$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: v4AWgmkxjEE4ef5H/06G9stBEKYutKP5NlRq0GX6LIo= Subject key identifier: AD:3F:66:9F:CC:4E:97:AB:BD:ED:CD:BC:D4:E5:F7:59:B2:A7:4A:48 Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 68C897A6EC6CA19D7B6B09E08C1D9460CC41C6FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 01F4 Signing time: Sat 28 Jun 2025 09:41:04 +0000 Manifest this update: Sat 28 Jun 2025 09:36:04 +0000 Manifest next update: Tue 01 Jul 2025 17:44:04 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 2: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) 3: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: ahzD5SM4fmS01JwaYiDn3porStif8U29pTPM+3KOsak=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c8:97:a6:ec:6c:a1:9d:7b:6b:09:e0:8c:1d:94:60:cc:41:c6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Jun 28 09:36:04 2025 GMT Not After : Jul 1 17:44:04 2025 GMT Subject: CN=AD3F669FCC4E97ABBDEDCDBCD4E5F759B2A74A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:ed:09:01:e1:d5:a8:cf:e8:38:7c:46:e1: 98:da:dd:f1:12:37:49:86:a9:0b:9d:d5:a3:99:74: 38:11:f5:ad:2b:64:1b:88:04:1f:fc:51:68:84:07: 0f:89:9d:a4:97:cd:19:3e:15:52:94:c3:c4:7f:53: 79:76:27:05:3e:a4:63:c6:7f:5b:89:95:31:05:b2: 21:6d:0e:46:fe:dd:fd:03:f8:79:70:f5:41:d2:63: 56:da:0c:99:37:f8:c5:56:ec:96:6b:d2:bd:b5:a2: f4:83:80:33:f6:23:57:4d:55:03:55:75:20:d8:a1: 06:c5:d3:49:0f:44:f5:c5:c5:6b:17:92:23:cc:b8: 96:08:0a:a9:e4:4a:53:2c:53:3e:84:96:72:f3:82: 82:c6:e2:7a:72:d3:fc:3d:00:c8:f4:72:80:97:7b: 79:6b:1c:f2:ab:58:0b:57:1e:3b:18:cc:94:38:e2: e0:68:1d:ab:ca:06:d5:e2:66:65:a0:b9:0a:19:03: 75:56:2b:69:d8:08:4a:01:63:3b:c6:c9:12:cc:61: 59:3f:ed:e0:9c:24:33:a8:b1:e9:64:2f:8c:0c:43: 60:8e:dd:f6:65:d8:dc:3b:ac:10:97:5d:8c:e6:d5: ee:46:d3:04:cc:72:08:b6:54:a7:72:b7:30:97:85: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3F:66:9F:CC:4E:97:AB:BD:ED:CD:BC:D4:E5:F7:59:B2:A7:4A:48 X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:7b:1b:64:e5:df:6e:31:28:00:c3:05:e5:da:41:9f:f4:5d: a7:9d:59:10:cb:09:93:ee:77:1e:3f:9c:e2:d0:ea:cf:57:6a: e5:dc:51:71:18:7d:10:8b:3e:2a:d5:7e:f3:36:69:d9:e2:01: 0c:e6:fe:be:17:83:34:c3:10:a5:38:64:5e:a7:bd:59:68:78: 6b:59:d2:2e:82:72:c8:92:65:aa:7e:5a:f0:11:c4:8e:3c:f8: db:e6:ab:44:3c:f5:28:89:31:04:31:d2:18:bb:09:4f:7b:20: 29:45:25:28:a4:ee:69:68:6e:41:8d:ad:ee:66:69:4a:83:3f: c1:d1:99:5c:2d:5d:b8:55:fe:6d:74:d4:53:61:45:01:fe:52: 34:6a:15:1b:af:32:17:a6:90:91:d2:e0:60:7a:b3:82:f0:22: 5a:01:d9:75:51:5d:1d:22:76:e5:90:fc:2d:0f:a3:2a:29:c3: 09:44:97:17:90:66:26:4e:a5:c6:0d:ca:bf:29:18:68:11:3e: 8a:a8:02:85:7b:05:30:8d:ff:f4:a0:4d:ea:f4:10:8d:e2:75: 48:99:b7:b2:8c:dc:ef:9d:51:c6:b8:b8:0e:8c:57:e0:4c:9d: c3:23:0f:aa:32:2c:d2:43:67:ac:38:06:f3:00:44:28:28:2e: eb:53:ed:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMiXpuxsoZ17awngjB2UYMxBxvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTA2MjgwOTM2MDRaFw0yNTA3MDExNzQ0MDRaMDMxMTAvBgNV BAMTKEFEM0Y2NjlGQ0M0RTk3QUJCREVEQ0RCQ0Q0RTVGNzU5QjJBNzRBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHe0JAeHVqM/oOHxG4Zja3fES N0mGqQud1aOZdDgR9a0rZBuIBB/8UWiEBw+JnaSXzRk+FVKUw8R/U3l2JwU+pGPG f1uJlTEFsiFtDkb+3f0D+Hlw9UHSY1baDJk3+MVW7JZr0r21ovSDgDP2I1dNVQNV dSDYoQbF00kPRPXFxWsXkiPMuJYICqnkSlMsUz6ElnLzgoLG4npy0/w9AMj0coCX e3lrHPKrWAtXHjsYzJQ44uBoHavKBtXiZmWguQoZA3VWK2nYCEoBYzvGyRLMYVk/ 7eCcJDOoselkL4wMQ2CO3fZl2Nw7rBCXXYzm1e5G0wTMcgi2VKdytzCXhceLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrT9mn8xOl6u97c281OX3WbKnSkgwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANd7G2Tl324xKADDBeXaQZ/0XaedWRDLCZPu dx4/nOLQ6s9XauXcUXEYfRCLPirVfvM2adniAQzm/r4XgzTDEKU4ZF6nvVloeGtZ 0i6CcsiSZap+WvARxI48+Nvmq0Q89SiJMQQx0hi7CU97IClFJSik7mlobkGNre5m aUqDP8HRmVwtXbhV/m101FNhRQH+UjRqFRuvMhemkJHS4GB6s4LwIloB2XVRXR0i duWQ/C0PoyopwwlElxeQZiZOpcYNyr8pGGgRPoqoAoV7BTCN//SgTer0EI3idUiZ t7KM3O+dUca4uA6MV+BMncMjD6oyLNJDZ6w4BvMARCgoLutT7QM= -----END CERTIFICATE-----Generated at Sun Jun 29 21:26:30 2025 by rpki-client