$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: oCLvQwB5RiYQvOfj7qmvPNkFs7aTcIwKWkBqhtoHvrk= Subject key identifier: 0E:63:3E:95:F6:E1:37:81:2E:B3:D9:76:9E:0C:4A:64:98:7C:39:C5 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 5C21B0AE2D2EBCD5EE7EF6B02BA59A37A0D6CE16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0354 Signing time: Tue 01 Jul 2025 05:41:25 +0000 Manifest this update: Tue 01 Jul 2025 05:36:25 +0000 Manifest next update: Fri 04 Jul 2025 06:39:25 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: r3NZX8i1vU7mk6iVSopqfUdD26/nZq5r9Na4T7UEuzc=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 06:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:21:b0:ae:2d:2e:bc:d5:ee:7e:f6:b0:2b:a5:9a:37:a0:d6:ce:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Jul 1 05:36:25 2025 GMT Not After : Jul 4 06:39:25 2025 GMT Subject: CN=0E633E95F6E137812EB3D9769E0C4A64987C39C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:65:4a:f9:4b:19:42:97:88:e5:63:4d:36: e0:e6:72:bd:3e:fa:cf:8b:46:ef:3c:bd:bf:3b:e2: 43:35:92:53:27:11:d4:26:c8:d8:25:6e:9d:a3:10: 8c:60:70:cb:c9:a6:f0:1c:0f:05:bf:a4:74:2a:4f: 28:47:a2:dd:03:6e:8d:53:f4:f4:96:82:e1:32:1e: 3a:93:ff:bd:fb:0a:b0:0f:c7:d8:de:26:95:09:f9: 3a:dc:93:c7:40:7a:9c:13:ca:3b:da:bd:24:f0:33: 73:15:b7:88:cf:08:79:8c:b6:f2:b5:eb:02:0b:67: 64:ca:50:31:eb:c1:d5:1b:85:42:95:40:f6:6a:6a: 73:34:d3:e4:47:e9:5d:27:c9:14:48:e6:04:c5:c4: 12:49:8b:f7:13:16:24:27:2f:e9:33:db:f7:7d:89: 03:9a:1e:72:9f:28:9c:0b:d4:33:1f:86:b4:45:61: d3:3a:72:e5:15:a9:9c:17:d5:15:49:5e:36:c5:d4: 25:12:90:35:64:3b:84:a7:5a:31:98:fe:87:ea:02: b4:6c:26:1d:a4:a8:fa:2c:3e:9d:c9:d0:1a:ba:2f: 0f:ef:88:fa:6e:67:2c:ba:00:93:bd:e2:df:6e:fc: 53:96:fe:15:5b:8d:fb:f8:7d:f9:46:e8:c3:7a:17: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:3E:95:F6:E1:37:81:2E:B3:D9:76:9E:0C:4A:64:98:7C:39:C5 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ec:bd:33:92:eb:40:ee:35:8a:03:2e:28:68:29:a6:d7:4e: 61:1e:7e:62:20:d8:35:1b:f3:dd:98:21:28:10:c2:93:7d:72: 0b:8c:16:1b:17:cd:e6:29:0a:a1:94:43:1e:9a:fe:ec:bf:0b: 9c:93:da:5c:b3:e7:77:9a:01:e4:8c:7e:84:f6:7b:81:c0:f9: 0e:8a:ee:6a:77:1b:0a:6d:14:1d:23:96:be:81:1e:6b:35:49: 82:78:79:9c:8c:06:2c:4d:ec:e9:8f:a8:70:60:75:b4:ac:9c: 1b:c5:2d:b3:e8:05:c8:37:47:18:4d:9e:16:d4:02:fb:9a:92: 5d:b6:b8:f6:d3:dd:50:77:89:9f:f3:34:6c:31:0d:0c:47:cc: f0:8c:ad:d7:ca:f3:3d:b3:38:b2:6a:d5:9f:d4:75:31:91:c8: 60:ab:27:7a:ec:83:a1:84:1d:f8:12:1f:58:94:32:1e:f5:77: 0a:51:e4:9f:ee:7e:32:f9:21:3f:c0:83:48:84:a0:e9:e1:db: 3c:c3:6f:b5:0d:98:15:2c:8e:dc:33:7a:0c:18:2d:61:54:52: 5f:01:69:83:e5:ae:cf:a3:6c:84:bf:1e:3c:91:4f:14:1b:e4: 0c:b8:2e:d3:5f:bd:56:22:fb:b4:f2:0d:db:03:65:b7:66:88: 86:1f:c4:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCGwri0uvNXufvawK6WaN6DWzhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA3MDEwNTM2MjVaFw0yNTA3MDQwNjM5MjVaMDMxMTAvBgNV BAMTKDBFNjMzRTk1RjZFMTM3ODEyRUIzRDk3NjlFMEM0QTY0OTg3QzM5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/mVK+UsZQpeI5WNNNuDmcr0+ +s+LRu88vb874kM1klMnEdQmyNglbp2jEIxgcMvJpvAcDwW/pHQqTyhHot0Dbo1T 9PSWguEyHjqT/737CrAPx9jeJpUJ+Trck8dAepwTyjvavSTwM3MVt4jPCHmMtvK1 6wILZ2TKUDHrwdUbhUKVQPZqanM00+RH6V0nyRRI5gTFxBJJi/cTFiQnL+kz2/d9 iQOaHnKfKJwL1DMfhrRFYdM6cuUVqZwX1RVJXjbF1CUSkDVkO4SnWjGY/ofqArRs Jh2kqPosPp3J0Bq6Lw/viPpuZyy6AJO94t9u/FOW/hVbjfv4fflG6MN6FxMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmM+lfbhN4Eus9l2ngxKZJh8OcUwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILsvTOS60DuNYoDLihoKabXTmEefmIg2DUb 892YISgQwpN9cguMFhsXzeYpCqGUQx6a/uy/C5yT2lyz53eaAeSMfoT2e4HA+Q6K 7mp3GwptFB0jlr6BHms1SYJ4eZyMBixN7OmPqHBgdbSsnBvFLbPoBcg3RxhNnhbU Avuakl22uPbT3VB3iZ/zNGwxDQxHzPCMrdfK8z2zOLJq1Z/UdTGRyGCrJ3rsg6GE HfgSH1iUMh71dwpR5J/ufjL5IT/Ag0iEoOnh2zzDb7UNmBUsjtwzegwYLWFUUl8B aYPlrs+jbIS/HjyRTxQb5Ay4LtNfvVYi+7TyDdsDZbdmiIYfxMk= -----END CERTIFICATE-----Generated at Wed Jul 2 00:51:04 2025 by rpki-client