$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: G6AJGxrgIQYHQ4mpoR8LT4JAh8bHf3UDxYQo+fn37Uk= Subject key identifier: 00:1C:CF:8D:BC:75:74:27:E9:59:F3:83:80:51:A9:E8:C0:22:7E:2E Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 2F33FA9383073CBC385848C12C6CF6B45FCA709F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0385 Signing time: Sun 19 Oct 2025 02:41:26 +0000 Manifest this update: Sun 19 Oct 2025 02:36:26 +0000 Manifest next update: Wed 22 Oct 2025 12:49:26 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: OJy7zOazWkF+RkLoFoYpWcZZNN2UYfjdIu3sNDNx4tA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:33:fa:93:83:07:3c:bc:38:58:48:c1:2c:6c:f6:b4:5f:ca:70:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Oct 19 02:36:26 2025 GMT Not After : Oct 22 12:49:26 2025 GMT Subject: CN=001CCF8DBC757427E959F3838051A9E8C0227E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:93:5c:d0:25:52:06:3a:3c:19:42:00:b7: 14:e2:53:e8:74:7c:15:9d:b9:38:c7:a8:20:ea:6c: 5d:40:e9:a9:6f:28:1b:6e:00:d1:9c:2d:15:22:f4: ad:1b:36:f0:23:69:92:3c:c4:c3:0c:85:2f:7e:f1: 68:bb:77:8d:66:1b:c7:c8:64:a3:96:e1:c5:a5:3c: 25:00:b1:c6:9a:e7:33:66:bd:d7:6a:68:82:a7:e4: 11:0e:05:ee:3e:cc:a6:68:74:c5:a7:a2:00:8b:e2: e4:ef:86:d7:33:21:63:8b:9c:10:1b:67:46:68:cc: 93:b1:19:52:57:0e:f1:ad:b1:3c:d8:62:2a:b2:6c: 32:17:be:2e:ef:34:98:e1:c8:fe:01:e2:3c:a7:43: 19:a3:df:84:6d:33:be:ce:af:09:bf:82:bf:5b:10: e1:73:21:07:92:cc:53:1f:55:16:f3:ef:f1:de:51: e4:19:9f:f5:0a:39:d9:a0:d7:42:91:6d:7c:c3:a2: ba:f2:fb:4a:27:d1:d3:01:1b:50:d4:05:df:4a:e6: 54:98:51:86:b8:92:0c:c9:66:4f:a1:57:28:ba:fa: be:da:9a:21:dd:36:12:a3:1a:01:ff:56:ed:1d:61: d0:0d:94:6c:8c:df:2a:4b:af:02:23:a1:e2:2d:3c: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:CF:8D:BC:75:74:27:E9:59:F3:83:80:51:A9:E8:C0:22:7E:2E X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:6d:25:b5:e8:c4:72:74:c6:32:25:38:9c:e4:93:24:e1: 0a:dd:1e:37:e4:48:f6:2c:aa:81:f9:0d:79:e0:b2:b1:cb:82: 6c:9d:14:18:2d:71:06:00:28:8e:46:38:a0:0d:dd:bc:39:21: cf:e4:e6:a8:4e:ae:4a:44:5c:07:3e:6d:30:fc:d7:fa:36:6a: de:a0:16:29:68:0e:60:42:6f:09:ff:a6:fb:08:53:7e:09:3f: b3:fb:51:a4:62:3d:4b:3e:43:24:8d:54:af:cb:dc:c9:a7:cf: 73:cb:11:00:96:64:b1:81:65:b8:1b:12:17:31:b5:39:97:56: fa:35:97:0c:ba:7c:19:e8:44:a3:cd:98:39:34:e5:6f:a1:3d: 23:1e:94:f1:cd:fd:ee:15:46:1d:fc:d1:8b:9c:e2:ac:c8:e9: 1d:b6:2f:88:2f:cd:94:df:e5:f8:05:ab:94:98:39:6b:19:3f: dd:0b:fb:38:60:21:a3:92:93:a2:0e:e7:40:4c:d5:42:90:83: 83:30:a8:11:5e:61:7f:dc:3a:7d:06:26:0e:51:bf:9b:3d:61: b1:f5:53:0b:ed:19:d1:0b:40:c0:46:23:ef:f1:09:90:45:3b: 20:f0:19:36:84:89:08:d8:a7:cc:60:ed:56:f4:bd:d6:d3:8d: fa:16:b3:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzP6k4MHPLw4WEjBLGz2tF/KcJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTEwMTkwMjM2MjZaFw0yNTEwMjIxMjQ5MjZaMDMxMTAvBgNV BAMTKDAwMUNDRjhEQkM3NTc0MjdFOTU5RjM4MzgwNTFBOUU4QzAyMjdFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUZNc0CVSBjo8GUIAtxTiU+h0 fBWduTjHqCDqbF1A6alvKBtuANGcLRUi9K0bNvAjaZI8xMMMhS9+8Wi7d41mG8fI ZKOW4cWlPCUAscaa5zNmvddqaIKn5BEOBe4+zKZodMWnogCL4uTvhtczIWOLnBAb Z0ZozJOxGVJXDvGtsTzYYiqybDIXvi7vNJjhyP4B4jynQxmj34RtM77Orwm/gr9b EOFzIQeSzFMfVRbz7/HeUeQZn/UKOdmg10KRbXzDorry+0on0dMBG1DUBd9K5lSY UYa4kgzJZk+hVyi6+r7amiHdNhKjGgH/Vu0dYdANlGyM3ypLrwIjoeItPKLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABzPjbx1dCfpWfODgFGp6MAifi4wHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn1bSW16MRydMYyJTic5JMk4QrdHjfkSPYs qoH5DXngsrHLgmydFBgtcQYAKI5GOKAN3bw5Ic/k5qhOrkpEXAc+bTD81/o2at6g FiloDmBCbwn/pvsIU34JP7P7UaRiPUs+QySNVK/L3Mmnz3PLEQCWZLGBZbgbEhcx tTmXVvo1lwy6fBnoRKPNmDk05W+hPSMelPHN/e4VRh380Yuc4qzI6R22L4gvzZTf 5fgFq5SYOWsZP90L+zhgIaOSk6IO50BM1UKQg4MwqBFeYX/cOn0GJg5Rv5s9YbH1 UwvtGdELQMBGI+/xCZBFOyDwGTaEiQjYp8xg7Vb0vdbTjfoWs9I= -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:10 2025 by rpki-client