$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: +ZEuS9ZUFn4yKbHREXYkOkLRdgV6kKDefYZ302o/o7o= Subject key identifier: 12:51:D7:FE:6C:6E:FE:48:AD:FC:9C:34:78:D2:E5:9B:21:E7:61:35 Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 3332CE2A4F3F493A7880D25D241365AD71736E9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 020C Signing time: Fri 22 Aug 2025 04:01:05 +0000 Manifest this update: Fri 22 Aug 2025 03:56:05 +0000 Manifest next update: Mon 25 Aug 2025 13:10:05 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 2: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) 3: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: o5BIyETD+tvnpW7zqH3HhNGVsFpFLAYFUf9tW3y/f/Q=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:32:ce:2a:4f:3f:49:3a:78:80:d2:5d:24:13:65:ad:71:73:6e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Aug 22 03:56:05 2025 GMT Not After : Aug 25 13:10:05 2025 GMT Subject: CN=1251D7FE6C6EFE48ADFC9C3478D2E59B21E76135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:a3:c1:da:18:80:d0:91:89:57:91:44:79: 67:be:d5:15:b1:22:9d:09:ce:8e:31:1c:f3:68:37: bd:d9:ec:e3:0c:ee:84:9b:e0:cd:84:83:de:0c:f0: bb:79:37:2f:bf:60:90:59:32:b5:41:1e:de:3e:e8: 7c:ed:6f:09:9d:80:eb:a8:db:3c:67:f9:00:d3:59: 8a:74:ce:f1:bc:bf:65:b2:21:cd:40:42:7d:73:76: 9a:49:f9:45:69:87:bf:86:96:c2:84:a2:3a:5d:28: 21:d5:2d:f4:d1:15:58:cb:02:73:bd:26:5b:7c:7f: ce:59:70:19:cd:ef:82:7c:c0:35:9a:83:d1:ed:cd: 2b:76:3a:08:a3:85:03:e9:15:24:b2:76:e8:fd:97: 30:e2:64:e0:6b:11:7d:63:1a:36:7d:97:29:43:80: 67:d5:d4:c8:e7:d7:25:ef:23:00:d0:fb:f3:a4:c0: 8f:85:28:83:4c:01:96:c6:43:29:95:67:46:3d:d1: 83:97:fe:6d:22:5a:4b:cb:54:30:97:3e:74:ab:60: 24:15:44:0b:8d:c2:9e:4d:8c:50:ab:ab:fa:f5:25: cc:91:1c:6f:3c:0b:34:28:bd:c6:13:01:2d:7a:6a: 68:45:2e:6e:99:6b:d1:32:b0:67:49:b5:e9:69:4a: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:D7:FE:6C:6E:FE:48:AD:FC:9C:34:78:D2:E5:9B:21:E7:61:35 X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1d:1d:42:0e:a5:bd:5e:b6:64:c6:ab:6c:75:25:0c:90:76: ee:6b:c1:b9:1a:d1:9e:0a:32:d2:ba:fe:03:f1:c1:9b:b5:d0: f6:f8:8e:61:2b:f4:b4:fc:2e:9d:ff:cc:d1:e5:f0:88:a8:38: 9a:4b:f3:75:60:d5:b1:87:bb:95:34:07:5b:96:0c:7d:81:2b: de:3d:85:3d:4b:b6:88:a4:f7:0e:4a:ea:db:23:fb:6a:44:92: 60:2f:1e:2f:6b:bc:01:03:78:d7:a5:f0:43:b8:b9:8f:2e:56: c6:fc:fd:1a:81:70:3f:1f:11:01:2e:8a:e4:98:55:ce:b7:6b: 70:98:d8:a8:31:fe:d8:24:cf:d8:c9:b0:f0:1a:6e:fe:6e:a8: a8:c6:c3:2c:50:ba:de:dd:f8:9c:08:e9:a3:ce:5f:36:bf:f9: 7e:96:1f:1f:33:59:a9:6c:bf:17:6a:d3:9a:2c:42:05:8d:58: 88:c0:76:46:42:fb:01:2e:55:0e:9d:aa:bc:6a:f1:48:92:3b: 12:57:82:c0:54:33:37:0d:bd:62:d1:c7:15:c6:dc:40:a1:e3: 72:50:cf:dc:c2:09:87:b6:26:33:5f:15:ba:2b:3e:02:1b:8e: da:00:20:d3:91:52:4a:12:e9:b5:7c:15:e9:5f:5d:a4:81:4d: 0a:39:f5:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzLOKk8/STp4gNJdJBNlrXFzbpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTA4MjIwMzU2MDVaFw0yNTA4MjUxMzEwMDVaMDMxMTAvBgNV BAMTKDEyNTFEN0ZFNkM2RUZFNDhBREZDOUMzNDc4RDJFNTlCMjFFNzYxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSh6PB2hiA0JGJV5FEeWe+1RWx Ip0Jzo4xHPNoN73Z7OMM7oSb4M2Eg94M8Lt5Ny+/YJBZMrVBHt4+6HztbwmdgOuo 2zxn+QDTWYp0zvG8v2WyIc1AQn1zdppJ+UVph7+GlsKEojpdKCHVLfTRFVjLAnO9 Jlt8f85ZcBnN74J8wDWag9HtzSt2OgijhQPpFSSyduj9lzDiZOBrEX1jGjZ9lylD gGfV1Mjn1yXvIwDQ+/OkwI+FKINMAZbGQymVZ0Y90YOX/m0iWkvLVDCXPnSrYCQV RAuNwp5NjFCrq/r1JcyRHG88CzQovcYTAS16amhFLm6Za9EysGdJtelpSkmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElHX/mxu/kit/Jw0eNLlmyHnYTUwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0dHUIOpb1etmTGq2x1JQyQdu5rwbka0Z4K MtK6/gPxwZu10Pb4jmEr9LT8Lp3/zNHl8IioOJpL83Vg1bGHu5U0B1uWDH2BK949 hT1Ltoik9w5K6tsj+2pEkmAvHi9rvAEDeNel8EO4uY8uVsb8/RqBcD8fEQEuiuSY Vc63a3CY2Kgx/tgkz9jJsPAabv5uqKjGwyxQut7d+JwI6aPOXza/+X6WHx8zWals vxdq05osQgWNWIjAdkZC+wEuVQ6dqrxq8UiSOxJXgsBUMzcNvWLRxxXG3ECh43JQ z9zCCYe2JjNfFborPgIbjtoAINORUkoS6bV8FelfXaSBTQo59bs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:05 2025 by rpki-client