$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: xjq0I0QnYMv6ErYAc6y8ITGUsA5IpsihafhM8/C55xs= Subject key identifier: 42:60:16:11:DC:68:07:3F:EE:7D:D8:1C:CB:13:64:A4:A5:F0:79:05 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 1552B87F1128D98F07221BDC2656E41CD71F2E66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 036B Signing time: Thu 21 Aug 2025 11:11:27 +0000 Manifest this update: Thu 21 Aug 2025 11:06:27 +0000 Manifest next update: Sun 24 Aug 2025 21:02:27 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: beARf2F4sYmYGgD2ZnwTv2JJ0zKXbKL3TaZ6zGXwwro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:52:b8:7f:11:28:d9:8f:07:22:1b:dc:26:56:e4:1c:d7:1f:2e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Aug 21 11:06:27 2025 GMT Not After : Aug 24 21:02:27 2025 GMT Subject: CN=42601611DC68073FEE7DD81CCB1364A4A5F07905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:06:cc:6a:f4:f8:0e:fa:80:fe:93:c5:4d: f6:34:6c:67:f5:bd:92:5b:f9:cc:1a:87:9e:29:8d: 4d:f7:05:01:7a:51:61:d2:8c:c4:f1:a4:88:2a:ac: df:1e:54:9c:2d:83:d7:0b:d3:a1:42:66:be:08:cf: f4:32:c0:a2:12:c2:f0:5f:83:96:d5:e2:d1:78:a5: f2:88:f0:5c:a7:9b:cf:80:7b:40:89:4b:f9:56:67: b1:97:6f:d0:16:e3:c0:f4:ec:4e:b4:79:3f:8a:87: e7:5b:f3:83:2b:54:08:84:d7:2b:c8:32:8d:8d:3a: f8:08:2b:50:8e:b7:67:25:9d:c2:87:0f:16:69:b0: ce:dd:80:4f:f5:9c:7f:85:83:04:93:1a:b7:db:4e: 31:6f:4a:71:5e:f2:98:34:5f:40:5f:03:ea:8d:fa: e2:24:89:27:bb:05:b3:06:b5:d9:08:71:9d:55:0a: 76:d7:bc:15:0e:ac:33:61:e0:38:05:b1:e3:48:ac: 67:ce:f7:7b:6c:95:02:ed:f3:6e:84:ad:03:8a:7b: 2f:79:77:9f:97:27:45:98:df:dd:d1:e4:fd:9d:e8: b8:4d:a7:40:05:07:13:78:8e:68:b4:29:6b:cc:c5: 31:2b:92:24:28:63:e7:8a:81:6d:2d:e1:8b:ff:c9: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:60:16:11:DC:68:07:3F:EE:7D:D8:1C:CB:13:64:A4:A5:F0:79:05 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f4:4c:ba:d3:90:18:87:2f:b3:91:f4:6e:30:82:98:ee:8a: be:5d:62:c4:3d:31:4c:b3:33:d1:c7:74:5b:77:69:0f:b1:12: 8c:b3:d7:eb:fa:36:e6:d5:3e:66:54:cc:7d:11:f7:1a:63:55: 3a:0f:64:68:85:38:68:07:ac:ec:f7:82:47:e6:a8:44:35:87: 6b:8f:12:0c:10:86:f4:d4:e4:05:c3:a5:d7:30:f3:fe:75:05: 49:00:21:d7:15:75:00:af:34:c4:a8:d2:d2:3e:6a:bc:dd:49: f5:3c:de:26:b2:8b:c8:98:e8:c5:03:1d:24:03:e9:66:a1:91: 5e:fc:e2:a7:ed:5f:57:f5:83:b2:e5:a0:a1:23:25:b7:79:3b: 37:80:e1:d4:e5:1c:f5:de:2c:28:8b:17:6d:35:cc:90:27:78: 8c:48:a1:88:60:b8:5c:bc:97:60:71:c3:7d:5c:75:a4:62:30: a1:eb:a0:4e:84:b5:da:54:d0:71:95:54:29:a0:32:9b:da:73: b9:1c:97:65:bd:01:34:b2:b6:e2:81:1e:fe:92:54:d3:0d:ca: 2c:1c:83:18:75:fa:5b:ef:47:10:25:74:ca:0b:fb:da:fd:5a: 75:b0:68:ff:77:b7:dd:9e:38:f7:0c:95:5c:57:5b:c9:6a:bf: c0:66:87:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVK4fxEo2Y8HIhvcJlbkHNcfLmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA4MjExMTA2MjdaFw0yNTA4MjQyMTAyMjdaMDMxMTAvBgNV BAMTKDQyNjAxNjExREM2ODA3M0ZFRTdERDgxQ0NCMTM2NEE0QTVGMDc5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOAbMavT4DvqA/pPFTfY0bGf1 vZJb+cwah54pjU33BQF6UWHSjMTxpIgqrN8eVJwtg9cL06FCZr4Iz/QywKISwvBf g5bV4tF4pfKI8Fynm8+Ae0CJS/lWZ7GXb9AW48D07E60eT+Kh+db84MrVAiE1yvI Mo2NOvgIK1COt2clncKHDxZpsM7dgE/1nH+FgwSTGrfbTjFvSnFe8pg0X0BfA+qN +uIkiSe7BbMGtdkIcZ1VCnbXvBUOrDNh4DgFseNIrGfO93tslQLt826ErQOKey95 d5+XJ0WY393R5P2d6LhNp0AFBxN4jmi0KWvMxTErkiQoY+eKgW0t4Yv/yb7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmAWEdxoBz/ufdgcyxNkpKXweQUwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb0TLrTkBiHL7OR9G4wgpjuir5dYsQ9MUyz M9HHdFt3aQ+xEoyz1+v6NubVPmZUzH0R9xpjVToPZGiFOGgHrOz3gkfmqEQ1h2uP EgwQhvTU5AXDpdcw8/51BUkAIdcVdQCvNMSo0tI+arzdSfU83iayi8iY6MUDHSQD 6WahkV784qftX1f1g7LloKEjJbd5OzeA4dTlHPXeLCiLF201zJAneIxIoYhguFy8 l2Bxw31cdaRiMKHroE6EtdpU0HGVVCmgMpvac7kcl2W9ATSytuKBHv6SVNMNyiwc gxh1+lvvRxAldMoL+9r9WnWwaP93t92eOPcMlVxXW8lqv8Bmhy0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:30 2025 by rpki-client