53:da:56:35: d6:ff:a4:6b:40:1b:c7:09:ef:a8:f7:1b:76:88:03:41:00:2f: 38:47:82:3f:f1:b5:12:dd:ae:d8:04:94:ec:07:42:fa:6f:61: 23:b9:48:65:8b:bf:92:d9:e1:66:44:ef:f5:8a:f2:9e:0f:ca: b9:6e:e6:1c:41:80:d3:6f:89:68:3b:f3:89:dd:a4:58:45:c2: 06:69:0a:1c:ca:12:f4:0b:9f:bd:33:0f:9e:04:28:fe:cb:75: 84:39:20:21:53:47:9e:40:3d:ec:98:39:58:17:5c:3a:6d:e3: bd:dd:e1:88:8f:c5:64:40:26:29:03:44:0c:7b:5a:96:d2:4c: b9:eb:78:4f:7b:b2:3e:f4:71:e6:21:33:93:18:74:c8:6d:7a: 9f:16:8f:08:9d:72:7f:a1:ca:41:c7:75:f0:88:71:a8:ae:7f: 4b:7d:f5:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZdEqyOZ/kIv/kCroD35bKHgizQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA2MjkwODE3MTZaFw0yNTA3MDIxNTU5MTZaMDMxMTAvBgNV BAMTKDlCMTdDRTczOUM4QjlGQkREQUE4RjkwNkI4RTlGMTA0Qzg5MjIyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIM32NrjEdhWPqmV6yg1AXDAXd 04GSOZewNJva6gKgMW4cu7Lgmli8trxG+YUBY0nBiHTlyAoem2CXGH3PzqLtINQG MWoWK74cycyXsNCx6BQyssKpPKbVvcN96opimF9blDw3COJpZThiwV7Qf6o0UYay xhkL2jOkt308z0O5ofG/QiaFDnUOqX/xgulcyQnc8ATF5GzS1aT8LlEiK1LEv6QD e3lvpvyEv3OmLV/evjsHD+XzpBIE3ZWlr/g7Y/hkX3vbCjnvfffILQWjLoPpECLQ oW+UdzrbuRbgad6aQlKGY+RZdKsBNWOcnIweSmeHZxV9vI0KpaswzUixRRP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmxfOc5yLn73aqPkGuOnxBMiSIjQwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNrVpOs7CCWPg6jnXAxp8s3ErQdqnC/K3S8 dwWPlKAMS6uIa4EIzRInHEqIDWDcafisFfvjnI21jV/DviacL4+m9DN2cMCMFxhN cc2SwVDSjXSES6lBU9pWNdb/pGtAG8cJ76j3G3aIA0EALzhHgj/xtRLdrtgElOwH QvpvYSO5SGWLv5LZ4WZE7/WK8p4Pyrlu5hxBgNNviWg784ndpFhFwgZpChzKEvQL n70zD54EKP7LdYQ5ICFTR55APeyYOVgXXDpt473d4YiPxWRAJikDRAx7WpbSTLnr eE97sj70ceYhM5MYdMhtep8Wjwidcn+hykHHdfCIcaiuf0t99ds= -----END CERTIFICATE-----Generated at Sun Jun 29 19:37:33 2025 by rpki-client